$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3eb80061-d999-4560-9395-9a007e8e03f9.roa File: 3eb80061-d999-4560-9395-9a007e8e03f9.roa (raw, json) Hash identifier: 9U7DGb7zZ9hBdOjocQMf9WiVHNp9160s6CXMKkKJiJA= Subject key identifier: 2D:60:12:1F:FE:8E:38:75:FE:9C:5D:AC:AE:8E:99:97:86:98:2D:B2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2729B050531DEDB95CD533161440866A84962FEE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3eb80061-d999-4560-9395-9a007e8e03f9.roa Signing time: Mon 21 Jul 2025 16:40:19 +0000 ROA not before: Mon 21 Jul 2025 16:40:19 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:29:b0:50:53:1d:ed:b9:5c:d5:33:16:14:40:86:6a:84:96:2f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 21 16:40:19 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=f32c2fbd1aa284c67a25d7e8050a0be113638d64c0ae930d163db4e642fb700a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:a6:7d:f9:90:24:f6:e4:84:83:61:21:ac: 8f:4c:34:d8:df:73:8d:cc:d0:19:6e:0f:ab:1a:11: 19:dd:0e:6e:ab:62:19:12:ac:66:61:a9:75:45:b9: 76:1a:f3:f0:91:b1:63:9a:78:17:ed:d5:aa:53:3a: c2:be:b0:b4:c2:5f:59:5d:59:ce:04:cc:1e:5d:ec: a7:08:0c:c4:08:8b:dc:16:c1:1c:88:ad:98:7a:88: a4:8d:93:cc:c1:ca:22:d7:d4:af:70:9e:f6:e0:01: 38:5a:9f:77:ea:43:4b:42:8e:52:26:1e:96:8a:cf: ed:ab:6f:1f:ab:65:eb:6a:bd:c6:cc:53:ba:06:2a: 18:59:dd:c4:0b:8e:f1:49:c1:5f:8b:8c:53:ee:e9: ac:05:de:b6:31:3a:a4:e7:df:f5:fc:08:a4:17:68: ef:a2:50:b7:e9:12:10:5b:64:a0:ad:1c:6d:7f:30: 2f:11:30:72:08:32:27:74:4d:58:a8:25:9a:1e:5b: a9:41:3c:c5:87:41:a5:90:0d:49:0b:6c:49:55:94: 2c:c8:3b:7f:1d:44:dd:9e:59:d6:b2:44:fc:2c:28: 6f:d7:76:da:56:61:d2:41:b7:7f:11:7e:9c:28:bb: 91:43:9a:17:fb:28:75:ab:13:3f:1e:47:9f:47:95: b9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:60:12:1F:FE:8E:38:75:FE:9C:5D:AC:AE:8E:99:97:86:98:2D:B2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3eb80061-d999-4560-9395-9a007e8e03f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f030::/44 Signature Algorithm: sha256WithRSAEncryption 57:e8:c8:73:cf:1c:26:4a:63:0d:dc:02:19:51:6c:a7:8c:89: 39:a2:81:5e:32:08:72:e3:7d:ff:f5:0e:cc:3c:7b:9d:1a:65: f4:c8:0a:87:73:97:8d:a6:41:b7:b0:df:f7:20:05:1f:d8:3a: 4f:2a:5d:ec:66:26:ab:84:ed:d4:c4:e9:6a:8f:c1:ba:4e:06: b6:c6:95:f9:63:85:f8:8c:ca:f8:7d:66:36:35:94:77:b0:10: 84:b7:17:79:fb:34:ed:d7:e0:fe:76:69:76:e3:96:62:64:af: 92:ef:80:11:3e:84:b1:80:27:98:23:ad:da:4b:39:2a:aa:27: 40:d6:4c:88:32:ca:84:d0:95:01:11:1d:85:27:a6:a1:0a:cb: 47:2d:af:82:8e:e4:07:a1:b4:8e:f5:3b:09:4b:66:e1:42:07: c4:3f:4e:33:9d:d0:53:e2:c5:3c:94:8a:87:77:d0:57:33:10: 29:69:0a:ca:37:7e:1f:d1:6c:c0:4e:28:4d:e8:70:b4:5e:0f: 30:0c:59:72:18:91:b6:a1:54:40:6d:0b:19:a0:ce:11:cb:79: 0b:c3:94:11:81:71:cf:e4:ff:df:13:d9:bc:cc:89:00:9e:37: 7e:af:78:89:a7:64:b1:07:16:ef:9e:87:76:a4:f9:8b:17:44: c1:e2:f3:45 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJymwUFMd7blc1TMWFECGaoSWL+4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzIxMTY0MDE5WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzJjMmZiZDFhYTI4NGM2N2EyNWQ3ZTgwNTBhMGJlMTEz NjM4ZDY0YzBhZTkzMGQxNjNkYjRlNjQyZmI3MDBhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKCqZ9+ZAk9uSEg2EhrI9MNNjfc43M0BluD6saERndDm6r YhkSrGZhqXVFuXYa8/CRsWOaeBft1apTOsK+sLTCX1ldWc4EzB5d7KcIDMQIi9wW wRyIrZh6iKSNk8zByiLX1K9wnvbgAThan3fqQ0tCjlImHpaKz+2rbx+rZetqvcbM U7oGKhhZ3cQLjvFJwV+LjFPu6awF3rYxOqTn3/X8CKQXaO+iULfpEhBbZKCtHG1/ MC8RMHIIMid0TVioJZoeW6lBPMWHQaWQDUkLbElVlCzIO38dRN2eWdayRPwsKG/X dtpWYdJBt38Rfpwou5FDmhf7KHWrEz8eR59HlblzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULWASH/6OOHX+nF2sro6Zl4aYLbIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzNlYjgwMDYxLWQ5OTktNDU2MC05Mzk1LTlhMDA3ZThlMDNmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78DAwDQYJKoZIhvcNAQELBQADggEBAFfoyHPPHCZKYw3cAhlRbKeM iTmigV4yCHLjff/1Dsw8e50aZfTICodzl42mQbew3/cgBR/YOk8qXexmJquE7dTE 6WqPwbpOBrbGlfljhfiMyvh9ZjY1lHewEIS3F3n7NO3X4P52aXbjlmJkr5LvgBE+ hLGAJ5gjrdpLOSqqJ0DWTIgyyoTQlQERHYUnpqEKy0ctr4KO5AehtI71OwlLZuFC B8Q/TjOd0FPixTyUiod30FczEClpCso3fh/RbMBOKE3ocLReDzAMWXIYkbahVEBt CxmgzhHLeQvDlBGBcc/k/98T2bzMiQCeN36veImnZLEHFu+eh3ak+YsXRMHi80U= -----END CERTIFICATE-----Generated at Sat Aug 9 15:17:38 2025 by rpki-client