$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa File: d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa (raw, json) Hash identifier: gKamQa7c55ivHiNu0L7fy3bs50SCawNoT4LxwS8sa24= Subject key identifier: D0:4A:A3:F2:18:C9:40:41:E5:00:C1:DE:3A:EA:D5:8A:4A:5C:47:15 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3F9032226A5FFF9BFB379C11958740DE5FF92315 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa Signing time: Mon 31 Mar 2025 18:51:11 +0000 ROA not before: Mon 31 Mar 2025 18:51:11 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ea00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:90:32:22:6a:5f:ff:9b:fb:37:9c:11:95:87:40:de:5f:f9:23:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 31 18:51:11 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:56:22:d1:1b:39:b0:e9:50:30:59:9a:ea:01: 31:c8:9c:38:d5:92:b1:ce:f8:3b:47:b4:ad:5c:05: 62:62:ab:97:28:7a:48:8f:c1:ab:54:45:39:8f:3b: aa:89:17:32:22:21:71:06:1b:c4:10:bc:0e:17:c3: d5:e3:f2:2b:aa:cb:3a:78:a0:8c:d5:dc:22:77:b4: e2:d3:2a:dd:62:06:c8:7d:9d:22:30:8e:fc:3f:2d: 3e:23:dd:c1:fb:da:fc:63:00:90:37:1f:2f:06:6c: 5d:95:3a:fe:92:ea:43:38:c7:db:fb:d5:97:ba:cb: df:67:14:84:e4:d0:2d:66:4c:4d:d5:b0:af:cf:e8: 61:d1:4c:e1:ec:f7:a7:51:50:09:36:93:0d:51:7f: d1:fe:62:00:72:19:03:d7:80:8b:92:26:15:7e:03: cb:03:da:a9:d0:ee:4e:0b:1e:d2:1c:53:6a:f7:6d: 1c:6b:75:d9:ee:72:e0:0f:76:68:6b:ba:36:3b:d5: 20:d0:3a:4e:7d:7a:39:44:87:d1:6c:fe:c3:06:a8: 82:3f:25:85:d2:0b:8f:72:21:5f:11:c4:3b:4b:87: 33:cd:47:c8:98:96:af:e8:09:bc:ad:47:82:25:e9: 2c:92:d4:d3:c5:6c:df:ac:ab:00:f7:fd:31:e3:b4: a1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4A:A3:F2:18:C9:40:41:E5:00:C1:DE:3A:EA:D5:8A:4A:5C:47:15 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/40 Signature Algorithm: sha256WithRSAEncryption 1f:3f:3e:89:49:68:46:fb:85:73:24:08:6c:20:78:0d:ff:3a: 23:b5:5d:16:df:db:1a:c7:52:06:c9:10:b5:2c:ee:25:5d:49: b6:fe:c4:72:2f:27:20:45:df:b6:36:a9:6a:1f:ea:de:75:14: c3:b2:f9:d0:3f:bc:23:09:2a:51:01:3f:38:7d:cb:54:2d:9a: 32:49:d4:39:e4:28:d0:72:33:b9:ec:7d:af:32:f7:08:0d:f6: e6:33:b4:eb:10:95:79:c2:ef:71:1a:b0:22:77:bc:f7:57:3c: 08:66:00:d2:66:73:de:2b:c9:75:d2:82:86:4f:9b:21:a2:77: 3f:63:d5:5f:ac:8f:d3:f5:ba:2a:f9:c6:d8:17:35:16:5c:9a: 3a:ac:51:99:d6:5c:8f:54:4d:7e:6b:f3:ae:af:55:03:e2:5e: 74:59:a2:d0:6a:69:12:39:d6:a6:b4:52:57:3f:ff:c1:6c:20: 40:00:e0:5e:2b:3a:23:1a:ec:56:bb:ee:95:14:27:2c:0c:a4: 3c:08:e2:71:5f:0d:df:c6:d5:5a:c8:74:a1:7a:7b:e4:ff:cd: 12:84:4e:39:1e:dc:13:f7:3e:51:4d:57:43:63:9e:c7:01:3b: 1e:09:18:7a:b4:e5:ce:91:3b:03:69:19:e1:30:e8:18:c1:5b: 31:dd:f0:f4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUP5AyImpf/5v7N5wRlYdA3l/5IxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzMxMTg1MTExWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzVhMWNlZjlhZjg5N2Q4NTRlNzllNDQ0MTNmMWE3NGZh NmU1ZWIxYmI3M2ZlMDMyMjc0M2FiOTJmN2RkM2RkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5ViLRGzmw6VAwWZrqATHInDjVkrHO+DtHtK1cBWJiq5co ekiPwatURTmPO6qJFzIiIXEGG8QQvA4Xw9Xj8iuqyzp4oIzV3CJ3tOLTKt1iBsh9 nSIwjvw/LT4j3cH72vxjAJA3Hy8GbF2VOv6S6kM4x9v71Ze6y99nFITk0C1mTE3V sK/P6GHRTOHs96dRUAk2kw1Rf9H+YgByGQPXgIuSJhV+A8sD2qnQ7k4LHtIcU2r3 bRxrddnucuAPdmhrujY71SDQOk59ejlEh9Fs/sMGqII/JYXSC49yIV8RxDtLhzPN R8iYlq/oCbytR4Il6SyS1NPFbN+sqwD3/THjtKGDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0Eqj8hjJQEHlAMHeOurVikpcRxUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyYjExZTBmLTAxMTItNGM0ZS04YWE0LTE2ODc4OGZkNmFhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76jANBgkqhkiG9w0BAQsFAAOCAQEAHz8+iUloRvuFcyQIbCB4Df86 I7VdFt/bGsdSBskQtSzuJV1Jtv7Eci8nIEXftjapah/q3nUUw7L50D+8IwkqUQE/ OH3LVC2aMknUOeQo0HIzuex9rzL3CA325jO06xCVecLvcRqwIne891c8CGYA0mZz 3ivJddKChk+bIaJ3P2PVX6yP0/W6KvnG2Bc1FlyaOqxRmdZcj1RNfmvzrq9VA+Je dFmi0GppEjnWprRSVz//wWwgQADgXis6IxrsVrvulRQnLAykPAjicV8N38bVWsh0 oXp75P/NEoROOR7cE/c+UU1XQ2OexwE7HgkYerTlzpE7A2kZ4TDoGMFbMd3w9A== -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:10 2025 by rpki-client