$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa File: b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa (raw, json) Hash identifier: 1+vbUjemPVPJ/xRZcK9/NSlo/lI8UjGhPKlMKF6jMd4= Subject key identifier: 09:72:79:B0:05:B0:FF:14:74:9C:7E:E4:71:60:BE:09:4B:E2:4E:5D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 273431C6BA04623D4CC344DD68224D0E1B71B1E3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa Signing time: Tue 20 May 2025 18:10:47 +0000 ROA not before: Tue 20 May 2025 18:10:47 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:ec00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:34:31:c6:ba:04:62:3d:4c:c3:44:dd:68:22:4d:0e:1b:71:b1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:10:47 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=84f5f6586a3c9d4c8b4557b65e1338f51125a7f7f474add499291b71561d6e4b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5b:a8:fa:03:d8:2b:a9:65:58:89:eb:6b:50: 7d:fd:e0:71:2a:dc:9e:f5:c8:91:ce:9e:77:52:71: 06:59:30:ca:ef:6f:d4:37:87:4c:f0:26:09:4d:1d: 4d:2d:9e:fd:c9:99:5e:b3:bd:ec:e7:c1:b9:7f:99: d0:8e:dc:d3:de:4d:b7:a1:46:2c:9c:0b:bf:00:ac: 04:b3:a1:51:94:d1:db:b0:51:03:9b:95:44:3e:ad: 42:38:2c:cc:ef:a4:40:86:1b:9c:23:62:8e:f6:3e: f9:7f:0e:05:cc:01:26:63:6d:50:7a:b6:c9:5c:cb: 5c:54:59:c3:19:57:40:79:48:f5:16:eb:67:4a:7d: 8c:b7:3e:86:b0:3b:e6:65:1f:49:36:41:98:cb:7e: 6d:5d:b3:5f:e0:32:79:07:4a:0e:d8:73:a3:53:b4: 69:27:cb:a8:6b:e7:cd:a7:1b:ee:a7:8a:35:6f:ab: 2b:ac:de:e0:ff:30:98:7a:7d:cc:c7:84:02:ff:24: 9c:ab:19:6f:a2:0a:31:f7:c7:90:f3:31:22:d0:1f: 76:75:14:37:f7:5f:c1:eb:45:8c:10:b4:d9:d8:33: 53:94:ca:05:68:a5:39:fd:21:fe:ce:e8:87:08:cd: 2d:92:1a:3b:7d:e9:1d:1e:93:b3:f7:47:d5:92:04: 49:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:72:79:B0:05:B0:FF:14:74:9C:7E:E4:71:60:BE:09:4B:E2:4E:5D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/42 Signature Algorithm: sha256WithRSAEncryption 0f:f0:b3:ce:10:b1:6c:15:36:0b:e1:b0:f4:9b:81:01:72:1b: be:5d:85:fa:58:77:19:36:c2:6c:8b:93:52:88:65:fc:d7:4c: 3b:a8:71:1a:6a:cd:75:67:41:14:84:80:c1:c0:cd:a9:7a:c0: 82:31:99:9a:d8:b7:da:48:81:56:75:e3:99:60:0b:9e:5e:7d: f5:b2:04:f8:34:26:8d:5f:01:99:53:25:ca:6d:c8:fb:e0:5a: f3:6b:53:51:3e:2f:b7:ba:39:d6:b9:23:ec:ed:8b:3a:fb:3d: 6d:6c:48:b9:6d:8a:24:8a:82:56:63:04:c3:7b:85:00:9b:7e: 96:99:fc:e1:36:42:9e:0b:e8:14:df:f3:df:4b:b3:d8:43:07: b9:00:7a:be:3f:2f:d1:a7:06:fc:6c:6a:bd:12:0e:88:5b:cc: 7e:47:37:76:ad:9d:83:05:da:46:e8:87:8a:4d:55:15:0b:94: 27:8b:48:46:2d:d1:28:74:22:4e:f0:76:f1:a2:7f:dc:b0:ff: bc:71:90:6f:65:84:91:66:bc:a3:3e:c8:78:8b:45:4a:9e:6f: 5d:ea:80:4e:ea:eb:ea:74:b7:01:ce:1b:1f:05:d1:d7:d4:ab: fd:ba:bd:b5:b0:78:ab:e1:42:a2:f7:1c:ef:dc:d9:7e:05:aa: a7:ce:a1:61 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJzQxxroEYj1Mw0TdaCJNDhtxseMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgxMDQ3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NGY1ZjY1ODZhM2M5ZDRjOGI0NTU3YjY1ZTEzMzhmNTEx MjVhN2Y3ZjQ3NGFkZDQ5OTI5MWI3MTU2MWQ2ZTRiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvW6j6A9grqWVYietrUH394HEq3J71yJHOnndScQZZMMrv b9Q3h0zwJglNHU0tnv3JmV6zveznwbl/mdCO3NPeTbehRiycC78ArASzoVGU0duw UQOblUQ+rUI4LMzvpECGG5wjYo72Pvl/DgXMASZjbVB6tslcy1xUWcMZV0B5SPUW 62dKfYy3PoawO+ZlH0k2QZjLfm1ds1/gMnkHSg7Yc6NTtGkny6hr582nG+6nijVv qyus3uD/MJh6fczHhAL/JJyrGW+iCjH3x5DzMSLQH3Z1FDf3X8HrRYwQtNnYM1OU ygVopTn9If7O6IcIzS2SGjt96R0ek7P3R9WSBElXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCXJ5sAWw/xR0nH7kcWC+CUviTl0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I3YjFkOGUwLTdmYmItNDUyOC04Yzk3LTEwNTFjYTQ5NTA1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77AAwDQYJKoZIhvcNAQELBQADggEBAA/ws84QsWwVNgvhsPSbgQFy G75dhfpYdxk2wmyLk1KIZfzXTDuocRpqzXVnQRSEgMHAzal6wIIxmZrYt9pIgVZ1 45lgC55effWyBPg0Jo1fAZlTJcptyPvgWvNrU1E+L7e6Oda5I+ztizr7PW1sSLlt iiSKglZjBMN7hQCbfpaZ/OE2Qp4L6BTf899Ls9hDB7kAer4/L9GnBvxsar0SDohb zH5HN3atnYMF2kboh4pNVRULlCeLSEYt0Sh0Ik7wdvGif9yw/7xxkG9lhJFmvKM+ yHiLRUqeb13qgE7q6+p0twHOGx8F0dfUq/26vbWweKvhQqL3HO/c2X4FqqfOoWE= -----END CERTIFICATE-----Generated at Wed Jun 4 11:27:01 2025 by rpki-client