$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa File: 4d9dc189-6c00-4764-9c0c-c990d1727298.roa (raw, json) Hash identifier: dNOmoTzoeCmoIlRRG0lpm75nFP3ZUaPytzW9zOYokR4= Subject key identifier: 4F:6F:1B:FD:D0:C1:A1:B8:6E:65:51:DB:7B:21:BA:AE:F4:B7:32:F7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 548D6D825969A51E9BBBB05FBD868C4D6250FF6D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa Signing time: Tue 20 May 2025 18:00:43 +0000 ROA not before: Tue 20 May 2025 18:00:43 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:8d:6d:82:59:69:a5:1e:9b:bb:b0:5f:bd:86:8c:4d:62:50:ff:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:00:43 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=1f1b98b81e213f293b4fd66066c1a91f2d2240ada28b75df5fc48be77f19cfca, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:41:a9:2a:66:36:41:81:a9:8a:7e:0a:16: 1c:01:e3:2d:b2:84:89:9b:aa:c0:c8:9f:4e:14:b4: 30:02:45:69:66:29:bf:b9:cf:7b:3b:66:46:36:86: 6f:12:6e:77:61:e7:56:f0:37:bd:8a:f3:aa:eb:41: 06:f7:55:b5:50:31:5e:58:b9:c7:03:e9:e4:5d:88: ce:db:ca:d7:20:5e:eb:14:4e:8b:03:79:e5:a0:b6: 82:1c:d3:da:af:19:83:22:6a:c1:6e:6a:6c:ec:1a: 24:c9:07:ce:ac:ac:2b:e2:c8:bb:77:b6:89:13:96: 5b:0f:92:63:8a:7b:86:53:90:06:c8:4a:37:2d:e4: 8c:50:f0:91:5b:2b:02:4b:28:1a:58:fe:a2:89:b3: 7d:fa:73:ad:f3:02:bd:1d:0f:f2:3f:0c:a6:ba:71: e6:06:b6:cd:96:3e:e3:d6:e6:cf:70:13:82:51:73: 1a:5e:43:71:8b:08:dd:38:a8:2a:1c:c3:d4:27:90: b0:44:91:84:12:f2:75:d1:24:06:2f:6d:56:0b:e0: b0:80:95:12:ca:d8:43:d9:cf:f1:46:6b:22:98:64: e4:89:8b:28:c7:5d:e9:3f:c0:eb:d1:ad:0e:75:f3: 93:1d:0d:56:92:68:d3:ee:4e:dd:d3:7a:6a:e8:aa: af:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6F:1B:FD:D0:C1:A1:B8:6E:65:51:DB:7B:21:BA:AE:F4:B7:32:F7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:600::/48 Signature Algorithm: sha256WithRSAEncryption 63:86:bb:fd:f8:5d:a8:6d:83:23:90:22:92:c0:78:02:e8:b8: 40:ba:0c:42:45:c2:c5:dd:60:f0:25:35:1a:c4:d7:bf:e2:e3: 49:40:ec:a3:8c:d1:f9:f4:49:af:16:3d:ae:51:8c:79:be:4f: 73:43:d9:19:63:82:62:7d:c6:08:9e:dd:70:64:9f:56:c2:75: fe:92:3f:70:ee:4f:27:54:25:0c:c1:66:5d:1d:22:3c:63:85: 23:e0:da:87:0e:d3:2b:d6:59:26:41:3e:6e:05:7d:5d:32:50: fa:c6:b0:dc:e8:37:c9:2b:3d:90:94:b7:93:19:03:15:24:ad: 38:af:8f:5e:3b:dd:f8:85:26:c4:c0:cf:bc:7a:50:49:01:7f: 44:c1:22:11:0a:2d:da:92:1a:89:37:ea:25:b5:74:59:47:ea: ba:1e:9c:c0:ad:46:8a:9e:a2:cc:31:c8:b7:ec:ff:72:2f:93: cb:1a:fa:31:93:b8:01:18:22:62:11:8c:17:86:9a:45:7f:2f: d5:14:c7:c8:e6:08:a5:5a:35:4b:48:cd:84:c8:03:7a:d7:15: 82:3a:3c:ad:07:6f:f6:df:00:30:37:19:fd:d5:57:c0:d4:e2: 3d:b9:db:e1:29:e9:fe:54:b9:50:7d:6b:a4:5d:3f:fc:67:19: 77:a0:90:47 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVI1tgllppR6bu7BfvYaMTWJQ/20wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgwMDQzWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjFiOThiODFlMjEzZjI5M2I0ZmQ2NjA2NmMxYTkxZjJk MjI0MGFkYTI4Yjc1ZGY1ZmM0OGJlNzdmMTljZmNhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChyUGpKmY2QYGpin4KFhwB4y2yhImbqsDIn04UtDACRWlm Kb+5z3s7ZkY2hm8Sbndh51bwN72K86rrQQb3VbVQMV5YuccD6eRdiM7bytcgXusU TosDeeWgtoIc09qvGYMiasFuamzsGiTJB86srCviyLt3tokTllsPkmOKe4ZTkAbI Sjct5IxQ8JFbKwJLKBpY/qKJs336c63zAr0dD/I/DKa6ceYGts2WPuPW5s9wE4JR cxpeQ3GLCN04qCocw9QnkLBEkYQS8nXRJAYvbVYL4LCAlRLK2EPZz/FGayKYZOSJ iyjHXek/wOvRrQ5185MdDVaSaNPuTt3Temroqq+HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUT28b/dDBobhuZVHbeyG6rvS3MvcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRkOWRjMTg5LTZjMDAtNDc2NC05YzBjLWM5OTBkMTcyNzI5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgAwDQYJKoZIhvcNAQELBQADggEBAGOGu/34XahtgyOQIpLAeALo uEC6DEJFwsXdYPAlNRrE17/i40lA7KOM0fn0Sa8WPa5RjHm+T3ND2RljgmJ9xgie 3XBkn1bCdf6SP3DuTydUJQzBZl0dIjxjhSPg2ocO0yvWWSZBPm4FfV0yUPrGsNzo N8krPZCUt5MZAxUkrTivj1473fiFJsTAz7x6UEkBf0TBIhEKLdqSGok36iW1dFlH 6roenMCtRoqeoswxyLfs/3Ivk8sa+jGTuAEYImIRjBeGmkV/L9UUx8jmCKVaNUtI zYTIA3rXFYI6PK0Hb/bfADA3Gf3VV8DU4j252+Ep6f5UuVB9a6RdP/xnGXegkEc= -----END CERTIFICATE-----Generated at Fri Jun 6 05:16:06 2025 by rpki-client