$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a48ca006-b4f2-49da-b519-80bf4857d7e9.roa File: a48ca006-b4f2-49da-b519-80bf4857d7e9.roa (raw, json) Hash identifier: RHYsNPc0XUL3IdIotWQWS6Jkdu8dtt8WCP/xIoZPJVQ= Subject key identifier: 28:B1:21:7C:38:22:04:6B:7E:23:C5:23:64:A1:7C:ED:92:6C:FF:31 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 68479698656E3E5945850FEF3089D7FB95F437C7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a48ca006-b4f2-49da-b519-80bf4857d7e9.roa Signing time: Mon 11 Aug 2025 15:30:50 +0000 ROA not before: Mon 11 Aug 2025 15:30:50 +0000 ROA not after: Mon 15 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:47:96:98:65:6e:3e:59:45:85:0f:ef:30:89:d7:fb:95:f4:37:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 11 15:30:50 2025 GMT Not After : Sep 15 23:59:59 2025 GMT Subject: serialNumber=113ecced52eac9c7dc94dc6c29f74597cb342f577d54afb0a831b9a381af8c4e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:fd:28:26:7f:f7:be:64:1d:b0:6b:af:e5: 11:c9:ac:43:5b:72:0b:e8:42:69:a5:79:ab:f6:78: a1:cc:db:9c:c0:77:b4:ef:e8:a7:d2:cf:26:5a:f2: b0:88:63:b6:c7:2d:6c:5b:0f:f4:f8:17:f8:5b:1f: 33:33:47:b2:f6:0b:24:9f:ab:ba:76:63:26:80:b1: ed:d1:fb:5d:bc:09:53:27:fd:76:90:34:db:dc:87: 31:f9:51:46:0f:73:c2:bc:49:00:1e:e2:9f:d0:28: b5:d8:81:92:3c:5c:88:e8:8c:05:f3:39:7e:bd:cf: 89:e5:12:f0:0a:d0:12:3f:f5:57:99:b0:f4:d8:bc: af:df:f1:06:3c:34:e7:06:16:ef:d0:d2:27:7f:4e: e6:c2:06:e4:a5:8d:36:fe:ab:26:e5:8a:db:41:f5: a7:50:61:05:f3:2e:8f:bd:98:c7:9d:6a:51:6a:48: b3:8a:59:a9:04:03:13:a4:01:cf:c6:95:a7:78:df: 1b:47:0e:ca:0b:9a:03:42:25:69:db:85:2a:57:35: 3c:8a:fe:22:a5:1f:0c:03:63:c6:24:1c:f0:d3:6e: 7b:41:da:7b:a6:f7:c9:a0:f5:6e:ea:a6:17:ed:72: e9:f7:e1:81:3d:b2:b6:19:d2:64:23:d9:f8:fd:6e: c7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B1:21:7C:38:22:04:6B:7E:23:C5:23:64:A1:7C:ED:92:6C:FF:31 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a48ca006-b4f2-49da-b519-80bf4857d7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7140::/48 Signature Algorithm: sha256WithRSAEncryption 8d:6b:01:45:ef:4e:db:0b:14:96:3b:44:ad:37:d2:2c:ee:71: 9f:f6:09:d9:d6:30:e7:b2:36:57:64:df:b6:8c:ef:ec:c5:49: de:41:1c:96:31:8f:c9:67:c5:17:8e:08:22:ca:e6:7d:27:57: 84:c9:d0:79:51:6f:9f:3b:9e:dc:ba:9d:1f:54:87:2b:71:1a: 43:d6:53:f8:d5:b0:3c:53:d7:dc:aa:2a:fb:e6:4e:82:19:9e: cf:47:a3:1e:62:db:47:ea:22:5d:6c:0c:81:42:89:4e:f5:4f: b3:16:ef:d4:41:f3:f9:6b:27:40:26:c9:7e:95:77:ac:fb:66: 22:17:27:5f:46:4d:82:f8:00:f9:48:b5:2f:ee:2e:b5:96:cf: 3c:58:15:8b:32:62:1b:94:ed:18:3a:52:ef:2b:29:2c:1b:09: 07:ca:59:bc:18:48:4c:59:f6:92:62:fe:00:dd:4f:6c:42:3a: 5f:16:19:f2:11:54:ce:b7:a7:2d:a0:19:87:ee:93:1a:1e:18: e7:54:97:07:41:63:86:cf:22:28:8d:92:8c:d9:99:e3:3c:a9: 54:c1:9e:dd:82:73:3b:dd:52:b3:f5:07:e5:0a:e2:3c:24:ef: 51:9f:2f:7d:ca:80:60:ac:bb:17:ab:47:c1:a8:c9:05:5b:7a: 0b:2e:db:c0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaEeWmGVuPllFhQ/vMInX+5X0N8cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODExMTUzMDUwWhcNMjUwOTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTNlY2NlZDUyZWFjOWM3ZGM5NGRjNmMyOWY3NDU5N2Ni MzQyZjU3N2Q1NGFmYjBhODMxYjlhMzgxYWY4YzRlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy4/0oJn/3vmQdsGuv5RHJrENbcgvoQmmleav2eKHM25zA d7Tv6KfSzyZa8rCIY7bHLWxbD/T4F/hbHzMzR7L2CySfq7p2YyaAse3R+128CVMn /XaQNNvchzH5UUYPc8K8SQAe4p/QKLXYgZI8XIjojAXzOX69z4nlEvAK0BI/9VeZ sPTYvK/f8QY8NOcGFu/Q0id/TubCBuSljTb+qyblittB9adQYQXzLo+9mMedalFq SLOKWakEAxOkAc/Glad43xtHDsoLmgNCJWnbhSpXNTyK/iKlHwwDY8YkHPDTbntB 2num98mg9W7qphftcun34YE9srYZ0mQj2fj9bsfbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKLEhfDgiBGt+I8UjZKF87ZJs/zEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0OGNhMDA2LWI0ZjItNDlkYS1iNTE5LTgwYmY0ODU3ZDdlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycUAwDQYJKoZIhvcNAQELBQADggEBAI1rAUXvTtsLFJY7RK030izu cZ/2CdnWMOeyNldk37aM7+zFSd5BHJYxj8lnxReOCCLK5n0nV4TJ0HlRb587nty6 nR9UhytxGkPWU/jVsDxT19yqKvvmToIZns9Hox5i20fqIl1sDIFCiU71T7MW79RB 8/lrJ0AmyX6Vd6z7ZiIXJ19GTYL4APlItS/uLrWWzzxYFYsyYhuU7Rg6Uu8rKSwb CQfKWbwYSExZ9pJi/gDdT2xCOl8WGfIRVM63py2gGYfukxoeGOdUlwdBY4bPIiiN kozZmeM8qVTBnt2CczvdUrP1B+UK4jwk71GfL33KgGCsuxerR8GoyQVbegsu28A= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:41 2025 by rpki-client