$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/639cf60f-b659-495a-ad4a-265220ddbe5d.roa File: 639cf60f-b659-495a-ad4a-265220ddbe5d.roa (raw, json) Hash identifier: zRB7WuaaMscS5brybdlraV5S/vpXRzhd0YAv51d9u4g= Subject key identifier: 09:C6:79:30:21:0B:6E:1F:9C:7D:ED:E1:97:AC:95:40:5E:05:92:A7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 101206CC7BC986D06D07970FF77CCA9A501EEB88 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/639cf60f-b659-495a-ad4a-265220ddbe5d.roa Signing time: Fri 25 Apr 2025 17:50:10 +0000 ROA not before: Fri 25 Apr 2025 17:50:10 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:551b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:12:06:cc:7b:c9:86:d0:6d:07:97:0f:f7:7c:ca:9a:50:1e:eb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 17:50:10 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=f089317685616e181eaf755cbb460a7be2fc2f06f5852f9fc3eb02c1fbe788e6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5f:08:13:a7:22:b7:4d:2c:ab:cb:e5:cc:6c: f2:df:76:a3:9c:12:c5:fd:cb:60:18:93:3c:f6:6f: 04:8a:36:f6:12:2b:68:f1:b0:20:f4:ab:1f:57:39: 22:d7:73:cd:a2:b3:a4:60:0b:85:cd:64:f7:a3:d0: ad:f9:6e:99:da:57:db:db:83:de:63:b5:fd:2d:60: 88:1f:7c:c6:02:95:73:72:87:85:05:9f:bd:20:f4: 37:5e:1b:b5:b1:2d:8c:08:93:e3:9f:69:49:93:2f: 86:fe:bf:05:aa:ad:98:2a:ca:e8:b0:4a:3c:f3:58: f5:58:12:68:2a:06:6a:e5:89:2d:e8:5b:34:92:bc: 7b:ad:f7:14:fb:17:43:82:8b:3d:d6:c5:92:f9:c1: e2:39:16:f4:76:05:01:b5:30:61:c2:1f:1c:1e:1f: c8:45:63:1f:0d:0c:81:56:3b:89:b3:d5:16:d0:17: 02:a0:8b:8b:53:74:3f:29:c8:4e:3a:67:ab:d2:a9: bd:a2:75:88:a8:bb:c6:dd:24:4d:fc:e7:96:84:0d: e8:e2:a3:8f:0d:fa:20:5d:ae:b7:c6:c7:d0:8b:6e: 58:1c:91:0c:d1:10:d5:c4:47:67:f4:49:93:23:1c: 00:50:c3:62:07:28:8b:1e:04:63:ac:76:72:69:f6: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C6:79:30:21:0B:6E:1F:9C:7D:ED:E1:97:AC:95:40:5E:05:92:A7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/639cf60f-b659-495a-ad4a-265220ddbe5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551b::/48 Signature Algorithm: sha256WithRSAEncryption 35:62:4a:40:31:31:ba:7b:9c:43:76:82:90:0a:14:b3:5e:c7: bb:52:96:0b:b8:94:eb:08:ae:39:61:09:33:c9:45:aa:16:05: 71:e2:eb:50:e0:43:21:1c:a4:eb:d4:25:8f:2a:8f:11:20:42: 2f:a1:40:89:4b:40:85:34:ac:e4:12:38:5c:83:57:14:20:cd: 73:f5:70:48:fc:29:71:3d:3b:07:99:c1:c2:42:f9:52:a9:b1: 97:8a:c5:37:33:6b:18:9e:91:02:a8:21:30:55:de:05:e4:b5: 6e:a4:cb:98:de:fd:9b:72:ce:00:90:9d:bd:d6:78:cc:9e:ae: fb:fc:08:f3:6f:f0:b9:d1:9e:ff:71:2a:a2:4d:1f:10:fc:51: a4:f3:99:be:d8:9c:86:50:9d:74:08:99:7a:10:b6:c8:b0:71: f4:8e:f3:f9:74:9a:b3:2f:69:44:6d:ea:ec:af:ad:9d:37:ff: 2b:33:ed:7a:a8:10:f4:37:8e:23:10:6c:ce:a3:f4:38:98:1a: 63:32:f2:49:63:13:47:26:5f:66:00:13:52:bd:b4:84:ed:ab: 76:c2:ec:3d:b5:03:84:6c:7f:f8:82:7e:66:08:07:b1:de:b6: ff:c1:11:a9:59:9d:d5:c7:76:0c:32:5a:2d:65:fb:b3:9b:97: 53:72:04:27 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEBIGzHvJhtBtB5cP93zKmlAe64gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTc1MDEwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDg5MzE3Njg1NjE2ZTE4MWVhZjc1NWNiYjQ2MGE3YmUy ZmMyZjA2ZjU4NTJmOWZjM2ViMDJjMWZiZTc4OGU2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiXwgTpyK3TSyry+XMbPLfdqOcEsX9y2AYkzz2bwSKNvYS K2jxsCD0qx9XOSLXc82is6RgC4XNZPej0K35bpnaV9vbg95jtf0tYIgffMYClXNy h4UFn70g9DdeG7WxLYwIk+OfaUmTL4b+vwWqrZgqyuiwSjzzWPVYEmgqBmrliS3o WzSSvHut9xT7F0OCiz3WxZL5weI5FvR2BQG1MGHCHxweH8hFYx8NDIFWO4mz1RbQ FwKgi4tTdD8pyE46Z6vSqb2idYiou8bdJE3855aEDejio48N+iBdrrfGx9CLblgc kQzRENXER2f0SZMjHABQw2IHKIseBGOsdnJp9gWdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCcZ5MCELbh+cfe3hl6yVQF4FkqcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYzOWNmNjBmLWI2NTktNDk1YS1hZDRhLTI2NTIyMGRkYmU1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRswDQYJKoZIhvcNAQELBQADggEBADViSkAxMbp7nEN2gpAKFLNe x7tSlgu4lOsIrjlhCTPJRaoWBXHi61DgQyEcpOvUJY8qjxEgQi+hQIlLQIU0rOQS OFyDVxQgzXP1cEj8KXE9OweZwcJC+VKpsZeKxTczaxiekQKoITBV3gXktW6ky5je /ZtyzgCQnb3WeMyervv8CPNv8LnRnv9xKqJNHxD8UaTzmb7YnIZQnXQImXoQtsiw cfSO8/l0mrMvaURt6uyvrZ03/ysz7XqoEPQ3jiMQbM6j9DiYGmMy8kljE0cmX2YA E1K9tITtq3bC7D21A4Rsf/iCfmYIB7Hetv/BEalZndXHdgwyWi1l+7Obl1NyBCc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:51 2025 by rpki-client