$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa File: f8738a51-4689-46b8-a472-d4d0afaca2d7.roa (raw, json) Hash identifier: YUxPKjhxHBI7TWWhY9ITOG7/QXYck19gn8HqgBQxizo= Subject key identifier: 57:CC:51:7B:3A:97:8E:E8:FC:D8:67:02:11:88:39:E7:8F:71:22:4B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 165EF49070522500EC7F8AA7AE37B984E28A7F2D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa Signing time: Fri 15 Aug 2025 15:30:03 +0000 ROA not before: Fri 15 Aug 2025 15:30:03 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5e:f4:90:70:52:25:00:ec:7f:8a:a7:ae:37:b9:84:e2:8a:7f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 15 15:30:03 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=514b025498967f4ba89619878acf4a405f756d5772fc66bb4b5c3a8fd9729148, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f5:ec:9c:7d:6c:03:e1:dd:60:ec:ff:95:84: 83:b9:ff:d7:e0:74:f3:85:13:b2:77:d1:6c:01:70: ce:54:b1:a4:c1:c9:50:6d:c3:3e:e1:62:6f:34:78: c2:29:0a:68:58:1f:c2:5b:ec:ba:11:73:5d:36:2e: fd:e1:09:b4:bb:03:36:0e:5b:c8:d8:95:54:5d:6d: fa:25:3b:27:18:a7:45:87:d2:f4:09:7a:c2:7b:49: 0a:77:18:c7:1d:ea:ca:51:57:4d:5f:05:1d:f0:a3: bf:1f:54:f8:66:57:e3:0c:80:4b:39:9c:c2:3a:fd: e4:dd:10:fa:d2:31:7f:32:3a:34:88:3d:20:92:99: a4:87:bc:c8:38:41:8b:72:d4:52:c0:28:ff:39:dc: d3:45:b4:94:e2:e7:48:41:12:00:c1:df:25:5d:6a: cc:bd:f0:d4:52:62:8f:72:9a:4f:33:45:c3:0a:db: 24:c0:88:a6:57:a5:b3:35:2f:f3:a7:57:03:28:f1: 63:e3:47:28:d2:83:24:f8:38:61:1d:43:8a:e2:2e: 91:cc:b2:9c:8b:7f:95:d4:b5:76:9e:ec:4b:16:75: 8f:e8:30:20:31:45:ea:e8:6a:0a:74:91:66:1d:49: 05:47:94:3e:59:92:bb:eb:12:7f:94:ba:7b:a1:60: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CC:51:7B:3A:97:8E:E8:FC:D8:67:02:11:88:39:E7:8F:71:22:4B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4::/48 Signature Algorithm: sha256WithRSAEncryption 8f:f1:d5:f4:26:23:74:b9:e3:1c:3d:2f:37:e5:32:cf:88:f0: 9c:bc:09:d7:8a:ed:dd:1f:ad:97:db:04:9b:6c:09:10:14:92: a9:dd:3a:f8:09:67:47:fa:9b:ed:6c:4e:44:51:4a:98:65:3e: 19:39:1a:09:4a:bb:62:27:5f:21:ac:21:14:0a:27:8e:60:f5: 2a:64:76:01:d0:e3:7e:93:f3:94:9c:ad:76:91:cc:68:54:fa: c4:01:eb:54:bf:ac:b3:e4:bf:e2:44:93:7c:b1:c1:05:cf:66: 38:67:a4:60:4a:83:80:dd:c7:dc:dd:b2:c1:49:3a:f9:19:91: 21:64:b1:41:58:cc:06:b9:c7:f8:cf:ee:86:f5:6a:b9:21:36: 31:6a:30:a3:ad:10:88:ca:d1:4b:37:af:8d:41:7a:c9:6c:e4: 17:a0:fd:90:a7:e3:2e:93:c0:96:e6:4d:6a:c1:29:77:1e:6a: b5:2e:a1:20:d9:cd:01:15:5b:21:bb:00:83:c7:24:01:2b:02: 21:9f:91:d3:59:6b:dc:f6:cb:23:50:0f:30:6e:f7:79:26:a8: 26:95:df:56:9a:91:f5:78:86:7e:4c:31:52:0f:53:a4:a2:0b: f2:b0:52:eb:25:a7:77:1a:e1:d5:d5:d6:f2:5d:74:33:3d:97: 52:a4:70:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFl70kHBSJQDsf4qnrje5hOKKfy0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE1MTUzMDAzWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTRiMDI1NDk4OTY3ZjRiYTg5NjE5ODc4YWNmNGE0MDVm NzU2ZDU3NzJmYzY2YmI0YjVjM2E4ZmQ5NzI5MTQ4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe9eycfWwD4d1g7P+VhIO5/9fgdPOFE7J30WwBcM5UsaTB yVBtwz7hYm80eMIpCmhYH8Jb7LoRc102Lv3hCbS7AzYOW8jYlVRdbfolOycYp0WH 0vQJesJ7SQp3GMcd6spRV01fBR3wo78fVPhmV+MMgEs5nMI6/eTdEPrSMX8yOjSI PSCSmaSHvMg4QYty1FLAKP853NNFtJTi50hBEgDB3yVdasy98NRSYo9ymk8zRcMK 2yTAiKZXpbM1L/OnVwMo8WPjRyjSgyT4OGEdQ4riLpHMspyLf5XUtXae7EsWdY/o MCAxReroagp0kWYdSQVHlD5ZkrvrEn+UunuhYEdbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUV8xRezqXjuj82GcCEYg5549xIkswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4NzM4YTUxLTQ2ODktNDZiOC1hNDcyLWQ0ZDBhZmFjYTJkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAQwDQYJKoZIhvcNAQELBQADggEBAI/x1fQmI3S54xw9LzflMs+I 8Jy8CdeK7d0frZfbBJtsCRAUkqndOvgJZ0f6m+1sTkRRSphlPhk5GglKu2InXyGs IRQKJ45g9SpkdgHQ436T85ScrXaRzGhU+sQB61S/rLPkv+JEk3yxwQXPZjhnpGBK g4Ddx9zdssFJOvkZkSFksUFYzAa5x/jP7ob1arkhNjFqMKOtEIjK0Us3r41Besls 5Beg/ZCn4y6TwJbmTWrBKXcearUuoSDZzQEVWyG7AIPHJAErAiGfkdNZa9z2yyNQ DzBu93kmqCaV31aakfV4hn5MMVIPU6SiC/KwUuslp3ca4dXV1vJddDM9l1KkcPQ= -----END CERTIFICATE-----Generated at Wed Aug 20 10:47:02 2025 by rpki-client