$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa File: a7be9120-e9b3-488c-b7e4-818fad18a69e.roa (raw, json) Hash identifier: uxo3qD5bwmaG7DwcS+G4sRSvHz7x4qgEkSQZkxCcJHU= Subject key identifier: CE:26:50:C3:05:D8:FC:1D:B8:C8:C3:2F:04:A0:5A:06:5B:FA:CF:57 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 08267B43E8ADA065272A6526B8C269A3658E35AD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa Signing time: Tue 12 Aug 2025 15:00:17 +0000 ROA not before: Tue 12 Aug 2025 15:00:17 +0000 ROA not after: Tue 16 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:26:7b:43:e8:ad:a0:65:27:2a:65:26:b8:c2:69:a3:65:8e:35:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 12 15:00:17 2025 GMT Not After : Sep 16 23:59:59 2025 GMT Subject: serialNumber=dfbba25ec4335425dcae00c5e6ba133a47c6907d3900d80d51a362cba070c399, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:dc:7d:7c:e7:84:c2:7d:6d:d4:71:3d:78: b9:9c:18:fa:fe:c3:d2:82:97:13:1b:1c:f0:9f:64: ea:2c:2a:b3:8b:d2:25:c2:9e:7c:8f:df:b0:ac:c3: 11:24:b3:29:9a:a2:9c:ca:6e:4d:d1:8f:f5:8d:17: 80:f2:0c:23:f8:aa:8f:68:46:1e:09:6b:f1:70:e7: c2:88:eb:20:18:f0:e3:30:6c:e9:9c:01:7b:43:46: 59:5d:c2:e1:df:0d:3e:77:37:a8:15:65:18:de:96: 0c:7c:f1:2a:25:71:40:ff:24:e6:1f:1b:74:6f:1e: 8c:cd:57:a4:d5:9d:44:46:c8:26:f8:ed:09:51:ea: 52:83:87:1c:13:33:e9:08:00:bc:76:bd:40:58:47: 7b:04:03:2b:ee:88:c7:73:77:3e:de:d1:9c:74:98: c2:32:7f:6b:16:9e:12:27:3d:c0:e8:62:8a:b5:0e: 52:5f:13:ff:8f:1f:2d:5a:32:05:36:fb:8f:b0:d0: 24:fc:2f:7a:79:ac:37:1b:8d:e9:7a:b6:b4:4a:17: 71:9b:ce:b0:92:30:c3:b4:dd:8d:33:0f:4f:dd:cc: 4c:42:80:7a:7e:62:52:53:36:d6:85:97:5a:04:4f: 7b:7d:6b:8d:64:26:ac:41:d6:4b:27:82:12:d0:91: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:26:50:C3:05:D8:FC:1D:B8:C8:C3:2F:04:A0:5A:06:5B:FA:CF:57 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7100::/40 Signature Algorithm: sha256WithRSAEncryption 04:52:82:1c:fc:35:e5:c5:66:b0:95:3e:47:17:5f:8a:df:9d: 97:ce:6a:32:9f:01:ff:77:e7:4b:97:38:cb:ee:f3:04:82:3b: 18:33:c0:60:6b:15:9f:af:56:48:cb:b3:b3:e9:af:06:ec:2c: 4c:11:14:7b:fc:76:38:dd:45:8a:3c:ef:5a:3e:9b:5d:90:78: 54:bc:63:bc:6d:77:1f:0a:c9:07:34:50:61:1f:56:8a:ba:94: d6:95:71:69:6d:16:7a:2b:5e:10:54:cc:a5:37:28:80:10:1e: 4e:d2:47:cb:47:aa:81:6e:17:e0:02:60:ba:f7:e6:9b:fc:a1: ab:a3:d6:6f:c0:c1:99:50:6f:81:29:58:b6:03:fa:b5:68:6c: cf:5c:09:4a:e2:fb:07:c3:e2:52:3f:60:2e:eb:ec:28:67:3e: 52:dc:38:11:d6:11:8d:36:13:67:e5:ed:bb:b6:00:81:1d:7a: df:73:2b:0a:35:6e:db:66:95:e9:c5:cb:ee:5b:b5:da:68:55: 57:1d:c7:59:ef:7a:9c:89:29:b2:a8:e1:f6:f8:5f:8f:e1:13: 71:2d:ed:62:31:96:4a:7b:55:76:18:c0:a2:8a:1b:0c:51:d2: ed:65:f9:33:91:37:38:19:bb:e8:fb:78:d0:53:21:15:f8:ee: 54:70:d4:0d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCCZ7Q+itoGUnKmUmuMJpo2WONa0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODEyMTUwMDE3WhcNMjUwOTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmJiYTI1ZWM0MzM1NDI1ZGNhZTAwYzVlNmJhMTMzYTQ3 YzY5MDdkMzkwMGQ4MGQ1MWEzNjJjYmEwNzBjMzk5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbpNx9fOeEwn1t1HE9eLmcGPr+w9KClxMbHPCfZOosKrOL 0iXCnnyP37CswxEksymaopzKbk3Rj/WNF4DyDCP4qo9oRh4Ja/Fw58KI6yAY8OMw bOmcAXtDRlldwuHfDT53N6gVZRjelgx88SolcUD/JOYfG3RvHozNV6TVnURGyCb4 7QlR6lKDhxwTM+kIALx2vUBYR3sEAyvuiMdzdz7e0Zx0mMIyf2sWnhInPcDoYoq1 DlJfE/+PHy1aMgU2+4+w0CT8L3p5rDcbjel6trRKF3GbzrCSMMO03Y0zD0/dzExC gHp+YlJTNtaFl1oET3t9a41kJqxB1ksnghLQkZlJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUziZQwwXY/B24yMMvBKBaBlv6z1cwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E3YmU5MTIwLWU5YjMtNDg4Yy1iN2U0LTgxOGZhZDE4YTY5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEABFKCHPw15cVmsJU+Rxdfit+d l85qMp8B/3fnS5c4y+7zBII7GDPAYGsVn69WSMuzs+mvBuwsTBEUe/x2ON1Fijzv Wj6bXZB4VLxjvG13HwrJBzRQYR9WirqU1pVxaW0WeiteEFTMpTcogBAeTtJHy0eq gW4X4AJguvfmm/yhq6PWb8DBmVBvgSlYtgP6tWhsz1wJSuL7B8PiUj9gLuvsKGc+ Utw4EdYRjTYTZ+Xtu7YAgR1633MrCjVu22aV6cXL7lu12mhVVx3HWe96nIkpsqjh 9vhfj+ETcS3tYjGWSntVdhjAooobDFHS7WX5M5E3OBm76Pt40FMhFfjuVHDUDQ== -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:53 2025 by rpki-client