$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa File: 8befeacb-b991-408b-912e-a5a744fc13df.roa (raw, json) Hash identifier: gd0o+vfjMlViu6q651c7k4G7hRaJiTqABWMFTBpW96M= Subject key identifier: 66:1C:BE:B6:D9:57:29:02:83:6E:45:A8:4D:AA:0A:08:2A:8E:E7:8C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2888AB718212EEED0877E93E9737695A4E6E75E8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa Signing time: Mon 18 Aug 2025 18:22:15 +0000 ROA not before: Mon 18 Aug 2025 18:22:15 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:88:ab:71:82:12:ee:ed:08:77:e9:3e:97:37:69:5a:4e:6e:75:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 18 18:22:15 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=5187c7ea80b9a0428110982218dbe136d21ad02ff1b4144dec8b53fad119077f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:59:dd:b0:3a:51:38:8c:8b:91:dc:b3:f6: 56:38:2c:e7:d3:15:22:9b:09:53:ac:83:31:85:dc: 0c:cf:2e:1e:23:bd:69:b5:60:98:03:df:24:69:fb: 8b:7a:46:10:5b:d5:9a:f2:81:00:24:60:17:24:91: ad:5c:d8:04:ca:f6:d5:0e:e7:5a:f9:66:7a:48:ec: 65:63:f9:dd:cb:e2:c7:85:a2:cc:9a:57:04:60:fd: 4e:a9:72:58:69:02:22:65:a1:cd:af:20:81:9c:09: bc:00:ff:cc:02:48:a0:11:e0:d7:2c:b7:7d:ef:17: 3b:be:28:65:96:e0:66:4f:f2:fb:58:90:38:4a:03: 4b:20:30:fa:88:17:aa:5b:06:86:60:75:c6:b6:24: 90:bd:e3:a5:25:84:23:b1:14:b1:59:18:90:5b:3f: 44:b4:a1:67:0e:23:96:55:f4:db:7b:8d:79:f0:58: 4b:62:67:70:1c:a4:1f:ef:9e:68:1c:24:b4:28:c3: cd:5e:e0:62:9d:68:e3:aa:2e:59:35:f9:63:78:40: 22:d3:ec:ef:01:4e:12:2c:5d:0d:f3:ea:98:c2:70: 71:c9:f3:2f:9d:65:62:10:61:24:e4:d8:09:9e:db: 19:21:9f:50:c3:0c:c4:1e:b1:a7:5a:35:17:21:6b: c0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:BE:B6:D9:57:29:02:83:6E:45:A8:4D:AA:0A:08:2A:8E:E7:8C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6106::/48 Signature Algorithm: sha256WithRSAEncryption 39:2c:14:a3:16:55:b6:85:41:9a:d9:fa:6e:90:e6:5c:6c:42: 4b:3f:23:1c:f6:26:0c:80:55:49:df:7c:b8:8e:9f:f0:29:fa: 55:ea:e0:60:0b:ba:a9:ed:1e:30:0d:54:98:8d:ba:2e:96:62: e1:fc:aa:b2:20:b7:c2:68:20:49:69:67:75:d7:2a:48:29:e7: 53:e9:dc:1c:6b:5c:81:a8:7d:db:62:50:46:9e:2d:72:99:0a: e5:e7:16:05:e5:45:a8:97:a6:70:58:5b:7d:8f:4e:28:ec:ca: db:74:33:e1:de:d0:f1:86:80:60:d7:b3:23:0f:26:99:15:63: 2e:af:29:85:77:73:ed:c8:18:4a:a7:b2:f6:46:fe:5c:4b:c2: f5:3c:a0:3c:b1:e3:91:d4:49:85:ca:13:d2:20:b9:42:d2:a1: 3b:f7:74:55:65:7b:13:4d:32:d9:b8:eb:f8:78:55:76:6c:e9: 46:9d:17:89:a2:0e:55:ff:b5:a4:6d:36:a6:26:9d:4b:0c:48: 35:12:2c:a2:3b:b3:ea:fa:e4:04:cf:87:0d:28:13:ca:6c:5e: 87:98:bc:ce:ae:25:74:47:75:bd:a4:a1:1d:c1:0c:9d:f1:f3: 7f:39:69:b0:0f:07:c6:1f:7b:5a:00:79:a0:d4:2c:11:a5:93: 96:93:d0:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKIircYIS7u0Id+k+lzdpWk5udegwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE4MTgyMjE1WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTg3YzdlYTgwYjlhMDQyODExMDk4MjIxOGRiZTEzNmQy MWFkMDJmZjFiNDE0NGRlYzhiNTNmYWQxMTkwNzdmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC08FndsDpROIyLkdyz9lY4LOfTFSKbCVOsgzGF3AzPLh4j vWm1YJgD3yRp+4t6RhBb1ZrygQAkYBckka1c2ATK9tUO51r5ZnpI7GVj+d3L4seF osyaVwRg/U6pclhpAiJloc2vIIGcCbwA/8wCSKAR4Ncst33vFzu+KGWW4GZP8vtY kDhKA0sgMPqIF6pbBoZgdca2JJC946UlhCOxFLFZGJBbP0S0oWcOI5ZV9Nt7jXnw WEtiZ3AcpB/vnmgcJLQow81e4GKdaOOqLlk1+WN4QCLT7O8BThIsXQ3z6pjCcHHJ 8y+dZWIQYSTk2Ame2xkhn1DDDMQesadaNRcha8CbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZhy+ttlXKQKDbkWoTaoKCCqO54wwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhiZWZlYWNiLWI5OTEtNDA4Yi05MTJlLWE1YTc0NGZjMTNkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQYwDQYJKoZIhvcNAQELBQADggEBADksFKMWVbaFQZrZ+m6Q5lxs Qks/Ixz2JgyAVUnffLiOn/Ap+lXq4GALuqntHjANVJiNui6WYuH8qrIgt8JoIElp Z3XXKkgp51Pp3BxrXIGofdtiUEaeLXKZCuXnFgXlRaiXpnBYW32PTijsytt0M+He 0PGGgGDXsyMPJpkVYy6vKYV3c+3IGEqnsvZG/lxLwvU8oDyx45HUSYXKE9IguULS oTv3dFVlexNNMtm46/h4VXZs6UadF4miDlX/taRtNqYmnUsMSDUSLKI7s+r65ATP hw0oE8psXoeYvM6uJXRHdb2koR3BDJ3x8385abAPB8Yfe1oAeaDULBGlk5aT0Kk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:17:33 2025 by rpki-client