$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa File: 6912c7e5-41f4-4b82-9db8-51bac2912f50.roa (raw, json) Hash identifier: uDOnR7nuEpKWypHUYY00iTruDO7SLh4JPxTdz+6i5zc= Subject key identifier: FC:0B:B3:22:A1:2C:5A:6B:F6:CE:41:B2:74:44:0C:15:9A:48:EB:BD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5401F4C87231CCAA9F2E54C0D7AD92F428CA0791 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa Signing time: Mon 14 Jul 2025 15:30:48 +0000 ROA not before: Mon 14 Jul 2025 15:30:48 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:01:f4:c8:72:31:cc:aa:9f:2e:54:c0:d7:ad:92:f4:28:ca:07:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 14 15:30:48 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=2e14a408db4f6d91699b92692104f1d7838be2aff250f1e926e8ab819a3c1c58, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:14:d3:83:f5:44:d6:18:b1:12:ee:16:73:77: 66:d9:f0:e6:ea:01:96:38:6a:bc:da:4a:68:1f:5f: 3d:c8:8c:a7:e1:29:a9:aa:d7:80:32:69:e8:40:a5: f9:42:e5:0b:a4:3a:dd:d4:22:d0:74:bb:1a:66:14: 29:1c:34:11:73:0f:cd:5b:99:35:78:1b:a1:16:3a: 77:83:64:24:dc:f2:d3:3b:e2:a8:54:6f:d6:d9:a6: 02:08:51:b7:37:a7:5f:74:73:62:56:22:d8:97:09: 9f:5e:54:78:23:8b:0c:3d:98:48:ac:82:4b:d5:2c: 08:08:9a:48:9a:04:e2:1b:1d:92:e2:ef:aa:a6:07: 55:a6:21:c6:b1:22:2d:f1:df:59:68:3f:be:0d:4a: 3f:6e:41:1d:47:d1:46:df:0b:19:eb:34:2f:42:e8: e9:cf:7e:d5:30:ff:6a:eb:36:ab:56:00:d4:4a:af: 9d:42:f0:8c:25:d2:ac:8c:f1:41:50:50:4a:78:72: b0:2a:1f:5a:79:e5:55:59:25:4e:a0:98:42:24:82: 96:8e:80:9a:e9:c7:6f:cc:fa:b3:76:99:21:6e:1f: 88:67:a3:6e:e1:ca:25:19:b6:3b:2e:23:a0:23:5c: 91:bf:c2:b3:5a:9c:9a:2c:e2:59:40:dc:9e:67:53: 66:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0B:B3:22:A1:2C:5A:6B:F6:CE:41:B2:74:44:0C:15:9A:48:EB:BD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption 64:28:10:33:4b:84:4d:7b:5f:82:71:1d:1d:7c:4e:7b:a0:0a: 98:3d:27:c1:10:a4:58:10:8a:82:68:17:32:f3:dd:1a:2f:d6: 3d:00:11:3a:94:21:71:13:a9:46:3f:10:81:5a:90:9d:db:71: 6b:ac:26:0a:d4:32:b6:d0:8c:ab:19:f3:06:30:74:b2:a8:05: d8:2b:0c:df:57:6f:67:8f:53:a3:c0:95:c7:11:24:da:66:67: a9:2c:1a:aa:38:56:20:a9:c9:9e:f9:df:ec:ef:d2:3b:33:3c: e0:af:06:3a:30:7f:cf:80:a1:ed:ed:36:c2:4e:e4:6a:0c:0d: d0:fb:d9:32:ab:0a:b6:ab:ad:e2:52:a9:d5:68:43:90:37:1e: a3:bf:14:36:a6:0f:a4:bd:ac:bf:4e:7d:c7:4f:fa:e4:28:a1: fc:19:89:07:75:34:5a:8e:6e:46:5b:ea:64:92:02:7b:c3:22: 2e:29:6e:4f:a3:54:bb:66:0c:c7:e3:09:77:25:2b:29:93:2b: 0a:39:48:84:33:9f:aa:09:08:56:58:cf:68:50:c5:9d:46:c1: 8b:e2:91:cd:42:08:46:d3:85:07:8f:9b:63:90:23:f6:70:d7: 65:5a:aa:a0:c9:e4:6d:b1:a6:ae:16:8b:2a:89:28:c1:f1:e6: fb:74:37:a4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVAH0yHIxzKqfLlTA162S9CjKB5EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzE0MTUzMDQ4WhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTE0YTQwOGRiNGY2ZDkxNjk5YjkyNjkyMTA0ZjFkNzgz OGJlMmFmZjI1MGYxZTkyNmU4YWI4MTlhM2MxYzU4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZFNOD9UTWGLES7hZzd2bZ8ObqAZY4arzaSmgfXz3IjKfh Kamq14AyaehApflC5QukOt3UItB0uxpmFCkcNBFzD81bmTV4G6EWOneDZCTc8tM7 4qhUb9bZpgIIUbc3p190c2JWItiXCZ9eVHgjiww9mEisgkvVLAgImkiaBOIbHZLi 76qmB1WmIcaxIi3x31loP74NSj9uQR1H0UbfCxnrNC9C6OnPftUw/2rrNqtWANRK r51C8Iwl0qyM8UFQUEp4crAqH1p55VVZJU6gmEIkgpaOgJrpx2/M+rN2mSFuH4hn o27hyiUZtjsuI6AjXJG/wrNanJos4llA3J5nU2Y7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/AuzIqEsWmv2zkGydEQMFZpI670wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY5MTJjN2U1LTQxZjQtNGI4Mi05ZGI4LTUxYmFjMjkxMmY1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBAGQoEDNLhE17X4JxHR18Tnug Cpg9J8EQpFgQioJoFzLz3Rov1j0AETqUIXETqUY/EIFakJ3bcWusJgrUMrbQjKsZ 8wYwdLKoBdgrDN9Xb2ePU6PAlccRJNpmZ6ksGqo4ViCpyZ753+zv0jszPOCvBjow f8+Aoe3tNsJO5GoMDdD72TKrCrarreJSqdVoQ5A3HqO/FDamD6S9rL9OfcdP+uQo ofwZiQd1NFqObkZb6mSSAnvDIi4pbk+jVLtmDMfjCXclKymTKwo5SIQzn6oJCFZY z2hQxZ1GwYvikc1CCEbThQePm2OQI/Zw12VaqqDJ5G2xpq4WiyqJKMHx5vt0N6Q= -----END CERTIFICATE-----Generated at Mon Aug 4 14:19:22 2025 by rpki-client