$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa File: c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa (raw, json) Hash identifier: S9vrUCL9vFI60c7c9Jzfco0sKKrpGzz5bJT/uDS5n2o= Subject key identifier: BC:FC:F6:33:87:3B:9C:92:94:42:C1:E0:7A:E7:93:AB:CF:43:8D:EA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 64267BDEB41F40B0241B0BF545906DB71C730C38 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa Signing time: Tue 20 May 2025 18:10:07 +0000 ROA not before: Tue 20 May 2025 18:10:07 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:300::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:26:7b:de:b4:1f:40:b0:24:1b:0b:f5:45:90:6d:b7:1c:73:0c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:10:07 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=226db36ef26273903d9b24dbf5e99fece36c7e32bed94b8aae598cc1e8a9b008, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:61:36:55:2d:1c:44:66:29:d6:ed:0d:a6: 78:27:37:69:09:11:56:b0:a3:6b:74:15:2f:1a:28: 55:55:61:82:2a:1d:c1:d0:36:b5:e7:63:2e:06:0f: 96:7b:d3:68:72:7c:60:81:fb:b6:20:23:73:13:c0: 78:f1:f1:00:55:48:a5:fe:c6:1f:0a:5b:9d:ad:1a: e8:f8:29:91:b1:ab:3f:7a:1b:63:75:e2:59:d8:b1: c2:30:a4:66:0f:a2:89:c9:d0:1c:0b:ec:a9:bb:be: 19:14:ba:84:d9:49:89:ad:87:82:be:fe:fc:84:c0: 28:2f:5f:69:de:ca:e1:37:06:8e:82:22:ba:1b:0b: 49:a7:84:cd:1c:32:62:c7:cf:43:af:06:de:eb:7f: 50:bb:33:b1:71:29:14:3f:13:94:6e:90:90:89:43: c5:d1:19:b8:86:11:f1:c6:f3:90:ab:ed:22:26:b2: cc:46:14:9b:24:cd:8c:61:d4:98:8f:79:19:86:88: fd:f6:ca:10:0c:d9:ab:93:01:36:52:43:30:9e:94: a7:77:e9:9f:51:34:f8:3e:8b:87:aa:d0:38:74:55: cf:1c:76:88:a3:8b:dd:b1:66:ce:90:4a:c3:a7:9d: bd:a9:4a:87:56:5b:ac:4d:ec:ca:85:0c:64:d9:b8: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FC:F6:33:87:3B:9C:92:94:42:C1:E0:7A:E7:93:AB:CF:43:8D:EA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c9a7bd20-48bd-4f0a-937e-2ccc73008f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:300::/44 Signature Algorithm: sha256WithRSAEncryption 7e:87:32:28:9b:a1:74:cf:56:33:2c:fd:99:7a:90:2b:a1:9b: d6:f7:e7:8e:a2:19:70:48:b5:a6:e4:59:2e:6e:03:13:44:e0: af:4c:5a:4e:f3:ef:3b:7e:b9:94:96:f1:03:1d:cd:70:46:29: 61:de:a8:09:e4:06:0b:7e:79:7e:1b:9b:85:62:c0:1f:66:a5: 2c:6e:e7:c1:1a:26:b0:fb:69:a2:5b:55:83:42:4f:cb:42:1b: 73:72:f7:51:dc:17:34:a8:da:e2:bb:2f:e5:e6:02:b2:5f:0b: e6:06:87:89:f8:af:00:c2:3a:7d:55:08:57:35:84:11:3d:88: bd:47:18:4c:74:38:a1:96:7f:8c:e2:79:21:88:d9:5e:af:17: ed:94:f9:d3:17:5c:6e:a5:a0:04:e3:a1:25:bd:05:56:af:31: 03:ef:98:a0:ee:b8:ee:0d:d0:1b:fb:5b:d1:7f:12:5f:db:bf: e8:63:36:e2:49:59:d3:35:d2:95:40:c2:71:81:03:1f:90:b1: e2:05:10:31:bc:f8:fc:d4:19:ad:37:5e:26:85:63:75:8d:1f: 43:26:b1:60:f5:12:54:7f:8b:7b:f8:16:d2:b8:26:10:ab:e4: 47:80:dc:b7:2d:46:cb:a5:92:84:56:43:f5:36:ed:b0:ca:cb: ad:dc:f0:0d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZCZ73rQfQLAkGwv1RZBttxxzDDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgxMDA3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjZkYjM2ZWYyNjI3MzkwM2Q5YjI0ZGJmNWU5OWZlY2Uz NmM3ZTMyYmVkOTRiOGFhZTU5OGNjMWU4YTliMDA4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2lWE2VS0cRGYp1u0NpngnN2kJEVawo2t0FS8aKFVVYYIq HcHQNrXnYy4GD5Z702hyfGCB+7YgI3MTwHjx8QBVSKX+xh8KW52tGuj4KZGxqz96 G2N14lnYscIwpGYPoonJ0BwL7Km7vhkUuoTZSYmth4K+/vyEwCgvX2neyuE3Bo6C IrobC0mnhM0cMmLHz0OvBt7rf1C7M7FxKRQ/E5RukJCJQ8XRGbiGEfHG85Cr7SIm ssxGFJskzYxh1JiPeRmGiP32yhAM2auTATZSQzCelKd36Z9RNPg+i4eq0Dh0Vc8c doiji92xZs6QSsOnnb2pSodWW6xN7MqFDGTZuICVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvPz2M4c7nJKUQsHgeueTq89DjeowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M5YTdiZDIwLTQ4YmQtNGYwYS05MzdlLTJjY2M3MzAwOGY3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAwAwDQYJKoZIhvcNAQELBQADggEBAH6HMiiboXTPVjMs/Zl6kCuh m9b3546iGXBItabkWS5uAxNE4K9MWk7z7zt+uZSW8QMdzXBGKWHeqAnkBgt+eX4b m4ViwB9mpSxu58EaJrD7aaJbVYNCT8tCG3Ny91HcFzSo2uK7L+XmArJfC+YGh4n4 rwDCOn1VCFc1hBE9iL1HGEx0OKGWf4zieSGI2V6vF+2U+dMXXG6loATjoSW9BVav MQPvmKDuuO4N0Bv7W9F/El/bv+hjNuJJWdM10pVAwnGBAx+QseIFEDG8+PzUGa03 XiaFY3WNH0MmsWD1ElR/i3v4FtK4JhCr5EeA3LctRsulkoRWQ/U27bDKy63c8A0= -----END CERTIFICATE-----Generated at Fri Jun 6 05:16:56 2025 by rpki-client