$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa File: 4d9dc189-6c00-4764-9c0c-c990d1727298.roa (raw, json) Hash identifier: 8qv8CyQUhdy90IozSJ6PwIA1/RLKakGgx7asOnls4as= Subject key identifier: 51:56:04:D2:5D:4C:D4:FE:70:D8:6E:35:8F:D5:1B:39:FC:8C:75:E8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 04AE47DE60B30892EB81174840E00EA701A0BED3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa Signing time: Mon 31 Mar 2025 18:40:10 +0000 ROA not before: Mon 31 Mar 2025 18:40:10 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ae:47:de:60:b3:08:92:eb:81:17:48:40:e0:0e:a7:01:a0:be:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 31 18:40:10 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:11:40:65:64:3e:d3:44:ba:02:df:68:ad: 20:98:87:3e:1f:df:29:48:ec:60:2a:d4:5c:45:c0: 40:78:df:61:d6:46:c9:9f:29:09:e0:26:04:4c:99: 45:f8:3f:d5:55:0e:6c:20:76:87:ce:0c:50:ea:bc: 19:0f:04:fa:e4:a7:6a:ad:e2:b5:50:80:28:e9:86: 37:2c:a7:17:ec:ae:78:36:af:20:74:a4:ef:c0:a2: a6:17:b1:da:07:dd:70:4c:80:c6:63:5e:8d:77:4e: f6:75:40:d8:a3:1d:c1:68:da:07:c3:7a:16:f6:87: 35:67:63:4e:72:e4:bc:ee:3d:e6:7a:b4:1f:11:84: c8:da:4f:d0:a5:12:9f:64:92:4b:e0:21:d6:06:6d: 34:13:bf:9f:10:ee:66:6a:11:6d:7d:08:b4:9f:8c: 10:b2:8b:a3:18:9a:d2:e7:ea:c3:46:bd:5a:bb:62: 83:09:c6:30:ad:ba:44:98:32:ef:36:5c:ee:41:7f: 3b:9c:51:99:dd:75:85:65:bf:63:1e:cb:f9:5f:21: f3:02:4d:f9:84:f7:22:a7:45:ae:75:11:68:7b:e8: 53:71:76:11:d2:b5:c1:8f:f2:97:76:f7:6d:ee:b7: 5c:93:ea:75:3c:93:3b:48:7d:c6:4f:83:4d:9f:05: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:56:04:D2:5D:4C:D4:FE:70:D8:6E:35:8F:D5:1B:39:FC:8C:75:E8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:600::/48 Signature Algorithm: sha256WithRSAEncryption 8e:aa:ee:57:86:de:13:20:57:1f:58:5c:12:15:40:59:a4:64: 54:99:c9:2a:14:f7:fb:d2:0a:a6:b9:e0:f3:36:a3:02:7d:7a: f4:83:d9:f7:de:0a:36:7c:43:67:65:82:04:99:38:1e:83:9a: 7c:31:bc:1a:81:da:84:83:a4:a2:bb:4c:7a:bc:02:f3:6c:22: 5e:47:02:3d:ce:58:b0:0a:e1:40:b6:93:fd:1d:db:35:95:bb: 01:fd:8f:ef:f8:c1:d9:fb:02:30:2f:4f:02:5b:e8:78:8e:13: b9:7e:91:92:f6:a0:61:86:33:a7:f0:77:ad:56:e1:95:8d:77: 0d:ed:b4:cd:5f:99:d7:91:85:66:81:84:cb:1c:65:e0:63:ea: f7:e1:5d:b1:ee:07:7e:db:59:93:2d:63:39:fc:33:0b:e8:53: f5:7e:16:43:85:b4:76:24:9f:cf:34:fd:4d:cf:34:0f:81:f5: f7:05:6d:f7:0a:6d:57:6c:09:ef:2c:27:2b:a3:9f:a8:3a:b6: 00:d0:1d:0e:12:8f:c3:55:9f:7e:89:7c:8f:d6:45:c6:e1:f6: 5a:96:3b:2f:6e:a4:d3:2d:98:5a:0c:78:4c:05:bc:ae:28:ad: bd:09:e7:83:66:5b:e5:ce:cf:12:45:52:c4:ac:0e:86:40:42: 6f:7a:d4:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBK5H3mCzCJLrgRdIQOAOpwGgvtMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzMxMTg0MDEwWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWZkYmFkYTQyNGU3ZTRhY2I5MDMyNzZjNmY3Y2Q5M2Ux NTQ5MTE4ZDQ0MTcwNzkwOTI3OTRkNzg3NGUzMjc5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3GRFAZWQ+00S6At9orSCYhz4f3ylI7GAq1FxFwEB432HW RsmfKQngJgRMmUX4P9VVDmwgdofODFDqvBkPBPrkp2qt4rVQgCjphjcspxfsrng2 ryB0pO/AoqYXsdoH3XBMgMZjXo13TvZ1QNijHcFo2gfDehb2hzVnY05y5LzuPeZ6 tB8RhMjaT9ClEp9kkkvgIdYGbTQTv58Q7mZqEW19CLSfjBCyi6MYmtLn6sNGvVq7 YoMJxjCtukSYMu82XO5BfzucUZnddYVlv2Mey/lfIfMCTfmE9yKnRa51EWh76FNx dhHStcGP8pd2923ut1yT6nU8kztIfcZPg02fBdf5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUVYE0l1M1P5w2G41j9UbOfyMdegwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRkOWRjMTg5LTZjMDAtNDc2NC05YzBjLWM5OTBkMTcyNzI5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgAwDQYJKoZIhvcNAQELBQADggEBAI6q7leG3hMgVx9YXBIVQFmk ZFSZySoU9/vSCqa54PM2owJ9evSD2ffeCjZ8Q2dlggSZOB6DmnwxvBqB2oSDpKK7 THq8AvNsIl5HAj3OWLAK4UC2k/0d2zWVuwH9j+/4wdn7AjAvTwJb6HiOE7l+kZL2 oGGGM6fwd61W4ZWNdw3ttM1fmdeRhWaBhMscZeBj6vfhXbHuB37bWZMtYzn8Mwvo U/V+FkOFtHYkn880/U3PNA+B9fcFbfcKbVdsCe8sJyujn6g6tgDQHQ4Sj8NVn36J fI/WRcbh9lqWOy9upNMtmFoMeEwFvK4orb0J54NmW+XOzxJFUsSsDoZAQm961K4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:01 2025 by rpki-client