$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa File: 1713f755-e887-41fa-83fe-8bab1dc14311.roa (raw, json) Hash identifier: Zzkx8Qa9gxQm93ZfXaRrTdRW1pY9DMkwfFq/zVNKnxQ= Subject key identifier: E7:50:CF:8C:64:1E:80:80:EC:3C:B6:47:C1:BE:AC:94:C8:1D:C7:CB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5D4B3C24FF9CAAB72E733FC936A230FD31AF2684 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa Signing time: Fri 25 Apr 2025 18:01:35 +0000 ROA not before: Fri 25 Apr 2025 18:01:35 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ea00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4b:3c:24:ff:9c:aa:b7:2e:73:3f:c9:36:a2:30:fd:31:af:26:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:01:35 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=8dce33f29b7a3130ab0f3797c72fa1140e198f5c68a3fe2ee206e65c94dce9d1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:7b:1f:7c:6f:0d:b8:15:6f:4c:4d:88:3c: b1:0b:3b:ac:fb:6d:a2:35:6c:7c:ec:ec:5b:ab:3f: ca:a8:7b:d4:12:56:2b:6b:7d:d5:60:56:87:84:63: 79:1c:98:0d:ec:73:06:f4:32:5e:96:0a:f2:ee:54: 4e:ff:d4:da:7a:b3:d5:b6:88:30:b9:28:b1:de:d3: e0:dc:ff:38:47:03:e1:23:06:59:f4:a0:0c:d7:3c: 4f:77:2b:c5:9a:b0:6e:a9:ae:1e:44:33:46:bd:90: 6c:cc:96:c6:08:ee:22:6a:a5:42:5f:39:0b:b8:65: 4f:2d:45:f1:c3:f5:0a:c6:96:b3:8a:c3:66:7f:5f: 87:9f:7e:cc:29:53:bd:d6:e0:02:52:b5:41:16:89: b7:dd:3f:f0:84:05:84:b8:48:10:d4:04:ee:42:6c: d8:64:4c:a9:8f:82:aa:b2:ac:be:e3:3f:19:59:88: dd:7a:03:1a:46:95:0a:04:a0:eb:54:32:a1:84:57: a5:a4:63:1e:26:77:3e:e0:5f:66:0e:38:63:17:36: 38:3e:e7:f9:0a:e3:61:54:d5:11:d9:34:47:bf:62: d7:47:8c:e6:6b:09:43:88:0d:b4:b9:aa:7d:54:95: c2:94:43:c0:6d:66:cb:cd:26:9c:f9:d5:aa:51:3a: 5c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:50:CF:8C:64:1E:80:80:EC:3C:B6:47:C1:BE:AC:94:C8:1D:C7:CB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/42 Signature Algorithm: sha256WithRSAEncryption 29:9b:bc:ca:55:e0:81:4a:7f:eb:85:08:d9:8e:29:c3:7d:05: f4:0c:8c:fe:8e:f6:d1:83:7c:b9:51:27:eb:a6:c7:10:56:16: d9:90:4b:28:c8:09:4d:7b:1f:e4:f0:60:4e:cc:17:31:af:92: bf:3b:24:c4:85:2e:8c:d4:b2:b4:b7:b4:f7:31:0f:00:4e:78: e1:f9:5e:64:9d:fe:b2:6c:ac:35:39:de:c8:27:bd:63:c1:63: 11:b5:bd:b9:3d:94:e0:f3:5f:75:60:2f:ec:f9:34:70:f7:06: d2:6f:93:3f:e6:a1:55:a4:79:82:86:fe:ee:ac:83:9e:30:e8: 48:90:8c:13:5f:8b:54:8c:cb:1d:12:bd:7d:73:9a:91:5b:b6: ea:18:01:d4:0f:49:ce:b8:58:8d:7d:38:9f:cb:81:7d:5b:91: 05:66:04:1d:d9:78:38:eb:ff:11:d9:ef:3d:9c:93:13:39:e0: f3:6a:4a:0b:5a:ca:21:9c:79:75:06:14:86:b3:e9:a5:b0:52: 55:0d:c1:ef:c6:20:17:da:53:6f:ec:9d:67:5b:d0:fb:62:c8: 62:1c:37:82:9b:38:38:f9:42:2a:25:97:1c:1b:49:14:9f:23: b9:ee:88:87:00:89:bb:e4:b7:17:dd:7d:a2:7f:1a:5e:67:56: 1d:90:0c:66 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXUs8JP+cqrcucz/JNqIw/TGvJoQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgwMTM1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGNlMzNmMjliN2EzMTMwYWIwZjM3OTdjNzJmYTExNDBl MTk4ZjVjNjhhM2ZlMmVlMjA2ZTY1Yzk0ZGNlOWQxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJJ3sffG8NuBVvTE2IPLELO6z7baI1bHzs7FurP8qoe9QS VitrfdVgVoeEY3kcmA3scwb0Ml6WCvLuVE7/1Np6s9W2iDC5KLHe0+Dc/zhHA+Ej Bln0oAzXPE93K8WasG6prh5EM0a9kGzMlsYI7iJqpUJfOQu4ZU8tRfHD9QrGlrOK w2Z/X4effswpU73W4AJStUEWibfdP/CEBYS4SBDUBO5CbNhkTKmPgqqyrL7jPxlZ iN16AxpGlQoEoOtUMqGEV6WkYx4mdz7gX2YOOGMXNjg+5/kK42FU1RHZNEe/YtdH jOZrCUOIDbS5qn1UlcKUQ8BtZsvNJpz51apROlwDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU51DPjGQegIDsPLZHwb6slMgdx8swHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE3MTNmNzU1LWU4ODctNDFmYS04M2ZlLThiYWIxZGMxNDMxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76gAwDQYJKoZIhvcNAQELBQADggEBACmbvMpV4IFKf+uFCNmOKcN9 BfQMjP6O9tGDfLlRJ+umxxBWFtmQSyjICU17H+TwYE7MFzGvkr87JMSFLozUsrS3 tPcxDwBOeOH5XmSd/rJsrDU53sgnvWPBYxG1vbk9lODzX3VgL+z5NHD3BtJvkz/m oVWkeYKG/u6sg54w6EiQjBNfi1SMyx0SvX1zmpFbtuoYAdQPSc64WI19OJ/LgX1b kQVmBB3ZeDjr/xHZ7z2ckxM54PNqSgtayiGceXUGFIaz6aWwUlUNwe/GIBfaU2/s nWdb0PtiyGIcN4KbODj5QiollxwbSRSfI7nuiIcAibvktxfdfaJ/Gl5nVh2QDGY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:22 2025 by rpki-client