$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a96c02c-ad61-40ce-b5aa-def693953ba1.roa File: 9a96c02c-ad61-40ce-b5aa-def693953ba1.roa (raw, json) Hash identifier: SoMOajdf/mgR6Xp3szxN3mpfdx1E2Jhd9k5agKU/c/4= Subject key identifier: 30:25:43:1C:46:4A:D2:39:E4:47:91:01:E6:31:B9:B5:69:D6:34:4D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 76C778F677B800F64D5CD263E9E8D388032762FC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a96c02c-ad61-40ce-b5aa-def693953ba1.roa Signing time: Fri 08 Aug 2025 00:30:42 +0000 ROA not before: Fri 08 Aug 2025 00:30:42 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f3:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c7:78:f6:77:b8:00:f6:4d:5c:d2:63:e9:e8:d3:88:03:27:62:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 8 00:30:42 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=5976b6b10eae6b48d387a55c0e725e4a73243d566f6e13714a63507936c86290, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:db:9e:14:fd:2a:de:fe:67:89:c7:67:ef: af:8e:de:d5:4d:1b:1e:9c:36:42:07:d9:15:38:dd: e5:85:bf:ea:88:06:23:90:59:9e:57:61:bb:5a:f4: 40:e1:1c:0a:d5:d5:e1:68:3d:8f:f2:f4:e8:bb:c0: c9:7d:1d:67:7e:29:d3:66:5b:43:f6:78:cd:93:82: 37:97:64:33:d9:65:7b:39:d5:d2:18:c1:99:b4:99: 17:b5:e1:8b:bf:bb:d4:51:6d:fb:33:63:2b:50:49: c5:57:34:ce:28:43:07:4f:06:4b:5d:c9:a8:63:5f: 3e:d1:99:0d:a7:2f:eb:ae:f9:92:d3:67:c5:a4:09: 69:b2:ed:b6:b8:d5:8e:64:74:31:e3:cf:a3:10:51: 83:d3:26:1a:67:32:9c:5f:70:e8:d7:1e:16:32:a1: f5:23:c7:e2:49:44:de:a8:3f:04:54:8d:05:0c:b1: e2:51:0d:88:0c:9b:90:76:c9:fa:89:4a:57:2d:97: ad:68:a2:de:5c:dd:d0:49:d2:5d:f6:b2:3d:94:f3: 57:8b:ce:c2:16:53:d1:4b:0c:89:b5:4e:1a:b2:26: e1:97:61:64:e8:29:1d:45:c3:ce:03:29:54:97:7c: f8:c0:38:df:6c:4d:eb:82:43:17:90:9d:22:4a:59: 7a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:25:43:1C:46:4A:D2:39:E4:47:91:01:E6:31:B9:B5:69:D6:34:4D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a96c02c-ad61-40ce-b5aa-def693953ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f000::/44 Signature Algorithm: sha256WithRSAEncryption 25:ed:0f:d4:8b:8f:03:f2:c6:01:ca:7d:da:3e:2d:f2:e6:ae: 9f:6f:75:2c:65:c0:a5:7b:a6:0c:ff:d0:9b:cb:92:2c:e9:c8: ab:ce:87:02:eb:f3:13:88:bb:a5:57:e2:5f:92:f5:ae:9d:17: 28:30:14:06:97:f1:4a:5b:64:9e:53:97:c7:c7:1c:d4:bd:21: b7:c1:4a:a5:dd:46:ed:2d:4d:7f:07:a7:fa:9c:16:13:b5:4b: 50:23:38:ff:07:75:30:41:56:3c:a6:2a:e9:dd:9d:97:9a:c4: 15:fa:25:13:47:60:5a:d5:15:b0:23:f1:21:78:6e:93:77:47: 88:97:24:73:c8:a6:b4:d6:dd:ba:d2:72:32:e6:31:9b:5d:c5: d9:62:3f:94:a3:24:f3:dd:4f:ed:42:ee:62:ac:f3:b2:eb:37: 04:0e:e4:6b:c3:b0:8b:9e:82:dd:51:9a:22:a8:06:85:52:16: 63:31:48:b8:50:7f:ac:bd:56:46:f5:41:0b:2b:99:21:61:a8: f4:c2:5a:ce:46:11:1a:25:e2:93:85:e6:42:9c:f8:2f:14:d0: 96:9a:30:ac:a1:b9:64:b9:5e:c2:10:86:f3:26:07:76:c6:c3: bb:67:c8:51:17:fb:65:b1:90:12:02:70:a9:7a:1e:a9:52:79: d8:5d:68:96 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdsd49ne4APZNXNJj6ejTiAMnYvwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA4MDAzMDQyWhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTc2YjZiMTBlYWU2YjQ4ZDM4N2E1NWMwZTcyNWU0YTcz MjQzZDU2NmY2ZTEzNzE0YTYzNTA3OTM2Yzg2MjkwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqHdueFP0q3v5nicdn76+O3tVNGx6cNkIH2RU43eWFv+qI BiOQWZ5XYbta9EDhHArV1eFoPY/y9Oi7wMl9HWd+KdNmW0P2eM2TgjeXZDPZZXs5 1dIYwZm0mRe14Yu/u9RRbfszYytQScVXNM4oQwdPBktdyahjXz7RmQ2nL+uu+ZLT Z8WkCWmy7ba41Y5kdDHjz6MQUYPTJhpnMpxfcOjXHhYyofUjx+JJRN6oPwRUjQUM seJRDYgMm5B2yfqJSlctl61oot5c3dBJ0l32sj2U81eLzsIWU9FLDIm1ThqyJuGX YWToKR1Fw84DKVSXfPjAON9sTeuCQxeQnSJKWXrDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMCVDHEZK0jnkR5EB5jG5tWnWNE0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzlhOTZjMDJjLWFkNjEtNDBjZS1iNWFhLWRlZjY5Mzk1M2JhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDz8AAwDQYJKoZIhvcNAQELBQADggEBACXtD9SLjwPyxgHKfdo+LfLm rp9vdSxlwKV7pgz/0JvLkizpyKvOhwLr8xOIu6VX4l+S9a6dFygwFAaX8UpbZJ5T l8fHHNS9IbfBSqXdRu0tTX8Hp/qcFhO1S1AjOP8HdTBBVjymKundnZeaxBX6JRNH YFrVFbAj8SF4bpN3R4iXJHPIprTW3brScjLmMZtdxdliP5SjJPPdT+1C7mKs87Lr NwQO5GvDsIuegt1RmiKoBoVSFmMxSLhQf6y9Vkb1QQsrmSFhqPTCWs5GERol4pOF 5kKc+C8U0JaaMKyhuWS5XsIQhvMmB3bGw7tnyFEX+2WxkBICcKl6HqlSedhdaJY= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:01 2025 by rpki-client