$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa File: 8638aa88-01e8-41ec-a10e-f2452ac701be.roa (raw, json) Hash identifier: hhSAWsAtjjLL0dY4JfGete7m3bB9AsxXUxrdEL+AzME= Subject key identifier: DB:59:65:D7:AF:F9:2C:AB:40:19:35:6C:94:B4:59:23:51:C7:EF:21 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7CD5F3CC48EEA7E5D07621CCC6F5891F094E4AA2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa Signing time: Fri 25 Apr 2025 18:00:09 +0000 ROA not before: Fri 25 Apr 2025 18:00:09 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ed00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d5:f3:cc:48:ee:a7:e5:d0:76:21:cc:c6:f5:89:1f:09:4e:4a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:00:09 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=8041af45022120917f77edb98f1a8cf1feab856dc4e9794bde92f6b3f25ceb14, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:bb:e5:69:8d:f7:d1:84:ed:49:cb:34:34: e1:36:6e:98:99:87:43:26:02:21:71:7a:c6:53:5c: 7e:13:79:a4:42:74:3d:89:74:5a:80:96:9e:5e:bd: 64:0c:e3:a3:8c:e6:9b:01:a4:28:c0:08:79:8a:6a: cd:9a:c2:00:32:3a:4c:be:17:dd:cf:e7:4c:79:b1: df:39:bd:5e:6c:7c:b0:92:d9:78:09:f0:89:35:87: b3:15:ca:8c:9e:66:5f:d3:fa:6b:65:20:ca:7b:da: d5:72:74:58:42:bd:d8:08:ba:4c:8b:90:5a:8c:05: c3:1d:ec:71:3c:54:ce:e1:8a:1f:55:15:79:38:b5: c9:c1:39:bc:83:08:5b:5b:e2:b4:e5:b0:e5:44:f7: 0b:08:55:ee:2d:f8:17:93:2c:35:8d:88:a1:18:56: 58:ab:7a:01:09:dc:2c:f5:96:4b:32:f0:e4:48:08: a0:4a:a1:08:c0:d7:4d:a1:6e:eb:af:68:f9:0b:91: ff:32:93:2c:42:6f:2f:aa:2f:c0:b1:0e:c9:6c:61: ec:86:02:53:fc:2d:22:47:f7:16:b1:9f:fe:b8:44: 89:57:d2:4c:2c:e1:53:06:94:1a:0a:90:3a:14:2c: a2:20:8d:45:d0:45:11:40:82:94:ea:27:9c:50:a9: c6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:59:65:D7:AF:F9:2C:AB:40:19:35:6C:94:B4:59:23:51:C7:EF:21 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ed00::/42 Signature Algorithm: sha256WithRSAEncryption 55:c1:49:9e:29:44:d0:41:0c:fd:36:b1:ef:8a:f7:f8:c4:8c: 14:21:68:36:44:2d:34:80:4c:39:03:66:da:26:29:f9:f2:dc: 2f:fa:c8:8a:f2:a7:23:d0:8b:f6:47:2b:03:ca:11:49:83:99: 28:a2:45:93:51:36:b7:f0:85:42:d8:15:b9:b3:e6:95:56:af: 1a:4f:9b:84:05:7b:8d:db:38:99:69:97:59:c9:6d:a2:6e:bf: 65:87:50:f6:e9:dd:04:02:1a:5f:e8:60:8b:fe:d1:a7:a0:88: 60:4a:8a:c0:52:8c:22:99:f2:a0:e1:b8:74:2a:c8:be:e5:da: 0d:a0:d2:9b:98:2a:82:08:fe:81:d3:75:e1:1d:d2:72:2f:a7: 9a:d4:29:e4:99:25:74:ce:f0:da:c9:3c:61:03:3b:c3:d3:ed: ed:7e:25:cc:06:42:d7:5f:90:1d:2e:60:9a:ce:b9:48:24:53: 38:75:59:3f:6d:69:31:f1:f5:a6:0a:62:a7:9e:4c:28:7d:ad: 6f:f8:97:a9:cf:54:ae:a4:e1:0a:73:0d:c2:0f:f6:75:f4:96: f9:5c:49:ce:89:f9:f4:08:ee:c6:dd:64:4e:0e:93:9d:df:2d: 63:ef:6b:a4:b1:ff:83:51:4d:f5:8a:54:9b:2d:e8:23:03:8e: 98:42:e8:0a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfNXzzEjup+XQdiHMxvWJHwlOSqIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgwMDA5WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDQxYWY0NTAyMjEyMDkxN2Y3N2VkYjk4ZjFhOGNmMWZl YWI4NTZkYzRlOTc5NGJkZTkyZjZiM2YyNWNlYjE0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjoLvlaY330YTtScs0NOE2bpiZh0MmAiFxesZTXH4TeaRC dD2JdFqAlp5evWQM46OM5psBpCjACHmKas2awgAyOky+F93P50x5sd85vV5sfLCS 2XgJ8Ik1h7MVyoyeZl/T+mtlIMp72tVydFhCvdgIukyLkFqMBcMd7HE8VM7hih9V FXk4tcnBObyDCFtb4rTlsOVE9wsIVe4t+BeTLDWNiKEYVliregEJ3Cz1lksy8ORI CKBKoQjA102hbuuvaPkLkf8ykyxCby+qL8CxDslsYeyGAlP8LSJH9xaxn/64RIlX 0kws4VMGlBoKkDoULKIgjUXQRRFAgpTqJ5xQqcZPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU21ll16/5LKtAGTVslLRZI1HH7yEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2MzhhYTg4LTAxZTgtNDFlYy1hMTBlLWYyNDUyYWM3MDFiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77QAwDQYJKoZIhvcNAQELBQADggEBAFXBSZ4pRNBBDP02se+K9/jE jBQhaDZELTSATDkDZtomKfny3C/6yIrypyPQi/ZHKwPKEUmDmSiiRZNRNrfwhULY Fbmz5pVWrxpPm4QFe43bOJlpl1nJbaJuv2WHUPbp3QQCGl/oYIv+0aegiGBKisBS jCKZ8qDhuHQqyL7l2g2g0puYKoII/oHTdeEd0nIvp5rUKeSZJXTO8NrJPGEDO8PT 7e1+JcwGQtdfkB0uYJrOuUgkUzh1WT9taTHx9aYKYqeeTCh9rW/4l6nPVK6k4Qpz DcIP9nX0lvlcSc6J+fQI7sbdZE4Ok53fLWPva6Sx/4NRTfWKVJst6CMDjphC6Ao= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:59 2025 by rpki-client