$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa File: 1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa (raw, json) Hash identifier: 1WEULziKuSY3dAXFiA0frKEjJCp8AEDSDhviVOwUZdM= Subject key identifier: 31:28:FB:88:0F:E7:D9:D6:33:7A:A1:BD:29:31:0F:FB:CD:C4:CE:33 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0D0508856D0A8CF9C8E63CDD5F3966F29A2D3D07 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa Signing time: Fri 04 Apr 2025 00:20:22 +0000 ROA not before: Fri 04 Apr 2025 00:20:22 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:05:08:85:6d:0a:8c:f9:c8:e6:3c:dd:5f:39:66:f2:9a:2d:3d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 4 00:20:22 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:36:8b:1d:01:02:02:2e:07:99:a7:05:9c: 08:bd:8f:95:ce:63:68:c6:c7:67:55:9e:59:26:c0: 88:7d:be:e1:21:cc:11:17:e9:3f:af:73:88:97:d4: b1:ed:02:f9:0a:27:cc:57:85:34:e4:e9:b9:ba:10: ad:3d:a0:16:97:a5:b1:c2:aa:9f:6a:8c:2e:a3:49: 4f:d4:74:3e:4e:9e:4a:77:9e:5c:a1:ef:6d:d1:3e: 17:2e:ef:9c:59:36:e7:53:80:fc:1f:9c:be:ec:34: ee:4c:c2:3d:b2:d7:ea:61:a6:d9:5f:81:1f:15:10: 51:c8:03:b3:18:80:7c:ff:55:0a:6c:66:3a:cd:13: 3a:1e:b5:3f:cf:ac:26:b9:2b:eb:e5:2a:e5:07:15: 27:07:c2:f2:55:4a:74:75:17:77:23:d4:52:74:e1: e4:a5:43:a2:b5:f0:4f:63:6e:b7:81:f9:cd:30:dd: 85:fb:69:6b:d5:a6:c9:6e:e7:8f:1d:a5:ce:19:9c: 5d:9e:2b:5f:78:19:94:28:23:d1:1c:77:ae:e3:19: a2:4b:bf:a9:83:84:42:aa:8d:01:33:09:c6:c8:f4: a3:7e:24:9b:ff:31:76:8b:ef:21:7d:db:e7:16:9d: 2d:2a:f5:63:8c:93:31:06:2a:50:87:55:54:96:fc: ec:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:28:FB:88:0F:E7:D9:D6:33:7A:A1:BD:29:31:0F:FB:CD:C4:CE:33 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1df4a82a-0875-47b6-9fc0-b67c097bc45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8800::/40 Signature Algorithm: sha256WithRSAEncryption 9d:56:21:fa:39:d1:a2:8c:bd:1b:c0:f7:1a:1c:07:b8:14:1e: d0:b5:3d:de:18:5c:da:3e:8c:d5:3c:79:7d:d7:74:09:93:e9: 37:cd:f1:1a:92:b1:71:45:1a:82:ff:73:a5:62:20:55:c7:79: 27:0e:5d:a1:ae:ac:fc:4d:d8:ff:23:8d:e2:73:01:18:1c:4a: c6:f4:d8:9f:fd:b9:57:f9:48:84:f4:05:97:05:12:fb:a7:72: 3d:26:bd:89:d2:34:99:09:df:b8:14:6e:3e:2a:16:91:6d:16: 0d:e9:79:2e:c5:04:92:63:c2:95:16:cb:33:bf:78:05:ea:4c: 02:73:f2:c2:a3:8d:2d:30:30:69:17:c8:57:11:10:3f:ea:9b: d5:b9:47:6a:3d:84:62:5f:79:fc:d7:73:1a:02:eb:f7:a2:7e: 9f:1b:8f:61:f4:53:b1:f7:4d:d0:9c:80:0b:d7:c3:57:91:47: 58:58:d6:ea:83:5f:0a:9b:72:90:bd:56:78:22:1a:01:40:9b: 57:04:22:8e:64:27:f4:b0:6e:44:ac:dc:a2:98:6a:99:2c:f7: c9:6c:0a:88:9c:7c:0e:47:c6:71:2e:5d:9e:19:fc:ac:5e:c3: ab:41:e3:da:22:cc:4c:e0:9f:71:ea:df:95:55:fd:75:7f:5f: 3f:2b:53:18 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDQUIhW0KjPnI5jzdXzlm8potPQcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDA0MDAyMDIyWhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDZkNzE3MzQ3NjhiMGRiN2JjMDUzNmVkYjAxYzMzZjlm OGQ0YzkyMzQ0OTJhZDgwYzM0MDE1NzJlNTY5ZTg0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4XjaLHQECAi4HmacFnAi9j5XOY2jGx2dVnlkmwIh9vuEh zBEX6T+vc4iX1LHtAvkKJ8xXhTTk6bm6EK09oBaXpbHCqp9qjC6jSU/UdD5Onkp3 nlyh723RPhcu75xZNudTgPwfnL7sNO5Mwj2y1+phptlfgR8VEFHIA7MYgHz/VQps ZjrNEzoetT/PrCa5K+vlKuUHFScHwvJVSnR1F3cj1FJ04eSlQ6K18E9jbreB+c0w 3YX7aWvVpslu548dpc4ZnF2eK194GZQoI9Ecd67jGaJLv6mDhEKqjQEzCcbI9KN+ JJv/MXaL7yF92+cWnS0q9WOMkzEGKlCHVVSW/Ox/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMSj7iA/n2dYzeqG9KTEP+83EzjMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFkZjRhODJhLTA4NzUtNDdiNi05ZmMwLWI2N2MwOTdiYzQ1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDxiDANBgkqhkiG9w0BAQsFAAOCAQEAnVYh+jnRooy9G8D3GhwHuBQe 0LU93hhc2j6M1Tx5fdd0CZPpN83xGpKxcUUagv9zpWIgVcd5Jw5doa6s/E3Y/yON 4nMBGBxKxvTYn/25V/lIhPQFlwUS+6dyPSa9idI0mQnfuBRuPioWkW0WDel5LsUE kmPClRbLM794BepMAnPywqONLTAwaRfIVxEQP+qb1blHaj2EYl95/NdzGgLr96J+ nxuPYfRTsfdN0JyAC9fDV5FHWFjW6oNfCptykL1WeCIaAUCbVwQijmQn9LBuRKzc ophqmSz3yWwKiJx8DkfGcS5dnhn8rF7Dq0Hj2iLMTOCfcerflVX9dX9fPytTGA== -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:36 2025 by rpki-client