$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4c99211-8489-4968-bb5b-fa10b298aaaf.roa File: a4c99211-8489-4968-bb5b-fa10b298aaaf.roa (raw, json) Hash identifier: gyyATJluM0QmHd1rvNClCx/BagSo2aA1wJuAyrvt6lA= Subject key identifier: E8:3A:99:8B:C8:70:CB:CC:1A:DB:3A:12:38:49:A0:70:C8:5F:4C:40 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2EBB94036D321B7DC08D8ECB543F7EED5C4B81DA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4c99211-8489-4968-bb5b-fa10b298aaaf.roa Signing time: Tue 11 Mar 2025 00:10:13 +0000 ROA not before: Tue 11 Mar 2025 00:10:13 +0000 ROA not after: Tue 15 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:bb:94:03:6d:32:1b:7d:c0:8d:8e:cb:54:3f:7e:ed:5c:4b:81:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 11 00:10:13 2025 GMT Not After : Apr 15 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:0c:d5:53:93:30:41:7e:0f:58:4f:48:da: 68:44:18:aa:f4:8a:a5:fa:69:14:27:8a:fa:bc:76: 54:d2:f4:0a:cb:e2:ca:7c:60:7d:04:5f:5e:48:9d: b5:54:f1:18:75:cd:de:2b:0d:fc:59:02:7e:e0:1c: 8e:24:19:a2:c2:61:f9:98:b2:52:6f:b6:0f:7c:b2: 1e:10:40:41:9a:02:41:05:b6:a6:fa:01:26:d1:9a: 4a:51:a6:32:ed:cf:db:3f:96:d0:81:e8:41:16:34: fc:52:ce:9b:2c:75:fc:71:26:47:8f:1a:34:16:0c: 14:23:94:23:28:e4:46:b5:f8:85:af:bc:19:65:56: b0:01:53:2b:fa:9f:1e:d8:71:a9:56:38:dd:1e:fa: 50:94:5b:18:da:cf:bf:3c:cf:22:0b:7e:9f:35:b6: 64:81:43:ea:5d:bc:ea:c7:47:85:d7:b9:ae:0c:0c: 34:88:a4:ac:d3:4d:9e:a0:1e:9a:17:6d:fa:41:7d: cb:9c:82:bf:5c:12:75:00:5c:72:6d:37:c3:b5:19: 16:44:62:d2:6d:dd:91:96:85:cf:4b:12:e6:52:77: 04:25:b6:3e:64:cc:1b:12:97:e5:33:ac:5e:3c:cf: 50:56:61:87:26:57:4f:a1:ba:53:c7:c9:42:d0:35: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3A:99:8B:C8:70:CB:CC:1A:DB:3A:12:38:49:A0:70:C8:5F:4C:40 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a4c99211-8489-4968-bb5b-fa10b298aaaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f000::/44 Signature Algorithm: sha256WithRSAEncryption 10:02:8e:b0:b1:16:68:14:73:73:d4:35:20:39:03:dd:65:5d: ce:48:32:ba:1d:75:94:e7:71:3f:11:d8:f7:02:93:ca:b5:f9: 80:53:81:65:63:01:7c:b0:4d:d9:23:82:18:1e:0c:20:b5:7a: bd:e6:11:57:2a:7e:eb:85:bb:ea:80:ba:ff:3f:16:01:8b:b7: bc:1d:41:a8:5b:69:62:f9:4a:2c:bb:01:b3:4a:ed:02:bb:40: 61:94:ed:87:df:23:3d:92:2e:37:3b:3b:88:c4:7e:b7:d6:16: 8e:41:91:7c:2b:89:c6:41:7c:ef:d0:6b:84:a0:44:da:3d:64: c9:b8:48:ac:f9:78:e1:9a:58:98:6b:bd:64:06:a3:bb:d2:1c: f5:ce:08:5f:ad:4a:8a:d8:04:46:95:41:13:93:7a:99:28:93: c5:04:33:07:34:ad:95:1c:3a:58:00:19:92:b7:3b:08:4f:a6: 83:81:5a:7d:59:40:33:c8:95:e6:e2:69:6b:d0:70:ef:a3:8b: a3:95:3d:f7:8f:ad:1f:aa:18:ca:61:1d:02:47:13:a2:70:67: 8d:31:35:f5:98:c4:79:de:01:15:3d:b5:a5:31:80:90:f7:9b: 77:5f:af:4f:8f:6c:7c:4c:b6:04:25:ba:19:d6:d2:51:e0:26: 75:29:4f:98 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULruUA20yG33AjY7LVD9+7VxLgdowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMzExMDAxMDEzWhcNMjUwNDE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMGI1NDM4NmI4NzU5MzkzMWMwNTdlNjdmNzA2NWY3NWY3 NjBkYjdmOGNjYmZjMjQxNjJlNjYzZjUwZTg1OTFiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ9QzVU5MwQX4PWE9I2mhEGKr0iqX6aRQnivq8dlTS9ArL 4sp8YH0EX15InbVU8Rh1zd4rDfxZAn7gHI4kGaLCYfmYslJvtg98sh4QQEGaAkEF tqb6ASbRmkpRpjLtz9s/ltCB6EEWNPxSzpssdfxxJkePGjQWDBQjlCMo5Ea1+IWv vBllVrABUyv6nx7YcalWON0e+lCUWxjaz788zyILfp81tmSBQ+pdvOrHR4XXua4M DDSIpKzTTZ6gHpoXbfpBfcucgr9cEnUAXHJtN8O1GRZEYtJt3ZGWhc9LEuZSdwQl tj5kzBsSl+UzrF48z1BWYYcmV0+hulPHyULQNfSDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6DqZi8hwy8wa2zoSOEmgcMhfTEAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0Yzk5MjExLTg0ODktNDk2OC1iYjViLWZhMTBiMjk4YWFhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78AAwDQYJKoZIhvcNAQELBQADggEBABACjrCxFmgUc3PUNSA5A91l Xc5IMroddZTncT8R2PcCk8q1+YBTgWVjAXywTdkjghgeDCC1er3mEVcqfuuFu+qA uv8/FgGLt7wdQahbaWL5Siy7AbNK7QK7QGGU7YffIz2SLjc7O4jEfrfWFo5BkXwr icZBfO/Qa4SgRNo9ZMm4SKz5eOGaWJhrvWQGo7vSHPXOCF+tSorYBEaVQROTepko k8UEMwc0rZUcOlgAGZK3OwhPpoOBWn1ZQDPIlebiaWvQcO+ji6OVPfePrR+qGMph HQJHE6JwZ40xNfWYxHneARU9taUxgJD3m3dfr0+PbHxMtgQluhnW0lHgJnUpT5g= -----END CERTIFICATE-----Generated at Fri Apr 4 23:51:34 2025 by rpki-client