$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/20df74ce-1a64-4df1-b616-115d4493a969.roa File: 20df74ce-1a64-4df1-b616-115d4493a969.roa (raw, json) Hash identifier: PhWgAITOOki0MxTXRb30iXeprEoDDEvcrYRI8UhAE1k= Subject key identifier: 10:13:C8:F5:F1:B4:20:8C:47:8A:95:FB:EC:D5:28:D9:2F:B0:69:57 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0F822F5FB69C2BCCF5606E6DADC0B240885DD9B2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/20df74ce-1a64-4df1-b616-115d4493a969.roa Signing time: Mon 31 Mar 2025 19:00:03 +0000 ROA not before: Mon 31 Mar 2025 19:00:03 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:82:2f:5f:b6:9c:2b:cc:f5:60:6e:6d:ad:c0:b2:40:88:5d:d9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 31 19:00:03 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:c7:22:47:b0:49:66:78:3e:58:8e:3a:9b: bc:41:bb:b0:40:2c:7e:68:df:ad:40:f0:96:e9:a7: 33:ac:28:b1:0c:c8:79:07:07:a5:96:29:f0:2b:1a: dd:9a:9c:a1:9b:dd:58:56:f1:e2:9b:e5:31:1b:9c: a4:0e:f2:37:41:dd:0e:b6:d8:95:94:4d:d1:a1:1d: 18:76:a6:a9:ea:33:19:52:4f:18:62:e8:16:49:99: 4a:36:d0:6a:f8:f9:e2:2d:87:ff:62:e0:2c:92:7a: 83:15:61:9c:5f:26:01:b7:6a:2f:26:17:9c:e6:25: cb:8e:95:74:03:01:23:ea:a5:ca:6d:0a:3a:2c:5e: fc:2e:46:b0:7d:d1:76:89:05:46:31:82:0a:78:46: 62:91:85:67:ff:eb:b2:31:22:5d:a6:da:08:e8:4b: c4:ad:a7:3c:c2:1a:f8:cf:be:9c:f2:6f:8a:81:98: c5:da:fe:1a:7b:fd:b5:0f:54:d6:1f:fe:a9:1a:96: 95:6a:33:b7:22:20:65:b4:07:7c:d9:7b:bb:24:db: 95:5b:3f:8b:e6:43:0d:fe:eb:e8:a1:49:21:28:e6: df:26:1b:5d:af:31:0d:f7:5d:8a:49:95:ea:c5:ed: 59:06:c8:37:dd:0a:06:ed:41:19:49:bc:6c:d1:16: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:13:C8:F5:F1:B4:20:8C:47:8A:95:FB:EC:D5:28:D9:2F:B0:69:57 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/20df74ce-1a64-4df1-b616-115d4493a969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:200::/40 Signature Algorithm: sha256WithRSAEncryption a1:e4:21:8a:77:04:3e:9c:9f:c5:ce:19:e8:5d:bd:b0:de:a2: ad:ef:dc:59:00:e6:93:0d:bb:a5:af:bd:5d:0d:8c:31:c3:7e: 53:cc:71:00:b2:13:b2:d3:d6:f0:ba:a6:3d:d1:c2:8d:31:6f: cf:ac:9d:41:ca:3e:b5:e4:0e:58:da:d1:7f:ac:a5:ac:83:40: 08:1b:dc:44:88:06:39:2b:79:af:50:99:63:d6:6f:53:48:98: 1a:ff:c8:a5:02:16:c7:45:70:22:0e:64:13:f9:07:20:e1:20: b6:c8:5b:06:75:25:2f:eb:7f:4f:a9:0e:c8:b0:a3:63:29:6e: 84:af:cc:6c:bd:53:52:09:fc:98:a5:7c:6c:40:6e:be:45:5b: 45:42:f0:68:0a:7d:97:d7:2f:e4:7b:c3:91:b2:b3:85:0e:aa: 3f:a7:7a:4b:e0:c6:8f:24:8e:c0:6a:3a:7e:12:e6:67:c5:46: f0:c1:21:00:b7:73:b0:cb:37:ec:a1:76:71:a1:ab:80:c2:2c: 99:5d:89:63:65:91:6e:e9:bb:51:6b:52:4f:0a:ee:64:b0:78: 13:f3:36:d6:29:0d:e4:32:b7:07:ea:60:2c:b2:e3:b7:3c:29: 44:46:1a:4b:0a:75:17:a4:f0:da:95:65:c9:74:53:fc:b0:7d: bd:4d:41:6f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUD4IvX7acK8z1YG5trcCyQIhd2bIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzMxMTkwMDAzWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMGNhOTgyYmI1MzY2ZjQ2MTQzZjE5MmMzMjM4N2NkOWU3 MTMxODVkN2JkMmY3NjM5Y2M5YWRmMmRmMTA4MjBjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOucciR7BJZng+WI46m7xBu7BALH5o361A8JbppzOsKLEM yHkHB6WWKfArGt2anKGb3VhW8eKb5TEbnKQO8jdB3Q622JWUTdGhHRh2pqnqMxlS Txhi6BZJmUo20Gr4+eIth/9i4CySeoMVYZxfJgG3ai8mF5zmJcuOlXQDASPqpcpt CjosXvwuRrB90XaJBUYxggp4RmKRhWf/67IxIl2m2gjoS8StpzzCGvjPvpzyb4qB mMXa/hp7/bUPVNYf/qkalpVqM7ciIGW0B3zZe7sk25VbP4vmQw3+6+ihSSEo5t8m G12vMQ33XYpJlerF7VkGyDfdCgbtQRlJvGzRFn9XAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUEBPI9fG0IIxHipX77NUo2S+waVcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIwZGY3NGNlLTFhNjQtNGRmMS1iNjE2LTExNWQ0NDkzYTk2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwAjANBgkqhkiG9w0BAQsFAAOCAQEAoeQhincEPpyfxc4Z6F29sN6i re/cWQDmkw27pa+9XQ2MMcN+U8xxALITstPW8LqmPdHCjTFvz6ydQco+teQOWNrR f6ylrINACBvcRIgGOSt5r1CZY9ZvU0iYGv/IpQIWx0VwIg5kE/kHIOEgtshbBnUl L+t/T6kOyLCjYyluhK/MbL1TUgn8mKV8bEBuvkVbRULwaAp9l9cv5HvDkbKzhQ6q P6d6S+DGjySOwGo6fhLmZ8VG8MEhALdzsMs37KF2caGrgMIsmV2JY2WRbum7UWtS TwruZLB4E/M21ikN5DK3B+pgLLLjtzwpREYaSwp1F6Tw2pVlyXRT/LB9vU1Bbw== -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:56 2025 by rpki-client