$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa File: e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa (raw, json) Hash identifier: 6ahfgZhydVnSgGUAtJh/UOB2e6SK8HQnABw9Fm/kkkU= Subject key identifier: 17:AC:8F:AC:C7:8B:79:8A:3B:4E:BA:AA:EE:F1:9C:48:EC:2E:DA:81 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 63DC77660BA049946EB8DBF13E09A22E2D908086 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa Signing time: Fri 21 Mar 2025 00:50:11 +0000 ROA not before: Fri 21 Mar 2025 00:50:11 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:dc:77:66:0b:a0:49:94:6e:b8:db:f1:3e:09:a2:2e:2d:90:80:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 21 00:50:11 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:4c:ee:f6:d6:6f:21:17:82:a9:82:6e:c4: 30:ea:42:fc:d1:0d:9d:af:62:5c:3d:54:32:d0:b4: 0a:01:dc:44:e1:be:65:84:64:3e:3a:46:85:d7:59: 7a:aa:00:2d:18:b1:8c:7e:ee:9f:b5:0b:1f:8d:22: 0c:ca:1d:65:48:ae:90:62:ad:b0:b6:f4:d8:7e:49: a8:82:ec:60:ae:a8:89:5e:c7:c4:cf:a9:7a:e2:8e: 1c:59:d0:06:9c:40:8d:4e:d9:12:2b:20:c9:1a:db: f5:80:04:e0:32:28:65:72:9b:3c:99:a6:3c:8f:e2: de:a2:d1:de:f5:fa:94:7b:6f:cd:97:2c:57:c3:57: 5e:26:a2:c2:ef:01:91:d8:22:48:77:a5:77:bf:14: 82:f7:74:86:cf:9f:5b:50:67:71:5f:e5:03:29:40: 5c:9b:47:6b:a0:20:4b:9a:e0:38:af:f5:ff:9d:34: 38:a0:55:b9:4a:63:43:2d:4e:21:22:75:bd:d3:7b: e2:48:7d:82:96:4f:68:07:90:f7:9c:4f:e9:4b:be: 1f:1f:10:e9:08:65:e8:7f:e3:8e:5b:29:8f:5b:2b: 6d:25:01:0f:73:90:5a:ec:60:b2:85:35:a5:ef:8c: 75:51:62:54:48:36:1e:fd:c2:61:47:26:53:85:1a: fe:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AC:8F:AC:C7:8B:79:8A:3B:4E:BA:AA:EE:F1:9C:48:EC:2E:DA:81 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5400::/40 Signature Algorithm: sha256WithRSAEncryption 39:a6:7c:ef:5e:41:e9:e9:6c:7e:df:c1:b0:e4:cc:1f:9d:f0: 12:ae:f7:fa:a8:1a:ce:0c:02:59:47:3a:04:02:cb:41:aa:a2: 30:23:91:54:9a:2c:84:fa:03:4c:cb:e4:af:7e:23:6e:ef:9c: d4:31:c1:d6:84:10:11:ea:6f:b8:f7:9d:ad:aa:9a:68:91:1b: 74:f9:8d:d3:4d:1d:fc:12:50:e9:3e:5c:e3:20:cd:76:c8:64: b7:e5:23:9b:d0:a2:ca:8e:eb:09:e3:53:58:3f:3f:8a:80:62: c8:b1:fd:66:c1:32:0e:91:0c:9c:1d:2c:1d:8e:4f:0a:36:dc: d8:f4:93:75:8e:73:25:b3:c2:51:88:3b:71:24:6b:87:9f:0a: 30:81:36:3a:79:ca:f3:5e:71:b1:db:d1:97:a3:56:55:c0:7a: e4:6c:9b:1d:d4:72:a2:67:e9:f9:fd:dc:14:fd:ec:d7:89:c8: 5d:ee:bb:88:8a:1e:f3:38:78:d0:cc:9b:7e:f6:20:ed:3f:24: 8d:96:ae:2f:6a:11:f7:30:aa:ff:aa:be:58:c2:c4:70:f1:dc: 99:46:b3:16:43:94:87:32:2f:c0:0f:31:4b:fe:38:6c:7e:4a: 8d:09:5b:54:ac:0f:b3:1e:18:60:cb:e6:da:67:f0:1d:0e:c2: 4e:31:77:e5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUY9x3ZgugSZRuuNvxPgmiLi2QgIYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzIxMDA1MDExWhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZmU4YWFkNzJlZmVhOGMxOTVlNjYyMzMxZmU2MjkwMTZh NGE5OTJhY2VkMmQ4Y2YyMjY2ZTA1ODU5ZDVmZDI5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/oUzu9tZvIReCqYJuxDDqQvzRDZ2vYlw9VDLQtAoB3ETh vmWEZD46RoXXWXqqAC0YsYx+7p+1Cx+NIgzKHWVIrpBirbC29Nh+SaiC7GCuqIle x8TPqXrijhxZ0AacQI1O2RIrIMka2/WABOAyKGVymzyZpjyP4t6i0d71+pR7b82X LFfDV14mosLvAZHYIkh3pXe/FIL3dIbPn1tQZ3Ff5QMpQFybR2ugIEua4Div9f+d NDigVblKY0MtTiEidb3Te+JIfYKWT2gHkPecT+lLvh8fEOkIZeh/445bKY9bK20l AQ9zkFrsYLKFNaXvjHVRYlRINh79wmFHJlOFGv4fAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUF6yPrMeLeYo7Trqq7vGcSOwu2oEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2UxYTQ0MWI5LTI0ZTUtNDFlOS05MWU4LTVlN2QxNGZiZGVmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwVDANBgkqhkiG9w0BAQsFAAOCAQEAOaZ8715B6elsft/BsOTMH53w Eq73+qgazgwCWUc6BALLQaqiMCORVJoshPoDTMvkr34jbu+c1DHB1oQQEepvuPed raqaaJEbdPmN000d/BJQ6T5c4yDNdshkt+Ujm9Ciyo7rCeNTWD8/ioBiyLH9ZsEy DpEMnB0sHY5PCjbc2PSTdY5zJbPCUYg7cSRrh58KMIE2OnnK815xsdvRl6NWVcB6 5GybHdRyomfp+f3cFP3s14nIXe67iIoe8zh40MybfvYg7T8kjZauL2oR9zCq/6q+ WMLEcPHcmUazFkOUhzIvwA8xS/44bH5KjQlbVKwPsx4YYMvm2mfwHQ7CTjF35Q== -----END CERTIFICATE-----Generated at Sat Apr 5 12:21:07 2025 by rpki-client