$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2910bcfa-4bcb-4125-a56f-4bb9596f5adf.roa File: 2910bcfa-4bcb-4125-a56f-4bb9596f5adf.roa (raw, json) Hash identifier: qsU2suwPSm5lkmRrqh7wDgNAT71fTbHoeKbC0PqG/jI= Subject key identifier: 90:58:4C:C3:46:12:A6:76:F7:89:8C:55:B5:7A:E4:4D:3A:BE:92:88 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 15F6AF3443AA8B52A2E2D246991F7D0F83624E42 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2910bcfa-4bcb-4125-a56f-4bb9596f5adf.roa Signing time: Mon 16 Jun 2025 19:21:00 +0000 ROA not before: Mon 16 Jun 2025 19:21:00 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f6:af:34:43:aa:8b:52:a2:e2:d2:46:99:1f:7d:0f:83:62:4e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:21:00 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=a9a55fcf66d990169aec62a498e7c69e27469f74c9cd564e44d5fc5c55459717, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e7:ca:a3:58:a9:80:a4:f7:47:7b:3f:0c:21: 2c:a5:94:13:7b:25:40:9e:c7:54:08:5c:88:83:8e: be:84:49:09:44:32:b6:ef:76:6f:5e:c3:e0:ab:fa: b7:a5:98:62:09:1c:b7:f0:cc:3e:1f:08:81:a9:a8: b7:9e:0f:a0:19:c2:9a:df:04:b8:b2:ad:ad:5c:c7: f9:e7:8f:af:2f:bd:0f:f6:65:24:80:41:14:15:f3: fd:9c:a9:f9:ad:bc:f5:95:34:73:c3:09:73:ec:9c: bf:d4:74:62:58:75:7c:5e:cd:d6:55:b7:e8:ab:76: fc:b0:05:ac:af:45:fd:3f:47:bf:1b:a9:98:36:50: 57:6d:ba:9e:27:bf:ca:f7:d0:ef:61:0c:e4:cb:b3: cd:3e:e3:4a:69:d7:60:c2:02:b8:21:1b:14:39:40: 0b:8d:c7:18:3b:ab:24:3f:15:32:a3:cc:c9:af:60: 36:f3:7b:5f:cd:8b:2b:31:a3:f9:0b:1a:69:8d:e8: 3d:b2:30:08:fc:f8:a0:86:a1:19:d8:35:f6:2a:c8: fa:c2:8b:3a:26:a0:60:cf:27:0b:24:c2:c6:ed:46: e3:af:58:9a:41:14:1a:5c:35:c1:ae:20:1b:1b:b5: 30:61:dc:70:8c:75:c5:4d:16:f6:94:ec:7d:66:af: 41:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:58:4C:C3:46:12:A6:76:F7:89:8C:55:B5:7A:E4:4D:3A:BE:92:88 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2910bcfa-4bcb-4125-a56f-4bb9596f5adf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:500::/40 Signature Algorithm: sha256WithRSAEncryption 9a:39:70:ae:a6:2c:79:2d:28:61:d0:d8:78:e2:ed:33:f5:7b: 3e:38:a9:1f:cb:4f:72:3d:5b:79:00:a2:89:e2:69:20:70:e8: d0:2c:ce:f5:ab:84:01:a5:1e:22:4c:b0:40:a6:e0:0e:a3:4d: fd:88:6b:c5:42:ba:4b:be:74:11:dc:97:c8:b7:b7:d2:18:f3: 9e:2f:1e:0d:72:7a:c3:bf:8d:36:42:e6:0a:b0:2e:28:d9:1a: 67:1c:2f:51:cb:39:8d:0b:4e:71:8c:b8:e0:07:9d:ab:d9:a5: 2a:ea:3d:68:b0:ef:16:e8:da:a1:1b:9a:eb:e2:d7:62:7a:27: 6d:26:e2:c8:e7:7f:a2:cc:16:dd:ab:ff:8a:e7:67:ba:cc:c7: 84:ca:30:17:ec:16:32:6a:a8:b1:6a:61:78:05:4c:31:26:e3: e4:f3:ba:09:f9:30:ca:a6:c9:28:f1:67:7b:ba:d6:5e:c4:11: d8:59:83:a1:2e:0c:aa:07:bd:55:85:51:67:d4:dd:a5:d9:21: 8a:6c:6c:c8:de:8e:de:73:a9:9f:6b:94:1b:5d:e9:c0:9a:a1: 47:2a:be:a5:44:cd:e1:f5:f0:e9:75:8f:af:57:c0:ff:47:b9: 63:81:97:13:19:78:a9:4b:27:2a:4a:61:4d:f2:fd:01:c2:e5: 8e:5e:58:5d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFfavNEOqi1Ki4tJGmR99D4NiTkIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMTAwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWE1NWZjZjY2ZDk5MDE2OWFlYzYyYTQ5OGU3YzY5ZTI3 NDY5Zjc0YzljZDU2NGU0NGQ1ZmM1YzU1NDU5NzE3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDj58qjWKmApPdHez8MISyllBN7JUCex1QIXIiDjr6ESQlE Mrbvdm9ew+Cr+relmGIJHLfwzD4fCIGpqLeeD6AZwprfBLiyra1cx/nnj68vvQ/2 ZSSAQRQV8/2cqfmtvPWVNHPDCXPsnL/UdGJYdXxezdZVt+irdvywBayvRf0/R78b qZg2UFdtup4nv8r30O9hDOTLs80+40pp12DCArghGxQ5QAuNxxg7qyQ/FTKjzMmv YDbze1/Niysxo/kLGmmN6D2yMAj8+KCGoRnYNfYqyPrCizomoGDPJwskwsbtRuOv WJpBFBpcNcGuIBsbtTBh3HCMdcVNFvaU7H1mr0ETAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUkFhMw0YSpnb3iYxVtXrkTTq+kogwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzI5MTBiY2ZhLTRiY2ItNDEyNS1hNTZmLTRiYjk1OTZmNWFkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwBTANBgkqhkiG9w0BAQsFAAOCAQEAmjlwrqYseS0oYdDYeOLtM/V7 PjipH8tPcj1beQCiieJpIHDo0CzO9auEAaUeIkywQKbgDqNN/YhrxUK6S750EdyX yLe30hjzni8eDXJ6w7+NNkLmCrAuKNkaZxwvUcs5jQtOcYy44Aedq9mlKuo9aLDv FujaoRua6+LXYnonbSbiyOd/oswW3av/iudnuszHhMowF+wWMmqosWpheAVMMSbj 5PO6CfkwyqbJKPFne7rWXsQR2FmDoS4Mqge9VYVRZ9TdpdkhimxsyN6O3nOpn2uU G13pwJqhRyq+pUTN4fXw6XWPr1fA/0e5Y4GXExl4qUsnKkphTfL9AcLljl5YXQ== -----END CERTIFICATE-----Generated at Sun Jun 29 11:28:41 2025 by rpki-client