$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/92842c72-d501-4996-b9a9-686d162bc8c1.roa File: 92842c72-d501-4996-b9a9-686d162bc8c1.roa (raw, json) Hash identifier: 3+NTtvjn7APURf6O7auAhAPgMxEHP4gdUumE3dUCBX0= Subject key identifier: 28:EF:54:8C:F4:AA:93:39:E7:DC:BC:D5:64:6C:C9:59:1E:51:41:86 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 207CE61E78196108D6B4CC9238E619E691CCA735 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/92842c72-d501-4996-b9a9-686d162bc8c1.roa Signing time: Mon 21 Jul 2025 16:40:06 +0000 ROA not before: Mon 21 Jul 2025 16:40:06 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7c:e6:1e:78:19:61:08:d6:b4:cc:92:38:e6:19:e6:91:cc:a7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 21 16:40:06 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=e1c0e3465c10a0513f847e15926229ce16dffd5cb19f1ccff72d05eca419cd52, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:b8:b2:08:ee:d5:74:33:6a:b8:57:0f:04: a9:d0:ff:29:ba:27:77:63:59:1f:81:28:6c:47:58: 87:e2:f6:37:e8:9d:a2:65:72:41:ee:68:64:29:d6: 11:ee:48:1c:78:7d:d7:f6:05:1a:52:20:f7:b1:80: 1d:9e:f8:ea:55:a2:e7:81:53:71:af:c9:94:35:8c: df:98:6b:60:0a:88:85:83:96:40:be:b4:35:7a:8d: 54:1d:48:fa:93:d1:70:b9:4b:17:18:07:1c:98:3c: 0d:4c:aa:dc:2f:2b:53:3a:d7:4f:f4:10:bd:c0:e4: aa:d6:cc:07:0e:eb:5b:b4:22:2c:4b:ed:20:59:17: 74:ce:49:a6:23:57:f1:f0:38:c6:2f:6c:1f:f7:bc: a9:27:71:9d:0e:00:fe:a3:99:c3:55:89:75:7f:e7: 7d:c3:8d:3e:1b:91:5d:dd:af:fd:e8:54:a0:25:02: d2:d8:63:25:1f:d8:4e:f3:71:e6:60:64:c9:af:7c: 08:03:bb:af:9b:0d:a9:c1:c6:59:55:a7:69:ad:e6: 18:7b:bf:2c:97:be:a8:eb:e9:c2:0f:fa:c9:20:36: 9b:73:a1:e7:fa:33:27:75:65:0e:04:6a:6d:3b:16: df:94:1b:a2:ab:b9:51:c8:4f:42:4b:3d:7b:61:34: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EF:54:8C:F4:AA:93:39:E7:DC:BC:D5:64:6C:C9:59:1E:51:41:86 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/92842c72-d501-4996-b9a9-686d162bc8c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:a::/48 Signature Algorithm: sha256WithRSAEncryption 74:15:ba:06:bd:72:b3:36:b0:9e:eb:1a:65:a1:28:5a:f8:70: 4b:80:61:c9:c0:93:18:18:57:35:01:38:82:5a:2f:5a:b5:c8: 00:67:e9:ba:d8:02:6c:96:65:3b:51:6f:db:64:52:02:16:52: e7:4c:d9:49:9a:1e:d7:01:bc:ce:45:3f:96:ea:46:47:7f:dd: a9:52:9b:3c:90:22:f3:dd:dd:7b:79:49:69:95:ec:0a:dd:80: a4:a0:70:10:89:57:67:a3:49:11:59:64:a8:c4:d4:04:b6:b8: 53:31:57:27:be:bc:91:54:99:0b:f7:d2:3f:8e:91:bf:42:76: 0e:10:96:1f:b5:87:f5:e8:72:41:ce:76:af:79:e0:9c:e7:e3: 37:14:70:68:00:09:62:d2:e3:42:08:18:b8:09:3c:e3:ad:77: b2:40:73:dc:37:98:43:16:e3:72:d4:6c:a1:dd:a4:59:8a:df: 8d:6c:c8:9c:f4:d5:5f:8f:ec:17:ac:ab:9e:79:ef:6b:9d:21: cf:7d:ae:18:30:fb:b1:50:75:a1:01:3e:ec:61:23:f3:8c:19: 11:2a:5e:2e:1d:b6:97:48:05:10:98:e0:47:9e:94:a9:cc:06: 5c:7c:eb:64:db:a8:47:8d:8a:cd:89:79:bf:4c:af:04:1e:eb: 11:ac:f0:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIHzmHngZYQjWtMySOOYZ5pHMpzUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzIxMTY0MDA2WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMWMwZTM0NjVjMTBhMDUxM2Y4NDdlMTU5MjYyMjljZTE2 ZGZmZDVjYjE5ZjFjY2ZmNzJkMDVlY2E0MTljZDUyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLMbiyCO7VdDNquFcPBKnQ/ym6J3djWR+BKGxHWIfi9jfo naJlckHuaGQp1hHuSBx4fdf2BRpSIPexgB2e+OpVoueBU3GvyZQ1jN+Ya2AKiIWD lkC+tDV6jVQdSPqT0XC5SxcYBxyYPA1MqtwvK1M610/0EL3A5KrWzAcO61u0IixL 7SBZF3TOSaYjV/HwOMYvbB/3vKkncZ0OAP6jmcNViXV/533DjT4bkV3dr/3oVKAl AtLYYyUf2E7zceZgZMmvfAgDu6+bDanBxllVp2mt5hh7vyyXvqjr6cIP+skgNptz oef6Myd1ZQ4Eam07Ft+UG6KruVHIT0JLPXthNIzjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKO9UjPSqkznn3LzVZGzJWR5RQYYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzkyODQyYzcyLWQ1MDEtNDk5Ni1iOWE5LTY4NmQxNjJiYzhjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAowDQYJKoZIhvcNAQELBQADggEBAHQVuga9crM2sJ7rGmWhKFr4 cEuAYcnAkxgYVzUBOIJaL1q1yABn6brYAmyWZTtRb9tkUgIWUudM2UmaHtcBvM5F P5bqRkd/3alSmzyQIvPd3Xt5SWmV7ArdgKSgcBCJV2ejSRFZZKjE1AS2uFMxVye+ vJFUmQv30j+Okb9Cdg4Qlh+1h/XockHOdq954Jzn4zcUcGgACWLS40IIGLgJPOOt d7JAc9w3mEMW43LUbKHdpFmK341syJz01V+P7Besq55572udIc99rhgw+7FQdaEB PuxhI/OMGREqXi4dtpdIBRCY4EeelKnMBlx862TbqEeNis2Jeb9MrwQe6xGs8IE= -----END CERTIFICATE-----Generated at Wed Aug 6 11:13:22 2025 by rpki-client