$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa File: f6cf58cb-08de-4e22-be98-43e3537a793b.roa (raw, json) Hash identifier: zRERPjVG5WnTiojRKsZOmDYnVdpjTU7oPq10x7xYz40= Subject key identifier: AF:BA:C9:D8:15:BC:9D:58:7E:67:E0:82:0D:76:1C:18:23:8A:C5:B8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 536359D49FC636ED3766EC3B65CD2D7A237A808F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa Signing time: Mon 31 Mar 2025 18:51:00 +0000 ROA not before: Mon 31 Mar 2025 18:51:00 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:63:59:d4:9f:c6:36:ed:37:66:ec:3b:65:cd:2d:7a:23:7a:80:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 31 18:51:00 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:5d:ed:37:d6:4b:cd:6d:92:62:6a:c7:ef: 54:c3:21:0d:6e:1a:93:f9:ec:64:93:94:f5:d1:02: 7f:05:5e:22:07:27:58:4f:75:e4:a4:33:7e:60:1c: eb:1b:31:7b:81:97:4c:75:9b:a0:74:4e:15:da:d7: 02:fa:2f:a6:ad:af:44:c5:1a:5c:15:a2:69:a9:aa: af:9e:e0:1e:2d:99:0b:57:64:e4:7d:76:e8:01:cc: 4d:bc:93:08:73:b0:d8:31:2f:df:7c:7c:11:f4:7e: 5a:69:64:f5:4d:81:5f:1d:63:6e:f0:c6:ad:d5:30: 85:b4:a3:51:98:d8:42:15:40:c4:90:f4:68:cc:95: d7:cb:f0:84:ef:33:6d:7c:f0:9d:b6:1f:15:9a:ba: 43:96:1a:94:e4:95:5c:5a:3d:ad:62:b5:5c:1c:28: d6:7b:d4:e0:80:33:f9:1f:d7:2c:a2:31:fa:9f:8a: 92:06:e5:88:75:64:b7:3f:78:ca:e4:4b:e0:bb:8d: 15:ee:cd:b6:f4:9b:66:e8:ed:a9:34:76:39:aa:99: 38:14:90:95:69:86:5d:fd:2b:11:b0:a3:b5:4e:50: 2f:1a:bd:8c:6a:5d:e3:7a:90:a3:2f:c8:9d:9c:2e: d9:dd:58:6b:56:02:a1:ff:99:d8:21:28:48:29:25: 74:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BA:C9:D8:15:BC:9D:58:7E:67:E0:82:0D:76:1C:18:23:8A:C5:B8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e100::/40 Signature Algorithm: sha256WithRSAEncryption 46:a6:ee:8c:5d:5c:9f:f3:eb:93:aa:8f:29:03:cf:3b:aa:1c: 7e:91:4b:7f:91:bc:2f:56:6c:3d:49:94:c9:f1:ea:25:a0:3d: 71:6c:6a:dd:06:d2:aa:3c:b1:8f:2c:0c:d6:12:45:c2:fe:c9: 66:97:d6:a0:bf:b6:37:eb:97:33:7c:e0:df:54:de:ae:7f:f3: 0a:79:88:a7:8e:65:de:1f:e5:08:cf:0c:1e:18:da:5f:be:d5: db:01:a8:11:b9:d2:5e:82:9b:ef:ab:87:b4:bd:bc:9d:ce:39: 29:68:36:ce:57:83:e2:57:68:25:18:0a:4d:0e:f2:1b:7f:48: 51:2e:a7:61:2c:c2:b6:3e:15:4c:b7:f7:11:ff:12:f7:ea:2d: 28:8c:5e:9b:95:65:7b:af:11:01:e3:ff:0a:41:19:4d:ad:a0: b1:6c:a4:ea:e5:b6:99:be:1a:d0:3c:a1:4a:a7:1c:f7:37:06: 05:9f:51:0b:98:6f:1a:b2:cd:81:44:7e:0f:9c:e2:11:79:1e: 86:e7:0c:66:05:41:67:3e:8b:e1:14:52:c0:ef:ef:3e:10:fb: 85:01:6f:08:4f:df:01:d1:cc:42:74:9b:49:a3:46:e9:6e:2f: f2:84:ca:c9:3b:09:0f:52:4c:b3:5a:48:75:4d:a5:07:ee:7c: 3f:f7:c9:6e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUU2NZ1J/GNu03Zuw7Zc0teiN6gI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzMxMTg1MTAwWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOGRmZjQwNTFjNDQ3YWJlMTI5Y2M0NzY2NWM4NGI2Yzgw ZGEzYmM4ZjQ3YWU2MTU1NDY3NzBlMDQ4YjAwZjcyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs+F3tN9ZLzW2SYmrH71TDIQ1uGpP57GSTlPXRAn8FXiIH J1hPdeSkM35gHOsbMXuBl0x1m6B0ThXa1wL6L6atr0TFGlwVommpqq+e4B4tmQtX ZOR9dugBzE28kwhzsNgxL998fBH0flppZPVNgV8dY27wxq3VMIW0o1GY2EIVQMSQ 9GjMldfL8ITvM2188J22HxWaukOWGpTklVxaPa1itVwcKNZ71OCAM/kf1yyiMfqf ipIG5Yh1ZLc/eMrkS+C7jRXuzbb0m2bo7ak0djmqmTgUkJVphl39KxGwo7VOUC8a vYxqXeN6kKMvyJ2cLtndWGtWAqH/mdghKEgpJXThAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUr7rJ2BW8nVh+Z+CCDXYcGCOKxbgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y2Y2Y1OGNiLTA4ZGUtNGUyMi1iZTk4LTQzZTM1MzdhNzkzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74TANBgkqhkiG9w0BAQsFAAOCAQEARqbujF1cn/Prk6qPKQPPO6oc fpFLf5G8L1ZsPUmUyfHqJaA9cWxq3QbSqjyxjywM1hJFwv7JZpfWoL+2N+uXM3zg 31Tern/zCnmIp45l3h/lCM8MHhjaX77V2wGoEbnSXoKb76uHtL28nc45KWg2zleD 4ldoJRgKTQ7yG39IUS6nYSzCtj4VTLf3Ef8S9+otKIxem5Vle68RAeP/CkEZTa2g sWyk6uW2mb4a0DyhSqcc9zcGBZ9RC5hvGrLNgUR+D5ziEXkehucMZgVBZz6L4RRS wO/vPhD7hQFvCE/fAdHMQnSbSaNG6W4v8oTKyTsJD1JMs1pIdU2lB+58P/fJbg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:31 2025 by rpki-client