$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa File: 6912c7e5-41f4-4b82-9db8-51bac2912f50.roa (raw, json) Hash identifier: S/3sXZqMoID1vyAiBKmzymw/HZ5eMPfPbfrrvBQdZH4= Subject key identifier: 66:43:7E:4C:A2:B8:5C:67:4D:48:4D:8A:89:B6:5A:2B:88:6F:5E:35 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 16C417EB9AF0137509DC56FE1EEFD13B9D725451 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa Signing time: Sat 24 May 2025 00:30:42 +0000 ROA not before: Sat 24 May 2025 00:30:42 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c4:17:eb:9a:f0:13:75:09:dc:56:fe:1e:ef:d1:3b:9d:72:54:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 24 00:30:42 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=86757dd67bcdf5763dfa07e6c9a3ad6fc312c87f14b0c0ca98befb8998007325, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:35:cb:1a:95:db:92:2e:82:75:9d:61:b5: 67:38:bb:49:ca:91:30:26:ec:5c:29:10:35:dd:51: ac:05:97:1f:d2:c9:d7:df:a4:ce:37:15:46:fd:91: 00:f6:a7:f3:10:08:bb:fb:5d:88:cc:a5:2b:74:bc: 23:0b:5a:a5:31:7e:19:fd:e2:1a:b7:c2:6d:53:38: c0:2b:e6:f5:74:34:76:ca:6e:4a:8a:5c:d1:73:75: 26:62:e2:8a:15:f6:a7:d1:94:fb:cc:bf:d4:f8:02: 6c:75:16:64:11:ae:f2:f0:37:3a:b6:b8:a5:c9:27: f9:87:b8:40:5c:9b:82:46:fd:0a:ef:4a:7b:5d:52: e5:e0:73:60:39:e7:d9:e8:da:34:9b:b9:a4:fb:a7: 7e:3b:37:dd:32:08:10:37:2d:10:71:91:b7:83:d9: 71:0b:80:de:37:c6:ae:ca:ec:ea:dc:78:03:94:26: d4:f4:5c:d2:6a:39:2d:03:7b:1f:cc:df:9f:38:9b: fc:e2:56:9e:6e:b8:9a:e6:9b:00:0a:5b:59:c0:8c: a7:35:95:3a:19:c4:04:ff:93:a7:c7:ea:ea:78:f8: d8:ad:c7:87:7f:36:25:8f:3d:03:72:e5:5b:70:5b: 6d:a6:99:91:f9:06:e4:bc:1c:bf:a2:54:d1:f6:fd: 7e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:43:7E:4C:A2:B8:5C:67:4D:48:4D:8A:89:B6:5A:2B:88:6F:5E:35 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption 21:96:8b:a4:90:f5:75:22:12:50:fa:f2:6b:6d:f8:d7:f0:cc: 17:2a:fe:13:73:0d:94:a3:5f:7f:e9:65:4e:9d:d2:9b:45:ce: 01:a4:91:54:6c:cc:90:82:01:fb:fa:7c:46:70:41:14:1b:2b: ab:a5:84:53:14:93:95:da:81:3c:fd:0e:da:50:44:5f:61:75: 96:48:53:af:cc:9b:c9:dc:84:66:e9:75:90:15:c8:0e:e2:8e: d9:01:32:ff:89:0f:f1:32:4a:68:27:81:7e:e7:64:cf:d7:70: 11:aa:fe:59:77:ed:71:58:5f:fd:a9:06:29:fa:d9:46:bd:63: 41:04:13:a9:71:6b:fd:30:85:e1:73:08:0d:33:74:b2:59:9e: 8b:1d:11:88:f3:c8:31:78:2c:e4:1c:81:ed:bc:2c:5b:f1:ff: b7:9e:c5:f7:a9:9e:10:a3:8c:59:d9:8d:df:4e:19:21:b0:9a: 52:19:ec:95:b8:6e:24:95:56:0b:85:e2:98:d8:67:66:aa:3a: 77:04:a3:de:14:a4:63:4c:28:0c:91:65:a3:39:e0:a4:36:4e: 9d:ab:c8:30:bc:cd:99:e3:eb:c9:43:65:2d:02:09:dc:08:e2: f7:0a:18:3d:93:f0:bb:e7:24:57:ec:9c:ef:9a:6b:3b:c9:92: 34:5d:dc:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFsQX65rwE3UJ3Fb+Hu/RO51yVFEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTI0MDAzMDQyWhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Njc1N2RkNjdiY2RmNTc2M2RmYTA3ZTZjOWEzYWQ2ZmMz MTJjODdmMTRiMGMwY2E5OGJlZmI4OTk4MDA3MzI1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2xDXLGpXbki6CdZ1htWc4u0nKkTAm7FwpEDXdUawFlx/S ydffpM43FUb9kQD2p/MQCLv7XYjMpSt0vCMLWqUxfhn94hq3wm1TOMAr5vV0NHbK bkqKXNFzdSZi4ooV9qfRlPvMv9T4Amx1FmQRrvLwNzq2uKXJJ/mHuEBcm4JG/Qrv SntdUuXgc2A559no2jSbuaT7p347N90yCBA3LRBxkbeD2XELgN43xq7K7OrceAOU JtT0XNJqOS0Dex/M3584m/ziVp5uuJrmmwAKW1nAjKc1lToZxAT/k6fH6up4+Nit x4d/NiWPPQNy5VtwW22mmZH5BuS8HL+iVNH2/X7ZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZkN+TKK4XGdNSE2KibZaK4hvXjUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY5MTJjN2U1LTQxZjQtNGI4Mi05ZGI4LTUxYmFjMjkxMmY1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBACGWi6SQ9XUiElD68mtt+Nfw zBcq/hNzDZSjX3/pZU6d0ptFzgGkkVRszJCCAfv6fEZwQRQbK6ulhFMUk5XagTz9 DtpQRF9hdZZIU6/Mm8nchGbpdZAVyA7ijtkBMv+JD/EySmgngX7nZM/XcBGq/ll3 7XFYX/2pBin62Ua9Y0EEE6lxa/0wheFzCA0zdLJZnosdEYjzyDF4LOQcge28LFvx /7eexfepnhCjjFnZjd9OGSGwmlIZ7JW4biSVVguF4pjYZ2aqOncEo94UpGNMKAyR ZaM54KQ2Tp2ryDC8zZnj68lDZS0CCdwI4vcKGD2T8LvnJFfsnO+aazvJkjRd3B0= -----END CERTIFICATE-----Generated at Fri Jun 6 03:25:10 2025 by rpki-client