$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a96c02c-ad61-40ce-b5aa-def693953ba1.roa File: 9a96c02c-ad61-40ce-b5aa-def693953ba1.roa (raw, json) Hash identifier: e0LUw0xB7Dmc8KS4f53+MPAGB1QkgxVc5kwaebEwMHo= Subject key identifier: 28:77:20:6D:2E:70:C8:23:AD:BD:50:4E:FF:6F:EE:07:E3:25:0C:15 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 012865DD08AEA64E5EE64AEEF83B41D24EB194DB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a96c02c-ad61-40ce-b5aa-def693953ba1.roa Signing time: Sat 24 May 2025 00:30:40 +0000 ROA not before: Sat 24 May 2025 00:30:40 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f3:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:28:65:dd:08:ae:a6:4e:5e:e6:4a:ee:f8:3b:41:d2:4e:b1:94:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 24 00:30:40 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=4a76f91ed626422d541b60de40c416b006eaebe4b10a354643a4aa0f287ffb30, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:33:65:29:00:e2:97:22:c3:b7:f0:ca:69: e6:aa:8a:13:31:ac:b5:2f:28:e0:71:34:b2:d1:4c: 43:61:75:e4:51:97:2a:45:74:3b:92:61:f4:f1:b4: b7:e2:3a:15:2d:d7:69:a2:d7:16:4e:7c:10:69:94: 7b:2e:82:72:6d:b3:00:93:c8:b9:2c:d4:4c:21:0c: 2f:e3:e5:20:4a:0e:79:05:ee:02:13:0f:95:b6:43: 28:b1:ad:0e:ab:17:b0:91:18:f3:d1:32:78:7e:fe: 5c:b2:f9:b0:cd:bc:0d:d8:38:ce:10:a3:6d:18:6c: 7e:8c:bc:3f:a3:ce:3f:27:97:d7:0b:8f:aa:a9:5e: ee:05:8b:3e:8d:5c:2a:57:3e:e2:39:79:35:69:84: 6f:c7:63:f3:94:50:f5:bb:9b:a2:33:b4:e1:cb:36: 57:73:22:e1:84:76:04:94:7d:78:6e:fe:09:bc:ec: 18:47:3e:ff:3b:17:ac:1e:df:de:69:64:57:aa:23: 0a:22:f6:68:a8:ea:ca:30:7f:84:a2:15:48:ce:59: 46:d2:d1:c0:69:50:46:21:6f:28:80:75:76:76:d0: 51:cc:0f:55:b1:33:79:95:ba:11:ea:81:6e:42:c6: 0e:b9:08:e5:df:a6:28:2c:44:99:90:f8:b9:ec:59: fe:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:77:20:6D:2E:70:C8:23:AD:BD:50:4E:FF:6F:EE:07:E3:25:0C:15 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9a96c02c-ad61-40ce-b5aa-def693953ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f000::/44 Signature Algorithm: sha256WithRSAEncryption 67:cd:cb:ad:5e:79:a3:57:29:01:e6:d8:13:83:0c:51:8d:b7: 55:54:b0:6b:16:65:5e:04:06:ae:a1:a7:37:0a:f4:d0:2d:2d: 20:a6:fa:cb:7e:29:9b:18:4b:d7:24:2f:ec:c6:47:72:42:a6: fc:f7:d1:fd:79:d2:62:dc:f4:24:45:e3:d8:76:0c:4a:ff:01: 74:7b:61:ba:92:f6:1f:87:65:f7:d0:cb:1d:b5:e0:85:a0:70: 19:0c:99:32:9f:a1:ed:cc:97:77:d8:ed:51:15:11:86:81:c0: 86:63:e7:96:5f:13:dc:a6:17:30:c5:95:7e:8f:c1:54:de:81: 26:33:ca:8d:63:2f:a2:1c:d6:f4:4b:08:7a:bd:5f:f4:76:31: 06:05:30:00:3d:7e:69:4f:05:32:1b:63:27:cf:b0:28:f9:4e: e5:a2:2c:ca:80:69:a6:26:0e:10:df:04:e0:b4:e8:e3:8a:9d: c5:85:bf:2c:0b:6d:bc:d8:f9:2e:35:83:48:bf:ee:ca:11:5c: d8:80:48:85:d5:75:67:0f:d2:39:8a:c4:01:a4:46:81:f5:79: 10:fe:0e:5d:7b:3f:13:b4:d1:f3:c8:be:eb:43:99:fd:17:f2: 3c:6d:51:a4:6f:c5:ca:b0:6c:2a:88:a0:35:d7:d5:9a:bd:c0: db:46:0d:68 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAShl3Qiupk5e5kru+DtB0k6xlNswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTI0MDAzMDQwWhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTc2ZjkxZWQ2MjY0MjJkNTQxYjYwZGU0MGM0MTZiMDA2 ZWFlYmU0YjEwYTM1NDY0M2E0YWEwZjI4N2ZmYjMwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrGzNlKQDilyLDt/DKaeaqihMxrLUvKOBxNLLRTENhdeRR lypFdDuSYfTxtLfiOhUt12mi1xZOfBBplHsugnJtswCTyLks1EwhDC/j5SBKDnkF 7gITD5W2QyixrQ6rF7CRGPPRMnh+/lyy+bDNvA3YOM4Qo20YbH6MvD+jzj8nl9cL j6qpXu4Fiz6NXCpXPuI5eTVphG/HY/OUUPW7m6IztOHLNldzIuGEdgSUfXhu/gm8 7BhHPv87F6we395pZFeqIwoi9mio6sowf4SiFUjOWUbS0cBpUEYhbyiAdXZ20FHM D1WxM3mVuhHqgW5Cxg65COXfpigsRJmQ+LnsWf5tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKHcgbS5wyCOtvVBO/2/uB+MlDBUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzlhOTZjMDJjLWFkNjEtNDBjZS1iNWFhLWRlZjY5Mzk1M2JhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDz8AAwDQYJKoZIhvcNAQELBQADggEBAGfNy61eeaNXKQHm2BODDFGN t1VUsGsWZV4EBq6hpzcK9NAtLSCm+st+KZsYS9ckL+zGR3JCpvz30f150mLc9CRF 49h2DEr/AXR7YbqS9h+HZffQyx214IWgcBkMmTKfoe3Ml3fY7VEVEYaBwIZj55Zf E9ymFzDFlX6PwVTegSYzyo1jL6Ic1vRLCHq9X/R2MQYFMAA9fmlPBTIbYyfPsCj5 TuWiLMqAaaYmDhDfBOC06OOKncWFvywLbbzY+S41g0i/7soRXNiASIXVdWcP0jmK xAGkRoH1eRD+Dl17PxO00fPIvutDmf0X8jxtUaRvxcqwbCqIoDXX1Zq9wNtGDWg= -----END CERTIFICATE-----Generated at Sat Jun 7 12:29:46 2025 by rpki-client