$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa File: a7be9120-e9b3-488c-b7e4-818fad18a69e.roa (raw, json) Hash identifier: PlVxNFSaBpmPJphFNIgPlBiTOexfxJJm9HZirWWohRc= Subject key identifier: FA:4F:AD:A3:1B:98:5B:D7:26:CC:CD:4C:63:6B:C8:D9:F2:CD:B4:B7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4DA3F59CBAC0ED04536B991B1B14145698C82218 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa Signing time: Sat 21 Jun 2025 00:20:22 +0000 ROA not before: Sat 21 Jun 2025 00:20:22 +0000 ROA not after: Sat 26 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a3:f5:9c:ba:c0:ed:04:53:6b:99:1b:1b:14:14:56:98:c8:22:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 21 00:20:22 2025 GMT Not After : Jul 26 23:59:59 2025 GMT Subject: serialNumber=bfd045999b68db84041af57133a498d1c9f627a327fdc56c24be98deda623184, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:e0:99:d9:04:91:b3:ba:3d:9f:62:d1:66: 84:04:e0:ba:0e:0c:e1:65:4f:e9:6b:ca:d3:3f:e6: 15:87:bc:9b:c9:f3:40:47:b6:6b:d2:9a:73:5d:a5: f1:cc:56:ea:14:df:33:82:be:37:dc:b4:29:42:78: b5:5b:9e:ad:99:1c:bc:c0:1d:30:bc:04:c3:43:6a: a7:d2:8c:35:03:8f:d7:f8:99:f6:a3:19:db:35:91: bb:0a:5e:be:fa:60:33:72:6a:02:e8:92:f9:1a:74: a0:52:bc:0a:d8:14:88:6c:91:db:e6:73:68:94:3a: 59:17:bf:73:39:38:13:e5:65:19:d9:ad:bc:fa:72: 14:57:e4:48:21:2c:f9:8e:da:5f:c3:c6:61:7f:59: 97:87:7c:20:2e:67:0f:cd:18:97:06:03:d2:9a:47: 00:57:4f:87:72:15:0f:45:dd:e0:35:93:9d:af:ce: c8:0c:f8:9a:1b:8d:af:68:4e:b4:e1:d1:2e:c5:39: e0:f5:11:a5:da:05:04:fa:19:88:08:f1:32:6f:57: 30:17:2f:cb:57:f3:92:20:c9:17:99:46:95:c0:a8: 10:26:61:71:ac:50:b9:6d:20:d0:46:82:da:6c:cb: b3:76:74:bd:1a:78:1b:3b:6b:59:95:9c:20:fd:09: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4F:AD:A3:1B:98:5B:D7:26:CC:CD:4C:63:6B:C8:D9:F2:CD:B4:B7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7100::/40 Signature Algorithm: sha256WithRSAEncryption 8d:14:f8:15:83:48:2c:06:8c:f6:11:f6:ef:52:1d:9a:28:7b: 98:ee:cf:94:ef:dc:22:6d:8b:cd:fa:c2:73:70:40:27:5f:ad: 86:16:ae:f7:9c:8e:84:55:45:37:9a:06:2f:07:84:5b:9b:40: a0:96:40:ac:6a:20:a6:be:e5:aa:04:dd:06:04:c8:81:2f:e6: 2c:5a:72:4e:48:3b:4c:7a:cd:51:6d:62:93:01:41:c1:91:d6: 68:10:ef:8e:fe:1a:e7:cb:82:6e:95:9a:46:52:51:79:75:2a: d9:18:cd:0f:c2:ac:5a:15:2d:aa:9d:06:48:37:63:30:79:03: 88:ed:6a:5b:c1:78:f3:0f:0d:e3:a2:cb:b2:3f:1d:d1:c5:eb: 8e:48:a7:fb:68:6a:38:f3:92:d9:7e:cd:6a:b2:e2:ca:f7:4c: d3:6f:ea:af:8e:72:e7:76:bd:56:27:ad:80:33:27:98:01:be: c9:43:60:27:14:5b:3e:c6:91:ab:d2:45:db:64:22:ee:5b:59: f6:47:cf:58:ce:79:e5:75:f6:4b:8b:cf:88:84:9b:a5:25:b8: ed:8f:1e:6a:43:d4:84:d7:12:74:11:5d:e8:43:6d:eb:ba:18: 26:f1:e2:31:d3:dc:1e:02:4d:3a:d3:b1:d9:77:9c:e3:dd:91: e2:23:52:98 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTaP1nLrA7QRTa5kbGxQUVpjIIhgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjIxMDAyMDIyWhcNMjUwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZmQwNDU5OTliNjhkYjg0MDQxYWY1NzEzM2E0OThkMWM5 ZjYyN2EzMjdmZGM1NmMyNGJlOThkZWRhNjIzMTg0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEIOCZ2QSRs7o9n2LRZoQE4LoODOFlT+lrytM/5hWHvJvJ 80BHtmvSmnNdpfHMVuoU3zOCvjfctClCeLVbnq2ZHLzAHTC8BMNDaqfSjDUDj9f4 mfajGds1kbsKXr76YDNyagLokvkadKBSvArYFIhskdvmc2iUOlkXv3M5OBPlZRnZ rbz6chRX5EghLPmO2l/DxmF/WZeHfCAuZw/NGJcGA9KaRwBXT4dyFQ9F3eA1k52v zsgM+Jobja9oTrTh0S7FOeD1EaXaBQT6GYgI8TJvVzAXL8tX85IgyReZRpXAqBAm YXGsULltINBGgtpsy7N2dL0aeBs7a1mVnCD9Ccl5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+k+toxuYW9cmzM1MY2vI2fLNtLcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E3YmU5MTIwLWU5YjMtNDg4Yy1iN2U0LTgxOGZhZDE4YTY5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEAjRT4FYNILAaM9hH271Idmih7 mO7PlO/cIm2LzfrCc3BAJ1+thhau95yOhFVFN5oGLweEW5tAoJZArGogpr7lqgTd BgTIgS/mLFpyTkg7THrNUW1ikwFBwZHWaBDvjv4a58uCbpWaRlJReXUq2RjND8Ks WhUtqp0GSDdjMHkDiO1qW8F48w8N46LLsj8d0cXrjkin+2hqOPOS2X7NarLiyvdM 02/qr45y53a9VietgDMnmAG+yUNgJxRbPsaRq9JF22Qi7ltZ9kfPWM555XX2S4vP iISbpSW47Y8eakPUhNcSdBFd6ENt67oYJvHiMdPcHgJNOtOx2Xec492R4iNSmA== -----END CERTIFICATE-----Generated at Sun Jun 29 04:23:00 2025 by rpki-client