$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8410a85c-071f-4042-83cd-ea1b9c6d3f8d.roa File: 8410a85c-071f-4042-83cd-ea1b9c6d3f8d.roa (raw, json) Hash identifier: WNDJKifzKlq+8kXHxvUMBUAk5cUwZgRqjWcM1jvY5lo= Subject key identifier: 7A:7E:0B:6C:A0:E5:1A:F8:00:95:CB:B4:03:4B:E9:79:B1:22:73:89 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 74752CF7498F700C2A1B644CC909C2932EE4EB6F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8410a85c-071f-4042-83cd-ea1b9c6d3f8d.roa Signing time: Fri 15 Aug 2025 21:22:24 +0000 ROA not before: Fri 15 Aug 2025 21:22:24 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6113::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:75:2c:f7:49:8f:70:0c:2a:1b:64:4c:c9:09:c2:93:2e:e4:eb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 15 21:22:24 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=a49a8d6924fba4f043a5006cd28a28ca0c4ec6af430418d4c011201033dd44e0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:a1:44:00:38:3b:99:4f:e5:70:63:75:a3: 2f:37:08:07:d6:71:f6:f5:72:f8:cc:ae:f6:41:e8: f0:4e:b5:e2:dd:2b:9f:a6:9e:54:04:19:f3:17:b3: dc:8f:60:54:ee:b2:25:de:c7:9c:4e:a4:ed:e4:b1: b2:27:b2:41:77:23:a6:b2:9e:a8:a5:c4:3b:c0:34: 6b:e7:27:5c:b0:a0:ff:4b:c5:2b:be:7e:eb:89:e7: 9c:26:49:dc:6c:c5:c5:72:4b:78:19:02:f7:05:6f: 01:be:7d:58:d9:8c:f5:41:66:e2:22:bd:32:3b:ee: 3c:7f:53:f7:8b:45:87:0a:37:e9:9d:c0:eb:36:9e: c6:18:cb:48:10:ac:d8:b2:82:c9:ff:a4:06:10:95: 94:10:75:61:93:ed:ce:1a:7d:8f:a0:d3:55:fc:7a: 49:73:56:ba:13:fa:0e:ad:68:2c:0a:27:28:74:6b: f4:4a:8e:5f:c8:44:11:d4:0f:77:1f:d7:b6:53:55: 7b:bd:4f:06:af:20:32:43:2f:73:a7:fe:aa:cc:cd: 64:01:23:66:6f:07:ff:83:58:71:87:e4:de:b6:6e: c7:2d:00:7c:82:2c:ba:44:d3:de:dd:24:6f:c8:cf: 1b:0e:11:b1:0d:8a:8f:3f:bc:e3:b5:09:95:de:f5: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7E:0B:6C:A0:E5:1A:F8:00:95:CB:B4:03:4B:E9:79:B1:22:73:89 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8410a85c-071f-4042-83cd-ea1b9c6d3f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6113::/48 Signature Algorithm: sha256WithRSAEncryption 17:b6:1b:c6:d2:5b:36:8a:1d:0b:17:8c:5c:7e:76:2b:a2:ef: e0:7f:34:3d:5b:0d:78:e5:82:4f:7a:86:a3:81:b9:cd:5b:2d: b4:f5:3c:7e:3b:93:46:eb:85:97:7b:29:f8:b8:87:92:89:15: e5:00:93:70:4b:2b:f2:68:36:69:b9:1e:f6:94:81:9a:db:b7: d7:20:91:19:3c:83:24:47:64:82:37:df:1f:64:9e:49:a4:1c: 57:d1:81:a7:97:ed:cb:dc:56:e4:e5:e7:43:a9:e0:dc:59:51: 86:6f:c2:04:d3:81:cb:85:9c:99:33:5c:c4:62:01:54:30:13: 0a:c5:ea:1f:82:ab:a5:74:dc:1d:b9:bc:1d:24:da:de:0a:d0: 07:a7:0a:e5:5c:50:d8:d4:cc:fa:bb:cd:df:fb:9a:5f:55:f4: 83:3d:66:67:db:82:45:7f:1a:b2:ea:57:03:6a:72:93:93:95: b3:cf:69:e4:b8:25:c8:33:4e:2f:b0:17:d5:bc:eb:24:cd:45: 4a:0a:df:6e:e2:dc:a2:74:e4:87:7c:a3:3d:a3:df:2b:88:44: 62:41:c5:61:1f:b1:f7:67:a8:3f:67:c4:97:f2:77:4c:e8:4e: f5:a6:00:ec:02:d5:b2:43:eb:05:5f:51:da:11:96:bc:2a:e1: 35:23:6d:5e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdHUs90mPcAwqG2RMyQnCky7k628wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE1MjEyMjI0WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDlhOGQ2OTI0ZmJhNGYwNDNhNTAwNmNkMjhhMjhjYTBj NGVjNmFmNDMwNDE4ZDRjMDExMjAxMDMzZGQ0NGUwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyo6FEADg7mU/lcGN1oy83CAfWcfb1cvjMrvZB6PBOteLd K5+mnlQEGfMXs9yPYFTusiXex5xOpO3ksbInskF3I6aynqilxDvANGvnJ1ywoP9L xSu+fuuJ55wmSdxsxcVyS3gZAvcFbwG+fVjZjPVBZuIivTI77jx/U/eLRYcKN+md wOs2nsYYy0gQrNiygsn/pAYQlZQQdWGT7c4afY+g01X8eklzVroT+g6taCwKJyh0 a/RKjl/IRBHUD3cf17ZTVXu9TwavIDJDL3On/qrMzWQBI2ZvB/+DWHGH5N62bsct AHyCLLpE097dJG/IzxsOEbENio8/vOO1CZXe9V3VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUen4LbKDlGvgAlcu0A0vpebEic4kwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg0MTBhODVjLTA3MWYtNDA0Mi04M2NkLWVhMWI5YzZkM2Y4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRMwDQYJKoZIhvcNAQELBQADggEBABe2G8bSWzaKHQsXjFx+diui 7+B/ND1bDXjlgk96hqOBuc1bLbT1PH47k0brhZd7Kfi4h5KJFeUAk3BLK/JoNmm5 HvaUgZrbt9cgkRk8gyRHZII33x9knkmkHFfRgaeX7cvcVuTl50Op4NxZUYZvwgTT gcuFnJkzXMRiAVQwEwrF6h+Cq6V03B25vB0k2t4K0AenCuVcUNjUzPq7zd/7ml9V 9IM9ZmfbgkV/GrLqVwNqcpOTlbPPaeS4JcgzTi+wF9W86yTNRUoK327i3KJ05Id8 oz2j3yuIRGJBxWEfsfdnqD9nxJfyd0zoTvWmAOwC1bJD6wVfUdoRlrwq4TUjbV4= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:30 2025 by rpki-client