$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa File: f6334ad8-04a1-4b1e-af68-368584971f2f.roa (raw, json) Hash identifier: Yey3TDBrKh5JZyESEl4H7ZZ5rpuWD8Ni3sEHKOgeZlg= Subject key identifier: 2D:AE:7F:64:4D:E0:69:C2:17:20:BE:97:E6:AE:23:DC:0C:E5:BA:66 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 026F50156C45AACB89A751B760DD51BDE04B09BC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa Signing time: Tue 20 May 2025 18:11:36 +0000 ROA not before: Tue 20 May 2025 18:11:36 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6f:50:15:6c:45:aa:cb:89:a7:51:b7:60:dd:51:bd:e0:4b:09:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:11:36 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=c08adc60e2f591eb6e9fb9c7d3c87eec4f383eb3ea383d48a766261f0d41d1fd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:71:09:6f:a9:e4:6c:2c:95:30:25:a3:7b: c6:60:f0:df:39:d8:25:f8:40:28:58:42:a4:51:08: 11:66:f4:97:e2:a9:01:78:41:4c:b4:6e:c9:37:a5: c8:5f:c7:99:38:a4:51:76:f3:62:9d:fa:14:00:34: ea:a7:e9:a3:08:1e:9f:e0:d8:4a:ca:47:63:9f:01: 3c:6a:0f:a8:ff:87:5e:8f:be:dd:27:b1:c1:39:82: e5:e8:ae:fa:7c:c2:26:f2:d9:4f:d2:57:d9:4d:66: 59:eb:2b:58:96:4f:bd:b3:c3:b5:81:b8:6e:0b:66: 09:59:6b:50:9d:c0:98:95:42:7c:09:cd:2e:94:03: d1:a3:60:f1:a4:be:a3:74:9b:bd:16:cc:5b:a5:ed: 44:84:42:ae:42:47:ed:53:48:65:fb:d2:e8:47:cc: 5b:9a:0b:42:d9:f0:84:14:2b:cc:47:7d:4d:c1:4e: 4e:5e:1a:c7:ce:fe:2e:46:98:ea:5e:78:0e:e4:93: f2:ea:7d:39:1f:c8:e4:96:6d:7d:78:70:e9:25:48: ce:9d:3e:e2:94:10:52:62:4d:ab:62:41:d5:ed:0a: 41:6c:11:53:88:50:20:5e:d9:b2:d1:0d:ee:e0:bc: 1c:8b:43:00:40:64:ca:a2:66:4f:82:70:7e:2c:58: e3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AE:7F:64:4D:E0:69:C2:17:20:BE:97:E6:AE:23:DC:0C:E5:BA:66 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e300::/40 Signature Algorithm: sha256WithRSAEncryption 00:fa:0a:d1:e8:a5:5f:35:06:f6:53:86:e8:93:ce:4a:51:1a: dd:3b:f7:6c:7c:b9:a5:21:e5:3a:2f:93:57:c7:01:be:ae:7a: d7:df:39:d1:73:aa:42:03:33:89:ec:07:45:03:2a:52:e6:83: ce:e0:1d:42:1e:94:f8:74:92:53:4b:6d:9c:7d:32:4a:10:a6: 6b:5b:eb:58:53:09:ce:af:8a:d4:70:d9:48:5f:3d:64:fb:c7: 5f:a9:4c:d2:5b:94:3e:be:f8:9f:49:1c:50:84:56:f2:bc:74: b7:b5:f8:b3:6a:63:27:73:86:84:12:67:54:e7:ec:af:8a:25: 3d:fa:32:67:93:3c:63:4c:a8:dd:d1:5d:21:99:95:75:3f:1d: 72:98:3e:b5:38:69:7b:d0:84:08:df:27:17:35:68:98:89:ab: 55:c7:ff:a0:0f:58:83:ff:ab:ae:44:93:d3:90:84:e4:0b:02: d7:12:98:85:c6:e9:24:7b:db:77:c2:c1:ab:f6:78:55:c5:99: 33:05:b2:5c:59:47:4f:30:fc:0e:dd:fe:02:5d:f7:54:42:7b: 2d:c5:4f:4a:c8:fb:95:57:be:f6:3f:84:2b:55:ea:8e:73:e5: 21:64:3b:42:66:e9:1e:0b:de:0a:23:e7:e1:95:da:0f:ba:ed: 4f:a4:a0:16 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUAm9QFWxFqsuJp1G3YN1RveBLCbwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgxMTM2WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDhhZGM2MGUyZjU5MWViNmU5ZmI5YzdkM2M4N2VlYzRm MzgzZWIzZWEzODNkNDhhNzY2MjYxZjBkNDFkMWZkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2gXEJb6nkbCyVMCWje8Zg8N852CX4QChYQqRRCBFm9Jfi qQF4QUy0bsk3pchfx5k4pFF282Kd+hQANOqn6aMIHp/g2ErKR2OfATxqD6j/h16P vt0nscE5guXorvp8wiby2U/SV9lNZlnrK1iWT72zw7WBuG4LZglZa1CdwJiVQnwJ zS6UA9GjYPGkvqN0m70WzFul7USEQq5CR+1TSGX70uhHzFuaC0LZ8IQUK8xHfU3B Tk5eGsfO/i5GmOpeeA7kk/LqfTkfyOSWbX14cOklSM6dPuKUEFJiTatiQdXtCkFs EVOIUCBe2bLRDe7gvByLQwBAZMqiZk+CcH4sWONZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQULa5/ZE3gacIXIL6X5q4j3AzlumYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y2MzM0YWQ4LTA0YTEtNGIxZS1hZjY4LTM2ODU4NDk3MWYyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74zANBgkqhkiG9w0BAQsFAAOCAQEAAPoK0eilXzUG9lOG6JPOSlEa 3Tv3bHy5pSHlOi+TV8cBvq5619850XOqQgMziewHRQMqUuaDzuAdQh6U+HSSU0tt nH0yShCma1vrWFMJzq+K1HDZSF89ZPvHX6lM0luUPr74n0kcUIRW8rx0t7X4s2pj J3OGhBJnVOfsr4olPfoyZ5M8Y0yo3dFdIZmVdT8dcpg+tThpe9CECN8nFzVomImr Vcf/oA9Yg/+rrkST05CE5AsC1xKYhcbpJHvbd8LBq/Z4VcWZMwWyXFlHTzD8Dt3+ Al33VEJ7LcVPSsj7lVe+9j+EK1XqjnPlIWQ7QmbpHgveCiPn4ZXaD7rtT6SgFg== -----END CERTIFICATE-----Generated at Fri Jun 6 05:16:21 2025 by rpki-client