$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7789e577-d458-4bf2-9fdd-d815202ea397.roa File: 7789e577-d458-4bf2-9fdd-d815202ea397.roa (raw, json) Hash identifier: EqgSdCphbOh0PvUGMlcJ9DQa/yCg2L8po7StIvwhMkQ= Subject key identifier: D0:62:06:F5:EA:F4:2D:DE:BF:60:8F:C6:1A:1F:92:D0:14:79:4C:10 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 742E897EDC44F4A232FCEBF8ABF912DFBCCC96D5 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7789e577-d458-4bf2-9fdd-d815202ea397.roa Signing time: Fri 01 Aug 2025 17:10:19 +0000 ROA not before: Fri 01 Aug 2025 17:10:19 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7400::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2e:89:7e:dc:44:f4:a2:32:fc:eb:f8:ab:f9:12:df:bc:cc:96:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 1 17:10:19 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=eca6fd1ba2b8404250e4a34f2dbab4c49d852e70bc51e191383707d490dbbfac, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4a:b5:16:c2:f0:0f:12:fb:51:a4:65:2c:5f: ab:7d:fa:d2:ab:1b:85:83:8e:82:65:24:e8:4a:21: 0c:e0:14:82:cf:71:7b:cb:f5:02:b6:98:42:c5:8d: af:2a:de:00:90:ca:45:e0:43:80:48:81:21:bf:4c: be:f8:5b:36:e0:98:b1:04:b0:53:87:3b:db:2a:bd: ff:c9:2d:19:93:cf:e9:de:da:5d:c9:4b:5d:31:29: 70:40:22:3d:19:59:a7:b6:4a:98:8b:52:51:e4:7f: f1:da:e3:a0:b0:65:7b:5b:10:8d:ac:41:72:4e:8c: 7a:cc:be:bf:94:fd:e3:8d:ab:32:16:d7:43:a1:d1: 37:67:a5:70:ac:f4:76:c8:7d:33:33:fa:ef:f6:a6: 22:58:79:34:9e:ae:69:aa:69:ff:55:f5:82:34:be: 15:f8:e6:28:b4:1a:4a:d1:1d:87:59:ea:e2:08:67: c8:c8:cf:8f:44:48:91:04:dd:6b:e5:87:b3:c3:16: 5b:69:75:45:73:45:23:95:92:43:8b:55:1d:56:0e: ac:5e:85:70:0d:7c:0b:67:d9:87:e3:21:7f:15:3b: 00:0f:9c:3e:3d:9d:fe:07:84:27:11:09:b4:76:42: 2a:5b:b0:54:69:8c:96:ba:07:fb:c9:9f:c5:9f:20: d4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:62:06:F5:EA:F4:2D:DE:BF:60:8F:C6:1A:1F:92:D0:14:79:4C:10 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7789e577-d458-4bf2-9fdd-d815202ea397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7400::/38 Signature Algorithm: sha256WithRSAEncryption 16:9e:7f:28:37:3e:60:10:6d:f0:03:6c:1e:73:bf:3e:fc:a0: f4:d6:16:97:ba:4d:d2:68:2e:31:94:3e:f2:ea:b7:38:69:6d: 84:fc:cc:1a:b1:0b:53:77:ee:c9:b7:30:7c:0f:8b:cf:97:fa: 99:81:da:04:56:da:6b:07:90:e5:0d:92:2f:d4:83:64:9f:1e: 34:34:2e:e9:d9:03:c3:fe:97:87:f8:3e:f0:04:3a:02:cf:67: 6d:4d:fe:98:bf:7e:4a:27:fe:fc:97:43:b1:be:26:c4:fd:c9: 51:c2:28:72:48:2f:97:7c:de:d9:63:0f:14:5f:be:ed:e9:e8: 86:5a:3d:54:d3:c2:8a:8e:50:fe:e1:f7:0a:1f:10:fc:e7:1d: d5:a3:8e:d1:b8:f4:32:0d:87:69:26:02:60:20:1e:b6:bc:f6: 45:19:9a:68:03:b6:0e:83:1c:bf:05:37:8b:a7:91:6d:0d:57: 7c:37:38:f3:6c:65:59:76:33:67:f5:dd:35:ff:4b:a3:af:1a: 31:53:dd:05:9d:ce:86:f7:4e:25:41:de:7a:44:11:78:b0:49: 5e:2b:6a:88:93:82:54:94:3a:cc:25:0c:84:de:93:ce:53:23: 05:6e:0f:b4:0e:54:f6:bc:d9:ca:89:c3:1c:95:54:98:e3:ef: e4:88:7c:5b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdC6JftxE9KIy/Ov4q/kS37zMltUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODAxMTcxMDE5WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2E2ZmQxYmEyYjg0MDQyNTBlNGEzNGYyZGJhYjRjNDlk ODUyZTcwYmM1MWUxOTEzODM3MDdkNDkwZGJiZmFjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkSrUWwvAPEvtRpGUsX6t9+tKrG4WDjoJlJOhKIQzgFILP cXvL9QK2mELFja8q3gCQykXgQ4BIgSG/TL74WzbgmLEEsFOHO9sqvf/JLRmTz+ne 2l3JS10xKXBAIj0ZWae2SpiLUlHkf/Ha46CwZXtbEI2sQXJOjHrMvr+U/eONqzIW 10Oh0TdnpXCs9HbIfTMz+u/2piJYeTSermmqaf9V9YI0vhX45ii0GkrRHYdZ6uII Z8jIz49ESJEE3Wvlh7PDFltpdUVzRSOVkkOLVR1WDqxehXANfAtn2YfjIX8VOwAP nD49nf4HhCcRCbR2QipbsFRpjJa6B/vJn8WfINTrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0GIG9er0Ld6/YI/GGh+S0BR5TBAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc3ODllNTc3LWQ0NTgtNGJmMi05ZmRkLWQ4MTUyMDJlYTM5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAPDydDANBgkqhkiG9w0BAQsFAAOCAQEAFp5/KDc+YBBt8ANsHnO/Pvyg 9NYWl7pN0mguMZQ+8uq3OGlthPzMGrELU3fuybcwfA+Lz5f6mYHaBFbaaweQ5Q2S L9SDZJ8eNDQu6dkDw/6Xh/g+8AQ6As9nbU3+mL9+Sif+/JdDsb4mxP3JUcIockgv l3ze2WMPFF++7enohlo9VNPCio5Q/uH3Ch8Q/Ocd1aOO0bj0Mg2HaSYCYCAetrz2 RRmaaAO2DoMcvwU3i6eRbQ1XfDc482xlWXYzZ/XdNf9Lo68aMVPdBZ3OhvdOJUHe ekQReLBJXitqiJOCVJQ6zCUMhN6TzlMjBW4PtA5U9rzZyonDHJVUmOPv5Ih8Ww== -----END CERTIFICATE-----Generated at Wed Aug 6 06:05:10 2025 by rpki-client