$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa File: b90bcce5-377e-4df4-b77e-97a06ec916c4.roa (raw, json) Hash identifier: ZuI7Ryz8ClWpt+2gIhQhjEh0CQbd7jKt9m4Hv8YG31w= Subject key identifier: C6:FE:0D:66:71:BC:EB:D8:9B:6A:6C:BF:9E:97:F0:CD:F6:2A:37:96 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 08F5CC453906793678CA74A7CD2384A6596C1D7F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa Signing time: Tue 20 May 2025 18:10:07 +0000 ROA not before: Tue 20 May 2025 18:10:07 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f5:cc:45:39:06:79:36:78:ca:74:a7:cd:23:84:a6:59:6c:1d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:10:07 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=73293e278a2389ded91f2c666cf5fa0896ba7ed46b499c1da7e5e474de344013, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:cd:f0:91:57:cd:58:bc:98:47:92:ab:98:80: 75:0d:e1:d2:34:2d:10:05:18:26:54:ce:68:df:14: 00:7c:26:b9:23:c5:56:21:c7:f5:95:a8:ec:e0:4b: ec:83:c8:24:3d:e4:27:06:a7:e6:45:af:b0:01:f9: 81:ed:19:6f:5f:a2:bf:a3:d0:97:52:06:95:ff:7f: 3a:5c:3f:e4:52:c5:33:3a:09:3d:2c:76:9a:ac:e7: 8c:37:12:37:3f:c3:92:9c:b9:ba:84:30:95:2a:01: f5:98:b9:df:7b:f0:3f:7c:a6:3c:58:68:5e:4c:0f: a5:81:62:c4:62:64:5b:0c:83:4b:fd:59:3c:58:34: cd:0e:0d:59:1b:f9:d5:d3:01:9a:00:6c:85:8b:74: c3:6d:0e:2f:69:74:3e:e8:ef:b7:f7:bc:fc:3c:e8: cf:c1:df:e7:29:f5:c4:83:db:4b:37:99:85:a2:cf: c7:83:08:f2:9b:76:35:bd:6a:c9:82:e5:1d:57:47: 36:cd:be:92:13:e0:9a:0c:2b:fa:24:60:05:ce:33: 7b:9d:3b:21:3f:c6:d1:92:c6:b7:e4:0f:49:bc:57: 9e:56:df:2c:0f:5a:06:49:e9:15:49:3b:f3:a1:6c: 34:fd:05:d6:09:57:b8:59:4f:af:5b:7a:53:a4:6d: 36:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FE:0D:66:71:BC:EB:D8:9B:6A:6C:BF:9E:97:F0:CD:F6:2A:37:96 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:30::/44 Signature Algorithm: sha256WithRSAEncryption 8b:a9:79:df:17:bf:f8:49:5e:58:32:ad:3d:59:31:c6:b6:a3: 24:c7:3c:c9:61:de:f7:c6:e4:58:ba:a6:11:78:b5:26:32:23: 04:1b:f0:78:22:d5:46:53:67:07:8b:d6:cb:3f:fd:8e:a7:82: 84:92:cf:07:2c:eb:05:17:f8:b9:7c:1f:7a:ce:c2:b4:14:15: c8:ae:bc:68:3b:35:a8:3c:11:5e:63:05:a7:bb:85:87:2b:35: f0:dc:60:35:ea:dd:8d:ae:9e:58:88:50:09:ae:53:01:dd:e1: 1c:4d:b0:ee:0a:63:0b:77:f1:19:6c:1d:39:63:fa:9f:2a:1b: 9f:65:f3:38:4f:80:9d:57:5b:b1:20:10:6a:ad:dc:af:b5:cb: 76:99:81:0a:e2:02:45:f1:32:80:07:d0:63:9c:16:84:f2:17: 4c:f7:e0:8c:20:9e:24:e4:cb:55:17:be:4a:91:2c:ea:d8:bc: 30:9a:e1:56:68:3e:df:21:3b:a5:d4:cf:c6:e0:0e:48:1a:72: c9:3c:63:4c:df:29:5c:a5:61:e0:24:64:66:05:40:22:74:ef: 4d:e5:36:3b:89:26:75:1d:85:6c:ae:79:fd:a4:c5:f8:ee:30: c5:d2:af:5e:dc:a9:50:b2:00:60:e9:d2:5b:e5:67:b1:14:c9: 00:96:5b:e6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCPXMRTkGeTZ4ynSnzSOEpllsHX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgxMDA3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzI5M2UyNzhhMjM4OWRlZDkxZjJjNjY2Y2Y1ZmEwODk2 YmE3ZWQ0NmI0OTljMWRhN2U1ZTQ3NGRlMzQ0MDEzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1zfCRV81YvJhHkquYgHUN4dI0LRAFGCZUzmjfFAB8Jrkj xVYhx/WVqOzgS+yDyCQ95CcGp+ZFr7AB+YHtGW9for+j0JdSBpX/fzpcP+RSxTM6 CT0sdpqs54w3Ejc/w5KcubqEMJUqAfWYud978D98pjxYaF5MD6WBYsRiZFsMg0v9 WTxYNM0ODVkb+dXTAZoAbIWLdMNtDi9pdD7o77f3vPw86M/B3+cp9cSD20s3mYWi z8eDCPKbdjW9asmC5R1XRzbNvpIT4JoMK/okYAXOM3udOyE/xtGSxrfkD0m8V55W 3ywPWgZJ6RVJO/OhbDT9BdYJV7hZT69belOkbTaZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxv4NZnG869ibamy/npfwzfYqN5YwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I5MGJjY2U1LTM3N2UtNGRmNC1iNzdlLTk3YTA2ZWM5MTZjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwADAwDQYJKoZIhvcNAQELBQADggEBAIuped8Xv/hJXlgyrT1ZMca2 oyTHPMlh3vfG5Fi6phF4tSYyIwQb8Hgi1UZTZweL1ss//Y6ngoSSzwcs6wUX+Ll8 H3rOwrQUFciuvGg7Nag8EV5jBae7hYcrNfDcYDXq3Y2unliIUAmuUwHd4RxNsO4K Ywt38RlsHTlj+p8qG59l8zhPgJ1XW7EgEGqt3K+1y3aZgQriAkXxMoAH0GOcFoTy F0z34IwgniTky1UXvkqRLOrYvDCa4VZoPt8hO6XUz8bgDkgacsk8Y0zfKVylYeAk ZGYFQCJ0703lNjuJJnUdhWyuef2kxfjuMMXSr17cqVCyAGDp0lvlZ7EUyQCWW+Y= -----END CERTIFICATE-----Generated at Wed Jun 4 10:48:01 2025 by rpki-client