$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c02ee773-2479-4a68-a9fa-4a6dd18d6083.roa File: c02ee773-2479-4a68-a9fa-4a6dd18d6083.roa (raw, json) Hash identifier: sd9EHJrF3jj/ATBWRaxXsqERjzuAv4I2l/Tt7if8DDU= Subject key identifier: EE:48:17:46:6D:45:89:7E:80:43:C5:25:3F:D2:8F:81:73:C5:88:A8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 295C25D1E2808334CCC5A73049964E96D8EB9E7B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c02ee773-2479-4a68-a9fa-4a6dd18d6083.roa Signing time: Mon 28 Jul 2025 16:00:55 +0000 ROA not before: Mon 28 Jul 2025 16:00:55 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5c:25:d1:e2:80:83:34:cc:c5:a7:30:49:96:4e:96:d8:eb:9e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 28 16:00:55 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=1fa2226f70f13e7d5fd0f2a9eae33b8dec902ab19394d77bcfb9e4159495d8de, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:1b:3c:4f:41:73:e1:6a:f0:16:1a:26:85: 03:17:a0:3f:11:fb:06:16:13:52:06:c7:ec:f3:bd: 48:e0:e2:f0:6b:b4:59:1d:3c:e3:cd:23:86:23:4e: 76:5b:bb:a5:1f:a9:56:de:c9:dc:8a:27:33:70:41: 24:50:2a:a4:7a:a0:04:60:b0:f8:74:c1:01:24:8c: cc:a1:66:ad:91:14:77:af:fe:6c:b8:37:c0:55:9f: 6e:ab:77:31:20:79:00:eb:59:13:bf:3d:24:52:2d: 33:20:5a:33:33:bb:94:b0:23:19:ab:51:07:b9:ef: ab:19:1e:7c:6e:e0:f4:18:5c:bf:2f:24:3e:39:e1: 64:f2:7a:1c:6b:b6:97:31:45:f8:b6:43:25:20:8e: 89:80:c0:e5:40:3d:8a:c7:3e:2e:be:ea:b4:21:8e: d1:97:5e:b5:f9:7c:1a:25:8f:0e:2d:09:f6:24:3d: 76:09:a7:f4:69:07:f0:b8:c6:02:d2:36:1d:96:fb: e3:58:8e:9a:ff:71:cb:ee:d5:d0:ef:ee:62:33:e7: 1b:15:f7:03:09:ee:ed:57:e2:a0:32:fd:d4:cf:f3: 2b:88:dc:06:3f:33:7a:53:e0:17:08:a7:b2:da:35: 57:a1:b0:7b:b3:89:ec:56:c4:b2:58:aa:ac:e4:1c: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:48:17:46:6D:45:89:7E:80:43:C5:25:3F:D2:8F:81:73:C5:88:A8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c02ee773-2479-4a68-a9fa-4a6dd18d6083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7012::/48 Signature Algorithm: sha256WithRSAEncryption 1d:cd:e8:06:67:e3:f0:6b:dd:51:5d:5a:53:76:69:22:f2:70: b7:fb:f4:09:dc:94:e3:4f:50:5b:60:71:14:0f:cc:ae:9c:65: 6a:48:05:6e:5a:39:b2:7a:63:94:8b:3f:b2:ee:da:00:22:9a: 89:f9:7f:9a:00:5e:fe:35:4b:8d:03:31:e1:40:fa:8e:1c:87: e6:3f:b1:d9:77:eb:1e:f5:12:7e:1b:64:fb:b7:79:25:d9:c0: 6b:cf:2a:64:1c:c5:53:3c:72:cd:4f:3b:f9:9c:85:da:44:59: 1a:e0:ea:ba:12:d5:be:c0:e3:ff:c3:de:f7:86:3f:a3:e8:41: d6:99:7e:79:9b:51:91:27:b0:ea:fe:00:11:8f:e3:cf:fa:ed: a3:15:ad:4e:64:58:70:b4:e4:e3:6d:1d:af:16:6c:71:e0:1a: a3:fd:c1:50:9f:25:37:c5:97:94:fd:28:4f:9e:58:3e:a6:95: b7:68:e1:5c:18:8d:85:c4:91:01:46:79:88:26:ee:31:9c:5f: ee:bf:d7:f7:30:7a:0a:4c:75:9a:f7:30:0c:89:2d:33:c5:18: 96:cd:2d:09:5f:69:70:3e:91:c7:14:5c:fd:0b:db:f3:81:0a: 13:f3:a2:99:d4:1f:e4:70:ad:e2:e2:f5:6d:ba:c0:17:20:e1: fc:e7:4f:ef -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKVwl0eKAgzTMxacwSZZOltjrnnswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzI4MTYwMDU1WhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZmEyMjI2ZjcwZjEzZTdkNWZkMGYyYTllYWUzM2I4ZGVj OTAyYWIxOTM5NGQ3N2JjZmI5ZTQxNTk0OTVkOGRlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJsBs8T0Fz4WrwFhomhQMXoD8R+wYWE1IGx+zzvUjg4vBr tFkdPOPNI4YjTnZbu6UfqVbeydyKJzNwQSRQKqR6oARgsPh0wQEkjMyhZq2RFHev /my4N8BVn26rdzEgeQDrWRO/PSRSLTMgWjMzu5SwIxmrUQe576sZHnxu4PQYXL8v JD454WTyehxrtpcxRfi2QyUgjomAwOVAPYrHPi6+6rQhjtGXXrX5fBoljw4tCfYk PXYJp/RpB/C4xgLSNh2W++NYjpr/ccvu1dDv7mIz5xsV9wMJ7u1X4qAy/dTP8yuI 3AY/M3pT4BcIp7LaNVehsHuziexWxLJYqqzkHDDJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7kgXRm1FiX6AQ8UlP9KPgXPFiKgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MwMmVlNzczLTI0NzktNGE2OC1hOWZhLTRhNmRkMThkNjA4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBIwDQYJKoZIhvcNAQELBQADggEBAB3N6AZn4/Br3VFdWlN2aSLy cLf79AnclONPUFtgcRQPzK6cZWpIBW5aObJ6Y5SLP7Lu2gAimon5f5oAXv41S40D MeFA+o4ch+Y/sdl36x71En4bZPu3eSXZwGvPKmQcxVM8cs1PO/mchdpEWRrg6roS 1b7A4//D3veGP6PoQdaZfnmbUZEnsOr+ABGP48/67aMVrU5kWHC05ONtHa8WbHHg GqP9wVCfJTfFl5T9KE+eWD6mlbdo4VwYjYXEkQFGeYgm7jGcX+6/1/cwegpMdZr3 MAyJLTPFGJbNLQlfaXA+kccUXP0L2/OBChPzopnUH+RwreLi9W26wBcg4fznT+8= -----END CERTIFICATE-----Generated at Wed Aug 6 05:53:48 2025 by rpki-client