$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cd541762-84a0-4063-89f9-de14817d2419.roa File: cd541762-84a0-4063-89f9-de14817d2419.roa (raw, json) Hash identifier: VFAPyY5qAdK+9lXbeVuZg7I5a9sQJGJUFdIj6EpYZJQ= Subject key identifier: EF:5A:1E:10:8F:F0:42:24:AC:5A:24:B8:E3:A6:D3:5F:B5:A6:C0:0F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 115A36DBF792F6DC2932E4948CD6199519042498 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cd541762-84a0-4063-89f9-de14817d2419.roa Signing time: Mon 31 Mar 2025 18:41:04 +0000 ROA not before: Mon 31 Mar 2025 18:41:04 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:1000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5a:36:db:f7:92:f6:dc:29:32:e4:94:8c:d6:19:95:19:04:24:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 31 18:41:04 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:e3:bc:71:17:fe:8a:76:87:d5:8a:b4:90: 25:47:66:a8:b5:13:d8:d5:5b:48:6d:1e:a6:4c:de: bd:2a:b1:54:ab:a7:67:6e:1d:a1:2a:84:83:ff:58: cd:0e:a6:20:19:c7:c4:6e:26:ae:45:85:66:99:62: 77:43:b6:11:7a:f3:5a:89:8c:0a:52:81:7f:62:b7: 06:56:fe:38:99:78:67:fa:61:05:8c:b3:9c:d3:d7: d5:e2:fb:15:2b:12:8d:f6:cf:86:36:bd:98:f9:ab: 2d:27:06:2e:fa:eb:88:ac:bf:ee:5f:9a:e8:7a:34: 29:9b:b8:78:94:dd:be:19:8f:a4:82:5b:c3:53:99: 3a:c9:b1:95:f7:d7:2e:fc:be:41:5c:19:59:e2:05: 32:36:86:1a:71:26:c2:e0:7a:35:2c:a7:e1:1f:ec: 73:20:7f:55:0d:b3:9c:97:48:bf:26:8f:44:2c:cf: 03:18:e7:b8:52:b8:1c:70:39:c6:2b:06:c8:20:b0: 5c:78:2d:98:a0:70:be:28:a2:0f:74:97:92:19:e6: 94:4f:6a:38:e9:36:39:8a:b2:fa:67:ca:ef:31:9f: f7:f8:b7:ff:81:77:04:0b:a8:ef:b2:86:8a:07:78: 6a:fa:0e:6d:8e:cf:2d:7e:3b:4c:5f:b4:ab:ae:97: a4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5A:1E:10:8F:F0:42:24:AC:5A:24:B8:E3:A6:D3:5F:B5:A6:C0:0F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cd541762-84a0-4063-89f9-de14817d2419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1000::/44 Signature Algorithm: sha256WithRSAEncryption 6d:1b:5f:2b:c7:ce:2a:c6:d7:29:c9:fb:b8:2a:87:2b:8c:18: 3c:c0:ea:2d:8a:3c:c6:f6:51:6e:22:82:e9:47:29:4c:c5:e6: 15:1a:f2:66:ee:2d:19:03:f4:52:28:4a:a7:be:76:e1:df:56: 6d:4e:74:df:d4:5e:82:fa:40:2e:f0:de:2e:99:0b:a8:ba:f0: b7:de:1d:09:b5:3e:f5:4b:c4:51:ef:c4:ad:c1:28:be:a4:ba: 7c:3b:47:d5:f4:80:77:d7:95:60:82:fc:83:e4:e9:7a:8b:22: de:b6:61:13:fc:31:2d:11:ab:e8:f0:76:46:b8:92:28:a1:5c: 75:37:05:21:78:fc:b3:17:ff:a4:57:13:14:34:a5:59:86:80: 79:f0:99:73:cf:8d:2c:a2:36:ac:8b:ea:2c:47:75:56:d5:11: d1:59:96:2c:df:3f:dc:98:90:4c:f5:e7:c5:1f:59:91:53:f3: b3:46:cf:21:41:10:1d:63:32:ac:00:81:6d:27:e0:a2:c7:7c: 2e:5f:3d:f2:06:1c:be:33:1a:8a:d7:7c:00:3a:66:40:d7:f5: f2:14:49:14:ac:f2:f2:18:da:0a:22:8b:e9:22:62:fa:ce:55: f0:a8:06:b5:06:d8:13:55:71:cf:3b:d4:89:f5:e7:8a:40:e6: 66:56:84:6a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEVo22/eS9twpMuSUjNYZlRkEJJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzMxMTg0MTA0WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODY4N2VkZWIzZmY1MDAyMDA3M2UzZWUzNjI0Mjg2MWFi MWJkNTgyODQ3YWViNjc4YzI3MmZkNWMwYzVmZjZmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdGOO8cRf+inaH1Yq0kCVHZqi1E9jVW0htHqZM3r0qsVSr p2duHaEqhIP/WM0OpiAZx8RuJq5FhWaZYndDthF681qJjApSgX9itwZW/jiZeGf6 YQWMs5zT19Xi+xUrEo32z4Y2vZj5qy0nBi7664isv+5fmuh6NCmbuHiU3b4Zj6SC W8NTmTrJsZX31y78vkFcGVniBTI2hhpxJsLgejUsp+Ef7HMgf1UNs5yXSL8mj0Qs zwMY57hSuBxwOcYrBsggsFx4LZigcL4oog90l5IZ5pRPajjpNjmKsvpnyu8xn/f4 t/+BdwQLqO+yhooHeGr6Dm2Ozy1+O0xftKuul6RtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU71oeEI/wQiSsWiS446bTX7WmwA8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NkNTQxNzYyLTg0YTAtNDA2My04OWY5LWRlMTQ4MTdkMjQxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwEAAwDQYJKoZIhvcNAQELBQADggEBAG0bXyvHzirG1ynJ+7gqhyuM GDzA6i2KPMb2UW4igulHKUzF5hUa8mbuLRkD9FIoSqe+duHfVm1OdN/UXoL6QC7w 3i6ZC6i68LfeHQm1PvVLxFHvxK3BKL6kunw7R9X0gHfXlWCC/IPk6XqLIt62YRP8 MS0Rq+jwdka4kiihXHU3BSF4/LMX/6RXExQ0pVmGgHnwmXPPjSyiNqyL6ixHdVbV EdFZlizfP9yYkEz158UfWZFT87NGzyFBEB1jMqwAgW0n4KLHfC5fPfIGHL4zGorX fAA6ZkDX9fIUSRSs8vIY2goii+kiYvrOVfCoBrUG2BNVcc871In154pA5mZWhGo= -----END CERTIFICATE-----Generated at Sun Apr 6 16:17:12 2025 by rpki-client