$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa File: f1746927-d9c4-41c2-8abc-289ecb180bdc.roa (raw, json) Hash identifier: LKAORn1uvfiIeHD930bDAvG8FAcfdSzeXqwoG+Er33E= Subject key identifier: B2:7A:29:71:4C:71:6A:CA:E2:84:93:2D:68:5B:E5:DF:36:13:AF:6A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 56061C6289F40CEBDA481EDD67937BBCF2B384E8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa Signing time: Tue 20 May 2025 18:11:27 +0000 ROA not before: Tue 20 May 2025 18:11:27 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:06:1c:62:89:f4:0c:eb:da:48:1e:dd:67:93:7b:bc:f2:b3:84:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:11:27 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=7848cf8edd1c04ea5bcf27be3e3966c7f5a3cca595b2f699a790066f6f068a5c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c4:95:68:e8:0f:9e:40:d8:64:34:5b:bf:5c: da:dd:95:ee:92:dd:ed:21:95:14:b2:f5:3a:9a:9f: 56:ef:0b:54:4b:f6:35:3a:b2:61:0e:32:71:e0:8b: c7:99:01:9d:0e:9b:cd:a3:ac:1b:49:7a:90:8a:e4: a9:07:37:d3:03:75:70:5a:a3:fd:1a:f6:1f:e2:23: 2f:63:89:ba:30:d3:49:28:6a:02:45:52:46:33:92: a1:77:80:01:43:a5:d4:63:80:51:1c:ab:33:77:d7: e9:68:9c:f3:69:2f:9c:26:0f:26:2c:36:2a:46:e5: 4c:31:bb:63:a0:33:aa:12:70:25:80:59:ca:56:d9: 0d:09:f6:09:d0:e7:90:b4:19:5c:c8:15:2c:4a:8d: 94:12:ba:54:c7:ea:db:e0:59:b5:73:46:e6:6b:56: d3:c4:57:34:00:76:e2:25:06:23:35:c2:48:ba:36: dc:f1:3e:54:1d:66:7e:94:89:a2:90:c2:10:cb:da: 87:a4:8d:a0:5b:16:73:04:c0:ca:de:70:99:77:5c: d3:42:7f:41:ad:e4:bf:f5:e3:a6:54:1c:e0:71:89: a4:08:3f:79:5e:38:f8:5f:40:9d:09:a9:ca:c9:87: fd:05:6b:db:99:43:e7:07:2c:15:cf:e0:f9:1d:54: fa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7A:29:71:4C:71:6A:CA:E2:84:93:2D:68:5B:E5:DF:36:13:AF:6A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e500::/40 Signature Algorithm: sha256WithRSAEncryption 8c:46:78:e2:4d:e7:07:67:5d:57:f4:92:57:a0:a3:68:18:5b: e5:10:ec:9d:cd:81:c4:24:8b:01:be:3b:5e:25:4e:e3:6a:12: a1:2f:fc:d0:ac:cc:b7:a4:d6:b3:11:bc:ea:73:77:e5:07:9c: 4b:be:db:03:38:98:77:47:a2:78:61:56:45:0e:1e:14:51:95: b4:8e:4d:4e:c0:c7:e7:18:f9:4c:9f:78:40:c7:5f:c0:70:3b: b5:f1:31:2f:8d:dc:77:03:27:8a:e2:4a:9a:31:93:7b:72:94: fe:27:cf:91:b9:6e:e6:de:7d:04:f0:75:8f:98:8a:5e:66:4d: 14:17:f9:f5:ee:ae:42:de:22:f6:fa:c8:95:6a:6f:ba:0b:33: 69:6b:b2:75:5c:8d:c3:4a:bd:ae:3b:3b:ee:c3:4a:95:0a:5b: 16:a1:70:95:7e:a9:aa:f4:5d:00:92:f4:e2:cd:a2:c5:1d:70: b9:7d:0d:c3:92:70:94:77:d6:b8:e3:64:10:ee:fc:a0:b0:87: e7:86:3d:cf:c9:6c:3f:81:46:9f:ee:f8:f0:df:eb:9d:b9:2d: ca:1c:4e:48:5a:f4:f5:58:04:c8:1a:cc:a3:f3:39:28:6f:ed: 42:59:6a:1b:b4:98:e2:b7:bf:46:81:97:2a:92:48:da:99:68: fd:09:dc:4b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVgYcYon0DOvaSB7dZ5N7vPKzhOgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgxMTI3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODQ4Y2Y4ZWRkMWMwNGVhNWJjZjI3YmUzZTM5NjZjN2Y1 YTNjY2E1OTViMmY2OTlhNzkwMDY2ZjZmMDY4YTVjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXxJVo6A+eQNhkNFu/XNrdle6S3e0hlRSy9Tqan1bvC1RL 9jU6smEOMnHgi8eZAZ0Om82jrBtJepCK5KkHN9MDdXBao/0a9h/iIy9jibow00ko agJFUkYzkqF3gAFDpdRjgFEcqzN31+lonPNpL5wmDyYsNipG5Uwxu2OgM6oScCWA WcpW2Q0J9gnQ55C0GVzIFSxKjZQSulTH6tvgWbVzRuZrVtPEVzQAduIlBiM1wki6 NtzxPlQdZn6UiaKQwhDL2oekjaBbFnMEwMrecJl3XNNCf0Gt5L/146ZUHOBxiaQI P3leOPhfQJ0JqcrJh/0Fa9uZQ+cHLBXP4PkdVPqjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsnopcUxxasrihJMtaFvl3zYTr2owHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YxNzQ2OTI3LWQ5YzQtNDFjMi04YWJjLTI4OWVjYjE4MGJkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD75TANBgkqhkiG9w0BAQsFAAOCAQEAjEZ44k3nB2ddV/SSV6CjaBhb 5RDsnc2BxCSLAb47XiVO42oSoS/80KzMt6TWsxG86nN35QecS77bAziYd0eieGFW RQ4eFFGVtI5NTsDH5xj5TJ94QMdfwHA7tfExL43cdwMniuJKmjGTe3KU/ifPkblu 5t59BPB1j5iKXmZNFBf59e6uQt4i9vrIlWpvugszaWuydVyNw0q9rjs77sNKlQpb FqFwlX6pqvRdAJL04s2ixR1wuX0Nw5JwlHfWuONkEO78oLCH54Y9z8lsP4FGn+74 8N/rnbktyhxOSFr09VgEyBrMo/M5KG/tQllqG7SY4re/RoGXKpJI2plo/QncSw== -----END CERTIFICATE-----Generated at Wed Jun 4 11:12:23 2025 by rpki-client