$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa File: 83f507f9-6df5-4947-842f-b89f2709cc4a.roa (raw, json) Hash identifier: WgxDRjeKGhNmMpDhQ5Wk2PT3naZjHEUlA59uiHQwBoM= Subject key identifier: 0C:66:04:DA:79:1B:55:22:DE:51:D3:D5:A9:A6:A4:E0:BE:23:16:E5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 359C33203D9314ADEF7EE79C3B21BF4A939F3EFD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa Signing time: Mon 16 Jun 2025 19:20:46 +0000 ROA not before: Mon 16 Jun 2025 19:20:46 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ef00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9c:33:20:3d:93:14:ad:ef:7e:e7:9c:3b:21:bf:4a:93:9f:3e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:46 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=720b1fe515105784a788be42bf091e1d4afd5053f3dd0ff2b07337edf1bb51a4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6a:0e:9f:14:50:77:b7:a1:62:d3:52:ff:d3: 65:2c:e5:a0:65:4c:4a:cf:d6:9f:cb:53:5b:fe:7a: fc:02:30:73:49:8b:4a:e8:c4:47:a4:93:0a:5f:b6: 20:b0:53:a6:9f:ee:3d:f3:73:13:10:ef:e0:8c:bc: 92:6d:f0:c6:a6:82:f4:89:33:85:0d:06:71:51:9d: 6b:36:ad:47:72:77:d6:b3:73:72:2b:c0:05:25:7a: ab:50:07:30:0e:bc:a5:2e:0a:1e:91:28:6e:ed:93: a3:5a:e1:0f:78:e0:67:25:9f:e3:5b:eb:1c:1b:7a: fb:b7:e0:d4:31:9b:ee:24:d2:ee:32:92:d3:d9:fe: 7f:e9:ff:6f:78:fd:a7:84:9d:65:88:ad:da:b1:ea: 2c:63:43:95:01:10:a1:89:31:c3:17:97:4f:5e:2f: d9:87:68:08:11:25:1a:89:af:08:7e:06:e3:77:e4: f3:3e:6d:01:52:60:80:18:ff:9b:dd:66:19:57:88: ed:52:14:1e:db:97:63:17:b2:08:65:b5:23:6d:76: 50:09:98:d5:b1:b2:c0:ff:dd:98:8a:0c:b0:ed:1d: cb:22:75:57:1f:a6:43:f6:95:b5:ce:85:f3:45:41: c6:ce:b3:23:7c:88:b9:b8:36:01:60:fc:3f:1d:95: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:66:04:DA:79:1B:55:22:DE:51:D3:D5:A9:A6:A4:E0:BE:23:16:E5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ef00::/42 Signature Algorithm: sha256WithRSAEncryption a1:9d:65:9b:04:d3:c9:bd:ba:45:48:12:a5:d3:e8:3c:90:2a: 04:1e:2b:8e:52:0f:eb:23:fd:ca:f5:4d:6e:d5:3d:9a:69:b1: 87:0e:ba:50:04:91:5f:85:e7:14:84:d0:bd:3d:99:b0:e6:85: 3e:9e:6e:03:3f:94:67:78:bc:47:a5:83:bf:a8:e2:8b:01:54: 1c:86:df:57:92:a9:7b:e6:88:72:56:5e:94:52:fc:d2:6b:58: 43:1d:60:5d:df:cc:de:37:f4:92:bf:41:c3:2a:22:c9:ca:e4: b9:2d:d1:ce:7d:85:f8:4d:89:48:d1:5c:d2:d4:b8:eb:26:95: 9f:f9:73:c2:7b:e7:a0:f8:15:f2:fc:4e:e0:31:f3:74:8c:6e: 71:c8:4f:f0:31:8b:91:6a:36:41:c7:fe:a3:37:5b:fc:1d:90: 1e:66:83:9c:92:f1:e8:1a:15:9d:30:4e:1e:71:3e:c1:a1:ac: 1b:65:8a:0c:9c:02:f7:78:e0:6a:41:e2:81:b8:aa:82:12:c3: 71:b0:f4:cc:a4:0d:0e:47:11:63:cd:b8:95:38:e7:a7:c3:21: 82:0d:07:fe:2e:8c:af:07:d1:83:6a:f3:67:e4:10:f2:58:98: c4:2a:e9:f3:65:e6:fc:62:d2:15:43:a7:43:4d:03:0e:f0:a0: 9b:ee:46:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNZwzID2TFK3vfuecOyG/SpOfPv0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDQ2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjBiMWZlNTE1MTA1Nzg0YTc4OGJlNDJiZjA5MWUxZDRh ZmQ1MDUzZjNkZDBmZjJiMDczMzdlZGYxYmI1MWE0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKag6fFFB3t6Fi01L/02Us5aBlTErP1p/LU1v+evwCMHNJ i0roxEekkwpftiCwU6af7j3zcxMQ7+CMvJJt8MamgvSJM4UNBnFRnWs2rUdyd9az c3IrwAUleqtQBzAOvKUuCh6RKG7tk6Na4Q944Gcln+Nb6xwbevu34NQxm+4k0u4y ktPZ/n/p/294/aeEnWWIrdqx6ixjQ5UBEKGJMcMXl09eL9mHaAgRJRqJrwh+BuN3 5PM+bQFSYIAY/5vdZhlXiO1SFB7bl2MXsghltSNtdlAJmNWxssD/3ZiKDLDtHcsi dVcfpkP2lbXOhfNFQcbOsyN8iLm4NgFg/D8dlfDVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDGYE2nkbVSLeUdPVqaak4L4jFuUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzgzZjUwN2Y5LTZkZjUtNDk0Ny04NDJmLWI4OWYyNzA5Y2M0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77wAwDQYJKoZIhvcNAQELBQADggEBAKGdZZsE08m9ukVIEqXT6DyQ KgQeK45SD+sj/cr1TW7VPZppsYcOulAEkV+F5xSE0L09mbDmhT6ebgM/lGd4vEel g7+o4osBVByG31eSqXvmiHJWXpRS/NJrWEMdYF3fzN439JK/QcMqIsnK5Lkt0c59 hfhNiUjRXNLUuOsmlZ/5c8J756D4FfL8TuAx83SMbnHIT/Axi5FqNkHH/qM3W/wd kB5mg5yS8egaFZ0wTh5xPsGhrBtligycAvd44GpB4oG4qoISw3Gw9MykDQ5HEWPN uJU456fDIYINB/4ujK8H0YNq82fkEPJYmMQq6fNl5vxi0hVDp0NNAw7woJvuRh0= -----END CERTIFICATE-----Generated at Sun Jun 29 09:10:57 2025 by rpki-client