$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa File: 4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa (raw, json) Hash identifier: 8xV7E+By12E/GCFSRee9V2EU3wX3+4VvdoWEbPnv5RA= Subject key identifier: B6:CC:F7:CE:97:90:8F:52:AF:03:E6:8C:92:4D:82:0D:23:40:E6:F7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 34356C85C1B7167525A07A303CABE3E1650C8425 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa Signing time: Fri 04 Apr 2025 00:20:28 +0000 ROA not before: Fri 04 Apr 2025 00:20:28 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:35:6c:85:c1:b7:16:75:25:a0:7a:30:3c:ab:e3:e1:65:0c:84:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 4 00:20:28 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:93:50:a4:ea:bd:94:ef:59:12:ba:1f:5b:86: bf:02:1d:21:9a:c6:7e:3d:2a:a5:b3:ed:9f:66:74: c0:42:91:59:30:d2:97:66:41:05:69:2d:ef:36:cf: 36:c7:d0:c1:37:7d:1a:3f:e2:8c:6d:8d:f0:a7:e8: 89:92:e0:d9:ae:3d:98:9e:bc:0f:8e:7e:9b:ce:e0: 0c:18:27:5b:d8:90:4a:4a:26:93:15:3b:a1:b5:63: 50:69:54:4f:5c:dc:f8:01:1a:c6:1e:9b:4d:6f:1e: 85:4d:8e:13:36:2d:cb:5b:26:d4:43:2b:74:d7:de: 90:c4:6a:ba:03:ad:29:f0:f2:99:c2:a2:74:08:b6: fe:bf:ca:dc:8d:ae:10:53:ce:dc:73:bd:91:69:80: 73:05:49:d9:48:1e:e5:62:8b:53:f0:05:60:1a:ff: cf:8b:f1:89:f3:a0:99:c4:98:24:1d:82:e5:71:ce: d0:9c:68:21:ad:d4:9c:dc:13:25:cd:f8:3e:f5:cb: f4:cd:c4:a2:f5:63:7a:d3:d3:51:f5:78:ed:60:10: b5:3b:1f:e3:2f:d0:f2:e6:39:b2:ca:c7:3a:59:1b: 08:32:9b:68:f1:63:0c:25:20:2f:13:7f:6e:bd:d7: 4a:9e:f9:69:6b:1d:00:21:04:32:37:f1:f0:41:eb: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CC:F7:CE:97:90:8F:52:AF:03:E6:8C:92:4D:82:0D:23:40:E6:F7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption a4:77:51:99:04:df:a5:b3:a3:71:e4:09:37:e5:ca:36:a1:40: c7:48:82:15:24:54:66:81:24:9b:fe:79:09:b0:15:05:a5:da: 2f:98:06:c5:dd:ad:45:a6:69:f0:5f:14:3a:0a:2a:81:de:48: ac:af:50:6a:08:bc:c9:ee:69:3c:aa:e0:4c:5c:47:cc:91:09: 7e:38:3c:46:5a:86:93:41:51:d2:36:70:37:30:47:d7:2e:3b: f9:45:c6:fd:46:3d:1a:5b:f3:1a:a9:d6:48:a6:29:e1:b7:2a: e5:61:a4:12:03:4d:62:77:72:9a:3d:94:eb:00:3b:b3:07:12: f8:df:d4:30:d5:4e:2e:04:d9:cc:2f:ac:8b:56:52:06:9c:cd: 38:3a:67:6d:24:91:e7:3a:05:24:24:30:ef:4b:0e:a7:71:75: 22:5d:0a:99:d4:f2:f3:48:64:3c:2f:13:84:f8:5c:dc:cd:60: 2f:88:37:11:7e:1b:58:68:3a:1c:42:51:76:83:de:5d:f2:47: 18:3e:fa:76:c2:c2:ae:b6:d8:f4:aa:4d:8c:81:6c:21:42:c2: 03:c1:8a:38:84:a0:c4:9e:41:15:71:31:f4:cb:66:ea:dc:33: 84:e9:64:dd:c2:fa:12:70:3a:65:f8:0d:7c:2e:72:67:9f:cd: b2:65:3a:ee -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNDVshcG3FnUloHowPKvj4WUMhCUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDA0MDAyMDI4WhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTMzMTM5NmY4MDZjYzhmNWI5ZDljNThkNzAwZjFmYjRi NTIwYWFkNDE1ZmMzZDMwYmM3MDQwMzY4OTRiZjg3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCak1Ck6r2U71kSuh9bhr8CHSGaxn49KqWz7Z9mdMBCkVkw 0pdmQQVpLe82zzbH0ME3fRo/4oxtjfCn6ImS4NmuPZievA+OfpvO4AwYJ1vYkEpK JpMVO6G1Y1BpVE9c3PgBGsYem01vHoVNjhM2LctbJtRDK3TX3pDEaroDrSnw8pnC onQItv6/ytyNrhBTztxzvZFpgHMFSdlIHuVii1PwBWAa/8+L8YnzoJnEmCQdguVx ztCcaCGt1JzcEyXN+D71y/TNxKL1Y3rT01H1eO1gELU7H+Mv0PLmObLKxzpZGwgy m2jxYwwlIC8Tf26910qe+WlrHQAhBDI38fBB65e/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtsz3zpeQj1KvA+aMkk2CDSNA5vcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRmNDYyN2E3LWRkY2ItNDQwMi1iZjExLTNlNzQ2M2I0M2ZhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBAKR3UZkE36Wzo3HkCTflyjah QMdIghUkVGaBJJv+eQmwFQWl2i+YBsXdrUWmafBfFDoKKoHeSKyvUGoIvMnuaTyq 4ExcR8yRCX44PEZahpNBUdI2cDcwR9cuO/lFxv1GPRpb8xqp1kimKeG3KuVhpBID TWJ3cpo9lOsAO7MHEvjf1DDVTi4E2cwvrItWUgaczTg6Z20kkec6BSQkMO9LDqdx dSJdCpnU8vNIZDwvE4T4XNzNYC+INxF+G1hoOhxCUXaD3l3yRxg++nbCwq622PSq TYyBbCFCwgPBijiEoMSeQRVxMfTLZurcM4TpZN3C+hJwOmX4DXwucmefzbJlOu4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:04 2025 by rpki-client