$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa File: 4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa (raw, json) Hash identifier: trMriFcvPnsVM8SVUF/lGnnKhsxjNzPAlfS7W/5PWWg= Subject key identifier: CF:22:C2:97:85:A5:5C:15:F7:DC:AC:6A:BD:CF:1C:31:87:56:4B:2C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3EC5E3CD0F1FF0CCA28D5B86559B0FEDF27C2454 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa Signing time: Tue 20 May 2025 18:10:08 +0000 ROA not before: Tue 20 May 2025 18:10:08 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5520::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c5:e3:cd:0f:1f:f0:cc:a2:8d:5b:86:55:9b:0f:ed:f2:7c:24:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:10:08 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=7332ba3823924b071ef31b6cde795a5893e0a86aec7e1dfea0b58ef1e1233eee, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:62:11:5b:38:0c:e6:01:c7:51:4d:d1:c3:7b: b3:9b:b2:af:ff:bf:75:a8:82:31:b5:29:c3:c0:10: f2:58:ea:55:ac:0e:38:28:47:f0:ed:08:c2:66:c7: 59:40:ac:71:e0:1f:de:b8:b3:ec:e7:b9:4b:72:07: b6:84:e6:3b:9d:8c:ec:30:ed:a7:2e:07:07:6e:71: f9:77:c2:27:7b:b4:92:8f:16:42:cd:38:83:fe:bf: 27:e4:56:6d:71:0b:56:a7:d5:b2:2e:dc:18:52:be: 6e:7d:1c:1d:a8:2d:01:66:82:b2:81:3c:60:f4:ba: 5d:07:4c:fe:07:65:72:7a:03:85:dc:b2:c7:40:80: 3e:dc:c7:26:70:17:b0:86:ce:77:f2:ab:d7:d6:6c: e0:39:ab:bc:74:97:50:ae:86:55:69:ea:fb:13:8c: 58:a8:8d:22:6b:a2:8c:d6:f0:ae:69:f4:41:7e:35: b0:d0:00:18:bd:d4:95:d7:cf:2d:1d:8f:45:74:33: b1:9e:ed:4d:47:e5:29:e8:89:11:14:b0:5c:f1:f4: 5e:92:66:36:f4:59:1b:41:b3:92:f8:ba:4f:2e:93: 05:9f:99:f1:0a:3a:7a:40:cb:e1:1d:a9:0d:48:9b: 79:62:2d:55:45:ab:ee:a4:50:0b:7b:e0:3e:cc:1a: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:22:C2:97:85:A5:5C:15:F7:DC:AC:6A:BD:CF:1C:31:87:56:4B:2C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5520::/44 Signature Algorithm: sha256WithRSAEncryption 2b:b7:54:ca:b1:c8:e4:67:8e:90:ce:bb:34:6d:23:c1:95:67: 84:a8:dc:a4:e3:35:87:18:36:b4:30:02:d9:40:a4:38:26:6a: 3e:55:a2:ab:95:f8:95:d5:35:44:62:d4:32:50:18:6c:fe:cf: 6d:d9:42:04:a1:46:94:10:25:80:5a:7b:13:c7:f1:16:5e:ee: 9b:de:5a:18:e3:7b:7f:82:5b:b6:d6:a4:42:c0:50:df:f9:a4: ee:99:3e:5d:35:97:36:df:e3:ec:da:f4:63:d9:5e:cc:ec:31: ee:5e:95:e5:36:9e:42:cb:4a:f6:ae:4e:f5:0b:b1:5d:36:ac: ff:03:42:a9:f0:80:c0:1c:24:4b:0c:99:9a:28:d2:08:b8:65: 4b:1d:f2:5f:c6:0a:d0:54:e6:08:73:2f:7c:79:50:ee:51:e6: 06:12:76:d4:8e:86:88:f4:ae:51:09:6d:15:69:d9:54:09:1e: 22:db:57:63:ec:ec:6e:60:8b:be:88:9b:ee:18:b7:8b:5a:28: 6d:42:55:c3:10:9b:66:3f:b1:55:32:f9:5a:76:dd:82:91:51: a2:62:4d:c1:ff:12:59:72:3a:cd:87:53:c8:70:51:1d:34:9a: 8e:b4:2a:d6:9c:66:57:3d:82:ef:64:00:e8:2f:67:a6:04:10: 89:28:59:a6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPsXjzQ8f8MyijVuGVZsP7fJ8JFQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgxMDA4WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzMyYmEzODIzOTI0YjA3MWVmMzFiNmNkZTc5NWE1ODkz ZTBhODZhZWM3ZTFkZmVhMGI1OGVmMWUxMjMzZWVlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeYhFbOAzmAcdRTdHDe7Obsq//v3WogjG1KcPAEPJY6lWs DjgoR/DtCMJmx1lArHHgH964s+znuUtyB7aE5judjOww7acuBwducfl3wid7tJKP FkLNOIP+vyfkVm1xC1an1bIu3BhSvm59HB2oLQFmgrKBPGD0ul0HTP4HZXJ6A4Xc ssdAgD7cxyZwF7CGznfyq9fWbOA5q7x0l1CuhlVp6vsTjFiojSJroozW8K5p9EF+ NbDQABi91JXXzy0dj0V0M7Ge7U1H5SnoiREUsFzx9F6SZjb0WRtBs5L4uk8ukwWf mfEKOnpAy+EdqQ1Im3liLVVFq+6kUAt74D7MGpaTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzyLCl4WlXBX33Kxqvc8cMYdWSywwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRjZGI0M2RkLTFiNDktNGYyMi05M2U4LWIyMTUzYzJjYWM4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwVSAwDQYJKoZIhvcNAQELBQADggEBACu3VMqxyORnjpDOuzRtI8GV Z4So3KTjNYcYNrQwAtlApDgmaj5VoquV+JXVNURi1DJQGGz+z23ZQgShRpQQJYBa exPH8RZe7pveWhjje3+CW7bWpELAUN/5pO6ZPl01lzbf4+za9GPZXszsMe5eleU2 nkLLSvauTvULsV02rP8DQqnwgMAcJEsMmZoo0gi4ZUsd8l/GCtBU5ghzL3x5UO5R 5gYSdtSOhoj0rlEJbRVp2VQJHiLbV2Ps7G5gi76Im+4Yt4taKG1CVcMQm2Y/sVUy +Vp23YKRUaJiTcH/EllyOs2HU8hwUR00mo60KtacZlc9gu9kAOgvZ6YEEIkoWaY= -----END CERTIFICATE-----Generated at Sat Jun 14 06:48:54 2025 by rpki-client