$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/789a1aef-77f7-4108-9d41-1a97c18e12cb.roa File: 789a1aef-77f7-4108-9d41-1a97c18e12cb.roa (raw, json) Hash identifier: UcFo1N6aq5FgAooNSyTv2dVsl9s0ihvhsiBPF0idIKI= Subject key identifier: 94:53:AB:88:C9:BD:BD:6E:99:E4:19:89:25:41:3D:17:9B:9C:D2:0E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4A5BF04A0121C5D2287F5A169B237130DC256081 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/789a1aef-77f7-4108-9d41-1a97c18e12cb.roa Signing time: Tue 20 May 2025 18:20:12 +0000 ROA not before: Tue 20 May 2025 18:20:12 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f00c::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5b:f0:4a:01:21:c5:d2:28:7f:5a:16:9b:23:71:30:dc:25:60:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:20:12 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=23acdcabc18fac04ac4a53bc1f10e425510b3380a461482cb0ded8475513720e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:0f:b3:5b:ac:3e:27:3b:53:bf:21:54:fd: 24:f2:55:14:f6:54:77:75:a4:3c:24:84:8c:5e:3f: a7:12:3e:ac:fc:ca:5a:d7:ab:a8:a3:05:7e:71:ef: ae:f4:0c:63:cf:fc:14:47:59:1a:43:1d:59:b4:a2: 5b:33:c2:01:9f:48:5c:be:6c:9a:05:7d:e5:97:66: b4:e7:0a:7a:cd:ff:c4:e1:ef:00:e8:38:3b:b5:ab: b3:b5:0f:c5:32:6e:65:ef:8a:e7:d4:8a:06:1b:d0: 3e:c3:83:c6:6e:94:d7:41:38:29:3e:80:5d:70:76: 24:59:c0:06:fe:e0:b6:e9:88:ba:5b:88:7d:a0:a7: de:5e:05:f8:6e:83:d5:3b:a5:a8:86:5f:50:7d:bc: 2d:85:ce:22:4a:7f:8a:9b:6d:5b:4e:9d:de:19:06: a7:23:30:c7:2b:07:0b:f2:53:14:9f:97:4f:95:79: 82:1b:58:ab:11:ee:99:0a:7a:29:18:0d:6d:3f:42: e4:ad:65:2e:3a:f5:0a:5d:cf:9a:19:2c:f3:cf:fc: c9:af:93:4d:2c:9b:25:03:61:56:7e:ac:6c:7f:d1: 32:95:c1:17:56:b3:c0:73:db:a9:0e:96:01:b8:ab: 35:17:f9:19:23:58:e1:f9:d8:59:1c:2f:98:00:ff: ce:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:53:AB:88:C9:BD:BD:6E:99:E4:19:89:25:41:3D:17:9B:9C:D2:0E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/789a1aef-77f7-4108-9d41-1a97c18e12cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f00c::/39 Signature Algorithm: sha256WithRSAEncryption 06:c9:7f:c3:e4:70:c2:83:a2:dd:28:c5:15:eb:87:b0:66:3b: 1f:95:cd:de:b7:09:fc:06:4c:7e:04:5d:6e:5c:cc:ef:b2:51: fa:d0:d8:d7:dd:66:e9:48:96:c2:04:05:2f:10:75:e5:cf:00: 3f:52:9a:47:b8:5e:97:13:19:74:22:e9:c1:4a:2c:90:42:99: 63:e0:5a:3d:b8:d1:b5:e3:8d:b5:32:c2:6d:5f:5b:bf:30:ca: f5:53:7a:63:09:2e:89:b4:42:4e:6b:9c:65:97:f1:79:8a:04: 0d:68:3c:71:0d:c6:32:71:09:70:14:1f:ad:e2:d0:53:6a:6a: ec:d1:d9:af:ac:c6:66:87:20:f9:d1:44:37:41:a1:08:1c:2e: 55:a4:97:6b:f4:5d:d0:49:39:eb:b2:d3:ab:b0:38:ca:ce:90: 61:41:62:1c:96:00:4b:f0:dc:74:06:a8:91:cf:f5:d8:80:cd: 58:f6:fd:c5:24:a1:fa:37:d7:1f:ff:23:4f:3a:d6:cc:c1:08: 2c:b1:d3:51:1a:75:67:6d:8c:e0:a5:29:b9:b2:f6:1c:f7:9d: e6:f5:bf:b1:c5:cc:3f:4c:4a:b8:09:30:b9:b3:6f:9c:b8:24: 60:17:43:b0:5e:dd:96:e8:5e:ce:55:0a:53:15:16:9b:1b:91: ba:36:e6:53 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSlvwSgEhxdIof1oWmyNxMNwlYIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgyMDEyWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2FjZGNhYmMxOGZhYzA0YWM0YTUzYmMxZjEwZTQyNTUx MGIzMzgwYTQ2MTQ4MmNiMGRlZDg0NzU1MTM3MjBlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYcQ+zW6w+JztTvyFU/STyVRT2VHd1pDwkhIxeP6cSPqz8 ylrXq6ijBX5x7670DGPP/BRHWRpDHVm0olszwgGfSFy+bJoFfeWXZrTnCnrN/8Th 7wDoODu1q7O1D8UybmXviufUigYb0D7Dg8ZulNdBOCk+gF1wdiRZwAb+4LbpiLpb iH2gp95eBfhug9U7paiGX1B9vC2FziJKf4qbbVtOnd4ZBqcjMMcrBwvyUxSfl0+V eYIbWKsR7pkKeikYDW0/QuStZS469Qpdz5oZLPPP/Mmvk00smyUDYVZ+rGx/0TKV wRdWs8Bz26kOlgG4qzUX+RkjWOH52FkcL5gA/86PAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUlFOriMm9vW6Z5BmJJUE9F5uc0g4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc4OWExYWVmLTc3ZjctNDEwOC05ZDQxLTFhOTdjMThlMTJjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAPAMADANBgkqhkiG9w0BAQsFAAOCAQEABsl/w+RwwoOi3SjFFeuHsGY7 H5XN3rcJ/AZMfgRdblzM77JR+tDY191m6UiWwgQFLxB15c8AP1KaR7helxMZdCLp wUoskEKZY+BaPbjRteONtTLCbV9bvzDK9VN6YwkuibRCTmucZZfxeYoEDWg8cQ3G MnEJcBQfreLQU2pq7NHZr6zGZocg+dFEN0GhCBwuVaSXa/Rd0Ek567LTq7A4ys6Q YUFiHJYAS/DcdAaokc/12IDNWPb9xSSh+jfXH/8jTzrWzMEILLHTURp1Z22M4KUp ubL2HPed5vW/scXMP0xKuAkwubNvnLgkYBdDsF7dluhezlUKUxUWmxuRujbmUw== -----END CERTIFICATE-----Generated at Mon Jun 16 08:23:34 2025 by rpki-client