$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/59630120-022f-4db2-870c-b5a5f46ee77a.roa File: 59630120-022f-4db2-870c-b5a5f46ee77a.roa (raw, json) Hash identifier: JRd4MGktW1Ag20vlJk2S6FqgdtxjyxeaVyFZn7h+2RI= Subject key identifier: 0C:E4:1B:34:D1:53:33:BA:53:5D:41:77:35:C1:07:19:EC:B0:3A:34 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 67F5F4B68A27B6F753C5BF5F878620B0F51B948A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/59630120-022f-4db2-870c-b5a5f46ee77a.roa Signing time: Tue 12 Aug 2025 15:00:12 +0000 ROA not before: Tue 12 Aug 2025 15:00:12 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f5:f4:b6:8a:27:b6:f7:53:c5:bf:5f:87:86:20:b0:f5:1b:94:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 12 15:00:12 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=8793a3a4fc053c64205a21bb1227851877434039af60933a6def3ad9b72c070f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:c5:5f:84:cf:8c:42:56:5c:a3:2a:ba:0c: 95:9b:e9:24:61:b0:7a:c3:38:55:4c:0c:54:a4:5b: 90:a5:b5:d2:1f:ea:54:3f:c0:4b:2c:db:70:99:55: 64:dd:bd:aa:4b:bb:93:f9:f2:fb:91:e7:50:de:15: c2:d0:f1:69:38:62:ec:a7:7d:43:07:cd:17:e4:bd: f1:24:00:6f:7a:1e:10:f4:08:98:6a:8a:bb:f6:d5: 98:82:18:c2:5d:7c:fc:ed:5c:c7:04:7d:61:d8:4f: 32:be:fe:15:ad:66:b5:92:49:e8:59:d2:c3:fc:1a: 57:fb:e9:f2:3b:78:2a:c3:5d:c8:5b:6f:3a:e6:79: fe:5a:47:4a:4c:17:e1:c7:ac:9f:7f:a7:10:2c:67: ef:95:6e:76:6b:7a:fc:b6:38:b4:fd:91:60:db:c4: b7:ee:90:97:f3:0c:db:e9:35:36:a5:ea:84:46:6d: ad:a4:37:11:99:1d:c3:bd:ab:91:00:56:50:3e:4a: bb:1c:2b:44:46:54:e3:ed:78:0f:ad:a2:72:a1:1f: 70:a3:d3:96:bc:6d:b1:fe:15:07:fa:09:2e:23:2e: 03:9f:e0:01:80:84:c1:8f:f5:9f:63:fa:ce:c5:25: d8:84:04:3f:16:19:d4:9d:c2:67:28:1e:0b:30:10: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E4:1B:34:D1:53:33:BA:53:5D:41:77:35:C1:07:19:EC:B0:3A:34 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/59630120-022f-4db2-870c-b5a5f46ee77a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7101::/48 Signature Algorithm: sha256WithRSAEncryption a1:60:f2:67:77:ac:19:13:fe:ff:0a:c6:6a:e1:2e:71:ad:00: 5c:48:8d:aa:21:2d:df:51:a8:2f:ea:4f:0f:56:ab:38:81:62: 53:71:a0:cd:8d:5e:f7:16:7c:13:34:a4:3e:db:69:51:46:6a: dd:0a:46:18:0a:6d:7e:60:45:36:7c:8e:7b:e0:94:15:d7:b9: 38:aa:2a:69:ec:6b:51:55:31:0f:53:08:86:ac:84:d1:be:88: 40:6d:d0:ff:fd:14:29:5e:1d:74:44:53:3a:9a:28:02:5f:d2: db:59:82:38:bd:62:af:95:71:4e:2e:a1:39:05:c8:7b:a8:2f: 59:86:10:dd:93:26:65:6a:cf:f1:0d:5f:54:09:ab:20:36:42: 2f:d4:76:80:a9:92:97:8a:10:81:e0:03:34:0a:e0:bc:03:9b: ce:26:f3:f5:9b:01:29:34:79:37:91:22:3b:7d:3c:6b:f8:b4: 62:18:2f:71:7b:06:53:cb:c7:51:1a:f4:82:8e:0e:29:75:c7: e7:50:71:0f:3c:24:3d:8f:c1:a7:d7:d4:8c:79:30:f4:59:3f: 5d:8e:7e:5b:4b:f4:57:f5:11:98:af:8a:c7:2f:db:b1:b7:9f: ca:8b:e7:ac:7d:98:bb:93:ff:7d:8d:43:46:6b:53:9c:be:2b: 6d:66:0f:d0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZ/X0toontvdTxb9fh4YgsPUblIowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODEyMTUwMDEyWhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzkzYTNhNGZjMDUzYzY0MjA1YTIxYmIxMjI3ODUxODc3 NDM0MDM5YWY2MDkzM2E2ZGVmM2FkOWI3MmMwNzBmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcYcVfhM+MQlZcoyq6DJWb6SRhsHrDOFVMDFSkW5CltdIf 6lQ/wEss23CZVWTdvapLu5P58vuR51DeFcLQ8Wk4YuynfUMHzRfkvfEkAG96HhD0 CJhqirv21ZiCGMJdfPztXMcEfWHYTzK+/hWtZrWSSehZ0sP8Glf76fI7eCrDXchb bzrmef5aR0pMF+HHrJ9/pxAsZ++VbnZrevy2OLT9kWDbxLfukJfzDNvpNTal6oRG ba2kNxGZHcO9q5EAVlA+SrscK0RGVOPteA+tonKhH3Cj05a8bbH+FQf6CS4jLgOf 4AGAhMGP9Z9j+s7FJdiEBD8WGdSdwmcoHgswEIxvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDOQbNNFTM7pTXUF3NcEHGeywOjQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU5NjMwMTIwLTAyMmYtNGRiMi04NzBjLWI1YTVmNDZlZTc3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycQEwDQYJKoZIhvcNAQELBQADggEBAKFg8md3rBkT/v8KxmrhLnGt AFxIjaohLd9RqC/qTw9WqziBYlNxoM2NXvcWfBM0pD7baVFGat0KRhgKbX5gRTZ8 jnvglBXXuTiqKmnsa1FVMQ9TCIashNG+iEBt0P/9FCleHXREUzqaKAJf0ttZgji9 Yq+VcU4uoTkFyHuoL1mGEN2TJmVqz/ENX1QJqyA2Qi/UdoCpkpeKEIHgAzQK4LwD m84m8/WbASk0eTeRIjt9PGv4tGIYL3F7BlPLx1Ea9IKODil1x+dQcQ88JD2PwafX 1Ix5MPRZP12OfltL9Ff1EZiviscv27G3n8qL56x9mLuT/32NQ0ZrU5y+K21mD9A= -----END CERTIFICATE-----Generated at Thu Aug 21 04:56:28 2025 by rpki-client