$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa File: b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa (raw, json) Hash identifier: AjOuKbroIKpSQusV7Bge/W3D9GTB3buf+DQft84hb64= Subject key identifier: 7F:BD:3D:61:3E:14:E7:BE:A6:3B:AE:25:B1:9C:49:46:97:BB:AC:C8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 61407A1AAFE17EC31276CA89D3DAEEA63364F5BC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa Signing time: Fri 25 Apr 2025 18:01:05 +0000 ROA not before: Fri 25 Apr 2025 18:01:05 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:ec00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:40:7a:1a:af:e1:7e:c3:12:76:ca:89:d3:da:ee:a6:33:64:f5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:01:05 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=e3a0dcc3d0164b87bf9d558801ed0fa6deffb34122ad4f013908f7fd4dee528e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:f2:34:7e:39:c0:da:60:87:8f:e3:20:98: 69:b7:f7:88:34:dd:12:f3:8f:d9:4b:ee:5d:5c:80: 25:44:7d:6f:33:f8:3e:08:43:57:25:fa:f9:85:f8: 31:c1:eb:5a:7f:ab:77:6c:6e:b5:34:5b:66:49:1d: c0:a2:bf:10:70:59:d3:d3:51:89:ad:de:6e:35:58: 0c:62:cc:d9:6b:83:83:19:59:36:4a:19:c1:cb:06: 99:e4:ad:2e:9e:a2:f0:54:2a:50:85:cc:ef:87:f1: e4:41:6f:12:61:11:00:02:3e:3e:25:94:5f:a4:d4: 92:e1:cc:c5:e1:f7:64:8e:f4:a2:53:5e:5c:92:95: f0:19:5f:5c:02:72:4b:51:a9:82:bf:16:ef:b6:f7: b8:d1:ef:bb:3a:e4:0d:47:2c:0a:e9:d2:10:49:e0: 81:14:e5:1e:06:db:2d:d4:e7:1a:50:85:8b:da:3a: a7:d2:04:05:06:75:ff:af:38:a1:ce:81:9a:38:cf: db:6b:d0:96:f0:b1:1a:43:2c:70:ef:9e:9c:fb:06: df:e6:97:97:64:d7:72:81:78:0e:5e:73:85:f3:5f: 38:0f:e2:92:cd:8f:ba:79:ca:f1:22:ac:62:9c:cf: ad:fe:62:56:5d:20:bb:24:b3:79:34:7c:43:bb:d2: 40:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BD:3D:61:3E:14:E7:BE:A6:3B:AE:25:B1:9C:49:46:97:BB:AC:C8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/42 Signature Algorithm: sha256WithRSAEncryption 39:15:63:a9:d3:d1:42:6f:b1:c2:89:71:51:d1:24:a6:51:51: 5b:8b:82:7f:61:23:95:38:0e:ca:a9:7e:6f:5f:c4:c2:f8:d6: 56:54:ca:96:16:92:39:fa:a8:9a:06:a3:3d:9b:1d:f5:2f:35: 6f:e2:c7:24:42:d8:29:66:e1:d0:1e:a0:5f:85:dd:e8:cb:a7: ac:6c:c1:60:e1:4c:11:3d:47:ab:71:0e:7f:a1:5e:05:6b:d7: 1b:9f:de:5d:cb:f3:3e:80:33:be:52:ae:e4:1d:3e:ac:4b:bb: 63:37:95:49:13:4c:e7:ac:81:c6:b7:6c:67:97:bf:ce:e6:03: 9a:6b:f4:56:9e:4e:b8:98:32:53:27:90:70:e0:23:b1:63:47: 77:81:90:88:02:1f:27:31:15:30:bb:82:a6:13:d8:3a:77:17: 06:78:23:3d:4f:42:46:28:74:5f:e2:ce:c0:af:12:ea:89:c0: ba:bb:91:c5:65:9a:5f:db:dd:ea:91:a2:21:88:fb:49:58:20: 86:a7:12:0d:99:2f:94:02:c6:c8:9a:4a:54:ca:6d:fa:02:e3: 08:f3:e8:ef:1f:95:7b:34:14:0c:46:a7:2b:4a:25:82:dd:65: 85:32:51:e0:47:49:1a:43:58:34:dc:f7:6e:b7:d5:e3:06:2b: 0a:2c:3c:78 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYUB6Gq/hfsMSdsqJ09rupjNk9bwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgwMTA1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2EwZGNjM2QwMTY0Yjg3YmY5ZDU1ODgwMWVkMGZhNmRl ZmZiMzQxMjJhZDRmMDEzOTA4ZjdmZDRkZWU1MjhlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiyfI0fjnA2mCHj+MgmGm394g03RLzj9lL7l1cgCVEfW8z +D4IQ1cl+vmF+DHB61p/q3dsbrU0W2ZJHcCivxBwWdPTUYmt3m41WAxizNlrg4MZ WTZKGcHLBpnkrS6eovBUKlCFzO+H8eRBbxJhEQACPj4llF+k1JLhzMXh92SO9KJT XlySlfAZX1wCcktRqYK/Fu+297jR77s65A1HLArp0hBJ4IEU5R4G2y3U5xpQhYva OqfSBAUGdf+vOKHOgZo4z9tr0JbwsRpDLHDvnpz7Bt/ml5dk13KBeA5ec4XzXzgP 4pLNj7p5yvEirGKcz63+YlZdILsks3k0fEO70kDBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUf709YT4U576mO64lsZxJRpe7rMgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I3YjFkOGUwLTdmYmItNDUyOC04Yzk3LTEwNTFjYTQ5NTA1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77AAwDQYJKoZIhvcNAQELBQADggEBADkVY6nT0UJvscKJcVHRJKZR UVuLgn9hI5U4Dsqpfm9fxML41lZUypYWkjn6qJoGoz2bHfUvNW/ixyRC2Clm4dAe oF+F3ejLp6xswWDhTBE9R6txDn+hXgVr1xuf3l3L8z6AM75SruQdPqxLu2M3lUkT TOesgca3bGeXv87mA5pr9FaeTriYMlMnkHDgI7FjR3eBkIgCHycxFTC7gqYT2Dp3 FwZ4Iz1PQkYodF/izsCvEuqJwLq7kcVlml/b3eqRoiGI+0lYIIanEg2ZL5QCxsia SlTKbfoC4wjz6O8flXs0FAxGpytKJYLdZYUyUeBHSRpDWDTc92631eMGKwosPHg= -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:48 2025 by rpki-client