$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88d05d2c-791d-492a-9697-f4c4a592c57a.roa File: 88d05d2c-791d-492a-9697-f4c4a592c57a.roa (raw, json) Hash identifier: HNUUhBWVjYiOtGiJprXjqKA3xNf/L9T3cz6jjGVWQCU= Subject key identifier: 9E:30:5F:60:00:CF:9E:53:50:F2:18:37:31:73:53:34:16:23:6F:CD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4BD6CAA8B2E681147998E35951F73E5EF3CB5274 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88d05d2c-791d-492a-9697-f4c4a592c57a.roa Signing time: Mon 31 Mar 2025 16:11:33 +0000 ROA not before: Mon 31 Mar 2025 16:11:33 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:5201::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d6:ca:a8:b2:e6:81:14:79:98:e3:59:51:f7:3e:5e:f3:cb:52:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Mar 31 16:11:33 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:72:f8:ad:bd:6a:af:fe:18:e0:6c:e9:0c: bf:37:50:9b:fc:97:1c:6a:03:20:bc:d6:b1:6b:ba: cf:19:67:f5:09:f0:9d:5a:21:ac:64:7e:9d:13:ac: 5a:93:55:9b:59:2c:d9:3b:07:14:0d:61:3c:63:0b: a3:6d:54:15:12:79:a6:34:7c:ac:87:98:52:5d:0e: df:fe:bb:26:78:32:56:d9:03:a2:2d:34:8a:27:4c: 0e:45:bd:49:60:f6:85:db:a5:9a:ee:0b:c5:de:bb: b4:44:a3:d2:65:b7:db:15:cb:86:c3:2d:c0:48:42: 26:95:95:6b:f3:66:36:90:b1:ec:a8:c7:bc:9b:34: 8b:10:5f:82:27:0e:28:2c:8a:15:86:ec:86:dc:0b: 28:8e:be:a3:85:8c:65:7d:92:9b:14:56:e2:6a:03: e0:3c:f2:96:c6:06:79:98:77:7a:7f:2a:cf:78:76: 7d:99:79:7e:60:ff:09:22:ab:18:7a:8f:bb:4d:78: a5:cd:cf:a7:1f:18:3d:ee:b0:2e:c5:46:01:4e:4b: b6:f4:11:dd:22:46:a6:4f:0b:f4:d8:1d:94:0a:99: 6f:c6:0a:30:12:ed:ac:10:17:d8:99:f9:34:1e:3b: e2:a2:33:55:77:57:7f:4d:86:0f:2a:32:72:c5:60: 1c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:30:5F:60:00:CF:9E:53:50:F2:18:37:31:73:53:34:16:23:6F:CD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88d05d2c-791d-492a-9697-f4c4a592c57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:5201::/48 Signature Algorithm: sha256WithRSAEncryption b5:02:09:99:05:c7:07:bb:5c:a0:25:03:a4:85:e6:a6:6c:38: 9e:4b:fb:0d:1c:b3:e2:c8:50:d2:bc:40:88:cb:14:e5:fd:12: 11:0c:c0:d3:5c:35:14:09:5d:d5:fe:f7:d2:cf:92:8c:a5:c6: 68:18:e8:ae:5a:d6:c2:ac:cd:8d:0d:d3:23:1a:6a:6a:29:2c: c5:65:35:84:17:7a:9c:6e:b3:6e:7e:c5:25:34:30:e2:d4:61: 85:bb:b9:11:d6:c2:e6:99:f2:4d:34:10:d7:33:90:1a:89:d1: e6:c8:51:57:e1:e2:ca:be:33:08:9f:7f:86:61:4d:88:e8:74: 1f:6e:b5:1d:2f:fd:d5:c3:0c:7f:7b:76:aa:33:89:ea:32:62: a7:4c:08:8f:7a:04:69:68:8b:04:46:db:6f:1b:b3:9f:7b:46: d6:6d:04:bf:dc:04:68:ae:73:82:1d:4a:3e:fa:d0:c9:26:e5: 28:da:e5:70:fb:5d:3a:6e:4a:a6:97:50:57:fa:e7:9e:96:05: de:cd:a5:6f:5b:4c:c2:6a:7b:15:d6:63:59:8a:0b:b4:a5:03: 7e:64:f5:5b:47:d2:2a:6a:f4:64:df:14:be:a9:c2:96:7e:f0: 1a:ed:31:54:7b:90:d9:54:a0:68:0e:f9:a6:44:6f:76:4c:7e: 43:84:40:08 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS9bKqLLmgRR5mONZUfc+XvPLUnQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwMzMxMTYxMTMzWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjYxY2NhMTcwNTkzMmU3MzdlZTNmYWQxZTc5ODZjM2Ji ODY1M2E4MmM3M2FiNzExMmJjM2JjMmNmOGFmZTU5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCIHL4rb1qr/4Y4GzpDL83UJv8lxxqAyC81rFrus8ZZ/UJ 8J1aIaxkfp0TrFqTVZtZLNk7BxQNYTxjC6NtVBUSeaY0fKyHmFJdDt/+uyZ4MlbZ A6ItNIonTA5FvUlg9oXbpZruC8Xeu7REo9Jlt9sVy4bDLcBIQiaVlWvzZjaQseyo x7ybNIsQX4InDigsihWG7IbcCyiOvqOFjGV9kpsUVuJqA+A88pbGBnmYd3p/Ks94 dn2ZeX5g/wkiqxh6j7tNeKXNz6cfGD3usC7FRgFOS7b0Ed0iRqZPC/TYHZQKmW/G CjAS7awQF9iZ+TQeO+KiM1V3V39Nhg8qMnLFYBw/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnjBfYADPnlNQ8hg3MXNTNBYjb80wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg4ZDA1ZDJjLTc5MWQtNDkyYS05Njk3LWY0YzRhNTkyYzU3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAUgEwDQYJKoZIhvcNAQELBQADggEBALUCCZkFxwe7XKAlA6SF5qZs OJ5L+w0cs+LIUNK8QIjLFOX9EhEMwNNcNRQJXdX+99LPkoylxmgY6K5a1sKszY0N 0yMaamopLMVlNYQXepxus25+xSU0MOLUYYW7uRHWwuaZ8k00ENczkBqJ0ebIUVfh 4sq+Mwiff4ZhTYjodB9utR0v/dXDDH97dqozieoyYqdMCI96BGloiwRG228bs597 RtZtBL/cBGiuc4IdSj760Mkm5Sja5XD7XTpuSqaXUFf6556WBd7NpW9bTMJqexXW Y1mKC7SlA35k9VtH0ipq9GTfFL6pwpZ+8BrtMVR7kNlUoGgO+aZEb3ZMfkOEQAg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:12 2025 by rpki-client