$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa File: 660f5154-1b49-462f-808c-68d8e6db8edc.roa (raw, json) Hash identifier: 78hIecV9a4bppochiTL+ZirIOZzWYioi74/GRZ1DfKQ= Subject key identifier: 15:09:9D:EC:7E:7F:DF:D8:15:2E:8A:38:67:34:2E:BC:0A:8E:6D:D5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 12F8B11AA514E019199E3AD11CF5C5D9D3675F00 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa Signing time: Fri 15 Aug 2025 21:23:49 +0000 ROA not before: Fri 15 Aug 2025 21:23:49 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f8:b1:1a:a5:14:e0:19:19:9e:3a:d1:1c:f5:c5:d9:d3:67:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 15 21:23:49 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=ae1bb2ece9d7902261f5a27e651b74c1f19b51e1ad1446b6ffd6aa017c06cf28, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:df:74:4f:a6:2a:d4:8c:12:95:4f:d1:51:e1: e1:e2:f6:2c:5b:89:66:2d:fc:10:40:5b:5e:b6:fa: 80:8a:b9:39:53:e7:cf:2e:4a:14:e2:77:3f:73:75: 77:41:14:9c:d3:5a:80:c4:49:25:92:36:cb:56:58: 5e:a3:91:49:a5:c8:0a:a8:12:9c:0b:00:ed:d0:7b: 0a:22:fb:1d:7d:e7:ea:59:53:bb:6a:09:0d:58:1b: 4f:8d:90:0d:af:ea:e3:fb:1e:ea:b6:46:38:1d:04: 7e:a8:c1:c6:35:85:91:cf:c9:4e:93:31:a7:74:63: 29:a6:de:82:b1:86:4b:8a:e9:b0:ae:91:ba:4a:8f: e9:c7:23:00:e3:1f:69:00:30:62:a9:46:a1:6e:2a: 60:b8:ea:44:f4:7a:5b:38:4b:c9:0c:72:f4:4d:29: b7:1c:60:af:ee:9b:19:7a:57:19:29:3b:e2:82:85: d0:0e:70:62:c6:e2:43:57:a9:5f:9f:ac:9e:3e:10: 30:c5:82:34:09:62:8a:a7:dc:7b:32:83:07:39:a1: 83:0a:a1:6e:ee:91:eb:21:fa:ed:a1:45:e3:6d:7a: 2a:df:f9:93:48:cc:e8:2d:d4:09:75:12:e3:62:60: 88:aa:16:1e:ed:27:42:e6:ec:09:bc:95:1b:76:76: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:09:9D:EC:7E:7F:DF:D8:15:2E:8A:38:67:34:2E:BC:0A:8E:6D:D5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6120::/48 Signature Algorithm: sha256WithRSAEncryption 88:40:29:21:06:ca:e6:5b:1e:f2:1c:11:f1:85:cb:a4:ca:30: 50:1d:53:50:6e:74:b8:9d:6e:4f:4a:94:54:41:7f:da:c7:87: 79:a7:46:19:4c:5b:f9:81:e4:e8:c8:08:10:ef:db:f3:3b:d7: 79:e6:6a:94:eb:b6:5c:ac:6e:78:f4:af:cd:b7:2b:62:5d:46: 0a:36:8e:78:22:d6:e8:1b:cb:d0:9d:89:db:20:54:ba:5c:45: a9:ce:5c:cb:ad:43:84:c6:4c:39:4b:91:bc:0e:01:b5:64:60: 45:f4:c2:1a:f3:50:be:fb:5b:56:bd:22:30:70:e6:b7:09:ae: 04:42:f6:fb:1e:a7:c4:1d:34:44:17:f4:f6:eb:8e:aa:ac:60: 95:16:74:7c:70:2e:d5:88:6c:85:1b:9d:10:78:53:6f:99:9e: da:85:44:34:4e:8e:97:4b:3a:44:44:7e:1c:e5:44:82:0a:63: b3:ae:9b:48:53:38:39:fc:b9:f6:7e:62:24:cd:a4:5a:68:f8: ff:7e:7b:3e:24:b6:d8:cc:af:07:24:c3:fe:25:6d:0e:76:14: e6:4d:a0:62:81:1b:ec:6b:d9:b1:cd:f8:bd:ff:aa:bf:1d:ef: 83:84:86:3a:b1:bb:27:5c:f3:8b:62:6f:09:76:40:27:4f:30: c2:ae:ba:e5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEvixGqUU4BkZnjrRHPXF2dNnXwAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE1MjEyMzQ5WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTFiYjJlY2U5ZDc5MDIyNjFmNWEyN2U2NTFiNzRjMWYx OWI1MWUxYWQxNDQ2YjZmZmQ2YWEwMTdjMDZjZjI4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDg33RPpirUjBKVT9FR4eHi9ixbiWYt/BBAW162+oCKuTlT 588uShTidz9zdXdBFJzTWoDESSWSNstWWF6jkUmlyAqoEpwLAO3Qewoi+x195+pZ U7tqCQ1YG0+NkA2v6uP7Huq2RjgdBH6owcY1hZHPyU6TMad0Yymm3oKxhkuK6bCu kbpKj+nHIwDjH2kAMGKpRqFuKmC46kT0els4S8kMcvRNKbccYK/umxl6VxkpO+KC hdAOcGLG4kNXqV+frJ4+EDDFgjQJYoqn3Hsygwc5oYMKoW7ukesh+u2hReNteirf +ZNIzOgt1Al1EuNiYIiqFh7tJ0Lm7Am8lRt2duQnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFQmd7H5/39gVLoo4ZzQuvAqObdUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY2MGY1MTU0LTFiNDktNDYyZi04MDhjLTY4ZDhlNmRiOGVkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSAwDQYJKoZIhvcNAQELBQADggEBAIhAKSEGyuZbHvIcEfGFy6TK MFAdU1BudLidbk9KlFRBf9rHh3mnRhlMW/mB5OjICBDv2/M713nmapTrtlysbnj0 r823K2JdRgo2jngi1ugby9CdidsgVLpcRanOXMutQ4TGTDlLkbwOAbVkYEX0whrz UL77W1a9IjBw5rcJrgRC9vsep8QdNEQX9PbrjqqsYJUWdHxwLtWIbIUbnRB4U2+Z ntqFRDROjpdLOkREfhzlRIIKY7Oum0hTODn8ufZ+YiTNpFpo+P9+ez4kttjMrwck w/4lbQ52FOZNoGKBG+xr2bHN+L3/qr8d74OEhjqxuydc84tibwl2QCdPMMKuuuU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:39 2025 by rpki-client