$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6632e911-ee11-4bc9-a573-00ef83fd31d7.roa File: 6632e911-ee11-4bc9-a573-00ef83fd31d7.roa (raw, json) Hash identifier: BE6Edfilr/JSqF/1v++kLrtAJ9ugo2CYSxiSQmlB6ys= Subject key identifier: 23:A6:E2:4B:70:94:18:E5:AB:E5:B0:0B:64:D1:7B:5E:A6:82:54:60 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7DFF00F3CF6B88907599E8322DD66C9C441C6482 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6632e911-ee11-4bc9-a573-00ef83fd31d7.roa Signing time: Fri 25 Apr 2025 17:50:41 +0000 ROA not before: Fri 25 Apr 2025 17:50:41 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ff:00:f3:cf:6b:88:90:75:99:e8:32:2d:d6:6c:9c:44:1c:64:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 17:50:41 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=3a86162dbfae1ba53b772b5d01500b56941154f97dce1aa34af15d43d8236fac, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:c4:a8:5b:b1:ea:ed:f1:f3:12:21:0b:a0: 9a:8f:e7:63:0b:5c:01:b5:b6:cf:04:49:8a:c7:1f: f7:a0:3b:25:35:fc:a3:49:9d:89:60:b0:c5:ef:a5: 2b:cd:08:3a:3f:08:be:d0:8a:f0:64:01:72:84:85: 2a:90:29:ca:ee:93:0d:f2:67:a4:11:da:03:5c:65: f1:32:20:a5:a7:dc:28:5a:6d:de:98:16:82:c8:cf: bc:21:4b:50:c7:91:ee:75:4d:69:03:ae:6a:1d:36: bd:70:1c:90:a6:17:46:12:1d:a4:f8:08:3c:ca:de: f5:f2:b2:b7:9c:82:67:70:d1:b5:9f:5f:3e:6b:4e: b0:aa:74:7f:95:ef:b5:76:bd:5a:7e:97:82:05:9a: 3c:9c:fe:dc:0d:b4:30:2f:19:5e:c3:a8:2b:82:51: 42:45:33:9a:82:2d:a4:f5:c3:f6:ef:30:e4:10:6f: 32:95:c9:b6:3c:80:9e:ac:60:18:d5:12:c4:af:0b: 32:a7:2a:e9:d2:b4:41:8a:bd:7b:3f:0f:67:b0:0d: 3e:72:96:be:7b:b4:93:bb:50:03:9b:bd:c7:71:41: 54:f3:5d:e7:79:97:65:da:a4:b3:ec:fb:e1:10:18: e3:9f:ee:41:fc:52:c7:ab:08:a1:93:ae:c0:e8:c5: 72:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A6:E2:4B:70:94:18:E5:AB:E5:B0:0B:64:D1:7B:5E:A6:82:54:60 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6632e911-ee11-4bc9-a573-00ef83fd31d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6000::/44 Signature Algorithm: sha256WithRSAEncryption 70:60:03:62:7a:69:ce:6b:c0:a9:64:f2:3a:83:26:29:b3:d8: 1c:5c:51:f7:f2:0b:af:83:f6:9d:4c:ed:08:17:99:91:b7:48: 14:04:09:84:ca:69:12:c7:f5:ac:cc:bc:b4:ef:ff:a5:e3:b0: 62:a1:ee:e0:df:b9:ef:ee:46:78:76:c9:11:bf:97:5f:b8:e1: 52:a2:87:df:50:00:04:e1:2c:ee:76:c3:49:ac:80:b3:49:3d: b4:7d:0b:ad:8e:5b:29:50:e3:40:e0:55:82:34:ca:09:f3:ec: d2:8c:3b:11:e8:6b:bd:1a:10:1a:46:af:24:62:23:2e:14:02: ee:14:34:1c:b7:3e:d3:23:13:4b:64:d6:e8:cb:8f:b2:4f:8f: 6f:41:87:f3:71:06:24:42:9c:01:26:35:24:7d:74:d7:04:a8: 94:c7:24:2e:f5:bd:8f:6d:96:fa:d0:c2:98:31:36:54:20:e4: a5:04:f4:76:46:20:20:e9:83:b3:df:7a:c4:44:b7:5d:0d:29: 87:0e:02:86:fb:c1:32:05:a8:c3:bf:ea:b7:1c:4b:e6:2d:e2: 02:9d:83:51:08:ea:86:64:d7:9d:69:6f:62:02:b7:57:be:6e: 3a:61:63:ed:be:8d:b0:25:e6:6e:c0:94:89:aa:14:75:be:90: 99:57:8c:0d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUff8A889riJB1megyLdZsnEQcZIIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTc1MDQxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTg2MTYyZGJmYWUxYmE1M2I3NzJiNWQwMTUwMGI1Njk0 MTE1NGY5N2RjZTFhYTM0YWYxNWQ0M2Q4MjM2ZmFjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq1cSoW7Hq7fHzEiELoJqP52MLXAG1ts8ESYrHH/egOyU1 /KNJnYlgsMXvpSvNCDo/CL7QivBkAXKEhSqQKcrukw3yZ6QR2gNcZfEyIKWn3Cha bd6YFoLIz7whS1DHke51TWkDrmodNr1wHJCmF0YSHaT4CDzK3vXysrecgmdw0bWf Xz5rTrCqdH+V77V2vVp+l4IFmjyc/twNtDAvGV7DqCuCUUJFM5qCLaT1w/bvMOQQ bzKVybY8gJ6sYBjVEsSvCzKnKunStEGKvXs/D2ewDT5ylr57tJO7UAObvcdxQVTz Xed5l2XapLPs++EQGOOf7kH8UserCKGTrsDoxXIFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUI6biS3CUGOWr5bALZNF7XqaCVGAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY2MzJlOTExLWVlMTEtNGJjOS1hNTczLTAwZWY4M2ZkMzFkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYAAwDQYJKoZIhvcNAQELBQADggEBAHBgA2J6ac5rwKlk8jqDJimz 2BxcUffyC6+D9p1M7QgXmZG3SBQECYTKaRLH9azMvLTv/6XjsGKh7uDfue/uRnh2 yRG/l1+44VKih99QAAThLO52w0msgLNJPbR9C62OWylQ40DgVYI0ygnz7NKMOxHo a70aEBpGryRiIy4UAu4UNBy3PtMjE0tk1ujLj7JPj29Bh/NxBiRCnAEmNSR9dNcE qJTHJC71vY9tlvrQwpgxNlQg5KUE9HZGICDpg7PfesREt10NKYcOAob7wTIFqMO/ 6rccS+Yt4gKdg1EI6oZk151pb2ICt1e+bjphY+2+jbAl5m7AlImqFHW+kJlXjA0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:08 2025 by rpki-client