$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa File: 7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa (raw, json) Hash identifier: IfAb98y8mt5RHmqPJeMuvc+Z9COR0UZxgCK1dBHgKl4= Subject key identifier: C0:5E:DA:25:6A:23:E5:23:71:0C:AD:2A:07:AC:8D:DC:8B:0C:8A:CA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 690D4A894F708F5301C23E4CC2731FB6D2B40C6A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa Signing time: Fri 25 Apr 2025 18:00:56 +0000 ROA not before: Fri 25 Apr 2025 18:00:56 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0d:4a:89:4f:70:8f:53:01:c2:3e:4c:c2:73:1f:b6:d2:b4:0c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:00:56 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=e90595e661add06d514048e8375431fa8dfad8866a4b9be783583b19c2ceab5b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:f3:13:13:18:16:a3:17:8e:d6:f1:19:7b: 09:af:d0:cc:39:ef:81:27:f5:d5:4a:d6:43:f0:cf: 83:65:2a:bc:9a:7a:e6:f9:fc:05:af:d4:34:96:63: f9:2d:b7:9e:6c:d0:ac:60:28:b9:6a:70:2f:3c:52: 61:b0:67:90:de:83:f2:81:06:63:ea:b6:6f:fc:91: 66:34:2b:72:b7:ca:bc:6e:5a:18:d4:2e:ad:7f:f0: 29:05:91:91:81:fc:0f:9f:cf:86:ed:a9:9e:f8:39: cb:4f:96:bd:fa:2d:01:67:29:6d:02:06:ee:d1:f0: e8:b9:41:dc:a1:69:69:9f:48:43:93:e1:1d:58:95: 97:8e:7f:eb:b0:a1:94:eb:9b:62:4b:82:eb:0e:8f: 77:b5:21:7c:a9:db:b8:cb:cf:1f:58:18:fe:6e:8c: 3e:8b:77:c2:f6:5f:ec:58:62:7b:41:a5:3d:92:da: 11:54:56:70:a6:51:7e:3f:9c:08:73:24:67:7d:e4: c0:f1:0f:34:6c:cf:7d:0e:d6:93:e8:56:41:9f:f8: e3:bc:b4:d1:2d:96:c2:75:a6:f3:6f:31:80:bc:a1: 89:32:81:99:dc:12:f4:a4:6d:c5:4f:f4:50:32:02: 2e:44:ce:32:ec:c4:1a:93:1b:cc:ca:c3:c8:9b:9f: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5E:DA:25:6A:23:E5:23:71:0C:AD:2A:07:AC:8D:DC:8B:0C:8A:CA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e800::/40 Signature Algorithm: sha256WithRSAEncryption 8b:28:98:72:dc:47:27:5f:cd:dc:0e:42:a2:40:43:76:9a:a5: 4f:2a:98:b5:b0:ac:93:5d:90:02:3e:c5:87:5d:88:a7:f1:45: 74:59:1e:ca:b4:fc:d0:58:86:f2:9b:98:df:be:e1:17:53:e6: c3:b8:c2:2e:5d:06:4c:51:b6:fb:f0:fc:23:0d:e7:e9:ac:44: cd:23:07:9e:65:5c:27:60:3f:4b:13:8e:9f:41:f9:43:56:e8: e1:b8:ca:5b:c8:dc:66:7f:ba:e0:71:04:81:a1:1d:7d:23:74: 4e:1d:0e:a2:b2:81:59:9a:53:d2:ac:1e:76:ac:0d:cf:0a:68: 7b:b6:ce:7d:56:cc:e9:77:7d:b6:30:ce:95:9d:22:b5:62:67: 30:73:81:c0:31:87:61:a4:e6:3e:45:c1:9e:06:be:b4:08:5f: 31:c5:e7:1f:25:0b:1b:9e:64:b9:82:c2:8b:d9:79:69:41:4a: 3d:41:f8:3d:31:36:9c:33:2b:10:a8:bf:11:9a:2a:fe:2d:77: 5e:e5:d7:0a:ad:04:56:95:4f:ac:ae:51:b9:8a:90:bc:2b:61: e0:1f:7d:cb:72:6a:7b:64:8f:44:c1:7a:56:2a:61:35:53:6a: a2:80:47:09:f4:58:75:a9:74:ce:e6:9d:e4:88:66:eb:f8:e5: ec:27:f2:7a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaQ1KiU9wj1MBwj5MwnMfttK0DGowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgwMDU2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTA1OTVlNjYxYWRkMDZkNTE0MDQ4ZTgzNzU0MzFmYThk ZmFkODg2NmE0YjliZTc4MzU4M2IxOWMyY2VhYjViMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkLvMTExgWoxeO1vEZewmv0Mw574En9dVK1kPwz4NlKrya eub5/AWv1DSWY/ktt55s0KxgKLlqcC88UmGwZ5Deg/KBBmPqtm/8kWY0K3K3yrxu WhjULq1/8CkFkZGB/A+fz4btqZ74OctPlr36LQFnKW0CBu7R8Oi5QdyhaWmfSEOT 4R1YlZeOf+uwoZTrm2JLgusOj3e1IXyp27jLzx9YGP5ujD6Ld8L2X+xYYntBpT2S 2hFUVnCmUX4/nAhzJGd95MDxDzRsz30O1pPoVkGf+OO8tNEtlsJ1pvNvMYC8oYky gZncEvSkbcVP9FAyAi5EzjLsxBqTG8zKw8ibn7d9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUwF7aJWoj5SNxDK0qB6yN3IsMisowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdhZDI2YmI5LTJmNjktNDBlZS1iOTFhLTBjY2U2N2ZhNGE1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76DANBgkqhkiG9w0BAQsFAAOCAQEAiyiYctxHJ1/N3A5CokBDdpql TyqYtbCsk12QAj7Fh12Ip/FFdFkeyrT80FiG8puY377hF1Pmw7jCLl0GTFG2+/D8 Iw3n6axEzSMHnmVcJ2A/SxOOn0H5Q1bo4bjKW8jcZn+64HEEgaEdfSN0Th0OorKB WZpT0qwedqwNzwpoe7bOfVbM6Xd9tjDOlZ0itWJnMHOBwDGHYaTmPkXBnga+tAhf McXnHyULG55kuYLCi9l5aUFKPUH4PTE2nDMrEKi/EZoq/i13XuXXCq0EVpVPrK5R uYqQvCth4B99y3Jqe2SPRMF6ViphNVNqooBHCfRYdal0zuad5Ihm6/jl7Cfyeg== -----END CERTIFICATE-----Generated at Mon Apr 28 07:52:27 2025 by rpki-client