$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa File: 7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa (raw, json) Hash identifier: ZMmWs7hF0BF3i5ddu3K6cgwPTr0Z+UtxfDY66+h3oPU= Subject key identifier: 40:63:E6:90:09:AA:0C:37:81:D6:E3:FB:A6:31:B3:E4:71:CF:42:9B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5CB8020FF392ECF22EC0017A61676BBEC95B630A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa Signing time: Fri 25 Apr 2025 18:00:18 +0000 ROA not before: Fri 25 Apr 2025 18:00:18 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:eb00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b8:02:0f:f3:92:ec:f2:2e:c0:01:7a:61:67:6b:be:c9:5b:63:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:00:18 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=76ea5542842690ebabb0229165b141d3c2cfc9ee7bb6e0cdfe55d8637042bb28, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:48:9d:e3:6f:f3:03:88:e0:81:6a:d1:ca: 8f:90:92:04:8c:85:e8:e4:2a:26:28:90:8e:24:75: bf:8e:73:0d:90:a8:25:90:86:a9:ec:f9:8b:5a:2c: 49:5a:17:c1:92:46:75:c5:a4:31:40:73:a5:51:18: 7b:70:04:50:d0:11:39:9f:49:59:55:dc:73:2a:4a: e3:73:d8:d8:37:21:34:8f:c8:ba:34:9f:23:18:fb: 6c:da:18:10:96:86:c5:43:96:7e:95:61:c2:b8:f9: 69:6f:57:18:4d:7b:f6:ba:d1:45:6f:fc:fa:84:b1: bf:6a:c1:3e:16:c2:4f:0e:f1:10:b2:11:90:91:bd: 4f:f1:c9:8a:2b:86:31:32:4c:84:a1:08:5a:bb:f8: 60:f8:f8:62:61:d4:db:dc:f7:3b:5d:60:6b:25:74: 0e:e7:0a:25:0d:9d:4b:32:84:af:2d:6a:9e:8b:1b: fb:09:21:1c:22:95:44:1f:41:da:13:20:f1:7d:15: 8b:d9:9b:af:f2:e7:a9:f8:0f:5e:0f:6a:bd:93:b2: 4f:b3:59:b9:de:d4:a8:e3:8d:6a:ba:ff:28:02:48: da:2a:05:61:7e:53:a4:2f:0a:c8:a4:34:c4:40:4a: 5a:70:29:cb:bd:92:51:3d:68:d2:1b:93:4c:6a:31: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:63:E6:90:09:AA:0C:37:81:D6:E3:FB:A6:31:B3:E4:71:CF:42:9B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7c0c4811-7db0-4cc0-8fa1-6dbda4055b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:eb00::/40 Signature Algorithm: sha256WithRSAEncryption 82:a2:f6:b5:36:22:6d:e0:78:61:b8:8d:6e:1e:26:c0:0e:f5: 73:07:3c:3c:dc:a7:ff:52:b5:ba:78:cf:62:8e:f6:18:da:b5: ab:0a:5d:04:80:43:53:88:4b:81:4c:bf:df:3c:25:d0:fa:33: 1e:d0:ff:b9:97:3e:9e:01:85:d2:66:82:ed:e8:59:2f:f7:d2: c5:84:41:5e:bb:5c:a2:c6:f2:d3:bd:dd:88:7b:a1:6c:96:aa: 63:63:10:00:e2:83:63:bb:b1:55:f3:06:0b:a4:13:d2:51:aa: e5:8e:dd:e7:ca:51:5d:1b:9d:45:6d:76:37:31:fe:8f:79:ab: fa:33:69:e3:0f:6b:8e:05:a7:30:43:00:45:02:d6:8b:16:e9: 01:bb:a6:f6:05:11:94:c7:e9:63:86:e8:ed:97:de:8c:2c:23: 80:64:41:79:61:94:fd:92:10:45:67:8e:a3:38:fe:a9:95:fd: 86:62:88:c2:9a:34:ff:39:25:a0:38:77:1e:8e:49:cc:7e:7b: fe:62:b8:b0:9b:9f:6a:1f:ca:0c:4b:c6:e7:fc:70:70:8c:fb: f7:ac:0b:f3:cc:be:73:c2:cc:db:94:fa:e2:63:b0:21:00:12: c3:34:dd:f8:46:23:d9:e7:db:b4:d6:06:66:1a:f3:95:a3:6e: 0b:73:17:00 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXLgCD/OS7PIuwAF6YWdrvslbYwowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgwMDE4WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmVhNTU0Mjg0MjY5MGViYWJiMDIyOTE2NWIxNDFkM2My Y2ZjOWVlN2JiNmUwY2RmZTU1ZDg2MzcwNDJiYjI4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAZEid42/zA4jggWrRyo+QkgSMhejkKiYokI4kdb+Ocw2Q qCWQhqns+YtaLElaF8GSRnXFpDFAc6VRGHtwBFDQETmfSVlV3HMqSuNz2Ng3ITSP yLo0nyMY+2zaGBCWhsVDln6VYcK4+WlvVxhNe/a60UVv/PqEsb9qwT4Wwk8O8RCy EZCRvU/xyYorhjEyTIShCFq7+GD4+GJh1Nvc9ztdYGsldA7nCiUNnUsyhK8tap6L G/sJIRwilUQfQdoTIPF9FYvZm6/y56n4D14Par2Tsk+zWbne1KjjjWq6/ygCSNoq BWF+U6QvCsikNMRASlpwKcu9klE9aNIbk0xqMYLxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQGPmkAmqDDeB1uP7pjGz5HHPQpswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdjMGM0ODExLTdkYjAtNGNjMC04ZmExLTZkYmRhNDA1NWI5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76zANBgkqhkiG9w0BAQsFAAOCAQEAgqL2tTYibeB4YbiNbh4mwA71 cwc8PNyn/1K1unjPYo72GNq1qwpdBIBDU4hLgUy/3zwl0PozHtD/uZc+ngGF0maC 7ehZL/fSxYRBXrtcosby073diHuhbJaqY2MQAOKDY7uxVfMGC6QT0lGq5Y7d58pR XRudRW12NzH+j3mr+jNp4w9rjgWnMEMARQLWixbpAbum9gURlMfpY4bo7ZfejCwj gGRBeWGU/ZIQRWeOozj+qZX9hmKIwpo0/zkloDh3Ho5JzH57/mK4sJufah/KDEvG 5/xwcIz796wL88y+c8LM25T64mOwIQASwzTd+EYj2efbtNYGZhrzlaNuC3MXAA== -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:48 2025 by rpki-client