$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa File: 7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa (raw, json) Hash identifier: GcD/KE/kyaQ5J5RYYWbsARDNDjfC2AP6NeIlCPtAuDs= Subject key identifier: CD:CC:FF:3F:07:8C:61:AC:79:F3:30:08:1A:C0:CB:3E:4C:3D:DF:5F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1C1F526347214A74F6AC1A68462F068097D8B55F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa Signing time: Fri 15 Aug 2025 21:22:05 +0000 ROA not before: Fri 15 Aug 2025 21:22:05 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1f:52:63:47:21:4a:74:f6:ac:1a:68:46:2f:06:80:97:d8:b5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 15 21:22:05 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=10500a52509d5684814172af379124eba5425b7f86a56886f0a44f0122341db4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:6f:02:7a:06:12:d0:d5:b4:ab:b9:e5:2c: 59:44:ac:5b:d1:19:74:a9:ff:cc:7e:dd:5f:0c:d7: 40:fb:da:f9:9f:f9:be:b7:2e:b3:92:1b:b4:c8:90: e6:9a:e4:b5:7e:da:bc:72:f0:55:6f:52:d9:2e:0b: 3d:6b:36:59:13:54:33:ae:4e:83:3f:03:ca:16:bc: 7f:e2:c2:c3:14:e1:b9:bb:69:21:18:65:84:6e:5f: b4:a4:da:e9:bc:42:44:d7:d7:99:4b:90:9c:56:de: cd:4e:08:a4:fa:59:96:b5:1a:65:c4:db:04:98:da: 3a:85:1a:d1:c2:7f:02:e9:07:a3:e9:83:4e:b6:32: bb:14:0c:84:0b:83:fd:a8:6d:d1:7a:0b:6f:50:11: ee:b5:4f:05:4b:a0:be:19:22:b5:f3:a9:6d:7c:1a: f9:68:25:cd:a8:77:3d:5f:0e:12:1b:16:30:90:76: e8:4f:7c:5d:f9:74:9f:31:ed:4d:41:a9:68:c5:9b: 8b:07:72:4e:0e:8d:cc:75:35:a9:21:e6:48:08:d2: 7a:4d:b9:65:2f:cf:a3:dc:8b:17:60:fa:de:01:79: 30:57:ef:b0:70:30:3c:c0:19:85:e0:2a:a2:02:af: 84:24:60:fc:03:19:bc:3a:9f:aa:37:13:91:dd:02: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CC:FF:3F:07:8C:61:AC:79:F3:30:08:1A:C0:CB:3E:4C:3D:DF:5F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6104::/48 Signature Algorithm: sha256WithRSAEncryption 0f:50:70:8d:7e:0c:f0:3a:29:5d:42:30:d2:82:e0:3b:00:98: 36:04:59:fe:10:17:15:1a:7f:94:60:19:f3:1a:27:49:78:87: c9:e6:be:23:5c:42:41:c7:b4:d7:96:a3:a6:5e:a0:2f:9c:bd: 9a:f8:6a:6f:d6:95:7e:0f:37:85:2c:ae:8b:d6:bd:91:c1:a2: 8e:24:1d:8b:67:a1:8f:4f:ea:50:05:52:c9:1a:15:2d:34:b0: 5b:2f:78:f3:6c:9e:17:de:73:61:c4:ec:d8:41:d1:51:64:65: 43:ee:64:d3:52:da:e9:ea:b3:c0:df:dd:92:fa:c2:b4:fc:86: 94:25:c1:61:10:fe:f1:6e:19:6e:34:94:cd:aa:54:22:e6:a0: 17:ba:4b:1a:9b:7b:99:b3:58:3a:dd:18:da:0a:27:f5:96:fe: 12:60:99:9a:b9:33:5d:8e:00:af:27:53:31:fa:6a:c7:50:94: d9:59:c0:d0:4f:b9:04:e0:20:5e:00:2c:27:16:c8:40:94:95: f7:36:58:6a:97:eb:41:01:c5:d1:69:74:28:13:36:f1:8c:c2: 09:bc:06:8b:86:4e:ab:b8:06:cf:dc:0d:36:f3:f1:27:db:e4: d7:83:91:31:1e:87:be:c2:ab:f4:0c:c7:5f:2c:32:81:e7:c6: 51:49:88:61 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHB9SY0chSnT2rBpoRi8GgJfYtV8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE1MjEyMjA1WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDUwMGE1MjUwOWQ1Njg0ODE0MTcyYWYzNzkxMjRlYmE1 NDI1YjdmODZhNTY4ODZmMGE0NGYwMTIyMzQxZGI0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDALW8CegYS0NW0q7nlLFlErFvRGXSp/8x+3V8M10D72vmf +b63LrOSG7TIkOaa5LV+2rxy8FVvUtkuCz1rNlkTVDOuToM/A8oWvH/iwsMU4bm7 aSEYZYRuX7Sk2um8QkTX15lLkJxW3s1OCKT6WZa1GmXE2wSY2jqFGtHCfwLpB6Pp g062MrsUDIQLg/2obdF6C29QEe61TwVLoL4ZIrXzqW18GvloJc2odz1fDhIbFjCQ duhPfF35dJ8x7U1BqWjFm4sHck4Ojcx1Nakh5kgI0npNuWUvz6Pcixdg+t4BeTBX 77BwMDzAGYXgKqICr4QkYPwDGbw6n6o3E5HdAibtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzcz/PweMYax58zAIGsDLPkw9318wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdkOWE4Y2E3LWIyZTgtNGQ5Mi04NDJkLWIzYjJhN2M5MmY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQQwDQYJKoZIhvcNAQELBQADggEBAA9QcI1+DPA6KV1CMNKC4DsA mDYEWf4QFxUaf5RgGfMaJ0l4h8nmviNcQkHHtNeWo6ZeoC+cvZr4am/WlX4PN4Us rovWvZHBoo4kHYtnoY9P6lAFUskaFS00sFsvePNsnhfec2HE7NhB0VFkZUPuZNNS 2unqs8Df3ZL6wrT8hpQlwWEQ/vFuGW40lM2qVCLmoBe6Sxqbe5mzWDrdGNoKJ/WW /hJgmZq5M12OAK8nUzH6asdQlNlZwNBPuQTgIF4ALCcWyECUlfc2WGqX60EBxdFp dCgTNvGMwgm8BouGTqu4Bs/cDTbz8Sfb5NeDkTEeh77Cq/QMx18sMoHnxlFJiGE= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:46 2025 by rpki-client