$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa File: a0024e00-f937-4b63-91df-d45ce0a6a27d.roa (raw, json) Hash identifier: 8sOfpzglWgcCP4kvc+5BddhyQtA36o7GodncUZ/Qruc= Subject key identifier: C3:F1:10:3A:FD:17:E9:9B:9F:3D:E0:30:F0:22:A7:4F:BD:6E:F6:E2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 64F0E669A035F938BC2C255FD25EF7862DDB9B6C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa Signing time: Tue 05 Aug 2025 18:20:19 +0000 ROA not before: Tue 05 Aug 2025 18:20:19 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f0:e6:69:a0:35:f9:38:bc:2c:25:5f:d2:5e:f7:86:2d:db:9b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:20:19 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=08a4380792344c24e5526f9b62ff981aad4c89dbb8f75c50e58ae3250d3da6aa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:54:71:0f:b2:14:6a:92:08:1d:23:8a:71:c5: 94:91:f3:49:cf:3b:e2:ed:0d:8a:47:e9:53:c8:42: bb:ad:e6:e0:0f:d4:6c:17:08:d0:c2:6d:9e:ea:28: 81:f7:79:d5:9a:67:54:cf:9a:94:d3:bd:a2:f1:c4: bf:07:61:96:28:8b:4d:bb:e4:f2:05:7f:f5:63:19: e7:0d:73:bc:d5:aa:6a:15:14:b4:03:18:63:25:14: 81:73:8e:6f:aa:b6:b1:d4:1d:61:c5:68:44:d2:7c: d4:23:dc:93:22:0a:01:07:c1:e7:f2:22:30:4d:b6: ec:5d:55:7f:42:6f:be:8e:11:47:75:bd:a8:75:17: f3:a8:7d:d1:17:44:f2:60:37:0b:aa:14:36:3c:d0: 0d:bc:16:0f:e6:dd:5f:6f:82:0d:d2:13:24:bf:ce: b2:fd:68:de:c6:87:b6:da:2b:09:a3:3c:67:2f:8d: b0:bf:05:e7:e2:81:6c:a4:9b:98:00:43:44:19:63: d4:de:bb:af:45:8f:8d:a2:e0:d5:45:73:1c:fe:bc: 90:ec:f3:65:33:1f:fb:37:c9:3a:2e:13:2e:a2:f0: 1e:de:b5:fa:a7:8b:53:71:bc:bc:cc:1b:7f:f0:e4: cf:f4:1f:9f:c4:dd:77:71:b6:90:2f:b3:f0:66:5e: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F1:10:3A:FD:17:E9:9B:9F:3D:E0:30:F0:22:A7:4F:BD:6E:F6:E2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6010::/44 Signature Algorithm: sha256WithRSAEncryption 5c:5b:46:63:3e:c9:ad:d8:b2:ee:b8:5d:fb:37:0a:f5:ac:57: 58:fa:f0:1c:dc:9e:74:1f:09:99:87:5f:cd:90:6c:c7:c0:95: e9:0c:24:61:59:8a:ab:d2:f7:96:75:26:ae:40:49:76:52:b2: c4:51:d9:34:51:c1:72:c3:8e:49:46:db:ac:53:26:a0:4e:f0: c7:5e:7c:e0:8b:ab:fa:6f:c0:cd:b9:99:a0:a8:c8:16:44:24: 33:ee:f6:76:9b:8e:2f:82:14:32:31:66:2a:af:e3:4c:e0:3c: 2a:58:ac:6b:ed:5d:07:2d:8d:c6:77:9d:34:7a:54:f8:a4:59: 39:64:2a:76:20:09:3b:59:3a:a6:41:66:de:d9:9d:c6:f9:14: 03:e9:8e:01:83:d5:b2:39:e6:34:00:15:f3:82:af:46:08:b8: 68:5b:35:67:02:7e:c9:18:b3:12:a2:fb:d9:80:86:f8:97:65: d3:27:55:48:a0:a0:aa:3d:49:11:fb:50:b4:0c:c1:24:25:76: 52:cf:cc:97:ea:75:10:ba:c0:a5:48:f1:7f:cc:4a:27:ed:3e: 29:a1:f1:36:ad:47:c9:5a:53:68:5c:72:a5:84:01:3c:93:4b: e1:7f:05:ab:5d:2f:bd:8c:27:33:39:e9:03:45:7d:b0:11:f1: 83:ff:59:ea -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZPDmaaA1+Ti8LCVf0l73hi3bm2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgyMDE5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGE0MzgwNzkyMzQ0YzI0ZTU1MjZmOWI2MmZmOTgxYWFk NGM4OWRiYjhmNzVjNTBlNThhZTMyNTBkM2RhNmFhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOVHEPshRqkggdI4pxxZSR80nPO+LtDYpH6VPIQrut5uAP 1GwXCNDCbZ7qKIH3edWaZ1TPmpTTvaLxxL8HYZYoi0275PIFf/VjGecNc7zVqmoV FLQDGGMlFIFzjm+qtrHUHWHFaETSfNQj3JMiCgEHwefyIjBNtuxdVX9Cb76OEUd1 vah1F/OofdEXRPJgNwuqFDY80A28Fg/m3V9vgg3SEyS/zrL9aN7Gh7baKwmjPGcv jbC/BefigWykm5gAQ0QZY9Teu69Fj42i4NVFcxz+vJDs82UzH/s3yTouEy6i8B7e tfqni1NxvLzMG3/w5M/0H5/E3XdxtpAvs/BmXqEDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUw/EQOv0X6ZufPeAw8CKnT71u9uIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EwMDI0ZTAwLWY5MzctNGI2My05MWRmLWQ0NWNlMGE2YTI3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYBAwDQYJKoZIhvcNAQELBQADggEBAFxbRmM+ya3Ysu64Xfs3CvWs V1j68BzcnnQfCZmHX82QbMfAlekMJGFZiqvS95Z1Jq5ASXZSssRR2TRRwXLDjklG 26xTJqBO8MdefOCLq/pvwM25maCoyBZEJDPu9nabji+CFDIxZiqv40zgPCpYrGvt XQctjcZ3nTR6VPikWTlkKnYgCTtZOqZBZt7Zncb5FAPpjgGD1bI55jQAFfOCr0YI uGhbNWcCfskYsxKi+9mAhviXZdMnVUigoKo9SRH7ULQMwSQldlLPzJfqdRC6wKVI 8X/MSiftPimh8TatR8laU2hccqWEATyTS+F/BatdL72MJzM56QNFfbAR8YP/Weo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:43 2025 by rpki-client