$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/455cc001-6d98-49b1-ab73-9a1e06726f9f.roa File: 455cc001-6d98-49b1-ab73-9a1e06726f9f.roa (raw, json) Hash identifier: zSwAgW9xmoODNYugmk09WZSBkFWJAzgCxJDt3PdaqIk= Subject key identifier: 7A:69:C0:27:A8:98:7F:16:60:56:41:1B:BC:BC:BB:73:1F:B7:D5:99 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 38D9B7E8BFCE5970B1806AF47F22F12E2FF32D22 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/455cc001-6d98-49b1-ab73-9a1e06726f9f.roa Signing time: Tue 19 Aug 2025 16:50:04 +0000 ROA not before: Tue 19 Aug 2025 16:50:04 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d9:b7:e8:bf:ce:59:70:b1:80:6a:f4:7f:22:f1:2e:2f:f3:2d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 19 16:50:04 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=8651c241b170289184fec5f4ae96294baf1a959cfddead12369d27cccf8bf276, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:3f:11:eb:fd:69:25:23:be:3d:5a:0f:0f: 24:b7:85:d6:ce:ff:c9:3c:86:3a:ce:0b:53:39:91: a1:b1:eb:8c:c5:9e:d0:51:8a:ea:4c:88:b3:df:6c: 34:c9:fb:6d:e7:d2:c8:05:a4:da:5b:32:90:dc:a7: fb:4c:6b:8d:4a:50:7d:c9:1a:5f:48:61:45:1c:f9: 05:7e:76:20:4d:57:38:c1:87:6f:73:12:52:7c:3d: 74:d5:df:79:14:0d:82:0d:1f:4d:2a:6f:51:6d:66: e9:02:99:91:47:12:ab:bf:81:15:f7:1b:fb:39:22: a2:f5:05:5d:44:bd:b9:c8:00:0e:30:1a:b2:e8:9e: d9:8a:b8:d6:12:d2:ea:df:14:9d:c4:91:2c:72:45: 31:7c:09:0f:51:35:cd:f1:96:ba:2b:1c:75:8d:94: f5:fd:76:f7:21:fb:11:34:69:09:c8:8e:46:81:b4: 68:17:f4:f6:bc:80:30:dc:f3:25:c8:7b:17:01:94: 38:14:e4:c6:65:7a:42:80:78:6a:e5:33:75:9f:24: b5:8d:90:3d:67:0f:c8:d8:16:4b:02:a2:b1:ee:59: 94:79:52:c6:47:74:9e:5b:c6:30:20:ad:e5:d2:2c: f2:77:b0:8d:9a:52:2a:fe:4d:be:c3:c5:11:34:f0: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:69:C0:27:A8:98:7F:16:60:56:41:1B:BC:BC:BB:73:1F:B7:D5:99 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/455cc001-6d98-49b1-ab73-9a1e06726f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:11::/48 Signature Algorithm: sha256WithRSAEncryption 93:7d:d3:a3:c5:15:92:22:40:ed:54:ac:da:e3:a1:00:3b:45: 17:91:eb:22:86:b1:86:30:8e:d1:b6:92:23:d1:59:d8:7e:07: fa:1e:06:5a:2d:b9:fc:d8:32:30:c2:92:98:5d:36:db:52:d0: 24:f7:aa:73:01:52:90:0a:54:da:84:d7:f5:8f:31:e5:9b:2f: 61:2c:57:ca:a7:99:14:cf:be:a1:99:ef:86:ed:84:fb:6e:52: 72:ec:b9:b8:13:96:0d:27:5b:39:91:a1:65:29:b1:ed:f6:9e: ce:e8:aa:d9:0b:b5:16:0e:cb:88:2b:3f:6d:9d:34:b3:57:0b: df:96:e4:68:ba:a2:e3:59:60:d8:0c:76:74:74:dd:10:6b:70: 80:d3:4c:c9:55:76:91:db:66:0d:ee:ba:cb:46:10:ca:0b:27: da:9d:98:a4:26:68:87:58:ed:03:2f:c1:d0:18:bc:89:c0:57: 6f:3f:48:ff:84:fb:69:fb:51:1b:2f:60:a8:03:3c:ee:3c:60: 25:6d:24:b2:e6:04:f7:f0:d3:5a:21:ca:ba:c4:df:af:d8:73: df:ec:e6:28:05:a0:58:d1:43:0f:e0:88:6c:c6:f1:fb:c5:ba: 03:c7:05:24:8e:a9:13:c4:36:9b:cd:e7:df:7e:68:8a:d1:dd: c2:3b:aa:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUONm36L/OWXCxgGr0fyLxLi/zLSIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE5MTY1MDA0WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjUxYzI0MWIxNzAyODkxODRmZWM1ZjRhZTk2Mjk0YmFm MWE5NTljZmRkZWFkMTIzNjlkMjdjY2NmOGJmMjc2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPjz8R6/1pJSO+PVoPDyS3hdbO/8k8hjrOC1M5kaGx64zF ntBRiupMiLPfbDTJ+23n0sgFpNpbMpDcp/tMa41KUH3JGl9IYUUc+QV+diBNVzjB h29zElJ8PXTV33kUDYINH00qb1FtZukCmZFHEqu/gRX3G/s5IqL1BV1EvbnIAA4w GrLontmKuNYS0urfFJ3EkSxyRTF8CQ9RNc3xlrorHHWNlPX9dvch+xE0aQnIjkaB tGgX9Pa8gDDc8yXIexcBlDgU5MZlekKAeGrlM3WfJLWNkD1nD8jYFksCorHuWZR5 UsZHdJ5bxjAgreXSLPJ3sI2aUir+Tb7DxRE08J3xAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUemnAJ6iYfxZgVkEbvLy7cx+31ZkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ1NWNjMDAxLTZkOTgtNDliMS1hYjczLTlhMWUwNjcyNmY5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwABEwDQYJKoZIhvcNAQELBQADggEBAJN906PFFZIiQO1UrNrjoQA7 RReR6yKGsYYwjtG2kiPRWdh+B/oeBlotufzYMjDCkphdNttS0CT3qnMBUpAKVNqE 1/WPMeWbL2EsV8qnmRTPvqGZ74bthPtuUnLsubgTlg0nWzmRoWUpse32ns7oqtkL tRYOy4grP22dNLNXC9+W5Gi6ouNZYNgMdnR03RBrcIDTTMlVdpHbZg3uustGEMoL J9qdmKQmaIdY7QMvwdAYvInAV28/SP+E+2n7URsvYKgDPO48YCVtJLLmBPfw01oh yrrE36/Yc9/s5igFoFjRQw/giGzG8fvFugPHBSSOqRPENpvN599+aIrR3cI7qlo= -----END CERTIFICATE-----Generated at Wed Aug 20 13:18:35 2025 by rpki-client