$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa File: 71a2a2c0-b8db-4847-a756-b7515aa42b07.roa (raw, json) Hash identifier: JoCtSBmpyYrXaiL300pZlp/kG5J4h1G+ie3HweYokfY= Subject key identifier: EB:2A:8F:DA:E2:E1:93:4D:3A:D8:F0:3E:A2:DF:4B:43:60:B4:36:CD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 297BC596C99CB0EB1CF60A12B899A34208DE6325 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa Signing time: Mon 31 Mar 2025 18:41:10 +0000 ROA not before: Mon 31 Mar 2025 18:41:10 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5510::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7b:c5:96:c9:9c:b0:eb:1c:f6:0a:12:b8:99:a3:42:08:de:63:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 31 18:41:10 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ef:0e:82:24:a7:cc:7c:83:a3:30:0b:a5:2a: 6b:7c:f4:fa:a7:28:4c:6f:41:c0:ec:96:3e:d1:74: 04:d7:1f:6a:f7:03:cb:56:d1:a2:3e:b8:87:de:b9: 4e:b8:9f:5a:d8:d6:ac:4d:4a:27:15:c3:34:dc:78: 42:ce:33:d1:bd:06:58:b5:a8:76:4c:88:be:ba:d8: d0:b5:d0:d0:1a:af:1b:7a:43:30:68:4f:12:6c:39: c6:e8:c2:08:cc:e2:fe:d0:34:c4:12:08:e9:6a:d3: 2e:77:68:99:75:1f:b3:1f:26:78:9b:1f:5d:8f:23: 94:10:1f:17:1a:ce:0a:0d:91:6d:ca:56:ba:c3:25: 02:18:25:42:b8:1f:56:8a:c2:20:80:ee:f7:f9:bf: f0:e4:2b:4e:91:87:5a:6b:27:6c:44:2e:b7:d6:22: 57:b0:0b:ff:0d:c9:2a:5f:16:73:6a:1c:56:6a:29: b2:d5:93:72:21:fb:d6:4a:90:09:d2:fa:52:3f:6a: 6b:17:e0:0e:f8:89:6f:4a:30:94:08:65:13:2c:ac: 84:f6:de:9e:fa:59:52:de:f5:98:1e:5e:12:07:5e: fb:2a:20:d5:99:1e:c0:78:43:a4:aa:6f:94:d7:34: 4a:a5:76:78:48:36:93:b0:72:e7:8c:e8:8b:d1:d2: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2A:8F:DA:E2:E1:93:4D:3A:D8:F0:3E:A2:DF:4B:43:60:B4:36:CD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5510::/44 Signature Algorithm: sha256WithRSAEncryption 53:01:05:55:52:b9:60:34:b0:1c:ae:31:01:a4:56:d7:55:8b: 60:a5:ff:3f:e6:7f:c4:7a:8b:29:18:d0:38:3d:ab:14:8c:6a: 2b:0b:7e:2d:b3:dd:8d:ce:87:74:84:6c:84:06:b8:b6:07:a1: cc:8b:76:f5:e2:0f:00:f5:16:8c:58:f2:75:94:4e:6e:ea:45: 73:1b:f7:2d:c6:a8:44:6e:74:26:d7:83:46:87:9f:0b:ef:6f: 99:6d:20:a4:cc:53:c5:40:bd:07:ce:37:8d:4a:59:a1:82:b7: 2a:84:a1:7f:a2:3b:12:3a:76:0b:6b:f1:ed:07:36:0d:2e:06: 53:35:3f:69:79:ef:1b:b2:4c:c2:c8:0b:52:f1:93:73:34:60: 0e:c6:e1:29:b8:ae:0a:ee:64:75:e4:1e:21:32:c8:ee:54:51: d9:46:ef:6e:c0:5d:b4:94:0b:35:40:80:c3:81:01:33:83:3c: eb:e8:11:df:1c:07:b1:4a:84:04:6f:80:73:e5:94:14:8a:4e: ea:ea:c8:8f:f9:c3:64:50:3f:3f:84:0e:8a:c3:b9:da:ac:9a: 6c:88:ee:79:e1:30:f2:eb:e0:9b:66:2b:43:06:bb:89:04:41: 48:fe:03:02:85:ea:dc:c5:9d:c9:5f:3e:73:a7:aa:17:f7:c3: 55:11:46:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKXvFlsmcsOsc9goSuJmjQgjeYyUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzMxMTg0MTEwWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGU5MzdmZTk0YmMzZGRlNzExMGUzMWYyNzFhMmVhM2Q1 ZTdhNjdiYmM1YTliOTliODcyN2JlNWQwOWM4ZDc2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY7w6CJKfMfIOjMAulKmt89PqnKExvQcDslj7RdATXH2r3 A8tW0aI+uIfeuU64n1rY1qxNSicVwzTceELOM9G9Bli1qHZMiL662NC10NAarxt6 QzBoTxJsOcbowgjM4v7QNMQSCOlq0y53aJl1H7MfJnibH12PI5QQHxcazgoNkW3K VrrDJQIYJUK4H1aKwiCA7vf5v/DkK06Rh1prJ2xELrfWIlewC/8NySpfFnNqHFZq KbLVk3Ih+9ZKkAnS+lI/amsX4A74iW9KMJQIZRMsrIT23p76WVLe9ZgeXhIHXvsq INWZHsB4Q6Sqb5TXNEqldnhINpOwcueM6IvR0vzZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6yqP2uLhk0062PA+ot9LQ2C0Ns0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcxYTJhMmMwLWI4ZGItNDg0Ny1hNzU2LWI3NTE1YWE0MmIwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwVRAwDQYJKoZIhvcNAQELBQADggEBAFMBBVVSuWA0sByuMQGkVtdV i2Cl/z/mf8R6iykY0Dg9qxSMaisLfi2z3Y3Oh3SEbIQGuLYHocyLdvXiDwD1FoxY 8nWUTm7qRXMb9y3GqERudCbXg0aHnwvvb5ltIKTMU8VAvQfON41KWaGCtyqEoX+i OxI6dgtr8e0HNg0uBlM1P2l57xuyTMLIC1Lxk3M0YA7G4Sm4rgruZHXkHiEyyO5U UdlG727AXbSUCzVAgMOBATODPOvoEd8cB7FKhARvgHPllBSKTurqyI/5w2RQPz+E DorDudqsmmyI7nnhMPLr4JtmK0MGu4kEQUj+AwKF6tzFnclfPnOnqhf3w1URRq4= -----END CERTIFICATE-----Generated at Sat Apr 5 12:18:30 2025 by rpki-client