$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa File: 87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa (raw, json) Hash identifier: dxNQ7n3KPeeNoDzxkm2zful6ZXoF3+e0i0xkOAuZ3ms= Subject key identifier: 8F:55:3C:E6:A3:9A:9D:57:D3:85:A5:47:75:48:94:43:27:6C:E8:44 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 48ECACCF0445304F5A48E125E295BB626F7C6BF0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa Signing time: Fri 25 Apr 2025 18:01:21 +0000 ROA not before: Fri 25 Apr 2025 18:01:21 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e500::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ec:ac:cf:04:45:30:4f:5a:48:e1:25:e2:95:bb:62:6f:7c:6b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:01:21 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=c9f056e88bf475926d41fc04b9573ef2a3cb4e4f43b032045dba81d51212ec3a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:7a:b7:4a:a0:e8:cf:9f:45:fa:1a:a6:b3: a5:c3:7c:d3:a5:7f:1a:09:e2:8e:59:89:8a:bd:1e: 2c:a8:8a:be:d2:5e:1d:22:3d:8d:a6:d6:32:77:00: 65:b7:1d:d7:86:8f:a9:65:6a:97:c7:af:e9:c4:97: b5:23:fc:a4:8d:1f:26:cf:3a:cd:13:ea:13:43:a3: 4b:d6:32:55:ab:a7:eb:a9:8a:6f:89:e4:f5:92:cc: e7:6e:9d:5d:ed:45:cc:2a:b0:fa:fb:ed:96:b5:23: a4:86:b8:06:7f:6c:3b:ac:d6:ec:9c:f3:fa:40:54: 17:26:6c:f0:79:c4:91:49:22:52:a9:a8:6b:1a:9f: 63:35:a5:7a:12:da:92:44:68:60:52:e7:47:8d:83: 70:56:ef:04:b5:45:0d:7f:ca:83:dd:94:1c:5b:f3: c7:4c:76:6f:3e:11:e5:fa:59:b8:5d:22:29:b4:70: 2c:a4:4d:e8:78:61:95:6a:6a:36:28:d5:c5:9e:46: 46:76:3c:2b:19:63:5e:c3:44:02:0b:eb:71:44:dc: 44:cf:b7:e6:ae:67:d2:50:93:33:1d:81:29:b9:69: 11:f1:90:3f:3a:b9:bf:30:27:16:e4:45:d6:ae:99: b3:a2:58:de:ff:7f:78:ec:cd:34:91:81:e2:73:cd: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:55:3C:E6:A3:9A:9D:57:D3:85:A5:47:75:48:94:43:27:6C:E8:44 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e500::/42 Signature Algorithm: sha256WithRSAEncryption 33:a8:cc:bf:20:b7:59:88:e3:dc:de:33:e4:15:6a:3b:78:aa: 09:dc:2a:2e:10:b0:69:26:89:10:3e:dd:99:9e:47:d9:07:a4: d1:15:23:5b:4f:dc:4a:6e:c4:55:c7:d2:a6:08:f4:6f:ca:62: 28:f0:34:cb:a3:ea:f7:d4:8a:4d:db:d1:19:2d:37:d5:ef:e2: c6:7b:07:f2:82:8e:39:c9:1f:99:1c:a6:ad:54:70:22:82:8b: d6:06:0e:63:20:b0:18:8a:fe:94:7d:6a:80:b5:9e:f5:c7:3f: 3f:52:70:14:db:45:62:4a:61:5e:da:70:e7:e0:03:28:74:c1: bf:c7:b7:00:b7:b8:4a:99:a0:20:53:04:f8:0d:a1:07:d2:c8: 3f:34:c5:8b:f2:61:ab:06:8e:e5:bb:d3:57:52:08:b1:5b:7f: 3b:26:aa:50:37:68:a6:83:25:7a:10:e2:75:02:a0:bf:cc:d1: f8:00:ba:a4:34:b0:84:58:4a:5d:46:8a:d3:9c:b8:84:12:92: 07:9a:47:3f:2f:c5:3b:1e:f5:60:1a:54:b5:3a:ed:48:c0:7d: 45:fc:6f:2f:6b:22:80:08:80:07:46:3f:0c:13:d1:b7:81:51: 4a:4c:3b:a0:a1:10:87:d4:43:df:fc:2e:00:87:8d:4f:44:83: 18:fa:d9:9d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSOyszwRFME9aSOEl4pW7Ym98a/AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgwMTIxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWYwNTZlODhiZjQ3NTkyNmQ0MWZjMDRiOTU3M2VmMmEz Y2I0ZTRmNDNiMDMyMDQ1ZGJhODFkNTEyMTJlYzNhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtr3q3SqDoz59F+hqms6XDfNOlfxoJ4o5ZiYq9Hiyoir7S Xh0iPY2m1jJ3AGW3HdeGj6llapfHr+nEl7Uj/KSNHybPOs0T6hNDo0vWMlWrp+up im+J5PWSzOdunV3tRcwqsPr77Za1I6SGuAZ/bDus1uyc8/pAVBcmbPB5xJFJIlKp qGsan2M1pXoS2pJEaGBS50eNg3BW7wS1RQ1/yoPdlBxb88dMdm8+EeX6WbhdIim0 cCykTeh4YZVqajYo1cWeRkZ2PCsZY17DRAIL63FE3ETPt+auZ9JQkzMdgSm5aRHx kD86ub8wJxbkRdaumbOiWN7/f3jszTSRgeJzzforAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUj1U85qOanVfThaVHdUiUQyds6EQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg3YmFmYjBkLTdjZWMtNDMzMS04YTA5LTRhNGQ1NmFiZjdkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75QAwDQYJKoZIhvcNAQELBQADggEBADOozL8gt1mI49zeM+QVajt4 qgncKi4QsGkmiRA+3ZmeR9kHpNEVI1tP3EpuxFXH0qYI9G/KYijwNMuj6vfUik3b 0RktN9Xv4sZ7B/KCjjnJH5kcpq1UcCKCi9YGDmMgsBiK/pR9aoC1nvXHPz9ScBTb RWJKYV7acOfgAyh0wb/HtwC3uEqZoCBTBPgNoQfSyD80xYvyYasGjuW701dSCLFb fzsmqlA3aKaDJXoQ4nUCoL/M0fgAuqQ0sIRYSl1GitOcuIQSkgeaRz8vxTse9WAa VLU67UjAfUX8by9rIoAIgAdGPwwT0beBUUpMO6ChEIfUQ9/8LgCHjU9Egxj62Z0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:02 2025 by rpki-client