$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa File: b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa (raw, json) Hash identifier: yItJD+nwXLjNvXaUAWLUiLd/m8GCbHY/ZB2/Z0EEtos= Subject key identifier: 9E:10:43:40:52:A9:0A:C3:53:17:6B:38:17:BF:1A:D9:8B:5A:51:37 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 34D478EAF42D8ADF8A46DE44E8B4A9DC18869923 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa Signing time: Fri 04 Apr 2025 00:20:35 +0000 ROA not before: Fri 04 Apr 2025 00:20:35 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d4:78:ea:f4:2d:8a:df:8a:46:de:44:e8:b4:a9:dc:18:86:99:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 4 00:20:35 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1d:98:12:1a:07:45:0a:1b:40:db:d7:c2:b1: 77:0f:99:c2:1c:56:64:1c:c2:07:38:9b:eb:31:27: 06:51:c1:4e:6d:18:0e:a3:d8:4d:5f:e8:ea:ab:a9: b7:58:da:48:5d:83:c7:40:d5:5c:60:91:df:c4:c8: f7:b1:3b:11:68:55:4f:76:d1:98:c0:af:94:ec:85: 1f:40:85:64:1f:27:15:d2:86:26:3f:25:fd:b0:62: 6c:e9:5a:ed:24:bd:68:f8:04:2e:f0:d5:04:6a:5e: 6a:f5:00:56:71:7f:41:37:06:97:28:65:6e:7b:38: 9b:6e:44:1e:61:4c:76:cb:90:63:49:2e:3b:0d:e6: d8:e4:47:a9:6d:b3:f6:6f:81:f9:8a:7e:71:22:4b: 1b:b6:00:22:31:e8:82:91:c8:45:f3:86:3b:d5:f0: 3f:0d:b2:e4:6f:37:cc:70:8e:3d:a2:d6:e9:7f:6f: c0:42:37:69:ad:33:9c:de:8c:27:5d:03:f1:d6:6d: 3b:fd:58:73:e2:a7:1c:37:c6:06:64:4d:60:fd:f9: bf:95:e7:62:5e:9a:a7:b1:70:4c:68:79:3b:f5:a9: 96:77:44:7f:9f:76:ae:99:1e:bd:d0:5f:27:0e:0b: d3:35:ce:95:1b:58:46:c4:2a:70:a7:47:17:ab:ed: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:10:43:40:52:A9:0A:C3:53:17:6B:38:17:BF:1A:D9:8B:5A:51:37 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:e00::/40 Signature Algorithm: sha256WithRSAEncryption 41:84:59:65:3f:6b:99:a9:a1:de:e8:18:a7:4a:d8:bb:d0:00: 3f:26:5e:3d:b7:25:4d:77:d8:af:1d:88:79:06:ce:3e:0a:bd: 24:e6:c9:f4:e5:a6:df:e7:26:2a:06:1c:13:02:bb:5c:84:75: 4e:52:03:63:d5:57:dc:59:18:89:33:46:d9:31:a4:c3:2e:98: b1:26:c5:c5:91:5d:48:2b:36:39:fd:ae:5c:23:c7:a4:41:9b: 27:ae:3f:af:5d:dd:7d:e0:84:5a:be:41:18:1a:a6:35:a0:3a: d4:1f:12:e7:6f:73:dc:46:31:91:a9:7f:bb:b2:bd:ee:58:4f: 79:c2:7e:79:87:cf:0c:89:9b:2d:2e:f3:0a:1f:a6:27:9d:f9: 95:0f:6e:6b:33:10:41:a0:5f:9e:d2:21:bc:27:53:ca:49:63: 46:5a:28:a1:59:77:b7:fe:52:4b:0e:8e:80:d0:ba:4b:10:0d: 7c:d6:83:7a:6b:7b:b8:ec:eb:65:3f:91:4f:de:aa:07:65:88: a9:57:6a:cf:4d:ed:fb:bd:cc:56:99:51:b6:8e:10:f9:f4:99: fd:c0:3a:3a:44:f2:b1:17:d4:ef:5c:0b:7a:62:32:70:b6:9d: c4:d9:a7:d7:22:8b:66:63:98:3d:59:2c:a9:65:4b:92:f1:98: 11:c3:8c:4c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNNR46vQtit+KRt5E6LSp3BiGmSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDA0MDAyMDM1WhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmY1NGFmMjI0MGI0ZGY2OTVkM2EzMjg2YjE3MmM1MzVj OTI5MjI3MGY4OTQyNTM5MTNiNDgzN2ViYjVlMTM1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbHZgSGgdFChtA29fCsXcPmcIcVmQcwgc4m+sxJwZRwU5t GA6j2E1f6OqrqbdY2khdg8dA1Vxgkd/EyPexOxFoVU920ZjAr5TshR9AhWQfJxXS hiY/Jf2wYmzpWu0kvWj4BC7w1QRqXmr1AFZxf0E3BpcoZW57OJtuRB5hTHbLkGNJ LjsN5tjkR6lts/ZvgfmKfnEiSxu2ACIx6IKRyEXzhjvV8D8NsuRvN8xwjj2i1ul/ b8BCN2mtM5zejCddA/HWbTv9WHPipxw3xgZkTWD9+b+V52JemqexcExoeTv1qZZ3 RH+fdq6ZHr3QXycOC9M1zpUbWEbEKnCnRxer7QnzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUnhBDQFKpCsNTF2s4F78a2YtaUTcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I2ZjhjNzQ1LTg4MDctNDJiZC05MjRlLThhZmM1ZjY3Y2IwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwDjANBgkqhkiG9w0BAQsFAAOCAQEAQYRZZT9rmamh3ugYp0rYu9AA PyZePbclTXfYrx2IeQbOPgq9JObJ9OWm3+cmKgYcEwK7XIR1TlIDY9VX3FkYiTNG 2TGkwy6YsSbFxZFdSCs2Of2uXCPHpEGbJ64/r13dfeCEWr5BGBqmNaA61B8S529z 3EYxkal/u7K97lhPecJ+eYfPDImbLS7zCh+mJ535lQ9uazMQQaBfntIhvCdTyklj RloooVl3t/5SSw6OgNC6SxANfNaDemt7uOzrZT+RT96qB2WIqVdqz03t+73MVplR to4Q+fSZ/cA6OkTysRfU71wLemIycLadxNmn1yKLZmOYPVksqWVLkvGYEcOMTA== -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:50 2025 by rpki-client