$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa File: 5c49b356-187d-4223-bfed-b3dba0ce3e66.roa (raw, json) Hash identifier: joaazItYXMSqI5cbaspTiijoSApI6/MY73M6kPz6TWM= Subject key identifier: ED:83:76:AE:C5:06:3D:F4:D0:F1:15:A3:CF:80:C8:9F:10:FB:99:45 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5348142AE9620E977064500CFE4B9A20C92A0FB1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa Signing time: Mon 28 Jul 2025 16:00:50 +0000 ROA not before: Mon 28 Jul 2025 16:00:50 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:48:14:2a:e9:62:0e:97:70:64:50:0c:fe:4b:9a:20:c9:2a:0f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 28 16:00:50 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=0652079cdf6f22a90a03ed744c536f4771cebc72355abb962d22ffc149e84f71, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:8a:21:50:29:8d:78:40:80:cc:f1:93:66: 43:fe:73:25:04:d4:86:2b:e0:8d:1e:d5:de:ce:16: a1:f1:74:2e:83:66:27:ca:bd:bf:12:d3:6c:64:a0: 11:72:34:6e:6c:ce:bd:99:0a:1c:b6:8a:d1:85:e0: 7f:d4:7a:68:0b:64:20:58:34:8c:47:46:3f:98:3b: e2:b7:35:67:fc:d2:8a:1b:73:86:1e:39:22:7d:d1: b7:26:e6:91:23:a7:4b:42:dd:92:c4:ce:23:4d:d7: 70:67:41:9a:51:b8:e2:0b:00:74:b0:64:cb:2c:4a: a3:2b:47:cc:33:86:b4:89:18:89:64:e5:1f:79:e4: 89:62:ce:57:dc:26:28:0b:0d:3a:de:4e:34:ee:e9: 14:c4:95:9a:57:37:37:40:ef:42:e7:66:29:d0:19: 83:8d:52:b4:13:e3:fa:56:63:56:4f:e9:dc:a1:66: 24:2b:2a:bc:72:a7:75:02:51:f5:04:66:aa:63:4f: 89:1c:9e:cf:30:41:e8:86:da:04:34:97:23:9a:74: 6b:25:d3:99:35:bd:3c:e4:f7:b2:6a:a1:13:5e:40: c0:b5:b0:58:64:c8:42:f2:08:c6:dc:06:13:9d:5d: e7:b2:38:17:72:d6:a3:47:13:44:0c:5a:40:3e:d6: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:83:76:AE:C5:06:3D:F4:D0:F1:15:A3:CF:80:C8:9F:10:FB:99:45 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7010::/48 Signature Algorithm: sha256WithRSAEncryption 3e:c2:98:f4:0a:09:c6:a2:70:8c:bd:af:dd:11:c0:d5:db:2c: b0:92:87:b8:2b:a4:95:59:60:fa:bb:1e:a5:1d:6c:da:b2:45: 36:a0:7a:b9:18:e3:d5:55:f5:19:53:e1:e2:07:45:4b:fa:21: 53:a9:b9:24:20:d5:42:72:30:48:53:b7:f1:3c:3c:05:4d:1d: eb:43:81:c1:92:14:c3:f3:0b:ee:a4:a7:13:b3:03:13:b4:7e: 45:60:2a:64:ed:0f:2e:f7:e9:32:a8:8d:8e:6e:ef:cc:7d:90: f2:e8:d9:f4:75:b7:2f:26:fb:84:18:8e:93:97:bb:71:e5:dd: 8d:c9:3f:c9:91:fe:36:d1:71:85:7c:16:2e:86:86:98:d5:97: 61:c9:65:78:f0:03:49:0c:82:0d:dd:0b:6a:1a:eb:4c:9c:fa: 68:55:60:f9:00:a3:e2:2b:34:06:77:5f:8f:dc:71:8c:aa:aa: 05:19:01:1a:14:cd:05:ba:e5:6a:83:0a:30:c4:1f:f2:7f:54: 8f:96:15:e9:1f:0b:0c:31:bb:a7:8f:38:67:2b:2d:78:8d:2c: 7d:a8:f4:1d:06:b7:6a:bb:96:9c:88:a2:3b:64:dc:24:f8:ae: 03:59:2e:c6:2f:d7:95:45:c8:87:3d:43:4e:a7:c2:f9:2d:1f: d7:63:bb:c8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUU0gUKuliDpdwZFAM/kuaIMkqD7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzI4MTYwMDUwWhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjUyMDc5Y2RmNmYyMmE5MGEwM2VkNzQ0YzUzNmY0Nzcx Y2ViYzcyMzU1YWJiOTYyZDIyZmZjMTQ5ZTg0ZjcxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqDYohUCmNeECAzPGTZkP+cyUE1IYr4I0e1d7OFqHxdC6D ZifKvb8S02xkoBFyNG5szr2ZChy2itGF4H/UemgLZCBYNIxHRj+YO+K3NWf80oob c4YeOSJ90bcm5pEjp0tC3ZLEziNN13BnQZpRuOILAHSwZMssSqMrR8wzhrSJGIlk 5R955IlizlfcJigLDTreTjTu6RTElZpXNzdA70LnZinQGYONUrQT4/pWY1ZP6dyh ZiQrKrxyp3UCUfUEZqpjT4kcns8wQeiG2gQ0lyOadGsl05k1vTzk97JqoRNeQMC1 sFhkyELyCMbcBhOdXeeyOBdy1qNHE0QMWkA+1nbXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7YN2rsUGPfTQ8RWjz4DInxD7mUUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVjNDliMzU2LTE4N2QtNDIyMy1iZmVkLWIzZGJhMGNlM2U2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBAwDQYJKoZIhvcNAQELBQADggEBAD7CmPQKCcaicIy9r90RwNXb LLCSh7grpJVZYPq7HqUdbNqyRTagerkY49VV9RlT4eIHRUv6IVOpuSQg1UJyMEhT t/E8PAVNHetDgcGSFMPzC+6kpxOzAxO0fkVgKmTtDy736TKojY5u78x9kPLo2fR1 ty8m+4QYjpOXu3Hl3Y3JP8mR/jbRcYV8Fi6GhpjVl2HJZXjwA0kMgg3dC2oa60yc +mhVYPkAo+IrNAZ3X4/ccYyqqgUZARoUzQW65WqDCjDEH/J/VI+WFekfCwwxu6eP OGcrLXiNLH2o9B0Gt2q7lpyIojtk3CT4rgNZLsYv15VFyIc9Q06nwvktH9dju8g= -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:06 2025 by rpki-client