$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8979840e-82a9-441b-924a-93b9c7ea006b.roa File: 8979840e-82a9-441b-924a-93b9c7ea006b.roa (raw, json) Hash identifier: v0oxLDKwuVZkQCuWFL9lNt77cQJlLK1Wg5tQAiMet3E= Subject key identifier: C8:98:A4:8A:DD:AE:8E:40:9A:E9:71:5F:EE:79:83:F0:7B:7F:B7:FE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 577D63C45D8A7645B9F42307BEE40B8AC9E170C4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8979840e-82a9-441b-924a-93b9c7ea006b.roa Signing time: Mon 31 Mar 2025 18:40:47 +0000 ROA not before: Mon 31 Mar 2025 18:40:47 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7d:63:c4:5d:8a:76:45:b9:f4:23:07:be:e4:0b:8a:c9:e1:70:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 31 18:40:47 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:be:75:86:a9:ea:63:3f:cb:aa:6e:76:dc: 06:ed:c2:1c:f3:f4:cc:c7:66:5d:86:a4:81:81:8c: fc:6e:ea:d8:ee:cf:73:04:93:04:5d:17:51:3c:56: 5f:f2:51:25:c3:00:d2:d6:35:5e:4b:40:44:47:56: 1d:cc:2a:2b:83:19:c7:6e:82:08:a4:84:d2:43:85: cc:d9:74:88:d3:8a:08:59:97:85:51:be:5f:f1:4f: f2:7c:90:4c:18:c9:c5:25:97:4c:58:3f:7d:31:c0: 99:3e:98:7c:57:a0:ae:98:c2:15:7f:7f:79:fb:d5: 76:c5:86:6b:7c:48:4d:72:cb:b6:e6:89:8e:8f:b1: 65:d6:89:63:4d:a7:ed:3a:85:e3:78:13:83:e9:bd: d9:94:5d:72:6e:80:21:61:cd:60:83:22:87:6e:10: db:a0:1d:6f:22:21:b1:69:8b:1b:3f:77:77:35:f0: a3:da:d1:08:04:91:59:86:bf:b4:95:4d:49:ef:bf: 43:7e:e4:28:a9:e6:af:88:17:13:33:f5:dd:93:52: aa:e6:61:2f:6e:31:17:71:e2:a9:d1:1e:d2:ae:a6: 48:f6:cd:5b:0b:14:4a:c6:ed:f2:e1:a7:fd:69:50: 74:79:e6:10:8d:0e:2e:80:5e:b6:fb:41:f5:39:4d: cb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:98:A4:8A:DD:AE:8E:40:9A:E9:71:5F:EE:79:83:F0:7B:7F:B7:FE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8979840e-82a9-441b-924a-93b9c7ea006b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:2::/48 Signature Algorithm: sha256WithRSAEncryption 31:b4:ff:c0:3f:f9:ec:14:b6:15:ae:85:7f:5a:b1:e4:8d:1f: 16:74:f0:2b:3d:d2:5b:a6:52:a2:ff:89:12:e7:96:81:45:49: f2:5c:c1:6c:1e:f4:f4:f9:78:36:7d:db:e8:75:1a:93:16:ce: 6c:e4:4f:f3:e9:2b:76:29:37:43:5f:25:92:3e:e5:39:f8:33: de:54:65:08:85:4f:c5:b2:10:2e:5a:ba:a4:3c:23:d1:f6:95: 39:e5:a4:ab:fa:ee:91:05:21:9d:b4:fc:7c:5b:d6:67:8d:2d: 18:c9:36:2a:83:63:6e:1e:ca:76:c5:77:fd:99:55:18:86:33: 55:be:cb:38:c6:dc:77:c5:44:5f:9a:09:f4:7c:2f:8d:0d:90: 15:c9:31:96:4b:d0:0e:f1:2a:75:51:89:3f:4b:b0:b4:38:db: 07:32:8f:fe:57:1a:96:61:3f:20:3d:7b:1a:c0:a4:ec:1c:f7: 9a:a1:f6:97:35:c8:39:97:ae:d2:cf:f5:dd:b1:b8:54:86:44: 1f:6a:14:fe:46:4a:20:e4:00:b4:b5:91:4e:83:a9:3c:68:31: 1b:d0:ce:4f:78:38:2e:19:7d:13:62:60:69:0c:69:bc:56:8d: 24:01:d9:41:7f:1e:43:ab:0b:6b:89:db:ba:d0:6a:49:9e:cd: de:2c:77:65 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV31jxF2KdkW59CMHvuQLisnhcMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzMxMTg0MDQ3WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWRlMGQ2ZTY0NzZkYWZlZTg1N2Y2NmU4MmVjNjZlMTNl NTIwYjEyMzJiZmIwMDg3NTM0MDdhMTk3OTYzYTEzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdQL51hqnqYz/Lqm523Abtwhzz9MzHZl2GpIGBjPxu6tju z3MEkwRdF1E8Vl/yUSXDANLWNV5LQERHVh3MKiuDGcduggikhNJDhczZdIjTighZ l4VRvl/xT/J8kEwYycUll0xYP30xwJk+mHxXoK6YwhV/f3n71XbFhmt8SE1yy7bm iY6PsWXWiWNNp+06heN4E4PpvdmUXXJugCFhzWCDIoduENugHW8iIbFpixs/d3c1 8KPa0QgEkVmGv7SVTUnvv0N+5Cip5q+IFxMz9d2TUqrmYS9uMRdx4qnRHtKupkj2 zVsLFErG7fLhp/1pUHR55hCNDi6AXrb7QfU5TcvZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyJikit2ujkCa6XFf7nmD8Ht/t/4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg5Nzk4NDBlLTgyYTktNDQxYi05MjRhLTkzYjljN2VhMDA2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAIwDQYJKoZIhvcNAQELBQADggEBADG0/8A/+ewUthWuhX9aseSN HxZ08Cs90lumUqL/iRLnloFFSfJcwWwe9PT5eDZ92+h1GpMWzmzkT/PpK3YpN0Nf JZI+5Tn4M95UZQiFT8WyEC5auqQ8I9H2lTnlpKv67pEFIZ20/Hxb1meNLRjJNiqD Y24eynbFd/2ZVRiGM1W+yzjG3HfFRF+aCfR8L40NkBXJMZZL0A7xKnVRiT9LsLQ4 2wcyj/5XGpZhPyA9exrApOwc95qh9pc1yDmXrtLP9d2xuFSGRB9qFP5GSiDkALS1 kU6DqTxoMRvQzk94OC4ZfRNiYGkMabxWjSQB2UF/HkOrC2uJ27rQakmezd4sd2U= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:45 2025 by rpki-client