$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa File: 0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa (raw, json) Hash identifier: m98RpOxvhxHee5NGomSKDf2O+ErJuzbDTpTLGBaafnY= Subject key identifier: 07:AD:03:11:A0:69:03:86:29:B4:8F:84:BD:C1:EA:60:7B:48:E1:64 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5C3459E378EF152FBF21A721C68F30AC5478DB05 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa Signing time: Fri 25 Apr 2025 17:51:19 +0000 ROA not before: Fri 25 Apr 2025 17:51:19 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:34:59:e3:78:ef:15:2f:bf:21:a7:21:c6:8f:30:ac:54:78:db:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 17:51:19 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=7bb4b67161e1374bebddda7cf26b26ab2f211c771cfe42e303198c0f2d7a5eac, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:73:1e:c2:77:f1:a9:f2:46:62:a8:0d:0b: 01:c2:25:95:62:5c:92:84:67:ef:23:0e:c1:15:21: dc:95:ac:26:73:d6:4a:cc:e3:92:64:d0:aa:62:bc: 5e:85:69:be:8b:b8:28:46:cd:ea:0f:06:97:a9:51: 75:f2:7f:71:a3:86:0e:c7:0c:de:7a:ac:75:28:d6: 00:2c:6f:eb:2f:34:d8:8e:09:44:10:95:ab:67:7d: b5:2c:c5:87:17:89:ff:a9:55:07:84:50:c7:ed:1e: 36:45:e7:77:76:82:b4:50:71:b6:6f:8c:94:22:92: d8:3f:41:34:b6:28:f7:84:76:4f:92:4e:fb:45:2f: 69:01:74:76:08:9e:00:61:60:5c:cb:b7:59:84:2b: c7:55:b0:36:26:e1:67:4d:4c:a9:f0:f0:4c:7e:96: d3:49:7b:a4:d3:ad:95:31:d5:99:98:30:d7:94:49: 0d:db:9a:9b:5d:ac:56:72:2d:51:c7:86:fb:7d:e0: 1a:ab:8d:d5:ec:04:a0:ad:b6:dd:f8:3d:8a:72:84: 3d:bb:7b:ab:2a:17:69:41:fc:a2:3d:c2:10:6d:ca: 72:4c:56:fb:78:10:b4:4a:79:b2:d1:3a:f8:bf:f7: 8f:33:6f:5b:d5:bd:61:4e:2a:c1:49:ed:92:e6:47: 13:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AD:03:11:A0:69:03:86:29:B4:8F:84:BD:C1:EA:60:7B:48:E1:64 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b89c4fe-6730-4f60-bc4c-ea16b19c2c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:20::/48 Signature Algorithm: sha256WithRSAEncryption 6f:30:20:4b:d3:82:53:6b:d1:55:74:73:c4:41:55:37:f3:48: 60:d4:34:71:31:ae:16:f1:26:34:b4:2a:50:2f:ca:99:f2:ce: 2f:41:3c:b8:a0:05:68:96:9a:64:d2:9f:09:05:e0:d3:b4:35: 6e:83:a6:89:ed:97:95:e1:cb:85:48:56:94:70:83:e3:92:51: 92:e2:73:9a:fd:e9:5c:4f:ae:b2:7b:4a:f6:e8:ef:7e:cc:9b: 77:89:64:79:d1:7b:ec:98:2a:76:fb:3d:e0:47:2b:b8:1e:a0: ea:df:ef:da:2f:86:62:0e:68:f0:f8:55:75:d5:c4:a8:d3:f8: b4:78:ea:5b:a1:b3:18:a3:63:e3:83:21:b4:0b:0e:a0:73:7c: c3:d5:18:a8:f9:f5:b0:e1:67:4f:5c:05:e2:5f:e6:f8:38:61: d4:3a:45:2a:a8:6c:e2:de:37:0e:38:62:d5:42:68:f6:47:13: c8:59:10:d2:33:d6:a8:9d:4e:7f:c8:af:62:1d:52:ec:98:34: 02:5f:20:e2:3e:b8:f5:e0:e1:5b:92:82:ee:14:ca:8f:87:26: c9:a6:a8:8d:98:b7:c3:41:e4:d1:3e:28:77:52:64:f4:5c:03: 3a:be:c0:6c:aa:a2:12:49:03:dd:56:f9:42:8d:5b:b7:f5:db: 6d:d4:25:51 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXDRZ43jvFS+/Iachxo8wrFR42wUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTc1MTE5WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YmI0YjY3MTYxZTEzNzRiZWJkZGRhN2NmMjZiMjZhYjJm MjExYzc3MWNmZTQyZTMwMzE5OGMwZjJkN2E1ZWFjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaKXMewnfxqfJGYqgNCwHCJZViXJKEZ+8jDsEVIdyVrCZz 1krM45Jk0KpivF6Fab6LuChGzeoPBpepUXXyf3Gjhg7HDN56rHUo1gAsb+svNNiO CUQQlatnfbUsxYcXif+pVQeEUMftHjZF53d2grRQcbZvjJQiktg/QTS2KPeEdk+S TvtFL2kBdHYIngBhYFzLt1mEK8dVsDYm4WdNTKnw8Ex+ltNJe6TTrZUx1ZmYMNeU SQ3bmptdrFZyLVHHhvt94BqrjdXsBKCttt34PYpyhD27e6sqF2lB/KI9whBtynJM Vvt4ELRKebLROvi/948zb1vVvWFOKsFJ7ZLmRxNTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUB60DEaBpA4YptI+EvcHqYHtI4WQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBiODljNGZlLTY3MzAtNGY2MC1iYzRjLWVhMTZiMTljMmMzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwACAwDQYJKoZIhvcNAQELBQADggEBAG8wIEvTglNr0VV0c8RBVTfz SGDUNHExrhbxJjS0KlAvypnyzi9BPLigBWiWmmTSnwkF4NO0NW6Dpontl5Xhy4VI VpRwg+OSUZLic5r96VxPrrJ7Svbo737Mm3eJZHnRe+yYKnb7PeBHK7geoOrf79ov hmIOaPD4VXXVxKjT+LR46luhsxijY+ODIbQLDqBzfMPVGKj59bDhZ09cBeJf5vg4 YdQ6RSqobOLeNw44YtVCaPZHE8hZENIz1qidTn/Ir2IdUuyYNAJfIOI+uPXg4VuS gu4Uyo+HJsmmqI2Yt8NB5NE+KHdSZPRcAzq+wGyqohJJA91W+UKNW7f1223UJVE= -----END CERTIFICATE-----Generated at Sun Apr 27 07:09:21 2025 by rpki-client