$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cc2bc4f9-bdd6-4c61-b93b-de48854423f2.roa File: cc2bc4f9-bdd6-4c61-b93b-de48854423f2.roa (raw, json) Hash identifier: PjCHEhiXZI8c6cT1cxpSTj51K6KuZVLAWDAGWZBqdlc= Subject key identifier: F2:63:E0:44:BF:51:3F:ED:AB:7C:37:15:5E:72:16:D7:15:C1:B8:B5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 29C50DA099C693AD1192EA2A9B72A0247027D941 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cc2bc4f9-bdd6-4c61-b93b-de48854423f2.roa Signing time: Mon 11 Aug 2025 19:37:40 +0000 ROA not before: Mon 11 Aug 2025 19:37:40 +0000 ROA not after: Mon 15 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c5:0d:a0:99:c6:93:ad:11:92:ea:2a:9b:72:a0:24:70:27:d9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 11 19:37:40 2025 GMT Not After : Sep 15 23:59:59 2025 GMT Subject: serialNumber=5d64a969cdc8b8cb5dd0e70f49f434db412d3cbefdbce8d9c1b5b2d70741c43a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dc:16:f6:54:9b:83:e8:24:c0:ea:42:53:71: eb:9e:07:b1:46:ad:13:9d:dc:70:f8:38:2c:18:2a: 16:2e:f1:b4:49:d5:73:98:ba:76:ec:df:ca:02:3b: 31:33:16:b4:c0:86:ec:ab:97:06:d8:bb:58:0e:5a: 1c:61:87:dc:5f:14:b9:3c:78:49:bf:7c:ea:83:05: c6:38:b6:f6:63:3f:9a:34:6f:ea:1c:d3:e2:91:9a: 93:5a:08:ba:17:22:81:2c:1e:04:8d:84:47:b1:bf: 0e:b2:5b:17:9a:87:03:eb:45:df:f2:f3:cb:85:93: 30:67:52:5f:4e:0e:ac:f0:df:77:c8:70:88:3d:de: ad:fd:39:28:bd:64:81:d4:b6:65:57:38:e6:e0:3b: 1b:af:8a:ba:18:9d:1a:ff:51:9b:b4:0d:d3:f3:9b: 89:a2:6e:4d:ed:6f:35:38:25:99:6a:20:58:f9:2e: 89:a1:c4:c8:1e:ba:7d:32:36:fb:75:88:6a:7a:9a: ca:b2:1c:5a:40:ff:44:9e:46:22:f4:47:0b:d1:0f: 19:49:65:29:ab:52:96:74:0f:b7:45:ba:da:9e:5b: 7e:d0:c2:94:f3:cd:12:2a:cb:72:1b:6b:00:5a:e4: ed:1e:7f:cd:12:15:67:21:0c:5b:8d:d6:4a:12:84: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:63:E0:44:BF:51:3F:ED:AB:7C:37:15:5E:72:16:D7:15:C1:B8:B5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cc2bc4f9-bdd6-4c61-b93b-de48854423f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f100::/40 Signature Algorithm: sha256WithRSAEncryption 58:6f:ba:67:74:1d:ed:f6:f7:0e:a9:b6:8e:3d:03:36:b2:80: 5e:9b:ef:6c:a7:b9:4b:4b:b5:4b:1d:06:f0:12:bd:99:d4:1f: f5:c1:6e:9e:96:e4:50:3c:8a:79:96:07:7c:3f:2e:21:7f:b2: 6a:0b:16:ad:94:0e:15:91:94:74:71:a3:fd:54:a9:30:14:0a: 6e:72:0c:33:00:2f:b7:09:3d:e8:96:ee:5c:10:b3:b1:53:9e: 19:f8:f4:d2:22:b2:07:48:4e:23:61:06:c6:25:f7:0a:65:0e: 88:df:f0:70:54:02:10:6e:0f:f4:fa:be:17:1d:15:58:e0:60: f2:aa:a1:dc:f3:17:cd:3b:6d:d3:c5:b8:f0:e6:e5:50:99:b9: bc:50:c6:2e:d7:56:21:8f:42:03:e1:ce:e2:22:f6:38:8b:42: f1:99:b3:9d:81:84:a8:06:7a:fa:4d:ed:92:8a:8b:ea:a7:d2: 52:50:88:b6:f9:97:5a:60:d7:39:12:5a:42:c1:ad:b8:50:02: a7:1d:45:0a:3f:1d:8b:66:04:1d:73:96:b1:d5:4b:cf:15:32: 53:d4:06:56:6b:73:37:0e:9d:5b:b9:cc:aa:7e:09:f8:43:a1: 27:7d:84:94:1a:9d:8c:29:5d:a1:5a:61:af:cb:0a:87:27:b8: 4a:26:77:c5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKcUNoJnGk60Rkuoqm3KgJHAn2UEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODExMTkzNzQwWhcNMjUwOTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDY0YTk2OWNkYzhiOGNiNWRkMGU3MGY0OWY0MzRkYjQx MmQzY2JlZmRiY2U4ZDljMWI1YjJkNzA3NDFjNDNhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC73Bb2VJuD6CTA6kJTceueB7FGrROd3HD4OCwYKhYu8bRJ 1XOYunbs38oCOzEzFrTAhuyrlwbYu1gOWhxhh9xfFLk8eEm/fOqDBcY4tvZjP5o0 b+oc0+KRmpNaCLoXIoEsHgSNhEexvw6yWxeahwPrRd/y88uFkzBnUl9ODqzw33fI cIg93q39OSi9ZIHUtmVXOObgOxuviroYnRr/UZu0DdPzm4mibk3tbzU4JZlqIFj5 LomhxMgeun0yNvt1iGp6msqyHFpA/0SeRiL0RwvRDxlJZSmrUpZ0D7dFutqeW37Q wpTzzRIqy3IbawBa5O0ef80SFWchDFuN1koShMMJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU8mPgRL9RP+2rfDcVXnIW1xXBuLUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NjMmJjNGY5LWJkZDYtNGM2MS1iOTNiLWRlNDg4NTQ0MjNmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD78TANBgkqhkiG9w0BAQsFAAOCAQEAWG+6Z3Qd7fb3Dqm2jj0DNrKA XpvvbKe5S0u1Sx0G8BK9mdQf9cFunpbkUDyKeZYHfD8uIX+yagsWrZQOFZGUdHGj /VSpMBQKbnIMMwAvtwk96JbuXBCzsVOeGfj00iKyB0hOI2EGxiX3CmUOiN/wcFQC EG4P9Pq+Fx0VWOBg8qqh3PMXzTtt08W48OblUJm5vFDGLtdWIY9CA+HO4iL2OItC 8ZmznYGEqAZ6+k3tkoqL6qfSUlCItvmXWmDXORJaQsGtuFACpx1FCj8di2YEHXOW sdVLzxUyU9QGVmtzNw6dW7nMqn4J+EOhJ32ElBqdjCldoVphr8sKhye4SiZ3xQ== -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:01 2025 by rpki-client