$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa File: ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa (raw, json) Hash identifier: 7K3J5NRBFMWgSuybPyi/NLl5bw0VdK1KmtmzBp98qDI= Subject key identifier: F1:37:00:FD:A8:17:1F:D8:D5:3E:0F:14:E3:B1:CF:D3:BB:E3:EB:98 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 41B841A7F272DD10C424B1950FDB61E2AE449440 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa Signing time: Fri 15 Aug 2025 21:23:46 +0000 ROA not before: Fri 15 Aug 2025 21:23:46 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b8:41:a7:f2:72:dd:10:c4:24:b1:95:0f:db:61:e2:ae:44:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 15 21:23:46 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=6fa3fb7e23b61d2ac7e436b4b4e3e9f687ddea235810754a466e8edcad217d49, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:9c:45:47:ac:b1:c5:ad:64:64:ec:33:ec: d3:41:23:17:a2:9e:21:1c:c3:25:a8:75:1a:4b:f9: 35:e8:04:26:04:c6:a3:e2:07:eb:8e:4c:e7:13:fd: 6a:9c:58:2e:6f:43:1f:91:38:89:b8:07:4d:f1:c0: 71:43:08:25:29:78:73:eb:ac:ce:fc:4c:f5:24:f2: f4:56:91:65:6e:48:d5:68:34:4b:29:95:8a:4a:12: 0d:73:66:33:79:b3:90:73:04:f9:52:08:38:3d:0d: 9d:65:68:d2:9c:31:ae:6c:a3:42:07:f5:17:fd:07: 56:ee:3f:1b:8e:71:3b:e1:2e:cb:1d:9a:09:f4:5c: 78:9f:d8:96:ff:b3:80:24:9d:3f:fb:ec:60:a7:b2: d8:dc:b5:27:e4:e4:68:60:d4:90:fe:b1:55:b1:d4: 81:44:bb:e1:98:d5:59:5a:44:c7:dc:bc:0c:a2:28: 97:74:3f:22:d3:14:c7:b7:a3:49:ae:d3:94:f9:e6: c4:5b:61:8a:7f:e6:e5:21:e7:0e:27:ad:ff:8c:37: e5:64:9c:30:eb:6a:3b:ad:c6:4f:58:be:ce:e6:f6: 09:cf:54:6b:49:49:89:29:48:5e:11:f7:3d:57:76: 62:ae:35:fd:0a:94:96:c0:94:e2:aa:ad:ef:14:53: 21:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:37:00:FD:A8:17:1F:D8:D5:3E:0F:14:E3:B1:CF:D3:BB:E3:EB:98 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611a::/48 Signature Algorithm: sha256WithRSAEncryption 17:88:d8:99:9c:ec:48:46:85:a0:25:a8:81:38:c5:bb:fa:f1: d2:bf:89:7d:b1:ac:5c:91:1d:b1:01:99:99:ba:23:be:69:30: cb:0e:bd:b0:57:27:6a:6b:d3:59:2d:25:37:26:56:10:f8:a5: 96:a7:3b:ee:93:23:15:53:c1:99:ca:ce:9b:53:7d:83:8d:80: 00:95:e7:a2:ea:7a:13:38:ac:5c:37:d9:55:c7:84:3a:ff:8b: 7d:32:a6:d0:88:c4:49:df:13:59:2e:9b:21:a2:66:3d:d2:b6: f1:78:ac:21:62:1f:50:76:da:fa:71:37:27:6f:38:3d:ef:a1: d4:35:5d:93:87:14:f5:0e:d1:7f:ab:53:ec:a3:54:3b:46:e4: dd:35:de:c2:e0:4f:3e:0d:a3:62:a7:2f:01:8c:54:79:58:e0: fb:25:1a:8d:fa:d6:84:e7:b7:78:2e:45:da:30:12:5f:6d:26: 52:7a:5a:68:0d:7a:b7:1d:6d:4d:ea:20:10:be:7e:f3:cc:b9: 3b:f1:8e:ae:81:f5:1b:70:ad:54:7f:ef:26:a4:bb:2d:80:be: 69:66:c1:59:fa:a4:74:e7:71:73:4c:e9:31:11:8b:53:4a:bf: 97:82:c4:e0:6a:72:a3:c1:0d:7a:05:36:f4:4f:e2:ac:99:b8: 70:2d:db:99 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQbhBp/Jy3RDEJLGVD9th4q5ElEAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE1MjEyMzQ2WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmEzZmI3ZTIzYjYxZDJhYzdlNDM2YjRiNGUzZTlmNjg3 ZGRlYTIzNTgxMDc1NGE0NjZlOGVkY2FkMjE3ZDQ5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHrJxFR6yxxa1kZOwz7NNBIxeiniEcwyWodRpL+TXoBCYE xqPiB+uOTOcT/WqcWC5vQx+ROIm4B03xwHFDCCUpeHPrrM78TPUk8vRWkWVuSNVo NEsplYpKEg1zZjN5s5BzBPlSCDg9DZ1laNKcMa5so0IH9Rf9B1buPxuOcTvhLssd mgn0XHif2Jb/s4AknT/77GCnstjctSfk5Ghg1JD+sVWx1IFEu+GY1VlaRMfcvAyi KJd0PyLTFMe3o0mu05T55sRbYYp/5uUh5w4nrf+MN+VknDDrajutxk9Yvs7m9gnP VGtJSYkpSF4R9z1XdmKuNf0KlJbAlOKqre8UUyEVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8TcA/agXH9jVPg8U47HP07vj65gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JhNjk5YzFlLTllMTctNDEzNC05ZDFmLThiYTk3ZmZkOWYzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRowDQYJKoZIhvcNAQELBQADggEBABeI2Jmc7EhGhaAlqIE4xbv6 8dK/iX2xrFyRHbEBmZm6I75pMMsOvbBXJ2pr01ktJTcmVhD4pZanO+6TIxVTwZnK zptTfYONgACV56LqehM4rFw32VXHhDr/i30yptCIxEnfE1kumyGiZj3StvF4rCFi H1B22vpxNydvOD3vodQ1XZOHFPUO0X+rU+yjVDtG5N013sLgTz4No2KnLwGMVHlY 4PslGo361oTnt3guRdowEl9tJlJ6WmgNercdbU3qIBC+fvPMuTvxjq6B9RtwrVR/ 7yakuy2AvmlmwVn6pHTncXNM6TERi1NKv5eCxOBqcqPBDXoFNvRP4qyZuHAt25k= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:42 2025 by rpki-client