$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c062590-8f7f-4f01-9123-64634a17a4cd.roa File: 4c062590-8f7f-4f01-9123-64634a17a4cd.roa (raw, json) Hash identifier: hU+o1rZJ2A/EVQ0lZlrIT+96tn2AdERIzCdiJFVk3Ec= Subject key identifier: 35:86:33:CE:58:27:64:49:67:4D:43:58:D5:75:90:B7:B3:C5:A7:78 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4456A11C79C1716742008ADDB6262FCFF71E33D3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c062590-8f7f-4f01-9123-64634a17a4cd.roa Signing time: Mon 16 Jun 2025 19:20:21 +0000 ROA not before: Mon 16 Jun 2025 19:20:21 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:56:a1:1c:79:c1:71:67:42:00:8a:dd:b6:26:2f:cf:f7:1e:33:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:21 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=93b524a06175af047ec55718ec059be8ddf15a85f6861074bcb786735bec5beb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4f:44:36:42:c4:d5:4f:a4:cc:f3:4a:74:5b: 3c:a5:26:c9:ec:25:32:ec:0e:3a:86:e3:49:47:ed: 28:69:39:60:ec:23:5b:0a:f7:8c:54:b1:1c:a9:7b: dd:b6:65:7b:cc:23:cd:82:16:03:e6:89:ef:36:d7: 09:12:95:6a:12:50:3a:f4:e4:d2:47:8f:5a:28:0b: e3:a9:fb:da:75:3f:8c:05:1c:07:fe:9e:ac:1d:65: 4c:eb:6f:16:a8:c0:15:d5:3c:e9:af:21:1a:4d:44: 53:62:6c:d3:ce:6f:c9:eb:81:24:d8:7d:ec:7e:97: a5:38:d2:a4:c7:21:4e:6d:d3:26:56:67:3c:a9:96: f4:bc:49:6c:74:af:63:37:51:b3:94:c4:7c:ee:a8: 81:3d:5b:1f:95:10:a5:88:21:d5:9f:69:3e:f0:b3: 77:26:b8:d4:9b:1f:99:5c:23:25:b2:a2:43:98:d9: 66:46:01:c6:67:4c:20:7c:c6:9c:6b:f3:86:61:76: 4c:b8:bd:ed:88:d5:b1:d7:6b:9a:5a:82:4d:2b:6c: 72:24:32:72:b3:d0:8a:24:2d:72:40:85:9c:b3:df: f8:e5:94:b2:34:ad:13:06:4e:cf:50:53:ab:08:1a: 56:1e:b1:b8:50:7d:f3:96:95:a4:2e:e8:3b:3c:04: 23:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:86:33:CE:58:27:64:49:67:4D:43:58:D5:75:90:B7:B3:C5:A7:78 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c062590-8f7f-4f01-9123-64634a17a4cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e900::/40 Signature Algorithm: sha256WithRSAEncryption 2e:1d:e3:d1:d3:23:08:f5:a4:7b:37:4e:df:6d:8c:27:63:20: 2a:9f:d4:a5:fd:58:5a:8f:99:0a:5d:f8:8d:7b:f0:f4:d7:fa: f8:50:d0:73:67:da:c3:c5:ac:4d:25:83:1f:ae:c7:29:7c:9b: 0e:d7:8e:ec:55:9b:bb:98:5d:4b:c9:11:f9:52:8c:a4:99:c6: df:18:e8:19:9c:84:38:18:69:aa:da:95:d8:82:1c:31:64:24: 95:16:30:97:8d:6a:ff:db:e4:bf:7f:69:3f:b5:9a:6c:f8:90: a0:69:28:17:c5:43:72:79:7e:b2:94:98:03:13:9a:a7:b8:71: a8:11:88:01:3f:3a:37:54:c3:4b:22:db:81:6e:fd:9d:fa:ff: 76:a1:79:bb:e7:0b:22:f5:e4:ed:33:85:ba:36:6e:ab:95:59: d5:e8:9a:c4:65:a2:57:72:14:86:40:1c:d0:d3:0f:03:e5:ff: a5:6b:c7:f0:01:16:39:95:29:05:65:58:68:c0:64:70:a7:03: 9b:5d:0f:df:28:c9:86:57:d9:ab:25:b3:49:c8:9f:c0:6c:b3: 79:71:e6:ac:15:ee:5c:9a:6c:ee:c6:bd:31:6c:63:9d:26:68: 9a:3e:9f:1c:ac:c7:af:dd:ad:d8:bb:45:e9:e2:3c:05:35:97: 79:52:a2:54 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURFahHHnBcWdCAIrdtiYvz/ceM9MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDIxWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5M2I1MjRhMDYxNzVhZjA0N2VjNTU3MThlYzA1OWJlOGRk ZjE1YTg1ZjY4NjEwNzRiY2I3ODY3MzViZWM1YmViMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxT0Q2QsTVT6TM80p0WzylJsnsJTLsDjqG40lH7ShpOWDs I1sK94xUsRype922ZXvMI82CFgPmie821wkSlWoSUDr05NJHj1ooC+Op+9p1P4wF HAf+nqwdZUzrbxaowBXVPOmvIRpNRFNibNPOb8nrgSTYfex+l6U40qTHIU5t0yZW ZzyplvS8SWx0r2M3UbOUxHzuqIE9Wx+VEKWIIdWfaT7ws3cmuNSbH5lcIyWyokOY 2WZGAcZnTCB8xpxr84Zhdky4ve2I1bHXa5pagk0rbHIkMnKz0IokLXJAhZyz3/jl lLI0rRMGTs9QU6sIGlYesbhQffOWlaQu6Ds8BCOhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUNYYzzlgnZElnTUNY1XWQt7PFp3gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRjMDYyNTkwLThmN2YtNGYwMS05MTIzLTY0NjM0YTE3YTRjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76TANBgkqhkiG9w0BAQsFAAOCAQEALh3j0dMjCPWkezdO322MJ2Mg Kp/Upf1YWo+ZCl34jXvw9Nf6+FDQc2faw8WsTSWDH67HKXybDteO7FWbu5hdS8kR +VKMpJnG3xjoGZyEOBhpqtqV2IIcMWQklRYwl41q/9vkv39pP7WabPiQoGkoF8VD cnl+spSYAxOap7hxqBGIAT86N1TDSyLbgW79nfr/dqF5u+cLIvXk7TOFujZuq5VZ 1eiaxGWiV3IUhkAc0NMPA+X/pWvH8AEWOZUpBWVYaMBkcKcDm10P3yjJhlfZqyWz ScifwGyzeXHmrBXuXJps7sa9MWxjnSZomj6fHKzHr92t2LtF6eI8BTWXeVKiVA== -----END CERTIFICATE-----Generated at Tue Jun 17 20:17:13 2025 by rpki-client