$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa File: 5aab2439-03d3-439a-885f-e2f641886f3d.roa (raw, json) Hash identifier: BMPG5lZn6wq6Zu9G3p7wUXhJ54yXEH4KRKaxKl1Sm0A= Subject key identifier: 51:D6:EE:7A:63:33:B7:08:7E:0D:77:E1:3E:E2:1D:60:7D:8B:D4:12 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 58F45570A5DCC9FE2F8F4426C3D38577AFB18F13 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa Signing time: Tue 24 Jun 2025 15:00:09 +0000 ROA not before: Tue 24 Jun 2025 15:00:09 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f020::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f4:55:70:a5:dc:c9:fe:2f:8f:44:26:c3:d3:85:77:af:b1:8f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 24 15:00:09 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=47a8f2a50c96275d020e0841913c0f257f80d90aa0f5813108ed46cf1bf9cd02, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:1c:d8:5c:f0:00:2d:fa:4d:79:29:01:46: f0:8b:64:ef:dc:62:01:a6:d2:8d:ee:0a:a0:cb:2d: 61:c8:b8:16:2f:7d:bb:fb:92:6a:e2:87:86:a0:07: f6:b7:9c:91:b3:a2:f0:be:c2:68:b8:5b:fd:1a:92: 34:93:aa:01:ae:e1:9c:2e:b8:83:7f:8b:5e:50:1d: 1a:02:99:ab:f4:b1:e2:a0:56:aa:77:b5:58:56:7b: 2b:a5:49:95:b0:1d:02:12:a3:71:94:23:73:75:23: dd:9d:f4:93:bd:3e:2c:fc:56:2a:db:fb:5c:13:1b: 13:e8:5a:63:c5:cd:ef:94:75:20:2f:8d:e2:82:11: 92:77:10:b6:37:49:6c:5c:b8:af:dc:bf:5d:41:90: 41:f9:17:8d:3e:80:d3:f6:e0:0b:0f:f0:89:b4:48: 08:05:5c:06:17:3a:52:d8:87:d5:4f:a6:4d:54:a4: e8:11:0f:0f:d3:08:e9:8e:ea:06:ed:99:67:58:da: 9a:cf:3a:ee:c2:a9:13:6d:0b:59:f3:4e:39:a9:36: 82:53:42:d2:3f:95:23:a9:db:29:9e:4d:a2:8d:e2: c2:2d:8b:06:91:01:d5:06:38:1e:43:03:da:2e:d2: ad:ca:a0:e8:32:58:d4:36:c8:1e:4c:0c:40:07:33: d2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D6:EE:7A:63:33:B7:08:7E:0D:77:E1:3E:E2:1D:60:7D:8B:D4:12 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5aab2439-03d3-439a-885f-e2f641886f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f020::/44 Signature Algorithm: sha256WithRSAEncryption a4:6e:23:6d:06:43:e2:85:95:e6:09:1a:a7:a7:29:b3:4d:d4: 24:ac:0d:db:51:09:be:7f:75:0e:7b:21:d3:41:81:f4:1b:66: f3:46:e2:05:34:d3:a8:e3:19:f6:87:5c:70:50:fe:64:7f:e9: b9:53:44:aa:d2:3c:35:5e:82:4d:1e:f7:52:7d:ea:37:76:96: 86:71:17:9d:09:8b:88:d2:ca:07:1e:74:25:d6:89:1b:36:df: 87:7d:38:99:93:0b:01:9d:9c:5e:ff:5a:b4:99:81:68:da:23: 62:82:02:de:52:ce:69:cb:35:b7:cc:f5:93:e1:fe:1a:74:cf: e3:d8:15:7b:6a:91:94:a4:89:73:79:99:18:cc:3b:c3:c0:d6: 55:89:b2:d9:53:67:a5:49:32:5f:a8:81:19:03:99:b1:6d:59: f8:ec:9e:37:60:e0:85:ce:9e:90:94:05:d6:80:c5:8c:39:f9: b3:f4:76:7f:4a:55:2e:bf:4e:82:15:d5:16:90:6b:f1:f5:c4: d9:af:79:07:9c:16:7d:46:0a:f3:68:ab:33:5d:cc:52:d4:3d: 90:96:3e:e8:80:2f:29:22:e2:57:73:74:41:86:1e:7e:ce:7a: d4:25:80:0a:71:04:63:0b:70:59:f2:02:78:80:f4:32:9c:65: 88:7d:3e:5f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWPRVcKXcyf4vj0Qmw9OFd6+xjxMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjI0MTUwMDA5WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2E4ZjJhNTBjOTYyNzVkMDIwZTA4NDE5MTNjMGYyNTdm ODBkOTBhYTBmNTgxMzEwOGVkNDZjZjFiZjljZDAyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOFhzYXPAALfpNeSkBRvCLZO/cYgGm0o3uCqDLLWHIuBYv fbv7kmrih4agB/a3nJGzovC+wmi4W/0akjSTqgGu4ZwuuIN/i15QHRoCmav0seKg Vqp3tVhWeyulSZWwHQISo3GUI3N1I92d9JO9Piz8Virb+1wTGxPoWmPFze+UdSAv jeKCEZJ3ELY3SWxcuK/cv11BkEH5F40+gNP24AsP8Im0SAgFXAYXOlLYh9VPpk1U pOgRDw/TCOmO6gbtmWdY2prPOu7CqRNtC1nzTjmpNoJTQtI/lSOp2ymeTaKN4sIt iwaRAdUGOB5DA9ou0q3KoOgyWNQ2yB5MDEAHM9LlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUdbuemMztwh+DXfhPuIdYH2L1BIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVhYWIyNDM5LTAzZDMtNDM5YS04ODVmLWUyZjY0MTg4NmYzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78CAwDQYJKoZIhvcNAQELBQADggEBAKRuI20GQ+KFleYJGqenKbNN 1CSsDdtRCb5/dQ57IdNBgfQbZvNG4gU006jjGfaHXHBQ/mR/6blTRKrSPDVegk0e 91J96jd2loZxF50Ji4jSygcedCXWiRs234d9OJmTCwGdnF7/WrSZgWjaI2KCAt5S zmnLNbfM9ZPh/hp0z+PYFXtqkZSkiXN5mRjMO8PA1lWJstlTZ6VJMl+ogRkDmbFt Wfjsnjdg4IXOnpCUBdaAxYw5+bP0dn9KVS6/ToIV1RaQa/H1xNmveQecFn1GCvNo qzNdzFLUPZCWPuiALyki4ldzdEGGHn7OetQlgApxBGMLcFnyAniA9DKcZYh9Pl8= -----END CERTIFICATE-----Generated at Tue Jul 1 10:28:17 2025 by rpki-client