$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa File: 4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa (raw, json) Hash identifier: ohiRL6UwXu1T7LkFkf/rS/99KYM/IfSmmv680UWnY/0= Subject key identifier: 08:E2:3A:64:9E:2B:3A:02:AE:EB:11:77:63:48:40:F7:ED:02:3A:65 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 05877763F96EA5A75E8ED06396E5BE25043E7F48 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa Signing time: Fri 25 Apr 2025 17:50:32 +0000 ROA not before: Fri 25 Apr 2025 17:50:32 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:87:77:63:f9:6e:a5:a7:5e:8e:d0:63:96:e5:be:25:04:3e:7f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 17:50:32 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=6b19e303739e1ecf39a3d76bbe7a71b5c9407715ec469fbd09c0018b29428a53, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5d:1f:6d:9f:97:32:cd:b5:7b:f7:20:92:b3: 73:ce:07:df:42:8b:f4:e6:a9:18:00:ee:da:e1:42: 0a:a4:5a:d4:ed:05:9a:15:69:af:5c:6c:cb:a3:06: f9:88:b0:e6:15:1a:7b:de:b7:d0:a3:0d:25:68:86: 9c:c5:0c:09:f7:4e:f3:74:26:bd:45:55:e1:68:2d: 42:85:34:65:6b:42:80:b3:bb:11:d1:a3:b5:39:4e: a8:21:dc:13:76:cb:de:4f:ea:bc:d8:72:a6:05:a1: b7:2c:5b:af:e2:de:ee:d2:fc:8f:e3:50:b6:f3:29: 3d:47:c9:93:de:79:23:e9:c6:af:15:2d:c1:80:89: 53:6c:0c:fe:90:7b:21:fc:40:da:7b:e1:62:da:a5: 44:01:a5:01:ba:d5:42:7f:7d:d3:13:c5:cd:c4:21: 23:d9:38:89:52:cf:de:24:a7:a1:67:00:fa:6c:58: df:5a:eb:a0:40:6b:12:6d:36:3e:8a:d1:00:c5:f8: f2:9d:cf:81:24:af:c1:96:5a:41:89:38:52:f5:71: 80:e6:16:ed:d0:9d:59:c0:9d:f2:ae:fb:5f:29:8d: e9:36:47:10:17:bd:42:f6:6e:95:8f:da:8f:7a:97: 92:19:87:3f:fc:ce:cb:13:9d:67:b4:4b:60:38:e0: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E2:3A:64:9E:2B:3A:02:AE:EB:11:77:63:48:40:F7:ED:02:3A:65 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:a0::/48 Signature Algorithm: sha256WithRSAEncryption 46:f8:13:0c:d9:0d:63:ae:ac:db:84:12:5f:b3:74:ab:24:b9: 82:96:b0:7c:a8:0c:ab:b9:dd:ec:c2:62:ad:87:fe:c9:6e:a1: 81:3c:5b:ce:76:1f:56:44:e8:2d:f0:53:56:ec:5a:84:8e:41: ad:a1:f2:44:f3:bb:8e:4f:ae:5d:e9:c2:0f:2c:ad:db:9d:eb: 6c:e8:79:c9:07:9d:91:07:28:04:71:80:18:11:29:32:cd:88: 40:a6:98:60:44:26:06:2d:e8:c4:a6:43:67:1c:56:f6:a2:ff: e5:f7:90:77:66:c3:b6:96:80:c4:44:cb:72:5a:4b:9c:e2:bb: 47:72:25:3e:e0:c6:00:04:28:1a:c9:3c:e0:33:75:7b:d8:c6: 62:a4:3d:6e:21:9c:61:c5:1d:6f:2e:29:6b:e0:13:b1:7b:3a: 93:cb:6e:c2:89:f1:38:56:2c:90:d7:8d:51:4f:bb:52:d5:eb: f7:e9:9a:21:a4:41:fd:61:be:b6:d0:38:bd:dd:82:65:44:7f: 7a:e1:46:d9:ce:3b:bc:05:2d:e5:7d:dc:d1:2d:7b:b1:d1:48: 3c:3b:11:40:d9:6d:3d:d5:00:2a:34:0b:d2:01:1c:70:b1:92: ea:e6:e7:21:e3:6e:9e:92:69:ed:f2:3c:58:b6:13:15:30:9c: 81:87:68:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBYd3Y/lupadejtBjluW+JQQ+f0gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTc1MDMyWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjE5ZTMwMzczOWUxZWNmMzlhM2Q3NmJiZTdhNzFiNWM5 NDA3NzE1ZWM0NjlmYmQwOWMwMDE4YjI5NDI4YTUzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTXR9tn5cyzbV79yCSs3POB99Ci/TmqRgA7trhQgqkWtTt BZoVaa9cbMujBvmIsOYVGnvet9CjDSVohpzFDAn3TvN0Jr1FVeFoLUKFNGVrQoCz uxHRo7U5Tqgh3BN2y95P6rzYcqYFobcsW6/i3u7S/I/jULbzKT1HyZPeeSPpxq8V LcGAiVNsDP6QeyH8QNp74WLapUQBpQG61UJ/fdMTxc3EISPZOIlSz94kp6FnAPps WN9a66BAaxJtNj6K0QDF+PKdz4Ekr8GWWkGJOFL1cYDmFu3QnVnAnfKu+18pjek2 RxAXvUL2bpWP2o96l5IZhz/8zssTnWe0S2A44Ly7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCOI6ZJ4rOgKu6xF3Y0hA9+0COmUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRhODYyM2M0LTEwYTAtNDZiNi1hNWY1LWM5NGU4NGM1Njg2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAKAwDQYJKoZIhvcNAQELBQADggEBAEb4EwzZDWOurNuEEl+zdKsk uYKWsHyoDKu53ezCYq2H/sluoYE8W852H1ZE6C3wU1bsWoSOQa2h8kTzu45Prl3p wg8srdud62zoeckHnZEHKARxgBgRKTLNiECmmGBEJgYt6MSmQ2ccVvai/+X3kHdm w7aWgMREy3JaS5ziu0dyJT7gxgAEKBrJPOAzdXvYxmKkPW4hnGHFHW8uKWvgE7F7 OpPLbsKJ8ThWLJDXjVFPu1LV6/fpmiGkQf1hvrbQOL3dgmVEf3rhRtnOO7wFLeV9 3NEte7HRSDw7EUDZbT3VACo0C9IBHHCxkurm5yHjbp6Sae3yPFi2ExUwnIGHaKk= -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:11 2025 by rpki-client