$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/344bc29d-01a1-4e8a-bded-f30ec2519804.roa File: 344bc29d-01a1-4e8a-bded-f30ec2519804.roa (raw, json) Hash identifier: CKy6pnKLGsk51GDa5O15Sfk7CZ3u6ahExFvaty1b8xE= Subject key identifier: B7:8E:0A:28:68:E9:9B:4B:C1:EF:C1:1E:4D:0D:FA:37:31:16:25:E0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 668A68BD51D466B7E6DD62EE94362C6208F28C94 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/344bc29d-01a1-4e8a-bded-f30ec2519804.roa Signing time: Fri 25 Apr 2025 18:10:06 +0000 ROA not before: Fri 25 Apr 2025 18:10:06 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8a:68:bd:51:d4:66:b7:e6:dd:62:ee:94:36:2c:62:08:f2:8c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:10:06 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=e93719019d8eaca443f2ac6a1fb71498e0874998cbc8217ed25402e057986fbd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:0b:c8:df:1b:f7:34:90:14:df:82:4e:4a: 21:b6:2d:e4:ab:b5:3b:2f:c3:27:da:6f:f3:64:f1: 7d:72:96:13:18:e2:43:1f:15:d8:7a:b3:84:9f:aa: 85:61:c5:be:fc:f7:6c:e2:70:ac:d7:29:6f:34:0c: cb:c7:ea:62:bc:8f:a2:e7:01:7c:32:99:db:23:6f: 93:12:dc:b0:76:1a:40:be:57:63:4d:30:77:60:bf: 64:6d:f1:cb:a8:a2:be:eb:48:98:41:b0:7f:da:02: 6e:19:2e:98:d5:fd:6a:c6:64:bc:5e:75:ea:27:62: 05:7e:99:70:f9:d4:3f:56:dd:52:7a:cb:e5:9b:3e: 3d:dd:0e:40:f3:d9:5f:2e:cd:91:a6:6e:36:a8:79: 2a:b6:f5:bc:4d:ac:93:87:77:9c:c0:3b:df:7c:b0: 7c:55:4f:1e:1a:46:c6:8b:ef:75:97:52:9e:3c:d2: 01:d8:2c:b2:39:1b:76:2d:54:af:d0:20:91:2d:fc: a3:ad:9f:88:7a:72:34:bb:eb:49:ce:64:1f:aa:2b: 7e:5f:83:9b:69:e2:8e:d0:ca:ff:fd:10:27:23:09: cb:a7:0a:f7:e8:67:72:6e:00:e8:d6:f9:2b:3f:86: 12:cf:c0:c7:98:8f:60:35:0f:81:ae:cf:e4:74:79: 0a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8E:0A:28:68:E9:9B:4B:C1:EF:C1:1E:4D:0D:FA:37:31:16:25:E0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/344bc29d-01a1-4e8a-bded-f30ec2519804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:700::/40 Signature Algorithm: sha256WithRSAEncryption 13:55:50:0e:ba:34:3b:0b:2e:d8:37:87:be:25:82:3a:44:9b: 68:ec:9d:cc:1f:02:69:15:14:72:68:e2:03:56:94:80:d3:4a: 86:90:d7:f9:64:ac:fd:54:b3:9d:fc:64:d4:bc:dc:f5:20:e7: 41:c1:4e:42:5a:73:28:c4:c3:2d:4a:f1:55:e6:6e:96:c5:67: 57:52:41:1b:7e:53:67:c6:79:4a:28:4d:fa:b2:ac:91:f1:59: 14:05:24:7c:e0:0a:64:63:d5:25:ab:a0:4c:1d:08:35:4e:9d: 63:e9:10:fa:46:5b:59:fe:27:7c:49:42:92:e8:03:61:52:7a: 2f:f2:7c:28:8e:51:d5:76:b8:09:f2:d0:0a:91:82:51:6e:77: 70:b4:4c:9d:bc:e3:d7:20:56:09:69:a5:7b:27:a7:bb:c6:53: 23:a5:6b:64:cf:4c:37:c6:f9:b4:3c:6b:4e:b0:25:7f:77:a2: f0:c6:a6:50:9e:41:b8:e4:db:25:49:26:3c:97:99:1a:85:36: ec:a6:f8:2a:7c:94:4e:77:1f:4c:d8:68:05:7a:9a:69:30:90: 2c:14:d2:1a:52:b1:c4:bb:0f:fe:fa:42:f0:26:6d:7d:28:55: a2:87:8b:1a:3c:37:45:e3:0d:68:06:1e:ab:cc:97:2e:cd:d5: 2b:fa:03:aa -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZopovVHUZrfm3WLulDYsYgjyjJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgxMDA2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTM3MTkwMTlkOGVhY2E0NDNmMmFjNmExZmI3MTQ5OGUw ODc0OTk4Y2JjODIxN2VkMjU0MDJlMDU3OTg2ZmJkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC32wvI3xv3NJAU34JOSiG2LeSrtTsvwyfab/Nk8X1ylhMY 4kMfFdh6s4SfqoVhxb7892zicKzXKW80DMvH6mK8j6LnAXwymdsjb5MS3LB2GkC+ V2NNMHdgv2Rt8cuoor7rSJhBsH/aAm4ZLpjV/WrGZLxedeonYgV+mXD51D9W3VJ6 y+WbPj3dDkDz2V8uzZGmbjaoeSq29bxNrJOHd5zAO998sHxVTx4aRsaL73WXUp48 0gHYLLI5G3YtVK/QIJEt/KOtn4h6cjS760nOZB+qK35fg5tp4o7Qyv/9ECcjCcun CvfoZ3JuAOjW+Ss/hhLPwMeYj2A1D4Guz+R0eQpnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUt44KKGjpm0vB78EeTQ36NzEWJeAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM0NGJjMjlkLTAxYTEtNGU4YS1iZGVkLWYzMGVjMjUxOTgwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwBzANBgkqhkiG9w0BAQsFAAOCAQEAE1VQDro0Owsu2DeHviWCOkSb aOydzB8CaRUUcmjiA1aUgNNKhpDX+WSs/VSznfxk1Lzc9SDnQcFOQlpzKMTDLUrx VeZulsVnV1JBG35TZ8Z5SihN+rKskfFZFAUkfOAKZGPVJaugTB0INU6dY+kQ+kZb Wf4nfElCkugDYVJ6L/J8KI5R1Xa4CfLQCpGCUW53cLRMnbzj1yBWCWmleyenu8ZT I6VrZM9MN8b5tDxrTrAlf3ei8MamUJ5BuOTbJUkmPJeZGoU27Kb4KnyUTncfTNho BXqaaTCQLBTSGlKxxLsP/vpC8CZtfShVooeLGjw3ReMNaAYeq8yXLs3VK/oDqg== -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:29 2025 by rpki-client