$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa File: 14518d87-9a80-47da-80c6-efeb62f0643b.roa (raw, json) Hash identifier: eCBELdJl73659TCN0uddG9ATzHsM5KQVLmn+cLoaGUI= Subject key identifier: A2:BD:01:32:71:9A:92:46:2D:F5:32:58:7C:08:88:33:FF:18:EE:32 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7C6EA1F39F7685C58E6B5181388A552A37984549 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa Signing time: Fri 25 Apr 2025 17:50:15 +0000 ROA not before: Fri 25 Apr 2025 17:50:15 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6e:a1:f3:9f:76:85:c5:8e:6b:51:81:38:8a:55:2a:37:98:45:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 17:50:15 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=4eee55951b538cac3fc20a799b52fe3cffe76a565ecc270dbc8cbdb451ad9c33, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2c:a0:ed:a7:93:c5:ce:15:a0:e7:a3:48:7b: e7:49:73:0b:2f:84:33:8a:d7:b5:41:59:fa:c3:0a: 1b:04:82:20:b8:7d:d3:82:61:74:1e:0f:5a:c4:3c: ce:91:43:1b:66:7a:63:b0:f2:b1:bb:fd:f7:ad:22: 29:d8:0b:2f:5b:6b:56:8a:d1:ff:d8:2c:18:c8:db: a4:cb:7d:29:d8:37:12:6a:e3:be:61:c5:47:7a:f3: 43:29:15:42:9f:fd:d6:70:8a:f0:44:3a:d1:e5:0c: 87:32:73:96:c6:45:2f:60:61:f9:2c:fc:e9:93:1b: d4:c8:23:c9:6f:90:1f:2f:54:75:a1:4c:55:cc:f1: 46:8a:32:6f:ce:2e:5c:60:b7:cc:58:f1:e1:09:7c: 5a:f7:12:34:55:8d:fd:a6:d6:70:43:fe:1a:2f:74: dc:82:0f:30:6a:0c:57:df:63:22:a0:cd:f2:7b:68: 23:d6:9d:8f:0b:09:bb:05:ba:22:30:52:e1:19:c6: 1e:0f:24:2a:ed:f7:e0:18:1c:41:1a:90:89:e0:97: 5a:cc:47:41:93:25:5d:0d:d2:6f:1e:e7:9b:80:b4: d1:08:75:81:70:ae:20:3d:07:22:6b:86:b9:8c:d0: 9f:cd:02:5a:d8:57:e7:a7:52:14:c9:00:3f:15:5a: 60:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BD:01:32:71:9A:92:46:2D:F5:32:58:7C:08:88:33:FF:18:EE:32 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:3::/48 Signature Algorithm: sha256WithRSAEncryption 9f:ea:0b:01:d8:de:46:25:d0:ba:9e:da:8e:ea:0c:00:4e:1a: b8:9b:f3:52:41:f0:49:f8:0c:e5:7c:b1:8d:7d:db:10:5a:a8: b6:d1:77:70:c3:3e:4a:7c:cd:cd:22:bd:14:12:3e:5c:41:b1: f1:0c:a8:fe:9d:5e:da:86:16:21:2e:29:48:fe:da:f6:80:d7: ce:b6:57:6f:57:20:f9:7f:65:96:57:d5:14:9f:e5:65:0f:6f: 30:41:38:cf:2e:7f:da:a9:b4:13:95:3a:f4:60:c8:c4:56:28: 4f:b7:6b:e4:20:38:9c:a4:19:c3:21:dd:6e:09:54:c6:1a:ed: d7:52:10:f3:f6:02:60:6a:02:3d:e3:1c:b2:99:c7:ac:9a:b7: 3b:a6:fc:31:81:91:fe:85:14:44:f8:45:cd:e9:4b:8a:7a:50: d5:86:a9:b6:eb:88:a2:47:93:10:e8:da:43:e1:a8:17:eb:2c: a7:ad:cf:a8:02:d8:f4:3a:f7:16:a2:5d:d7:ca:00:c3:80:b8: e8:a3:98:ed:04:75:38:07:98:a4:21:07:a3:a2:76:a5:f0:7d: 67:61:89:5f:18:fe:f5:dc:dd:30:24:af:4d:a6:02:d2:81:f3: 8f:8c:15:f5:9b:28:e0:2b:02:c9:6b:1a:65:c6:ad:df:7c:1b: a8:3c:12:ff -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfG6h8592hcWOa1GBOIpVKjeYRUkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTc1MDE1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWVlNTU5NTFiNTM4Y2FjM2ZjMjBhNzk5YjUyZmUzY2Zm ZTc2YTU2NWVjYzI3MGRiYzhjYmRiNDUxYWQ5YzMzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqLKDtp5PFzhWg56NIe+dJcwsvhDOK17VBWfrDChsEgiC4 fdOCYXQeD1rEPM6RQxtmemOw8rG7/fetIinYCy9ba1aK0f/YLBjI26TLfSnYNxJq 475hxUd680MpFUKf/dZwivBEOtHlDIcyc5bGRS9gYfks/OmTG9TII8lvkB8vVHWh TFXM8UaKMm/OLlxgt8xY8eEJfFr3EjRVjf2m1nBD/hovdNyCDzBqDFffYyKgzfJ7 aCPWnY8LCbsFuiIwUuEZxh4PJCrt9+AYHEEakIngl1rMR0GTJV0N0m8e55uAtNEI dYFwriA9ByJrhrmM0J/NAlrYV+enUhTJAD8VWmA7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUor0BMnGakkYt9TJYfAiIM/8Y7jIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE0NTE4ZDg3LTlhODAtNDdkYS04MGM2LWVmZWI2MmYwNjQzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAMwDQYJKoZIhvcNAQELBQADggEBAJ/qCwHY3kYl0Lqe2o7qDABO Grib81JB8En4DOV8sY192xBaqLbRd3DDPkp8zc0ivRQSPlxBsfEMqP6dXtqGFiEu KUj+2vaA1862V29XIPl/ZZZX1RSf5WUPbzBBOM8uf9qptBOVOvRgyMRWKE+3a+Qg OJykGcMh3W4JVMYa7ddSEPP2AmBqAj3jHLKZx6yatzum/DGBkf6FFET4Rc3pS4p6 UNWGqbbriKJHkxDo2kPhqBfrLKetz6gC2PQ69xaiXdfKAMOAuOijmO0EdTgHmKQh B6OidqXwfWdhiV8Y/vXc3TAkr02mAtKB84+MFfWbKOArAslrGmXGrd98G6g8Ev8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:39 2025 by rpki-client