$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa File: eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa (raw, json) Hash identifier: XCXEuyyeKWqvTtvNJkwJ2VkP3VZ8q3UA9C/xYzBBfQw= Subject key identifier: 4E:B2:04:B8:84:F0:BE:81:79:85:00:6F:F9:27:89:98:7D:5F:DA:A1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 69318DB30B3137046A1D526E1829C02C9E9203DE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa Signing time: Wed 13 Aug 2025 06:22:09 +0000 ROA not before: Wed 13 Aug 2025 06:22:09 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:31:8d:b3:0b:31:37:04:6a:1d:52:6e:18:29:c0:2c:9e:92:03:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 13 06:22:09 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=e1d0de035b43acf98d5e63e4968ad2411bd19ffc96eed08453c83bc9bf0458b2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e3:bb:2f:4e:c3:28:71:78:c3:be:2f:89:aa: 03:fc:6d:fe:ea:e1:8a:e0:f7:b1:da:63:41:ec:7d: 32:c4:72:99:83:53:d5:e3:7f:ec:67:e8:4d:9e:1e: 96:5d:ca:05:22:fe:cc:4f:d3:aa:38:b9:67:aa:cd: 58:30:ed:b1:7f:38:b3:06:d4:c9:0c:25:f9:d9:c4: 15:bb:13:48:22:0f:69:71:7e:a7:04:28:a3:21:75: 13:fc:d1:b7:3a:50:c1:e9:7d:4d:e0:3c:c1:68:eb: 55:81:b3:7c:ab:d3:8d:04:9c:ec:5d:98:0c:cd:49: d2:44:b8:e9:b1:71:c0:8d:78:2d:64:81:51:0b:3f: f8:37:c7:ed:40:98:1f:80:fe:55:53:5d:3c:0b:53: 7b:59:1a:79:78:5d:8d:d7:a1:41:ff:ff:b3:60:78: 3f:5d:6a:2a:02:49:35:c2:70:08:14:b9:d3:26:9c: bf:49:23:30:ce:00:25:a1:4c:ef:be:91:a7:4d:a8: c8:2f:20:f3:c8:30:a9:de:c0:76:7b:62:5c:6f:1e: 13:d6:cc:3b:25:2d:72:a8:ca:a6:92:c8:c8:e9:23: 21:bb:c0:e2:48:c8:37:a8:11:97:54:6c:3b:1b:65: ed:46:66:5d:ca:86:a1:e1:8a:63:54:2f:83:1a:1f: 81:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B2:04:B8:84:F0:BE:81:79:85:00:6F:F9:27:89:98:7D:5F:DA:A1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6100::/48 Signature Algorithm: sha256WithRSAEncryption 02:26:a3:fe:a7:47:6b:92:23:e5:2b:cd:a5:6d:e5:da:c0:5a: 3f:cd:75:35:ea:13:03:fe:88:42:69:4c:9e:a4:eb:6d:68:73: be:ea:d0:93:96:be:b9:cc:ac:1c:b2:b6:93:fb:5d:1f:b3:f7: cf:bc:5e:73:ab:d9:e0:04:f2:12:1c:f8:da:f0:c3:8c:4e:d2: d4:db:ef:34:97:87:14:14:6f:88:9c:e7:5f:18:b5:73:53:b6: 21:47:62:28:70:87:9d:f8:d4:45:f6:4b:69:d6:b5:9a:3c:2f: 01:a5:92:e7:f4:58:ab:62:3b:ee:59:e1:71:73:1c:be:99:82: 84:e8:ac:f7:94:58:b9:37:0f:10:10:b9:b9:73:34:e5:47:db: 1d:f1:47:79:a6:a9:0a:74:73:39:6b:43:fe:3a:ab:3d:41:70: f6:e4:4b:35:93:eb:5b:dc:4c:c6:7a:4f:0c:64:f7:95:99:ea: 9d:19:bf:d9:e6:bd:39:92:a5:37:2a:55:de:41:5b:65:c3:e6: 7b:6b:5f:5d:28:dd:8a:c5:28:5d:65:09:05:b5:06:74:93:8a: 81:00:b5:75:cc:ff:a1:f2:23:a9:a1:fc:55:87:eb:0c:10:44: 8f:1a:11:c5:77:26:a3:5e:df:4e:bb:2e:ae:98:91:32:ee:19: ea:15:07:44 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaTGNswsxNwRqHVJuGCnALJ6SA94wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODEzMDYyMjA5WhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMWQwZGUwMzViNDNhY2Y5OGQ1ZTYzZTQ5NjhhZDI0MTFi ZDE5ZmZjOTZlZWQwODQ1M2M4M2JjOWJmMDQ1OGIyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD247svTsMocXjDvi+JqgP8bf7q4Yrg97HaY0HsfTLEcpmD U9Xjf+xn6E2eHpZdygUi/sxP06o4uWeqzVgw7bF/OLMG1MkMJfnZxBW7E0giD2lx fqcEKKMhdRP80bc6UMHpfU3gPMFo61WBs3yr040EnOxdmAzNSdJEuOmxccCNeC1k gVELP/g3x+1AmB+A/lVTXTwLU3tZGnl4XY3XoUH//7NgeD9daioCSTXCcAgUudMm nL9JIzDOACWhTO++kadNqMgvIPPIMKnewHZ7YlxvHhPWzDslLXKoyqaSyMjpIyG7 wOJIyDeoEZdUbDsbZe1GZl3KhqHhimNUL4MaH4GXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTrIEuITwvoF5hQBv+SeJmH1f2qEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VhYTQ0ZDYwLTc0M2YtNDQ2ZS05YzIwLTBiMGI3MTdlZTFhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQAwDQYJKoZIhvcNAQELBQADggEBAAImo/6nR2uSI+UrzaVt5drA Wj/NdTXqEwP+iEJpTJ6k621oc77q0JOWvrnMrByytpP7XR+z98+8XnOr2eAE8hIc +Nrww4xO0tTb7zSXhxQUb4ic518YtXNTtiFHYihwh5341EX2S2nWtZo8LwGlkuf0 WKtiO+5Z4XFzHL6ZgoTorPeUWLk3DxAQublzNOVH2x3xR3mmqQp0czlrQ/46qz1B cPbkSzWT61vcTMZ6Twxk95WZ6p0Zv9nmvTmSpTcqVd5BW2XD5ntrX10o3YrFKF1l CQW1BnSTioEAtXXM/6HyI6mh/FWH6wwQRI8aEcV3JqNe3067Lq6YkTLuGeoVB0Q= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:37 2025 by rpki-client