$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa File: 6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa (raw, json) Hash identifier: ZsYHczIm8NbbHQfvGd26ZbbicPfVYcn/1ZLdqDJPtj0= Subject key identifier: BA:31:9A:C9:F9:AA:26:5C:15:2B:97:2E:9D:4D:9D:C9:A9:6C:AA:A0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 05F3DC6ADD0D8603008C12A963F59346E4AD5E91 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa Signing time: Thu 17 Jul 2025 21:37:03 +0000 ROA not before: Thu 17 Jul 2025 21:37:03 +0000 ROA not after: Thu 21 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8b01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f3:dc:6a:dd:0d:86:03:00:8c:12:a9:63:f5:93:46:e4:ad:5e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 17 21:37:03 2025 GMT Not After : Aug 21 23:59:59 2025 GMT Subject: serialNumber=2346ab4a808c25363734fcd4eb7743388a624b96191fc85bf237066aebc674de, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c4:9c:eb:08:1a:ad:e8:74:82:86:c0:e7:3b: 4d:20:22:b3:fa:24:c4:e8:5c:b0:1f:2c:13:d5:47: 7f:a9:34:b2:a7:b9:93:d8:28:53:88:a3:17:27:8b: fc:b7:4c:8d:96:98:b9:a3:f5:b2:4f:e6:a6:81:2f: cf:64:ae:98:2a:6f:b4:6b:e2:93:84:a2:3e:e4:4c: 9d:cc:ad:d5:a2:81:f2:dd:c0:dd:0b:5b:b3:bb:ad: 95:bf:d3:7b:22:36:17:dd:9f:aa:05:7a:7a:2a:d5: 5f:2c:5c:e2:a7:b7:a7:09:50:d6:24:90:d1:84:82: 98:58:76:ba:7f:8e:19:eb:9c:1a:50:9d:b8:d7:1a: 2c:b8:91:aa:ba:13:a7:a7:04:44:71:0b:9d:8b:b4: 8d:c4:f1:36:91:4e:af:df:6a:3a:ab:f8:f3:91:01: 69:06:96:0f:09:78:bd:e6:7b:5c:0e:cc:9c:ab:62: f5:f7:f8:2b:c5:f2:a7:0d:9e:83:2c:83:d7:2c:db: f9:c2:e0:4a:c3:25:c0:0a:90:1d:38:7c:16:1b:41: 50:4c:72:f0:de:f9:14:39:37:b8:3d:ad:19:7f:9f: 4d:5b:3b:a7:d4:fc:48:53:23:c9:02:01:fc:da:09: 1d:f9:0c:24:35:51:36:47:31:ec:87:85:ba:f4:b0: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:31:9A:C9:F9:AA:26:5C:15:2B:97:2E:9D:4D:9D:C9:A9:6C:AA:A0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b01::/48 Signature Algorithm: sha256WithRSAEncryption 78:e7:66:ee:f5:6d:35:70:90:4d:2a:2d:ca:92:3b:0a:79:60: 6b:e1:a1:e0:9e:74:03:f1:75:22:ff:07:4c:b0:6e:ba:01:48: 56:82:3a:56:47:3e:ad:b4:ad:37:33:d4:f8:79:d4:22:67:7b: 2e:a8:be:69:b2:1e:85:8a:ba:2d:06:60:25:d6:aa:c1:f7:7a: 1b:ed:f9:25:83:7b:12:36:c4:61:c1:32:00:ac:52:29:47:bd: b6:4f:f4:e1:e1:bf:d0:8b:bc:1e:64:e8:7b:e4:9a:8c:65:1d: cd:0d:d4:90:1c:c1:b9:19:de:0f:09:96:da:f7:df:a2:de:17: 1c:6b:ff:e1:36:b9:a7:8f:8a:58:7a:2d:d6:32:87:7e:3c:27: bd:61:7f:8e:fb:26:91:4e:34:f4:aa:0f:36:72:7e:82:43:08: 3b:9d:52:c1:8b:e4:49:5d:19:5a:c4:49:99:80:85:44:87:61: 8d:35:ed:87:9f:36:55:24:9a:e4:5f:90:e0:83:08:a6:95:b2: 0b:4c:36:58:2e:ad:0d:18:7f:d5:06:2d:e5:18:d8:09:a7:d1: a3:fe:1d:fd:3d:a3:b7:83:e7:84:34:1f:03:d5:d3:7c:39:3d: 0c:b1:2b:ab:07:52:fc:1c:44:e2:a4:5e:c2:c3:26:16:20:c6: f6:63:0e:de -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBfPcat0NhgMAjBKpY/WTRuStXpEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzE3MjEzNzAzWhcNMjUwODIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzQ2YWI0YTgwOGMyNTM2MzczNGZjZDRlYjc3NDMzODhh NjI0Yjk2MTkxZmM4NWJmMjM3MDY2YWViYzY3NGRlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMxJzrCBqt6HSChsDnO00gIrP6JMToXLAfLBPVR3+pNLKn uZPYKFOIoxcni/y3TI2WmLmj9bJP5qaBL89krpgqb7Rr4pOEoj7kTJ3MrdWigfLd wN0LW7O7rZW/03siNhfdn6oFenoq1V8sXOKnt6cJUNYkkNGEgphYdrp/jhnrnBpQ nbjXGiy4kaq6E6enBERxC52LtI3E8TaRTq/fajqr+PORAWkGlg8JeL3me1wOzJyr YvX3+CvF8qcNnoMsg9cs2/nC4ErDJcAKkB04fBYbQVBMcvDe+RQ5N7g9rRl/n01b O6fU/EhTI8kCAfzaCR35DCQ1UTZHMeyHhbr0sOJ/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUujGayfmqJlwVK5cunU2dyalsqqAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZhYzQwNGViLTZhMzItNGFjMS1iOWQ1LTM5MTk4NmE2Mzc5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwEwDQYJKoZIhvcNAQELBQADggEBAHjnZu71bTVwkE0qLcqSOwp5 YGvhoeCedAPxdSL/B0ywbroBSFaCOlZHPq20rTcz1Ph51CJney6ovmmyHoWKui0G YCXWqsH3ehvt+SWDexI2xGHBMgCsUilHvbZP9OHhv9CLvB5k6HvkmoxlHc0N1JAc wbkZ3g8Jltr336LeFxxr/+E2uaePilh6LdYyh348J71hf477JpFONPSqDzZyfoJD CDudUsGL5EldGVrESZmAhUSHYY017YefNlUkmuRfkOCDCKaVsgtMNlgurQ0Yf9UG LeUY2Amn0aP+Hf09o7eD54Q0HwPV03w5PQyxK6sHUvwcROKkXsLDJhYgxvZjDt4= -----END CERTIFICATE-----Generated at Wed Aug 6 05:29:08 2025 by rpki-client