$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa File: ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa (raw, json) Hash identifier: HlmhNaS8KYfkrIiN4b9IHd2nZuM5zfafTzJUkdflMZc= Subject key identifier: 3C:2B:7B:3C:36:CE:26:62:8B:C0:4F:B7:06:66:B2:01:0E:CF:79:BD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 54629A52FFA1B9387866658C77C44CF4AAE46561 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa Signing time: Fri 30 May 2025 19:06:58 +0000 ROA not before: Fri 30 May 2025 19:06:58 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:108::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:62:9a:52:ff:a1:b9:38:78:66:65:8c:77:c4:4c:f4:aa:e4:65:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 30 19:06:58 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=ecd9006d876088210b97332a5b69ad1010149c51d2dec3b6cd8c0055034940d3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:3a:3b:36:dd:6a:0a:3a:fd:a3:1d:71:9c: 92:5e:22:07:5d:8b:b4:0f:23:ef:ee:44:6f:ff:b0: fb:a2:e9:da:6b:af:ce:a6:41:6c:6e:eb:d2:a8:e7: c7:61:f8:95:28:de:13:50:7b:95:7f:82:a1:19:55: dc:01:75:3f:1e:12:1a:5f:96:a8:17:d9:6f:5d:0c: a6:6d:40:5d:ff:19:5e:62:fc:fc:0a:6e:0f:3a:46: 74:d0:a7:30:6f:45:50:bb:ce:b7:a0:65:7c:70:d9: e0:68:96:5a:47:2e:a8:48:92:ff:3c:52:67:f1:17: 6e:78:8c:92:33:69:af:9f:28:de:fa:a0:23:96:bc: 51:08:e8:f3:9c:49:2c:89:c0:e7:ee:e9:7e:eb:fc: 50:8e:fc:55:cf:2b:e5:f4:d0:07:90:3e:74:57:fd: db:65:22:c8:03:83:ab:5a:b3:66:a3:26:14:43:d1: d2:b3:b7:05:28:63:7f:7c:1b:c6:43:f0:07:10:94: 83:67:5b:61:a8:d2:b0:20:38:c0:1b:46:80:ee:22: 98:32:f9:8b:28:2c:ed:13:1c:bb:00:c1:9e:7f:4a: 40:4d:2e:6a:51:ee:4b:0a:bc:9b:78:c1:6c:ac:5f: 88:7d:fb:29:db:1c:9e:23:ef:47:95:d2:5f:73:cc: aa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2B:7B:3C:36:CE:26:62:8B:C0:4F:B7:06:66:B2:01:0E:CF:79:BD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:108::/47 Signature Algorithm: sha256WithRSAEncryption 34:12:35:f0:5c:a9:61:54:36:1e:60:44:b2:73:a8:37:e5:14: fc:75:53:d3:e5:80:bc:df:d0:1e:33:bd:57:f0:90:df:c3:1c: 1e:43:13:95:9a:1f:e6:f7:af:b3:5e:3f:fc:14:f5:35:99:7f: f6:83:f1:1c:8e:3f:a2:bd:d0:e0:95:ab:f4:16:c7:24:c9:0a: 08:f2:bf:a5:7a:6b:33:60:77:b8:55:d4:35:24:83:2e:15:55: d6:e7:11:a0:8b:ce:ea:5e:60:13:99:93:6a:bf:db:fd:71:c3: f7:ee:3e:28:32:05:29:38:61:f5:cd:08:51:98:f5:22:01:40: f8:71:95:f2:b9:62:55:73:10:fb:aa:8d:3b:36:cf:c2:93:6f: 3a:a6:50:c6:40:f4:ee:71:ce:a6:57:9b:9a:86:27:b4:e9:16: 28:d4:ab:67:61:75:8e:2d:c7:90:c0:6e:72:22:26:b5:93:e5: 8d:fb:aa:ad:ef:73:42:9f:00:84:2c:4b:d0:d2:35:31:23:67: 92:a3:36:be:ff:cd:43:0d:1a:67:07:fc:d9:c8:5a:0c:7f:a4: 6c:63:4e:2e:bc:13:83:e3:d2:41:6e:48:62:02:8e:25:47:8c: 3f:25:bf:ab:be:aa:63:bd:4f:80:ed:c1:26:31:d1:ee:30:a5: a2:fb:06:37 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVGKaUv+huTh4ZmWMd8RM9KrkZWEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTMwMTkwNjU4WhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2Q5MDA2ZDg3NjA4ODIxMGI5NzMzMmE1YjY5YWQxMDEw MTQ5YzUxZDJkZWMzYjZjZDhjMDA1NTAzNDk0MGQzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjiDo7Nt1qCjr9ox1xnJJeIgddi7QPI+/uRG//sPui6dpr r86mQWxu69Ko58dh+JUo3hNQe5V/gqEZVdwBdT8eEhpflqgX2W9dDKZtQF3/GV5i /PwKbg86RnTQpzBvRVC7zregZXxw2eBollpHLqhIkv88UmfxF254jJIzaa+fKN76 oCOWvFEI6POcSSyJwOfu6X7r/FCO/FXPK+X00AeQPnRX/dtlIsgDg6tas2ajJhRD 0dKztwUoY398G8ZD8AcQlINnW2Go0rAgOMAbRoDuIpgy+YsoLO0THLsAwZ5/SkBN LmpR7ksKvJt4wWysX4h9+ynbHJ4j70eV0l9zzKonAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPCt7PDbOJmKLwE+3BmayAQ7Peb0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VjZDRlNDA3LTFlYjAtNDRmMi1hM2E3LWQ0NzE0Y2E2M2FlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDwAQgwDQYJKoZIhvcNAQELBQADggEBADQSNfBcqWFUNh5gRLJzqDfl FPx1U9PlgLzf0B4zvVfwkN/DHB5DE5WaH+b3r7NeP/wU9TWZf/aD8RyOP6K90OCV q/QWxyTJCgjyv6V6azNgd7hV1DUkgy4VVdbnEaCLzupeYBOZk2q/2/1xw/fuPigy BSk4YfXNCFGY9SIBQPhxlfK5YlVzEPuqjTs2z8KTbzqmUMZA9O5xzqZXm5qGJ7Tp FijUq2dhdY4tx5DAbnIiJrWT5Y37qq3vc0KfAIQsS9DSNTEjZ5KjNr7/zUMNGmcH /NnIWgx/pGxjTi68E4Pj0kFuSGICjiVHjD8lv6u+qmO9T4DtwSYx0e4wpaL7Bjc= -----END CERTIFICATE-----Generated at Sat Jun 7 04:23:37 2025 by rpki-client