$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa File: 83f507f9-6df5-4947-842f-b89f2709cc4a.roa (raw, json) Hash identifier: /oLNHbDVtmatknrRw3mZpYiT2m1L4uev2sSaabWzDXM= Subject key identifier: 47:5B:FF:62:82:0F:BA:FE:41:2B:E5:3C:46:D1:01:A7:98:66:13:E5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0EFC0922258002572CFA49B76E432B2211637AF1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa Signing time: Tue 20 May 2025 18:10:20 +0000 ROA not before: Tue 20 May 2025 18:10:20 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ef00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fc:09:22:25:80:02:57:2c:fa:49:b7:6e:43:2b:22:11:63:7a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:10:20 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=df4fb64b8b9a686c6bd40e638e89995eff568197f13a5291612fd463ff96fc73, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:0e:87:92:62:a3:67:f9:68:37:55:ad:27: 97:73:3a:32:fd:36:fa:41:f5:20:74:ef:70:f7:94: 46:97:48:af:09:1a:3f:00:45:f6:eb:67:37:7a:79: 86:3b:dc:ed:b8:f6:67:b0:da:cc:00:de:56:5a:20: 1a:57:ed:10:f7:b9:25:fa:03:78:33:c9:4a:57:35: ab:0c:34:92:1a:6b:58:26:f7:59:6e:9a:73:07:28: 3b:f2:8b:4b:06:d4:37:ad:db:68:91:86:41:91:c8: e3:89:42:9b:05:40:13:85:6e:1e:3b:55:b2:00:d9: 8e:01:57:49:91:90:a5:5b:18:18:5d:85:52:6d:4e: fd:e9:cb:be:84:7a:f4:e4:85:98:f2:6c:8b:8e:13: 1a:0a:c9:aa:df:e5:ec:43:e5:b4:4e:28:67:3a:e6: 5a:35:85:bf:0f:97:72:45:b7:19:39:4d:fc:d6:c4: 40:53:f6:8f:60:bd:05:7f:44:18:33:16:39:ec:99: c6:7b:bb:67:4b:32:27:70:fe:82:48:cf:22:7f:b9: be:15:78:43:83:d4:8f:3a:a7:b3:5d:f9:76:15:39: 04:69:de:ec:b1:bc:ca:9d:5c:4e:6e:bf:f8:c8:33: cf:61:f1:12:72:42:ac:b1:38:db:33:5b:b8:8a:71: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5B:FF:62:82:0F:BA:FE:41:2B:E5:3C:46:D1:01:A7:98:66:13:E5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ef00::/42 Signature Algorithm: sha256WithRSAEncryption 32:53:68:e3:38:f5:96:c1:df:14:97:49:b0:93:d4:18:26:94: 39:64:a0:6b:32:df:00:a6:68:56:4f:c5:42:6e:61:19:17:f1: 95:2c:15:0f:cf:6a:f0:ad:73:73:00:90:84:fb:e1:06:b0:b8: 55:49:12:5c:d7:3d:84:ed:76:fe:07:97:be:f9:8b:f8:6e:81: 8f:bb:fd:30:63:9b:6f:bf:76:2d:c8:7b:28:0a:fb:70:a6:7f: b3:62:72:be:0f:5a:6b:98:49:60:3d:50:4f:51:bc:48:e7:5e: 92:70:a2:ab:5f:07:ed:bc:fa:43:05:e4:75:37:2c:2d:06:ad: 27:ee:54:98:11:76:2a:7e:5e:a1:44:e0:b5:f1:a7:e0:0b:73: 6e:db:08:c7:8b:f2:97:72:2a:93:52:b0:78:b7:32:ec:9f:06: a8:41:8f:f9:22:cf:6c:33:cd:eb:c9:77:d5:ae:5d:a8:0e:3d: 0b:78:0a:0a:4b:1e:22:e4:3f:12:ef:e2:28:6e:d8:a9:0e:9a: a3:1f:ce:8d:57:51:14:7c:9a:0e:19:ce:05:94:73:ba:83:f8: 4e:eb:e0:14:fc:a6:64:d0:25:2b:e9:02:2a:9e:25:b4:fd:53: 18:f8:d3:31:d1:a4:a4:f6:0c:f1:60:92:c5:f5:db:b9:9d:05: 1f:98:9a:63 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDvwJIiWAAlcs+km3bkMrIhFjevEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgxMDIwWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjRmYjY0YjhiOWE2ODZjNmJkNDBlNjM4ZTg5OTk1ZWZm NTY4MTk3ZjEzYTUyOTE2MTJmZDQ2M2ZmOTZmYzczMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoew6HkmKjZ/loN1WtJ5dzOjL9NvpB9SB073D3lEaXSK8J Gj8ARfbrZzd6eYY73O249mew2swA3lZaIBpX7RD3uSX6A3gzyUpXNasMNJIaa1gm 91lumnMHKDvyi0sG1Det22iRhkGRyOOJQpsFQBOFbh47VbIA2Y4BV0mRkKVbGBhd hVJtTv3py76EevTkhZjybIuOExoKyarf5exD5bROKGc65lo1hb8Pl3JFtxk5TfzW xEBT9o9gvQV/RBgzFjnsmcZ7u2dLMidw/oJIzyJ/ub4VeEOD1I86p7Nd+XYVOQRp 3uyxvMqdXE5uv/jIM89h8RJyQqyxONszW7iKcR5DAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUR1v/YoIPuv5BK+U8RtEBp5hmE+UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzgzZjUwN2Y5LTZkZjUtNDk0Ny04NDJmLWI4OWYyNzA5Y2M0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77wAwDQYJKoZIhvcNAQELBQADggEBADJTaOM49ZbB3xSXSbCT1Bgm lDlkoGsy3wCmaFZPxUJuYRkX8ZUsFQ/PavCtc3MAkIT74QawuFVJElzXPYTtdv4H l775i/hugY+7/TBjm2+/di3IeygK+3Cmf7Nicr4PWmuYSWA9UE9RvEjnXpJwoqtf B+28+kMF5HU3LC0GrSfuVJgRdip+XqFE4LXxp+ALc27bCMeL8pdyKpNSsHi3Muyf BqhBj/kiz2wzzevJd9WuXagOPQt4CgpLHiLkPxLv4ihu2KkOmqMfzo1XURR8mg4Z zgWUc7qD+E7r4BT8pmTQJSvpAiqeJbT9Uxj40zHRpKT2DPFgksX127mdBR+YmmM= -----END CERTIFICATE-----Generated at Sat Jun 14 06:41:29 2025 by rpki-client