$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a96c02c-ad61-40ce-b5aa-def693953ba1.roa File: 9a96c02c-ad61-40ce-b5aa-def693953ba1.roa (raw, json) Hash identifier: QIK0bnyG7hEF6xjtORG0qEn2+W1ePN7Rrfev8fgdDmE= Subject key identifier: 60:52:4E:B7:B9:F9:86:FD:5A:00:47:1F:B2:1C:D0:98:CA:AA:86:0B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7663410134E22B3C158B0AA8D2CCC69D5490C90E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a96c02c-ad61-40ce-b5aa-def693953ba1.roa Signing time: Mon 10 Mar 2025 15:30:23 +0000 ROA not before: Mon 10 Mar 2025 15:30:23 +0000 ROA not after: Mon 14 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f3:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:63:41:01:34:e2:2b:3c:15:8b:0a:a8:d2:cc:c6:9d:54:90:c9:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 10 15:30:23 2025 GMT Not After : Apr 14 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:23:5b:d8:2e:e6:37:36:39:a6:8d:8d:a1: 20:d8:68:a7:57:09:4c:0c:af:10:ef:d3:ba:93:c9: f4:03:48:3f:65:50:78:c8:47:44:88:0e:2b:cc:ec: 91:d0:8a:78:12:f8:c5:62:a4:12:d1:0b:17:34:c5: 5e:8b:ed:71:d3:1f:f8:4e:45:67:2c:26:28:7e:8a: 8b:52:13:01:1e:e1:f2:93:77:dc:4f:f7:96:e2:ac: 67:ee:d3:ad:77:08:ed:b7:b8:a8:02:46:10:37:14: 1f:1b:fa:ff:70:c4:9b:bf:2a:31:12:34:0c:1c:f8: 17:22:b5:cb:85:7e:44:13:7b:d3:98:80:9e:de:49: 49:8b:24:b5:4a:19:b0:bf:cd:e8:98:1a:f1:02:0a: 92:38:39:29:73:1d:15:ab:40:9e:8b:a3:17:a9:59: 06:9b:2c:05:91:b0:5c:33:97:31:a1:4e:c4:e3:b5: 54:d1:03:db:ca:98:a3:6e:a0:0c:b4:0c:c4:e7:36: 2b:25:26:0b:72:08:5c:8e:fa:d9:ef:d7:17:7e:cb: a4:d3:73:8b:3d:08:09:aa:7a:f3:5c:ff:8c:84:54: e6:5c:dc:7c:3b:19:26:70:72:ed:28:9f:0f:1d:c9: 76:35:24:51:bc:7d:28:0d:74:1c:1b:29:47:ff:1d: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:52:4E:B7:B9:F9:86:FD:5A:00:47:1F:B2:1C:D0:98:CA:AA:86:0B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a96c02c-ad61-40ce-b5aa-def693953ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f000::/44 Signature Algorithm: sha256WithRSAEncryption 95:bf:5f:c4:e7:cc:65:da:c1:bb:3b:aa:8e:8c:0b:df:0e:02: ba:54:55:a0:3d:9d:82:c0:fa:94:89:8d:71:84:47:6f:ce:63: 20:e4:8a:b7:c1:b7:3c:84:21:de:7d:05:3e:03:37:9d:9a:64: 85:c6:33:b7:1c:8d:f0:f5:d0:1e:d1:81:31:3a:64:66:d0:84: b8:65:3f:c5:a2:de:49:38:d7:d3:17:0e:07:69:c8:32:5d:c9: f5:f6:4a:cf:00:86:06:69:8d:af:03:d7:4e:48:e6:69:61:3f: 1d:90:11:ec:e0:47:78:4d:80:88:49:ed:23:77:bd:ef:31:e6: 16:bc:5a:ea:7a:e6:93:85:5b:4f:c1:b0:14:39:3f:2d:93:92: 7b:1e:2f:33:8c:73:88:77:f0:fa:92:20:03:ee:92:90:57:4a: 32:f3:59:7f:cf:22:3d:79:63:d8:d6:fd:34:37:40:3b:8e:e1: 52:92:12:14:0f:c6:31:c7:52:0b:ae:08:90:9f:b8:44:33:fb: 18:09:61:78:7a:34:99:e2:93:65:ae:b3:0c:db:5a:23:f1:d0: b3:d9:35:f7:f6:d8:59:1e:24:98:fe:5c:18:05:9f:9d:df:7c: e0:59:73:1f:90:2c:2c:a1:31:6c:11:76:85:46:a5:55:31:6a: 00:d3:13:82 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdmNBATTiKzwViwqo0szGnVSQyQ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzEwMTUzMDIzWhcNMjUwNDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOWZkMjA3NGJmMTdhNTc1NDI1Y2VlN2I0YTY2MGJiYTA0 MDMyY2Y0NDgwNzMwYjQ5NjRiNzRhN2ZjZGZhNDA3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4GiNb2C7mNzY5po2NoSDYaKdXCUwMrxDv07qTyfQDSD9l UHjIR0SIDivM7JHQingS+MVipBLRCxc0xV6L7XHTH/hORWcsJih+iotSEwEe4fKT d9xP95birGfu0613CO23uKgCRhA3FB8b+v9wxJu/KjESNAwc+BcitcuFfkQTe9OY gJ7eSUmLJLVKGbC/zeiYGvECCpI4OSlzHRWrQJ6LoxepWQabLAWRsFwzlzGhTsTj tVTRA9vKmKNuoAy0DMTnNislJgtyCFyO+tnv1xd+y6TTc4s9CAmqevNc/4yEVOZc 3Hw7GSZwcu0onw8dyXY1JFG8fSgNdBwbKUf/Hbq9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYFJOt7n5hv1aAEcfshzQmMqqhgswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzlhOTZjMDJjLWFkNjEtNDBjZS1iNWFhLWRlZjY5Mzk1M2JhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDz8AAwDQYJKoZIhvcNAQELBQADggEBAJW/X8TnzGXawbs7qo6MC98O ArpUVaA9nYLA+pSJjXGER2/OYyDkirfBtzyEId59BT4DN52aZIXGM7ccjfD10B7R gTE6ZGbQhLhlP8Wi3kk419MXDgdpyDJdyfX2Ss8AhgZpja8D105I5mlhPx2QEezg R3hNgIhJ7SN3ve8x5ha8Wup65pOFW0/BsBQ5Py2TknseLzOMc4h38PqSIAPukpBX SjLzWX/PIj15Y9jW/TQ3QDuO4VKSEhQPxjHHUguuCJCfuEQz+xgJYXh6NJnik2Wu swzbWiPx0LPZNff22FkeJJj+XBgFn53ffOBZcx+QLCyhMWwRdoVGpVUxagDTE4I= -----END CERTIFICATE-----Generated at Thu Mar 13 23:39:37 2025 by rpki-client