$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa File: 6912c7e5-41f4-4b82-9db8-51bac2912f50.roa (raw, json) Hash identifier: xfaYvbjJ1i5ar2asQZBMIeDtc+Mh3QWQQhqwUEkXO2M= Subject key identifier: FB:1C:CD:7D:0B:FE:86:5C:96:E3:DA:96:49:B2:DC:5D:2F:60:45:C7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 45A76BED816A59629C1FA31AC11DB495C0DF6D96 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa Signing time: Fri 04 Apr 2025 00:20:27 +0000 ROA not before: Fri 04 Apr 2025 00:20:27 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a7:6b:ed:81:6a:59:62:9c:1f:a3:1a:c1:1d:b4:95:c0:df:6d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 4 00:20:27 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0c:36:8d:02:f6:c0:ce:23:eb:1e:d3:02:50: ba:35:c2:16:a8:13:04:db:e5:37:4e:7c:06:09:e7: 00:bd:77:32:db:77:78:5d:8f:7a:a5:73:25:e2:d4: 31:27:99:6b:02:e4:2b:2d:65:df:49:86:8c:ab:6c: 02:49:6f:6d:fc:59:8c:a5:55:3a:69:9a:7d:59:1d: 22:90:48:5d:78:5b:61:d4:d2:c3:a4:1a:ff:9c:cc: 0d:ea:c5:fc:48:72:2f:0e:3d:4a:28:eb:93:b0:d8: 79:7d:ca:86:13:6e:94:89:fd:78:63:3a:46:e2:e7: ad:08:ee:be:b4:15:54:92:c3:cd:ae:6b:55:a4:2d: 1d:ae:96:c3:be:3a:cf:dd:de:76:9b:3f:80:8b:89: 56:a2:9c:df:29:e2:d6:7d:61:73:3e:bc:16:2c:28: 26:d9:50:e0:c2:c5:96:a2:a5:c6:e9:f2:2e:2f:6f: 9a:24:0b:76:ed:e7:df:1f:06:53:75:65:3f:25:f2: bf:f5:78:a2:3e:be:77:b0:0a:39:5c:79:5f:2a:fa: 2e:e0:af:62:8c:00:08:57:9e:3d:bf:88:92:62:e8: 2f:e3:d4:1a:4a:c3:8c:0d:57:69:e1:4a:66:a1:17: b0:70:3d:da:97:00:d7:36:6e:39:51:80:5a:8f:1e: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1C:CD:7D:0B:FE:86:5C:96:E3:DA:96:49:B2:DC:5D:2F:60:45:C7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption 28:99:80:a3:d3:69:8a:dc:7c:dd:77:a3:cc:1c:50:6f:16:8e: de:de:70:70:1f:66:f3:bd:7f:a7:ab:54:9a:44:c9:1c:b9:f9: 5e:c9:bd:0b:83:75:f2:4a:8e:25:dd:eb:6f:cd:c9:09:7d:7d: 50:15:25:42:d6:bb:9d:a0:a4:b0:77:74:60:04:77:1d:67:d8: 33:f7:64:2e:00:d0:ba:70:91:3c:d5:0b:40:36:41:d6:0a:d0: 4b:53:74:4e:19:d5:65:04:57:c7:89:82:08:e4:e7:e9:14:61: 13:a7:81:d7:8e:81:d3:0b:e3:df:7e:61:de:2d:d4:33:cb:0c: a3:c9:c0:ee:38:5f:b0:1f:e0:a9:03:b0:29:83:86:52:42:bb: 99:e9:4c:8e:b5:f4:09:d1:2f:83:10:66:3c:7c:15:c0:86:85: 40:a7:23:53:9f:cd:f2:d1:54:5e:f3:17:90:43:1e:6a:0b:7e: 81:7b:68:31:4b:2b:7a:21:72:84:fd:cb:2e:4a:68:fc:04:8f: b8:2e:cc:1b:49:ee:f1:ef:2d:62:db:53:c6:de:f3:90:76:30: b6:ed:00:1c:c9:bc:81:c2:00:23:0f:3b:6f:f4:66:a8:95:33: 22:e2:9d:c2:ad:46:b0:e9:98:c7:dc:bb:ca:af:16:61:6e:be: 9c:0a:99:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURadr7YFqWWKcH6MawR20lcDfbZYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDA0MDAyMDI3WhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzM2YmRjMWU1NjI5ZGNiNzQ5MTEzN2JiNWY4YTI3MmM5 ZjAwZmQ3YmZjMGFjNzNjMTFhM2RmMjJiN2ZkNDJhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwDDaNAvbAziPrHtMCULo1whaoEwTb5TdOfAYJ5wC9dzLb d3hdj3qlcyXi1DEnmWsC5CstZd9JhoyrbAJJb238WYylVTppmn1ZHSKQSF14W2HU 0sOkGv+czA3qxfxIci8OPUoo65Ow2Hl9yoYTbpSJ/XhjOkbi560I7r60FVSSw82u a1WkLR2ulsO+Os/d3nabP4CLiVainN8p4tZ9YXM+vBYsKCbZUODCxZaipcbp8i4v b5okC3bt598fBlN1ZT8l8r/1eKI+vnewCjlceV8q+i7gr2KMAAhXnj2/iJJi6C/j 1BpKw4wNV2nhSmahF7BwPdqXANc2bjlRgFqPHievAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+xzNfQv+hlyW49qWSbLcXS9gRccwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY5MTJjN2U1LTQxZjQtNGI4Mi05ZGI4LTUxYmFjMjkxMmY1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBACiZgKPTaYrcfN13o8wcUG8W jt7ecHAfZvO9f6erVJpEyRy5+V7JvQuDdfJKjiXd62/NyQl9fVAVJULWu52gpLB3 dGAEdx1n2DP3ZC4A0LpwkTzVC0A2QdYK0EtTdE4Z1WUEV8eJggjk5+kUYROngdeO gdML499+Yd4t1DPLDKPJwO44X7Af4KkDsCmDhlJCu5npTI619AnRL4MQZjx8FcCG hUCnI1OfzfLRVF7zF5BDHmoLfoF7aDFLK3ohcoT9yy5KaPwEj7guzBtJ7vHvLWLb U8be85B2MLbtABzJvIHCACMPO2/0ZqiVMyLincKtRrDpmMfcu8qvFmFuvpwKmXk= -----END CERTIFICATE-----Generated at Fri Apr 4 23:29:17 2025 by rpki-client