$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa File: a1083a01-360a-4b23-a3a3-630df82536fc.roa (raw, json) Hash identifier: 1a9Wyksd2zz9Zk6TXUoj4V+Ix+dqQmgn6Iiq9zYTstQ= Subject key identifier: EB:C1:37:61:54:98:88:4A:E4:60:E5:91:B4:A2:C0:29:83:84:6A:DF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2203E7B52D98056F552D9D2C2495451A224EFFC9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa Signing time: Mon 31 Mar 2025 18:40:44 +0000 ROA not before: Mon 31 Mar 2025 18:40:44 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:03:e7:b5:2d:98:05:6f:55:2d:9d:2c:24:95:45:1a:22:4e:ff:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 31 18:40:44 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:45:ab:45:53:a4:5d:6a:e6:e1:f6:51:3d:7b: ca:f4:52:b2:c9:8e:f3:be:d6:f1:01:2d:68:f8:aa: 40:b1:c4:a0:18:61:82:31:c4:98:dc:ae:f0:1d:1a: 33:cc:0e:83:85:77:83:89:7b:68:5a:e3:35:f9:41: 10:a4:ea:74:8e:80:8f:cf:ca:8d:f4:aa:81:68:96: ce:dc:33:c8:1a:1c:87:fc:aa:33:75:22:7b:8f:0b: b5:4c:13:ec:dc:f3:c3:bc:87:cf:24:5d:99:fe:e1: 0d:f3:a3:de:5e:f8:38:75:28:69:2b:36:35:65:e4: 63:dc:05:2e:e8:df:3d:dd:42:7e:9b:3e:f3:cb:ff: 43:e7:87:b1:35:47:08:ba:ea:f2:bc:8c:ec:69:9e: 9b:50:1a:53:ca:5b:23:99:e7:6a:1c:19:da:d1:64: d4:05:dc:5b:4d:ce:16:b6:f7:47:99:b6:6a:2c:77: 68:28:37:2e:82:2f:b3:69:c0:ef:53:8d:98:ae:75: 2e:e8:81:4b:7f:cc:64:fb:81:23:15:e3:24:ab:49: cb:2b:65:ac:d6:9d:e2:80:22:d0:99:64:22:b0:14: 70:04:76:f4:f0:7b:0a:22:d3:e8:50:07:46:ed:ba: 7d:e7:0b:93:ec:f8:14:27:17:d2:ad:3c:a2:e7:c7: b1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C1:37:61:54:98:88:4A:E4:60:E5:91:B4:A2:C0:29:83:84:6A:DF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:80::/48 Signature Algorithm: sha256WithRSAEncryption 4d:30:64:d9:ea:d0:86:4f:db:46:e6:bd:73:4a:9b:63:a2:ed: b4:60:c7:34:8e:34:6f:4a:4f:df:3f:f7:06:37:c0:8f:06:1d: c2:b2:4b:33:56:94:c8:23:51:46:6b:4b:70:38:f2:88:6e:77: 61:4e:ae:7a:19:1b:79:22:49:c5:cb:e1:a2:00:09:41:7e:94: 21:47:b7:9a:56:ee:07:6a:20:ad:f8:86:4c:28:56:3a:2a:a0: 9c:86:cc:5f:5a:74:3e:52:e2:3f:f0:0c:dd:c6:7e:31:c8:f8: 34:ce:81:5b:d6:e6:d1:16:d9:1d:bc:8d:b3:7c:6d:84:0f:04: fa:5e:54:9d:aa:e2:c8:34:ca:a1:b4:71:1b:43:8d:21:7f:94: 49:f9:5a:83:ed:7c:8d:ad:59:53:4b:f1:17:90:7e:58:ed:d8: 3c:40:21:56:dc:96:d2:d6:83:a5:d2:c6:ae:f1:f2:5b:52:83: 5b:5d:e0:91:f1:83:40:64:6c:79:21:59:62:bc:fc:f4:86:a9: 89:14:35:4a:fa:15:ae:ed:1b:2e:b7:ba:c1:4a:0b:47:04:81: fd:22:a9:45:34:48:32:e7:6d:99:5a:18:88:00:cf:3d:39:9d: e1:f8:0b:1e:f6:3d:7f:b5:52:6e:3f:2b:b4:18:fa:0d:b3:13: 58:e8:39:35 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIgPntS2YBW9VLZ0sJJVFGiJO/8kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzMxMTg0MDQ0WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWYyN2U5YWM3MTY2ZWY3MGU3N2VjNzljMmQxODkwNzVh NWYxMjEyMTlkNzMyZDY4MWM3YjY4MWMwNDkyZWFhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSRatFU6Rdaubh9lE9e8r0UrLJjvO+1vEBLWj4qkCxxKAY YYIxxJjcrvAdGjPMDoOFd4OJe2ha4zX5QRCk6nSOgI/Pyo30qoFols7cM8gaHIf8 qjN1InuPC7VME+zc88O8h88kXZn+4Q3zo95e+Dh1KGkrNjVl5GPcBS7o3z3dQn6b PvPL/0Pnh7E1Rwi66vK8jOxpnptQGlPKWyOZ52ocGdrRZNQF3FtNzha290eZtmos d2goNy6CL7NpwO9TjZiudS7ogUt/zGT7gSMV4ySrScsrZazWneKAItCZZCKwFHAE dvTwewoi0+hQB0btun3nC5Ps+BQnF9KtPKLnx7GnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU68E3YVSYiErkYOWRtKLAKYOEat8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ExMDgzYTAxLTM2MGEtNGIyMy1hM2EzLTYzMGRmODI1MzZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAIAwDQYJKoZIhvcNAQELBQADggEBAE0wZNnq0IZP20bmvXNKm2Oi 7bRgxzSONG9KT98/9wY3wI8GHcKySzNWlMgjUUZrS3A48ohud2FOrnoZG3kiScXL 4aIACUF+lCFHt5pW7gdqIK34hkwoVjoqoJyGzF9adD5S4j/wDN3GfjHI+DTOgVvW 5tEW2R28jbN8bYQPBPpeVJ2q4sg0yqG0cRtDjSF/lEn5WoPtfI2tWVNL8ReQfljt 2DxAIVbcltLWg6XSxq7x8ltSg1td4JHxg0BkbHkhWWK8/PSGqYkUNUr6Fa7tGy63 usFKC0cEgf0iqUU0SDLnbZlaGIgAzz05neH4Cx72PX+1Um4/K7QY+g2zE1joOTU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:37 2025 by rpki-client