$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa File: 6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa (raw, json) Hash identifier: gV01DXmt6gb4bFD5XTuY/9w5dUuBZHaJ2ocoOV19S68= Subject key identifier: FE:E8:7C:84:4C:07:BE:A5:B4:C3:33:B9:E4:2E:B6:18:83:03:99:58 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7CA147AFEBE8DA936653C4F644604A69A9A1C838 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa Signing time: Fri 25 Jul 2025 16:50:11 +0000 ROA not before: Fri 25 Jul 2025 16:50:11 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a1:47:af:eb:e8:da:93:66:53:c4:f6:44:60:4a:69:a9:a1:c8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 25 16:50:11 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=c6fa3f4b3bdd5ed8df210d3eef776fcd8773f4dc6ace8b796fddba447b7cf231, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c2:6c:2d:94:03:d1:5d:35:f3:ac:f2:2d:94: af:40:d9:d7:37:7e:30:46:47:e8:52:0f:7e:bb:b0: c4:2e:5a:ae:5c:b4:40:8d:2b:a8:54:c0:ce:95:02: 71:99:7c:fd:ee:bf:31:a0:11:70:00:e9:3a:66:a2: f5:c8:b7:11:31:04:a5:fd:b2:95:1c:51:4e:14:f6: ed:37:6b:d7:ae:be:37:7e:2c:d5:b0:81:8d:25:2c: 23:b7:74:fc:29:e4:ee:0a:56:a7:07:f0:96:90:d6: 25:24:cd:0f:79:18:5a:8e:e3:c5:58:12:29:f7:3d: 7a:f3:4c:f0:27:f9:79:c8:ab:e6:fa:50:83:b1:31: 5d:fe:dd:ff:e5:4c:65:b6:5d:78:e1:43:b9:f4:67: d5:ae:4a:17:13:3d:ca:ce:e1:66:18:dc:b2:ce:1f: 5b:88:78:73:87:32:25:19:69:d9:73:c6:5d:05:5b: 0d:45:97:dd:b1:f7:5b:1e:ff:03:c0:7c:08:50:fa: 8c:00:3a:ef:9f:cc:23:f3:42:ec:5e:f3:a1:63:53: c3:88:c9:00:0f:1b:78:30:1b:da:6d:16:1f:e3:48: 72:81:7b:fd:de:88:80:57:a4:15:df:e0:f7:12:0b: c5:d1:84:27:09:46:a0:f4:f7:55:2e:a0:a3:9f:95: 22:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E8:7C:84:4C:07:BE:A5:B4:C3:33:B9:E4:2E:B6:18:83:03:99:58 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1100::/40 Signature Algorithm: sha256WithRSAEncryption 99:d2:5b:cd:fc:85:a7:69:e6:6b:6a:cb:6b:d5:e6:50:75:26: 14:8f:36:d7:ba:8d:77:5f:26:4b:a5:7b:57:eb:18:74:b3:6c: e3:51:f8:13:25:f2:57:51:ea:c6:56:b6:31:15:46:5f:de:06: 7b:96:31:8c:ba:8e:9f:ed:14:d5:d1:3d:a3:cd:49:30:ca:91: b2:9e:53:ea:a6:7c:60:9a:0c:70:b1:3f:1a:3d:d4:7d:ad:7c: 6c:6e:43:36:68:84:5d:54:a8:c0:a2:53:09:d9:78:18:b7:43: 8a:b3:5e:33:6a:1a:54:84:cb:2c:bf:64:ec:c9:79:de:2a:b8: 4c:d7:95:96:da:7a:a5:ed:28:42:28:ef:fa:73:ec:61:66:e3: 79:4f:0d:19:c4:f9:35:73:a6:a7:02:ad:d0:89:cf:a7:61:0b: f5:74:a9:4b:be:2c:66:39:38:0c:a3:49:e4:b8:e9:49:2c:89: 73:c5:c6:ab:75:ed:4d:b2:7c:21:3f:07:43:a6:bc:18:ed:a6: 3d:48:5c:e4:70:14:b8:9b:ca:3e:94:c1:55:7e:7f:bb:2d:41: 2f:f9:23:4c:4c:02:b7:c2:88:6a:6e:91:f4:1b:37:1f:d8:59: f1:a7:32:ab:a2:19:09:15:a8:a3:63:57:ca:1c:b6:f5:20:05: 20:c2:a5:18 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfKFHr+vo2pNmU8T2RGBKaamhyDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzI1MTY1MDExWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmZhM2Y0YjNiZGQ1ZWQ4ZGYyMTBkM2VlZjc3NmZjZDg3 NzNmNGRjNmFjZThiNzk2ZmRkYmE0NDdiN2NmMjMxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQwmwtlAPRXTXzrPItlK9A2dc3fjBGR+hSD367sMQuWq5c tECNK6hUwM6VAnGZfP3uvzGgEXAA6TpmovXItxExBKX9spUcUU4U9u03a9euvjd+ LNWwgY0lLCO3dPwp5O4KVqcH8JaQ1iUkzQ95GFqO48VYEin3PXrzTPAn+XnIq+b6 UIOxMV3+3f/lTGW2XXjhQ7n0Z9WuShcTPcrO4WYY3LLOH1uIeHOHMiUZadlzxl0F Ww1Fl92x91se/wPAfAhQ+owAOu+fzCPzQuxe86FjU8OIyQAPG3gwG9ptFh/jSHKB e/3eiIBXpBXf4PcSC8XRhCcJRqD091UuoKOflSLLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/uh8hEwHvqW0wzO55C62GIMDmVgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZlYWY5YWI1LWVjOGItNDJlYi1hZGU5LTc4MWJmMTIyMTJhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwETANBgkqhkiG9w0BAQsFAAOCAQEAmdJbzfyFp2nma2rLa9XmUHUm FI8217qNd18mS6V7V+sYdLNs41H4EyXyV1Hqxla2MRVGX94Ge5YxjLqOn+0U1dE9 o81JMMqRsp5T6qZ8YJoMcLE/Gj3Ufa18bG5DNmiEXVSowKJTCdl4GLdDirNeM2oa VITLLL9k7Ml53iq4TNeVltp6pe0oQijv+nPsYWbjeU8NGcT5NXOmpwKt0InPp2EL 9XSpS74sZjk4DKNJ5LjpSSyJc8XGq3XtTbJ8IT8HQ6a8GO2mPUhc5HAUuJvKPpTB VX5/uy1BL/kjTEwCt8KIam6R9Bs3H9hZ8acyq6IZCRWoo2NXyhy29SAFIMKlGA== -----END CERTIFICATE-----Generated at Wed Aug 6 04:07:46 2025 by rpki-client