$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/92842c72-d501-4996-b9a9-686d162bc8c1.roa File: 92842c72-d501-4996-b9a9-686d162bc8c1.roa (raw, json) Hash identifier: uhNvHznlio2Has3IlBsIzuAvBC/+wsQsE2g9ffVfsPY= Subject key identifier: 6D:9F:10:FB:D2:D0:57:F5:CD:6A:A3:CC:F2:6F:AD:33:B1:F9:82:CF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7D92CAE7E509CDCE1087B66E82751949D390D720 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/92842c72-d501-4996-b9a9-686d162bc8c1.roa Signing time: Wed 25 Jun 2025 19:07:10 +0000 ROA not before: Wed 25 Jun 2025 19:07:10 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:92:ca:e7:e5:09:cd:ce:10:87:b6:6e:82:75:19:49:d3:90:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 25 19:07:10 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=ffabbe1d3ec756ca78692e99d9ce6bc2f51bc9d5b0aeb7cdd4ca2cdc754d447f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:6d:5e:d6:89:a5:6d:6a:08:0d:40:ed:77: 49:fb:2a:d5:13:0d:5c:6c:22:cc:ec:13:92:ed:28: 95:8a:a9:cd:8f:5b:d2:dd:ee:1a:05:5c:c2:31:81: 26:73:c2:69:2a:e9:86:44:91:a1:30:48:e3:bf:82: 61:c1:fb:78:e7:6c:2e:eb:57:76:58:6d:eb:63:7c: 84:2c:be:92:fd:69:55:54:e8:0a:56:bf:3f:be:18: 31:bf:05:42:dc:69:53:29:f6:d6:8a:37:d7:93:83: 86:c4:00:4b:22:b3:91:5f:f6:13:ae:94:01:d5:8f: 05:14:15:e1:06:6b:c4:4f:86:77:41:59:1c:45:29: 91:e0:91:33:82:f1:04:90:9c:a2:6d:b5:ce:dc:c8: 2f:26:55:7c:63:37:1f:44:49:09:9b:60:09:b4:8f: c6:5a:40:6c:0d:2f:21:5f:10:4d:f0:96:69:d2:e5: e2:a3:be:2a:17:9d:8d:e2:8f:13:60:e6:f3:26:81: f8:0e:76:40:55:ce:5f:47:e9:6c:66:da:03:4c:fa: 7d:6a:65:f9:98:e3:a3:ea:ce:4f:f3:65:b2:0d:46: 45:4b:ff:70:15:6c:be:9a:4d:77:24:ba:2a:2f:a8: d6:ad:ef:5a:7f:0b:0d:99:3e:b1:a1:24:62:73:4f: aa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9F:10:FB:D2:D0:57:F5:CD:6A:A3:CC:F2:6F:AD:33:B1:F9:82:CF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/92842c72-d501-4996-b9a9-686d162bc8c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:a::/48 Signature Algorithm: sha256WithRSAEncryption 57:aa:7c:34:27:d1:e1:da:6c:90:32:61:0a:49:88:30:cb:96: cb:6d:59:26:f4:b3:a9:6e:14:ed:fd:32:e2:8a:61:57:23:9e: 49:26:80:fe:a5:42:ea:a5:12:5b:54:9a:b8:32:09:76:3a:16: d1:28:4f:d2:b1:8c:55:f4:60:6a:76:0e:cc:4c:b8:93:5d:3e: c2:c5:a9:7c:2c:08:ec:5b:ff:e9:48:9b:67:53:1f:ea:31:cc: d8:c7:93:46:14:76:6b:83:56:95:91:2a:d7:23:5c:6a:72:66: a5:34:57:83:11:85:92:a1:c2:81:65:2a:bf:17:30:70:94:b1: 8d:8f:42:63:6c:8c:13:1b:85:21:49:90:cb:fc:fd:15:1e:c7: b1:74:fa:54:83:fd:1d:0c:b3:de:f8:0f:b9:e7:a2:eb:41:1b: 2e:fa:77:67:96:1b:1a:b1:52:62:36:48:83:18:5a:2b:52:2d: 50:38:97:3c:05:9f:b4:87:ef:48:cc:15:d9:af:1c:dd:b5:d0: ff:cf:2b:d5:30:9c:b7:2f:fb:75:14:38:31:7d:5e:80:69:8b: 8e:26:e9:1c:c2:7e:6a:27:bd:73:eb:a0:69:36:c7:61:3a:6e: f3:93:97:54:d3:cb:87:22:f0:5e:7b:c0:8f:87:43:18:7b:7d: 12:96:41:48 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfZLK5+UJzc4Qh7ZugnUZSdOQ1yAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjI1MTkwNzEwWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmFiYmUxZDNlYzc1NmNhNzg2OTJlOTlkOWNlNmJjMmY1 MWJjOWQ1YjBhZWI3Y2RkNGNhMmNkYzc1NGQ0NDdmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcHG1e1omlbWoIDUDtd0n7KtUTDVxsIszsE5LtKJWKqc2P W9Ld7hoFXMIxgSZzwmkq6YZEkaEwSOO/gmHB+3jnbC7rV3ZYbetjfIQsvpL9aVVU 6ApWvz++GDG/BULcaVMp9taKN9eTg4bEAEsis5Ff9hOulAHVjwUUFeEGa8RPhndB WRxFKZHgkTOC8QSQnKJttc7cyC8mVXxjNx9ESQmbYAm0j8ZaQGwNLyFfEE3wlmnS 5eKjvioXnY3ijxNg5vMmgfgOdkBVzl9H6Wxm2gNM+n1qZfmY46Pqzk/zZbINRkVL /3AVbL6aTXckuiovqNat71p/Cw2ZPrGhJGJzT6opAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbZ8Q+9LQV/XNaqPM8m+tM7H5gs8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzkyODQyYzcyLWQ1MDEtNDk5Ni1iOWE5LTY4NmQxNjJiYzhjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAowDQYJKoZIhvcNAQELBQADggEBAFeqfDQn0eHabJAyYQpJiDDL lsttWSb0s6luFO39MuKKYVcjnkkmgP6lQuqlEltUmrgyCXY6FtEoT9KxjFX0YGp2 DsxMuJNdPsLFqXwsCOxb/+lIm2dTH+oxzNjHk0YUdmuDVpWRKtcjXGpyZqU0V4MR hZKhwoFlKr8XMHCUsY2PQmNsjBMbhSFJkMv8/RUex7F0+lSD/R0Ms974D7nnoutB Gy76d2eWGxqxUmI2SIMYWitSLVA4lzwFn7SH70jMFdmvHN210P/PK9UwnLcv+3UU ODF9XoBpi44m6RzCfmonvXProGk2x2E6bvOTl1TTy4ci8F57wI+HQxh7fRKWQUg= -----END CERTIFICATE-----Generated at Mon Jun 30 18:39:51 2025 by rpki-client