$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b4163a38-a8e2-48d9-855f-dd53ae7f6dcf.roa File: b4163a38-a8e2-48d9-855f-dd53ae7f6dcf.roa (raw, json) Hash identifier: QBJ1Tbz7n5pVdgLl8S2B85sQmxWAnHDrtXXOEv540Jc= Subject key identifier: 30:89:2A:06:8D:70:AA:B3:AD:7A:D7:67:82:B7:DE:87:04:5C:A9:A0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2578E09B7F9B9E211CDE983D9E00E8DAA0B7B798 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b4163a38-a8e2-48d9-855f-dd53ae7f6dcf.roa Signing time: Wed 18 Jun 2025 00:30:03 +0000 ROA not before: Wed 18 Jun 2025 00:30:03 +0000 ROA not after: Wed 23 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:8801::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:78:e0:9b:7f:9b:9e:21:1c:de:98:3d:9e:00:e8:da:a0:b7:b7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 18 00:30:03 2025 GMT Not After : Jul 23 23:59:59 2025 GMT Subject: serialNumber=fcab9107cda98599b239fdf3099d8709f53ecbd7151348789d95538e97c95802, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:d3:81:f9:01:37:95:fa:e7:77:e3:9f:86: 38:78:ba:04:e2:d2:11:6b:6e:00:3e:13:bd:a7:a2: 04:ac:29:9d:ea:3f:ab:f2:0d:fc:1d:62:06:9a:b1: a9:b4:71:5a:36:e9:bb:f8:76:a5:c6:81:84:2f:62: 32:9a:62:4a:7d:6a:fc:6a:e2:f7:0a:d2:db:12:2b: 3e:6e:c6:6f:96:95:83:35:77:54:c7:3d:91:4b:e9: 03:95:73:65:05:a7:a6:a8:e0:9b:ae:26:ae:5a:74: 0f:b6:c5:e5:36:ab:9c:bf:89:47:6b:db:f7:91:35: 55:ec:0d:e0:e9:31:ad:75:c2:46:59:ba:5b:8a:ee: 72:55:ef:23:d6:b3:b5:9e:53:8e:7b:7c:f3:ef:a5: cb:da:22:10:64:e4:87:4c:ab:f2:10:79:26:22:bd: b3:72:a2:d8:9a:32:f6:3c:34:87:00:7e:d3:14:1e: 10:68:b0:1b:f3:70:7c:da:bf:aa:61:e5:c5:ba:67: 8c:d0:eb:62:76:04:ad:27:4e:11:c0:6c:ac:e1:4b: 95:13:a6:21:9e:5b:92:22:38:25:e2:d6:2c:d1:3c: 77:a3:f3:39:30:a5:4b:53:4c:f1:19:89:1b:0e:60: eb:da:3a:89:2b:32:0e:94:86:f0:48:45:3b:e0:1e: 13:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:89:2A:06:8D:70:AA:B3:AD:7A:D7:67:82:B7:DE:87:04:5C:A9:A0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b4163a38-a8e2-48d9-855f-dd53ae7f6dcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8801::/48 Signature Algorithm: sha256WithRSAEncryption 7b:d9:02:60:6e:54:37:14:b9:e0:9b:3e:e2:0a:3f:4a:22:67: a9:50:31:33:cc:e7:13:62:78:53:ad:f3:01:cb:12:78:05:3b: 0c:cf:d4:54:c7:96:31:fb:9c:05:b1:22:9d:97:3b:bf:c3:4e: 28:9e:2c:69:a5:55:d2:56:d8:31:35:1e:17:4e:4c:98:aa:c8: 12:2d:85:00:69:22:fd:f8:4d:13:25:d6:76:5a:1b:b1:ff:cd: 45:91:ff:96:08:68:50:a9:8a:98:80:7e:d2:4f:9d:dd:74:ad: a7:c3:99:f8:69:b8:9c:fb:f8:d7:a6:38:0a:98:87:35:85:4f: ae:58:48:a7:e3:81:d5:0e:f8:79:29:bf:62:38:72:66:81:58: 02:a4:c6:f1:27:fe:65:d1:00:f2:f5:2e:0c:ad:8b:ea:29:86: 1d:c3:02:71:80:50:45:01:6b:05:2a:c8:84:7b:42:07:c4:09: 67:44:89:98:fa:23:1d:13:0c:96:b3:32:32:a5:aa:31:11:ce: ab:dd:61:83:fa:aa:e3:8d:15:85:1b:03:19:b5:63:a9:23:56: bd:1a:bb:2f:34:42:e8:98:16:14:2c:61:45:21:fe:9a:8e:18: c3:e6:30:54:5c:be:62:04:f3:94:d2:b1:42:1e:d3:98:75:0f: 30:b6:a1:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJXjgm3+bniEc3pg9ngDo2qC3t5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE4MDAzMDAzWhcNMjUwNzIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2FiOTEwN2NkYTk4NTk5YjIzOWZkZjMwOTlkODcwOWY1 M2VjYmQ3MTUxMzQ4Nzg5ZDk1NTM4ZTk3Yzk1ODAyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoztOB+QE3lfrnd+Ofhjh4ugTi0hFrbgA+E72nogSsKZ3q P6vyDfwdYgaasam0cVo26bv4dqXGgYQvYjKaYkp9avxq4vcK0tsSKz5uxm+WlYM1 d1THPZFL6QOVc2UFp6ao4JuuJq5adA+2xeU2q5y/iUdr2/eRNVXsDeDpMa11wkZZ uluK7nJV7yPWs7WeU457fPPvpcvaIhBk5IdMq/IQeSYivbNyotiaMvY8NIcAftMU HhBosBvzcHzav6ph5cW6Z4zQ62J2BK0nThHAbKzhS5UTpiGeW5IiOCXi1izRPHej 8zkwpUtTTPEZiRsOYOvaOokrMg6UhvBIRTvgHhP/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMIkqBo1wqrOtetdngrfehwRcqaAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I0MTYzYTM4LWE4ZTItNDhkOS04NTVmLWRkNTNhZTdmNmRjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiAEwDQYJKoZIhvcNAQELBQADggEBAHvZAmBuVDcUueCbPuIKP0oi Z6lQMTPM5xNieFOt8wHLEngFOwzP1FTHljH7nAWxIp2XO7/DTiieLGmlVdJW2DE1 HhdOTJiqyBIthQBpIv34TRMl1nZaG7H/zUWR/5YIaFCpipiAftJPnd10rafDmfhp uJz7+NemOAqYhzWFT65YSKfjgdUO+Hkpv2I4cmaBWAKkxvEn/mXRAPL1Lgyti+op hh3DAnGAUEUBawUqyIR7QgfECWdEiZj6Ix0TDJazMjKlqjERzqvdYYP6quONFYUb Axm1Y6kjVr0auy80QuiYFhQsYUUh/pqOGMPmMFRcvmIE85TSsUIe05h1DzC2oR8= -----END CERTIFICATE-----Generated at Sun Jun 29 20:56:19 2025 by rpki-client