$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa File: 8d914165-a3e7-48af-b624-8691c64e5360.roa (raw, json) Hash identifier: l1a7es7MY4dGFa80JEnpUIsL0bzSWNraeNHQ3b1kTBc= Subject key identifier: C7:52:C4:1D:6A:89:52:84:99:29:6D:AA:D8:46:F6:9B:58:16:1E:AA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5C63CDC82E1756DD9A6E9D6E5B7FE9760684BABB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa Signing time: Mon 31 Mar 2025 19:00:14 +0000 ROA not before: Mon 31 Mar 2025 19:00:14 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f000::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:63:cd:c8:2e:17:56:dd:9a:6e:9d:6e:5b:7f:e9:76:06:84:ba:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 31 19:00:14 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:fd:16:1c:5f:0e:53:b7:4b:72:d0:3e:e4: 90:06:61:d6:7b:1f:56:64:f1:4a:6c:ec:66:9d:71: 86:b7:c8:35:f0:4c:fd:88:b3:62:26:0e:f9:95:53: b1:b5:7c:5d:cb:e0:e0:0f:bc:ab:64:31:ca:af:01: 20:47:c0:40:1e:8d:03:72:73:f8:2c:e3:29:7e:56: bc:00:45:98:02:7a:61:26:19:be:25:3a:92:8f:4c: 3d:64:5c:80:97:df:17:e3:54:e4:55:91:ed:0a:af: f3:9d:9c:3d:21:7d:3f:fc:74:fa:c9:53:0a:f0:eb: 3e:f8:51:f9:9a:95:31:c3:35:ae:0e:db:3e:ae:6b: e0:61:0a:32:55:e4:d5:04:53:fc:da:b7:c2:02:ea: 30:4b:4a:c6:9f:1c:e6:92:c5:68:28:75:7b:28:7d: 9d:ef:98:b5:fd:8e:7e:12:c0:55:95:a6:cf:09:9b: 13:c5:f1:10:c9:df:de:e3:ef:78:c9:88:e9:8e:09: a4:d7:66:ae:46:74:72:ae:4f:ce:cc:f3:91:06:19: c4:51:f0:96:2f:57:0f:f3:5a:f9:d3:bd:99:ac:e3: 6a:d4:d3:80:28:fd:ef:ce:a6:db:fb:5a:71:9f:b4: 07:cf:93:f7:a5:34:c6:84:3f:28:32:51:ad:a7:c2: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:52:C4:1D:6A:89:52:84:99:29:6D:AA:D8:46:F6:9B:58:16:1E:AA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8d914165-a3e7-48af-b624-8691c64e5360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/28 Signature Algorithm: sha256WithRSAEncryption 9a:72:e9:1c:63:ef:73:1a:02:0e:76:a2:4b:59:30:f9:a2:cb: b8:77:ed:8a:15:6d:0c:08:bd:51:2f:30:dd:bd:e7:fc:a8:ac: bb:3c:e2:67:0b:13:a5:38:93:e7:af:8b:fd:6f:b8:a8:28:8b: e1:30:4a:63:04:7f:c5:b4:19:dc:e3:3c:a9:c9:db:45:f9:39: 5e:03:5c:e8:38:05:4b:40:c3:5d:36:c4:8c:de:1b:3d:f8:30: d1:f9:d4:bb:74:0d:9f:3a:29:3c:6e:b2:f0:fd:8f:2c:eb:b4: b1:1f:6b:a2:cb:c3:b3:ae:96:e1:45:36:a3:52:5f:af:c3:d8: a6:83:55:31:ff:f2:01:f3:37:f5:ae:fc:10:24:24:ac:2a:9b: 4a:4d:f5:5a:50:cf:7f:65:77:05:3f:68:75:12:12:e0:f1:8c: 63:55:f3:52:05:88:3a:78:4c:ca:77:f5:98:ae:e8:da:14:5e: e8:18:e8:c2:ee:95:d4:80:c8:02:b3:1f:92:aa:1d:40:ca:19: 6f:81:c8:97:91:3d:33:af:76:c9:5d:41:b2:32:45:c9:c0:b3: d2:5d:d7:84:52:22:46:26:40:bc:dc:78:da:37:e9:c6:7c:fc: c9:4f:cc:53:50:d9:20:76:b4:2f:80:9d:f8:57:1c:58:12:f8: c9:99:0e:8e -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUXGPNyC4XVt2abp1uW3/pdgaEurswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzMxMTkwMDE0WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MmU1Yzg4ZjNmNjE4MDk3NjgyMjJkYmJhMzY0MjJjZGJh NjBjMWU5ZDE2NjdkYzFhMDEyMTkxZGI5ZDhlZDE3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQLP0WHF8OU7dLctA+5JAGYdZ7H1Zk8Ups7GadcYa3yDXw TP2Is2ImDvmVU7G1fF3L4OAPvKtkMcqvASBHwEAejQNyc/gs4yl+VrwARZgCemEm Gb4lOpKPTD1kXICX3xfjVORVke0Kr/OdnD0hfT/8dPrJUwrw6z74UfmalTHDNa4O 2z6ua+BhCjJV5NUEU/zat8IC6jBLSsafHOaSxWgodXsofZ3vmLX9jn4SwFWVps8J mxPF8RDJ397j73jJiOmOCaTXZq5GdHKuT87M85EGGcRR8JYvVw/zWvnTvZms42rU 04Ao/e/Optv7WnGftAfPk/elNMaEPygyUa2nwtOVAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUx1LEHWqJUoSZKW2q2Eb2m1gWHqowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhkOTE0MTY1LWEzZTctNDhhZi1iNjI0LTg2OTFjNjRlNTM2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQQmAPAAMA0GCSqGSIb3DQEBCwUAA4IBAQCacukcY+9zGgIOdqJLWTD5osu4 d+2KFW0MCL1RLzDdvef8qKy7POJnCxOlOJPnr4v9b7ioKIvhMEpjBH/FtBnc4zyp ydtF+TleA1zoOAVLQMNdNsSM3hs9+DDR+dS7dA2fOik8brLw/Y8s67SxH2uiy8Oz rpbhRTajUl+vw9img1Ux//IB8zf1rvwQJCSsKptKTfVaUM9/ZXcFP2h1EhLg8Yxj VfNSBYg6eEzKd/WYrujaFF7oGOjC7pXUgMgCsx+Sqh1AyhlvgciXkT0zr3bJXUGy MkXJwLPSXdeEUiJGJkC83HjaN+nGfPzJT8xTUNkgdrQvgJ34VxxYEvjJmQ6O -----END CERTIFICATE-----Generated at Sat Apr 5 19:29:00 2025 by rpki-client