$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa File: 5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa (raw, json) Hash identifier: Ju2bOTHs8vGrGSDeXhLaUT4VkEHMZ8mKDEmtjU4S5lA= Subject key identifier: E4:12:E4:22:CF:F7:C0:42:EC:8C:59:54:21:55:74:A8:34:1B:73:F4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 38522CA7205800B7FA0F70D5ABF7F95A98BD85DB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa Signing time: Tue 05 Aug 2025 18:31:23 +0000 ROA not before: Tue 05 Aug 2025 18:31:23 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:52:2c:a7:20:58:00:b7:fa:0f:70:d5:ab:f7:f9:5a:98:bd:85:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:31:23 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=b2800040dc2327b39fe1959095c33e12a3af6bec53c0454513ee741d99da1b0e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:20:09:ce:31:91:b8:71:25:34:2e:87:63: 13:c4:38:af:ee:1b:c0:22:c4:46:57:2e:5a:bb:38: 69:fc:e9:05:61:86:4c:ab:15:17:ca:d0:ab:ae:4f: 70:2c:2e:5b:a1:ea:6d:9b:98:79:03:db:71:e2:f9: 40:ed:04:b2:a5:99:f2:03:1f:81:d0:cf:0e:dc:80: 88:bb:0e:31:f7:1f:1b:9c:36:06:42:93:b4:15:4a: fb:dc:88:87:ca:e2:c2:63:53:b1:d8:4c:9b:03:26: 7e:a7:6d:3d:5d:9b:3f:38:b0:04:18:c9:25:9a:08: 41:6e:6b:04:b2:07:0a:69:44:31:6b:54:f7:f7:3e: d6:dc:b1:56:d0:92:45:22:68:59:39:22:36:1b:00: ae:1d:db:56:7b:a9:7d:be:b1:a5:02:b9:4a:66:a1: 48:8e:e5:86:81:14:10:ae:c7:7b:04:eb:01:4e:26: 3a:9a:a7:74:4f:c8:98:d9:d0:7a:eb:e7:9b:fd:0c: 41:74:00:15:e8:a4:fc:03:38:ba:9d:32:f3:ec:bc: 35:e5:17:a4:a4:a2:50:be:4f:a9:a4:df:bb:2e:98: 44:7f:c9:1d:6b:43:a6:5e:43:60:fc:2d:86:f9:8b: 93:31:26:44:cb:2e:fc:8f:83:5f:b1:9c:a2:b6:4e: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:12:E4:22:CF:F7:C0:42:EC:8C:59:54:21:55:74:A8:34:1B:73:F4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e100::/40 Signature Algorithm: sha256WithRSAEncryption 1a:fb:72:19:d1:cf:c8:fb:b9:b8:f1:97:06:31:d3:d7:4a:f4: 32:d0:4e:d9:0d:cb:57:31:c9:e3:0f:48:6e:73:e3:41:50:91: f6:55:a9:39:84:78:8c:2c:83:46:86:78:d8:da:95:e2:e9:d1: 77:15:82:d5:5c:67:a7:16:77:54:f8:b4:c7:59:e3:69:0e:0d: ac:9d:1c:46:bb:f7:83:09:d3:f9:6c:21:52:e4:d4:3a:36:69: 96:63:c0:4c:1c:64:63:48:26:4f:36:c1:e5:0b:db:2b:4c:48: 59:76:66:a5:e5:b7:34:88:46:e0:6e:62:ab:2e:23:ce:d7:e1: 9d:40:93:65:f4:43:50:08:d0:47:81:62:82:17:40:c5:3e:b0: 39:02:26:04:dc:23:73:57:42:ec:ff:4c:0b:d2:1c:01:1b:5d: 69:d1:bb:57:5b:61:6d:7c:1c:69:58:4f:89:36:61:25:b7:71: 14:09:5e:d5:59:ab:31:2a:94:48:3e:5f:0c:6f:9c:77:03:63: ba:fd:ee:87:1b:4f:76:59:bc:17:91:c8:a9:8b:e6:db:93:7a: a4:9c:01:fa:79:15:3f:70:ba:da:91:65:0f:3e:71:91:67:e7: 32:ac:27:b0:83:87:e0:8c:2c:94:65:56:d1:bc:5c:1f:39:7f: 17:15:c0:da -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOFIspyBYALf6D3DVq/f5Wpi9hdswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgzMTIzWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjgwMDA0MGRjMjMyN2IzOWZlMTk1OTA5NWMzM2UxMmEz YWY2YmVjNTNjMDQ1NDUxM2VlNzQxZDk5ZGExYjBlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyzCAJzjGRuHElNC6HYxPEOK/uG8AixEZXLlq7OGn86QVh hkyrFRfK0KuuT3AsLluh6m2bmHkD23Hi+UDtBLKlmfIDH4HQzw7cgIi7DjH3Hxuc NgZCk7QVSvvciIfK4sJjU7HYTJsDJn6nbT1dmz84sAQYySWaCEFuawSyBwppRDFr VPf3PtbcsVbQkkUiaFk5IjYbAK4d21Z7qX2+saUCuUpmoUiO5YaBFBCux3sE6wFO Jjqap3RPyJjZ0Hrr55v9DEF0ABXopPwDOLqdMvPsvDXlF6SkolC+T6mk37sumER/ yR1rQ6ZeQ2D8LYb5i5MxJkTLLvyPg1+xnKK2TjBbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU5BLkIs/3wELsjFlUIVV0qDQbc/QwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzUyMTFiYmZhLWMyNmMtNDRmOC05NmIyLWE5MjgyY2ZkNjFhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74TANBgkqhkiG9w0BAQsFAAOCAQEAGvtyGdHPyPu5uPGXBjHT10r0 MtBO2Q3LVzHJ4w9IbnPjQVCR9lWpOYR4jCyDRoZ42NqV4unRdxWC1VxnpxZ3VPi0 x1njaQ4NrJ0cRrv3gwnT+WwhUuTUOjZplmPATBxkY0gmTzbB5QvbK0xIWXZmpeW3 NIhG4G5iqy4jztfhnUCTZfRDUAjQR4FighdAxT6wOQImBNwjc1dC7P9MC9IcARtd adG7V1thbXwcaVhPiTZhJbdxFAle1VmrMSqUSD5fDG+cdwNjuv3uhxtPdlm8F5HI qYvm25N6pJwB+nkVP3C62pFlDz5xkWfnMqwnsIOH4IwslGVW0bxcHzl/FxXA2g== -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:21 2025 by rpki-client