$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa File: 529e132d-0c8c-4ca3-bafc-0927932483fd.roa (raw, json) Hash identifier: xquoxRxgdj0JwU7e6TcTvCu+E71J3UXd1JCpKgcWhgU= Subject key identifier: B8:3F:64:EA:9E:44:2E:B8:71:4A:5A:B5:39:14:92:61:E2:43:F4:85 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3266603F97D0C1E6F6B6B678368F073569DC1514 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa Signing time: Tue 20 May 2025 18:20:06 +0000 ROA not before: Tue 20 May 2025 18:20:06 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:66:60:3f:97:d0:c1:e6:f6:b6:b6:78:36:8f:07:35:69:dc:15:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:20:06 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=351eec485d5c71c57313c9d72878b5ddb2c3cd60e09739104714b7acae5ad356, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:40:3e:e5:82:91:9d:e4:b8:8a:09:ad:4b: e7:63:72:f1:0d:0b:67:53:41:01:58:ce:f4:d3:2d: b9:3f:c9:11:1b:69:8d:d3:1c:07:97:58:f4:0e:3d: 16:5d:e7:f5:e3:23:9a:a5:7d:35:c2:47:27:46:1c: cd:a3:75:b6:76:0d:ce:30:45:26:cc:5c:a0:47:0e: 24:93:39:8e:fc:4a:78:1a:fe:11:e7:1b:c6:c9:21: e9:52:6b:9b:0d:b2:0b:2b:d1:ae:85:58:79:0e:d5: d9:1b:33:e0:39:10:f4:bb:df:49:34:34:d6:87:3f: 88:ed:94:97:33:b0:16:d8:e8:f9:db:dc:94:f8:c0: 1d:ef:2f:79:aa:87:a3:21:f3:6c:0b:cf:51:6e:34: 4b:f9:de:d8:c3:83:8c:d5:fb:42:f2:3d:e2:a8:f7: df:c7:3b:17:78:95:e5:65:21:e9:84:19:17:df:71: fa:4d:0b:65:08:d0:c7:4a:c1:4b:5d:01:8a:73:b4: 0c:f9:a6:8c:6d:44:b2:4c:8f:93:a4:21:17:bd:54: cc:65:8a:99:d0:af:58:2d:fe:d7:0d:65:21:36:c0: 55:5b:1a:d6:01:c0:c6:9c:d6:5c:bd:88:61:23:f4: 9a:96:b9:74:17:d9:b4:e2:eb:01:ed:cd:10:18:1a: 2a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3F:64:EA:9E:44:2E:B8:71:4A:5A:B5:39:14:92:61:E2:43:F4:85 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e000::/36 Signature Algorithm: sha256WithRSAEncryption 62:ac:4a:ba:47:5f:0e:0f:48:53:fc:76:2f:e9:69:d1:62:40: d5:7c:22:fc:cc:c7:f5:5f:23:b5:8a:a1:20:ea:cb:9d:e1:f0: a8:e9:8b:61:29:7e:09:ca:b4:c6:b8:ef:28:a8:d5:a7:8b:ef: 2d:2b:11:c5:8c:2e:62:ef:21:9d:15:ad:4b:17:78:d4:2d:2a: 13:93:4a:25:a6:73:d7:60:bf:7d:39:e5:9f:3c:c0:29:f5:c9: 82:07:1f:6d:2d:ea:42:e3:1e:b3:85:ee:45:cb:6f:ad:b4:ad: c0:ab:d8:ad:00:af:23:e5:fd:65:7f:c1:bc:1a:c6:5c:22:f2: 56:fd:11:d7:b3:90:78:42:c7:72:5d:97:ad:29:cb:c3:6c:ca: a2:cf:4d:fa:13:8c:39:b2:c0:28:96:2f:74:44:3a:01:a7:a1: 39:4f:b2:29:d5:e0:c8:f5:25:1e:e4:df:2c:30:e4:eb:05:c6: a3:87:cc:37:ea:20:22:cb:db:7b:2a:fb:76:21:16:4d:dc:71: c2:90:d1:79:03:b1:b6:3c:e2:f0:cd:6f:45:84:b3:b0:a6:7e: fd:d3:57:46:1a:86:07:5a:d7:59:f1:25:e3:94:ca:3f:b9:11: 54:c8:cd:b6:3f:e9:75:dd:ac:3b:5f:1c:3e:e3:95:d1:10:71: d9:b6:09:94 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMmZgP5fQweb2trZ4No8HNWncFRQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgyMDA2WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTFlZWM0ODVkNWM3MWM1NzMxM2M5ZDcyODc4YjVkZGIy YzNjZDYwZTA5NzM5MTA0NzE0YjdhY2FlNWFkMzU2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6LkA+5YKRneS4igmtS+djcvENC2dTQQFYzvTTLbk/yREb aY3THAeXWPQOPRZd5/XjI5qlfTXCRydGHM2jdbZ2Dc4wRSbMXKBHDiSTOY78Snga /hHnG8bJIelSa5sNsgsr0a6FWHkO1dkbM+A5EPS730k0NNaHP4jtlJczsBbY6Pnb 3JT4wB3vL3mqh6Mh82wLz1FuNEv53tjDg4zV+0LyPeKo99/HOxd4leVlIemEGRff cfpNC2UI0MdKwUtdAYpztAz5poxtRLJMj5OkIRe9VMxlipnQr1gt/tcNZSE2wFVb GtYBwMac1ly9iGEj9JqWuXQX2bTi6wHtzRAYGiq7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuD9k6p5ELrhxSlq1ORSSYeJD9IUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzUyOWUxMzJkLTBjOGMtNGNhMy1iYWZjLTA5Mjc5MzI0ODNmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAPD74DANBgkqhkiG9w0BAQsFAAOCAQEAYqxKukdfDg9IU/x2L+lp0WJA 1Xwi/MzH9V8jtYqhIOrLneHwqOmLYSl+Ccq0xrjvKKjVp4vvLSsRxYwuYu8hnRWt Sxd41C0qE5NKJaZz12C/fTnlnzzAKfXJggcfbS3qQuMes4XuRctvrbStwKvYrQCv I+X9ZX/BvBrGXCLyVv0R17OQeELHcl2XrSnLw2zKos9N+hOMObLAKJYvdEQ6Aaeh OU+yKdXgyPUlHuTfLDDk6wXGo4fMN+ogIsvbeyr7diEWTdxxwpDReQOxtjzi8M1v RYSzsKZ+/dNXRhqGB1rXWfEl45TKP7kRVMjNtj/pdd2sO18cPuOV0RBx2bYJlA== -----END CERTIFICATE-----Generated at Fri Jun 6 18:20:02 2025 by rpki-client