$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/92f41cbd-169a-4a93-8bff-8fb9445ebadd.roa File: 92f41cbd-169a-4a93-8bff-8fb9445ebadd.roa (raw, json) Hash identifier: /wygk4y347/m50UhdPhhQsqGBaifA8+GOIETI/a13LA= Subject key identifier: BB:3B:03:EE:37:78:9E:6B:50:0A:69:6C:E3:1F:5D:1E:28:11:EA:2F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 38AE2AC09307E909B83545EF1AB3A6A0E8054100 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/92f41cbd-169a-4a93-8bff-8fb9445ebadd.roa Signing time: Fri 15 Aug 2025 21:23:51 +0000 ROA not before: Fri 15 Aug 2025 21:23:51 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ae:2a:c0:93:07:e9:09:b8:35:45:ef:1a:b3:a6:a0:e8:05:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 15 21:23:51 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=26c75e4a90ec451be47e1137a2a15d21046c439ddfcd66fe6b829822b2e5592a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:2f:55:98:a8:bb:27:6c:cc:fd:9d:4d:68: 88:a9:5e:7f:1b:c7:14:f8:fb:60:06:c9:95:5c:1c: ee:cd:5c:05:72:bc:5e:1d:86:5a:15:7b:80:b8:13: 87:d6:11:c5:ce:5e:04:28:11:33:ca:31:f0:18:2c: e0:88:ff:07:9c:18:c4:bf:97:a6:34:e5:e4:a0:d6: 29:93:df:1e:e2:bb:81:37:38:a4:18:6f:17:a4:e4: 54:b8:b8:e6:43:bd:cb:38:d8:dd:bd:fd:61:1d:6b: 83:e6:13:e4:0b:c6:28:e7:c7:7d:be:5b:52:af:16: 1b:1e:b2:2a:dc:b0:ae:06:29:3a:a6:c0:8a:a7:26: ec:34:50:11:4f:51:0e:54:56:43:71:ac:bc:f6:e9: d3:04:6c:19:6d:fd:a7:61:73:3e:e0:31:11:76:0d: 40:53:ab:83:e9:3a:4d:5f:cd:91:f4:1d:8d:54:a7: 43:dd:18:ee:d8:b3:d2:65:d0:66:70:a2:ac:7b:1c: e5:8e:49:3d:8c:ea:38:8c:26:c4:82:a3:d5:67:3a: 97:e4:4c:cc:b0:d5:4d:1d:79:65:57:db:c7:6d:17: e0:fa:7a:e9:50:c5:57:a2:20:f9:89:4b:05:f3:01: d2:70:c8:eb:81:6b:23:25:68:84:c7:bf:46:97:8c: 03:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3B:03:EE:37:78:9E:6B:50:0A:69:6C:E3:1F:5D:1E:28:11:EA:2F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/92f41cbd-169a-4a93-8bff-8fb9445ebadd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6100::/40 Signature Algorithm: sha256WithRSAEncryption 04:5c:b0:81:78:81:e9:e2:56:24:b0:25:de:3c:71:cb:cf:69: f5:e3:e9:2e:f3:29:d1:c8:70:a1:e8:6a:28:a1:3a:50:7a:bf: df:ce:9e:77:b3:41:af:85:00:01:24:f8:4c:5b:5a:59:79:50: 70:29:5e:c5:4d:7b:e9:3d:a4:e2:04:82:1b:b7:9a:db:00:8e: 6a:74:d1:15:ea:9e:d6:e4:9d:7e:da:fe:8f:9c:85:a8:59:8d: 90:f9:94:01:bf:69:95:3a:5b:1a:44:2c:31:4d:6a:06:66:e4: ec:34:de:80:01:37:7a:b4:14:81:2d:7e:97:25:53:bd:22:92: fa:b3:a5:e5:ed:98:87:ff:98:0d:f4:07:ed:07:7c:8e:6b:b8: ef:44:51:7c:8c:07:6a:2f:6d:75:c4:07:78:84:b9:44:4b:7b: 1e:ac:31:37:7a:da:6a:eb:d3:5f:e1:67:84:72:c1:37:48:f4: 4e:1e:47:ce:ce:78:57:a8:61:83:d4:ef:84:4e:4c:4c:2c:a6: a9:0f:8b:de:82:dd:6b:2d:e2:ff:c4:9c:f4:c3:70:40:0a:97: 29:3e:37:81:c0:77:ec:a3:ba:5a:c3:e2:8d:e1:0a:26:ab:aa: 1e:92:9b:c9:cc:8a:79:e5:64:29:71:a4:ce:86:d4:47:c3:65: b3:55:65:72 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOK4qwJMH6Qm4NUXvGrOmoOgFQQAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE1MjEyMzUxWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmM3NWU0YTkwZWM0NTFiZTQ3ZTExMzdhMmExNWQyMTA0 NmM0MzlkZGZjZDY2ZmU2YjgyOTgyMmIyZTU1OTJhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGTy9VmKi7J2zM/Z1NaIipXn8bxxT4+2AGyZVcHO7NXAVy vF4dhloVe4C4E4fWEcXOXgQoETPKMfAYLOCI/wecGMS/l6Y05eSg1imT3x7iu4E3 OKQYbxek5FS4uOZDvcs42N29/WEda4PmE+QLxijnx32+W1KvFhsesircsK4GKTqm wIqnJuw0UBFPUQ5UVkNxrLz26dMEbBlt/adhcz7gMRF2DUBTq4PpOk1fzZH0HY1U p0PdGO7Ys9Jl0GZwoqx7HOWOST2M6jiMJsSCo9VnOpfkTMyw1U0deWVX28dtF+D6 eulQxVeiIPmJSwXzAdJwyOuBayMlaITHv0aXjAMfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuzsD7jd4nmtQCmls4x9dHigR6i8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzkyZjQxY2JkLTE2OWEtNGE5My04YmZmLThmYjk0NDVlYmFkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwYTANBgkqhkiG9w0BAQsFAAOCAQEABFywgXiB6eJWJLAl3jxxy89p 9ePpLvMp0chwoehqKKE6UHq/386ed7NBr4UAAST4TFtaWXlQcClexU176T2k4gSC G7ea2wCOanTRFeqe1uSdftr+j5yFqFmNkPmUAb9plTpbGkQsMU1qBmbk7DTegAE3 erQUgS1+lyVTvSKS+rOl5e2Yh/+YDfQH7Qd8jmu470RRfIwHai9tdcQHeIS5REt7 HqwxN3raauvTX+FnhHLBN0j0Th5Hzs54V6hhg9TvhE5MTCymqQ+L3oLday3i/8Sc 9MNwQAqXKT43gcB37KO6WsPijeEKJquqHpKbycyKeeVkKXGkzobUR8Nls1Vlcg== -----END CERTIFICATE-----Generated at Wed Aug 20 10:48:42 2025 by rpki-client