$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/455cc001-6d98-49b1-ab73-9a1e06726f9f.roa File: 455cc001-6d98-49b1-ab73-9a1e06726f9f.roa (raw, json) Hash identifier: 4f+9jU1NcLgUK4c5RIU+EopXQnM1FlcoiqZjDvR+2jY= Subject key identifier: 58:16:16:FA:39:AA:82:B3:E3:A7:D9:12:72:26:3C:C3:BC:F0:12:BD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1506A3C2A62B0E771CEA6960490343DDB740CE6C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/455cc001-6d98-49b1-ab73-9a1e06726f9f.roa Signing time: Wed 04 Jun 2025 00:50:07 +0000 ROA not before: Wed 04 Jun 2025 00:50:07 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:06:a3:c2:a6:2b:0e:77:1c:ea:69:60:49:03:43:dd:b7:40:ce:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 4 00:50:07 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=34219037967bfe12823a3f7d3f947b3c0ab7f9c189fdf8411c75ef8d2b1a4d19, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:27:a6:64:1d:8d:12:ae:23:8f:98:0e:f4: b3:8d:91:b0:f1:2b:c2:44:af:ac:89:90:36:5d:d7: 5b:40:be:d2:14:68:c0:c8:f8:9d:85:9e:fc:95:80: 52:cf:ec:d0:db:13:57:4a:f7:f0:be:1a:bf:54:66: 75:e4:b9:67:41:93:76:b0:ad:3b:cc:cd:32:28:4d: 30:e3:2f:57:c1:3a:3c:3e:d6:6c:b5:97:ba:18:ed: 67:6d:0b:cd:a3:c8:7a:0b:64:e1:b1:8e:72:83:dd: c0:e4:ad:7d:5c:08:59:d7:e1:54:ab:0d:12:99:6a: 30:81:94:42:1d:39:23:57:dc:cd:f4:62:d8:86:12: 0c:5f:44:20:04:90:a5:8d:50:c4:2b:6e:8b:f2:1e: 19:c8:9d:1e:49:89:ff:b7:d7:33:fb:35:7d:22:ab: 66:d5:be:5b:b6:13:7c:8e:1a:fd:33:f1:63:0a:56: 23:1d:70:63:c8:3b:0c:dc:48:da:28:66:ad:c4:a6: 53:65:ab:3a:6b:5f:09:63:6d:5e:71:16:2e:ef:69: d8:9a:f6:61:6a:a6:af:33:7e:de:21:21:a9:d4:61: 0d:52:1a:95:40:96:dc:dd:2c:75:c0:87:39:15:dc: 00:9f:14:cc:86:f6:58:c4:be:f2:b3:5c:4e:54:49: f1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:16:16:FA:39:AA:82:B3:E3:A7:D9:12:72:26:3C:C3:BC:F0:12:BD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/455cc001-6d98-49b1-ab73-9a1e06726f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:11::/48 Signature Algorithm: sha256WithRSAEncryption 09:af:5a:21:9e:42:30:f3:ac:1e:b0:a2:f5:b6:bb:a0:ab:ba: 6e:1d:1e:fe:30:1d:5f:d1:f6:94:c5:6f:4c:dc:b8:7c:d2:e6: 18:eb:9b:43:24:14:fa:01:c0:26:85:3f:47:d5:8c:64:44:f9: 93:dc:e2:f7:51:54:8b:c8:60:f4:55:14:94:c4:84:a9:c8:78: ab:ff:a4:81:e0:df:fc:e6:cb:f9:b7:2e:3f:e1:21:c3:a1:97: 8c:e3:fa:7b:6a:03:0a:32:b1:81:0a:d4:7c:af:a8:6c:33:ec: 2b:08:ef:f4:12:5c:bf:e7:cc:f9:df:6c:1c:fb:8f:f1:d3:4a: ec:da:c9:89:1c:9c:da:a9:5b:82:8a:91:ee:9f:98:fb:9c:c6: b8:9c:7c:e2:c0:04:52:ec:8e:b5:45:5d:8a:05:03:1b:48:1e: 41:00:74:be:d8:a9:d6:55:bd:67:b4:6d:8f:73:cf:d7:a7:9e: fe:dd:d8:67:e0:22:0e:94:8b:08:35:1a:b1:24:63:78:99:0d: 41:ed:45:70:fe:36:8c:ea:c0:f5:0c:c2:cb:7a:9f:ef:de:24: 90:54:8f:85:be:06:0c:ac:69:a6:1a:0c:99:dc:50:c7:8f:dc: cd:bf:f2:41:e0:e0:21:76:25:86:49:ce:89:11:b9:14:23:d9: 8c:db:49:70 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFQajwqYrDncc6mlgSQND3bdAzmwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjA0MDA1MDA3WhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDIxOTAzNzk2N2JmZTEyODIzYTNmN2QzZjk0N2IzYzBh YjdmOWMxODlmZGY4NDExYzc1ZWY4ZDJiMWE0ZDE5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2NSemZB2NEq4jj5gO9LONkbDxK8JEr6yJkDZd11tAvtIU aMDI+J2FnvyVgFLP7NDbE1dK9/C+Gr9UZnXkuWdBk3awrTvMzTIoTTDjL1fBOjw+ 1my1l7oY7WdtC82jyHoLZOGxjnKD3cDkrX1cCFnX4VSrDRKZajCBlEIdOSNX3M30 YtiGEgxfRCAEkKWNUMQrbovyHhnInR5Jif+31zP7NX0iq2bVvlu2E3yOGv0z8WMK ViMdcGPIOwzcSNooZq3EplNlqzprXwljbV5xFi7vadia9mFqpq8zft4hIanUYQ1S GpVAltzdLHXAhzkV3ACfFMyG9ljEvvKzXE5USfGTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWBYW+jmqgrPjp9kSciY8w7zwEr0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ1NWNjMDAxLTZkOTgtNDliMS1hYjczLTlhMWUwNjcyNmY5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwABEwDQYJKoZIhvcNAQELBQADggEBAAmvWiGeQjDzrB6wovW2u6Cr um4dHv4wHV/R9pTFb0zcuHzS5hjrm0MkFPoBwCaFP0fVjGRE+ZPc4vdRVIvIYPRV FJTEhKnIeKv/pIHg3/zmy/m3Lj/hIcOhl4zj+ntqAwoysYEK1HyvqGwz7CsI7/QS XL/nzPnfbBz7j/HTSuzayYkcnNqpW4KKke6fmPucxricfOLABFLsjrVFXYoFAxtI HkEAdL7YqdZVvWe0bY9zz9ennv7d2GfgIg6Uiwg1GrEkY3iZDUHtRXD+NozqwPUM wst6n+/eJJBUj4W+BgysaaYaDJncUMeP3M2/8kHg4CF2JYZJzokRuRQj2YzbSXA= -----END CERTIFICATE-----Generated at Wed Jun 4 11:13:52 2025 by rpki-client