$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa File: e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa (raw, json) Hash identifier: q+eFKn0V9QyU/qmrFS852bzugk5/2AjM25tov3vHF1Q= Subject key identifier: 6B:51:DF:89:24:76:32:EB:D5:B9:70:81:B4:6C:EE:D2:77:71:83:B1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3C3FC9FDC23E1780504FC82280997F2DE18EB816 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa Signing time: Tue 19 Aug 2025 16:50:10 +0000 ROA not before: Tue 19 Aug 2025 16:50:10 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3f:c9:fd:c2:3e:17:80:50:4f:c8:22:80:99:7f:2d:e1:8e:b8:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 19 16:50:10 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=b7621319bd6b3b2762bd03ef9f4860cedd0e72a4d2179d2edadeb79932ea838b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:08:c4:31:ea:3f:3c:03:03:1f:19:51:66: 90:2e:67:d8:c0:85:54:25:08:e5:f8:0f:55:01:22: 02:c6:7e:4e:2e:8b:61:df:9f:a6:cf:15:88:84:1b: 95:16:90:92:a1:be:ff:bd:9f:80:68:15:47:ae:a0: 1b:6f:ad:8a:37:27:34:9f:e5:6a:f5:e7:f3:da:ea: 8a:d1:30:d0:1d:e8:ca:03:61:9b:bb:06:0e:8f:a1: 22:65:b9:6b:fc:e9:fa:93:c6:7d:0b:20:80:e9:5e: 1a:17:28:2f:93:4e:01:1c:0e:24:c8:a3:5f:52:8e: cd:51:c8:41:54:67:62:9a:7b:fd:13:7c:a4:c4:b1: ed:7b:c3:76:21:5b:0d:7d:7f:df:83:b0:a5:dc:11: bc:39:b8:00:e9:fe:33:c3:7b:5e:50:a6:cf:29:c2: c5:7e:fe:ec:6f:f2:95:11:a8:08:27:0d:91:2e:0b: 04:41:ed:bb:a6:9b:cd:40:1d:80:7b:5d:39:b9:53: c3:06:a1:f1:57:99:0e:72:14:1e:9a:1b:97:00:31: 86:40:a9:5c:08:18:67:a0:84:96:ad:5a:3d:19:3e: be:4c:69:a3:69:40:2d:90:b7:ec:03:68:43:3a:e5: ce:25:65:92:7a:0c:50:47:ed:32:44:71:84:22:f7: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:51:DF:89:24:76:32:EB:D5:B9:70:81:B4:6C:EE:D2:77:71:83:B1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5400::/40 Signature Algorithm: sha256WithRSAEncryption 80:16:6f:61:0e:37:cd:1e:fd:89:fd:5e:64:da:46:6b:e1:24: b3:cb:b0:2f:59:a1:6b:88:0f:98:48:96:da:fc:42:f7:48:19: 00:8b:1a:39:9a:e7:00:60:5d:53:98:b6:71:dc:02:78:86:0a: 7b:89:40:4d:96:e1:ba:af:5e:b2:ea:99:34:5c:a9:0e:63:ee: 6a:31:09:c6:03:f3:99:73:80:5d:0e:56:97:1d:66:87:cc:43: b1:58:9b:9e:8a:ac:0f:72:94:63:fe:c5:eb:b2:9d:f9:d8:7f: c9:80:ec:a8:43:64:37:4d:87:7e:29:98:d7:4b:90:a1:9d:da: 21:08:43:7f:8f:e3:df:e1:0e:28:10:72:28:71:71:dd:4a:52: 35:4b:05:6b:ec:ee:24:f1:1c:f9:e8:b4:b1:ba:96:06:24:df: 7f:f6:84:7f:e9:7c:f5:ad:de:ec:89:8e:8b:4b:fd:7f:b7:01: 9b:79:c1:14:fa:f5:14:33:f1:3a:98:51:6e:a0:fe:8a:93:31: 03:3f:91:10:66:0b:cc:45:a1:d6:59:ea:c8:bc:4b:81:01:47: 6c:42:03:23:2a:84:69:bc:48:ed:8b:fc:a7:94:ba:b0:7d:4f: 99:88:05:5f:ba:84:13:3c:83:3c:7f:cf:1a:9f:94:8e:ce:91: b5:a9:6d:1b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPD/J/cI+F4BQT8gigJl/LeGOuBYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE5MTY1MDEwWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzYyMTMxOWJkNmIzYjI3NjJiZDAzZWY5ZjQ4NjBjZWRk MGU3MmE0ZDIxNzlkMmVkYWRlYjc5OTMyZWE4MzhiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4JQjEMeo/PAMDHxlRZpAuZ9jAhVQlCOX4D1UBIgLGfk4u i2Hfn6bPFYiEG5UWkJKhvv+9n4BoFUeuoBtvrYo3JzSf5Wr15/Pa6orRMNAd6MoD YZu7Bg6PoSJluWv86fqTxn0LIIDpXhoXKC+TTgEcDiTIo19Sjs1RyEFUZ2Kae/0T fKTEse17w3YhWw19f9+DsKXcEbw5uADp/jPDe15Qps8pwsV+/uxv8pURqAgnDZEu CwRB7bumm81AHYB7XTm5U8MGofFXmQ5yFB6aG5cAMYZAqVwIGGeghJatWj0ZPr5M aaNpQC2Qt+wDaEM65c4lZZJ6DFBH7TJEcYQi971nAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUa1HfiSR2MuvVuXCBtGzu0ndxg7EwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2UxYTQ0MWI5LTI0ZTUtNDFlOS05MWU4LTVlN2QxNGZiZGVmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwVDANBgkqhkiG9w0BAQsFAAOCAQEAgBZvYQ43zR79if1eZNpGa+Ek s8uwL1mha4gPmEiW2vxC90gZAIsaOZrnAGBdU5i2cdwCeIYKe4lATZbhuq9esuqZ NFypDmPuajEJxgPzmXOAXQ5Wlx1mh8xDsVibnoqsD3KUY/7F67Kd+dh/yYDsqENk N02HfimY10uQoZ3aIQhDf4/j3+EOKBByKHFx3UpSNUsFa+zuJPEc+ei0sbqWBiTf f/aEf+l89a3e7ImOi0v9f7cBm3nBFPr1FDPxOphRbqD+ipMxAz+REGYLzEWh1lnq yLxLgQFHbEIDIyqEabxI7Yv8p5S6sH1PmYgFX7qEEzyDPH/PGp+Ujs6RtaltGw== -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:01 2025 by rpki-client