$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa File: bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa (raw, json) Hash identifier: B+GmVV3xYmpyFtZ8rho9IBt186rpYhNjZkwbplo8Rys= Subject key identifier: 08:F0:43:C7:D4:1C:E7:07:97:7A:57:E7:25:D6:40:36:16:71:2B:55 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 659CDA6A3B270D44309C47CE8F7CD54556DD55B0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa Signing time: Fri 25 Apr 2025 18:01:10 +0000 ROA not before: Fri 25 Apr 2025 18:01:10 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e700::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9c:da:6a:3b:27:0d:44:30:9c:47:ce:8f:7c:d5:45:56:dd:55:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:01:10 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=2b6eebc974eef661edff8637c7d8e8eff731dd1f71ea295540a3f54036042e84, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8a:9a:27:5f:de:36:24:fe:b6:73:d0:34:41: e0:8f:d8:ee:05:df:17:2d:7d:2a:06:9a:96:ca:e8: a4:57:4b:b0:2e:20:a0:27:de:8f:89:fa:09:ba:b2: 30:ff:20:99:67:c4:19:ef:c5:66:89:f7:6f:49:49: dd:bf:69:9d:ff:f2:65:30:f3:4b:aa:a0:c0:76:55: f8:3b:c5:62:5e:f6:5c:43:13:bd:42:bf:09:3d:27: d9:59:67:a8:ad:29:db:03:f4:09:c4:24:8d:7b:c8: 6c:f3:13:81:fc:ac:fe:c9:7f:b0:d0:7b:a7:5e:c1: e2:16:41:cc:45:2d:f6:15:d6:16:d8:9c:43:b7:73: c4:05:61:a6:f6:2d:6e:c5:a9:80:f1:7b:ce:ae:1d: 25:51:28:ff:5d:3d:ce:0d:eb:d1:f6:51:ea:e3:7d: 75:91:e0:3d:de:21:86:22:7c:b4:9d:bc:fa:fd:20: 4c:97:85:ad:df:47:62:a5:ec:98:b8:7f:80:45:dd: 7e:58:e5:89:9e:98:4a:24:27:8f:4f:4c:b7:d0:f7: 90:97:45:37:89:22:a2:07:eb:06:45:0c:59:f1:49: 37:ce:3b:69:8e:e3:49:02:84:59:c3:cf:75:20:a9: 7a:04:de:1d:50:55:48:70:06:0a:2e:2a:82:ee:14: b5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F0:43:C7:D4:1C:E7:07:97:7A:57:E7:25:D6:40:36:16:71:2B:55 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e700::/42 Signature Algorithm: sha256WithRSAEncryption 68:9c:a8:5b:88:24:0e:35:3c:2c:72:1a:3e:68:a0:58:3d:ca: f7:2c:93:dd:5d:3c:cd:a9:99:16:eb:53:16:6f:ee:b5:d1:fc: 78:64:c6:ec:ae:e1:b3:42:68:c6:38:de:74:3c:cc:e6:b9:62: 7c:24:97:b5:86:8e:fb:22:49:2c:a4:e4:29:c1:9f:ae:e7:e0: ab:5f:78:2b:59:b4:31:dd:f0:cd:43:21:90:b6:25:a4:80:fe: 97:3d:b1:80:10:c7:2a:6f:8e:cf:74:16:f7:0b:c9:ee:61:03: 40:b1:bf:98:00:cf:f0:20:7d:30:6c:6e:d2:38:8e:f3:64:df: 0f:57:14:2e:96:6e:7a:82:32:1a:3a:a2:22:e2:50:ff:a1:44: 7c:bc:98:c8:e2:f2:db:c4:16:da:c2:06:48:de:f7:16:5f:7f: 55:ea:03:77:f0:25:37:7c:64:33:66:cb:75:7a:0f:61:2e:69: 59:39:b1:d7:1c:e7:ec:34:8b:e3:ae:59:0e:00:d3:e8:04:03: 5d:8c:54:c2:68:b1:f8:ab:75:3e:da:eb:a1:d6:20:08:76:ad: 55:44:e1:52:dd:8d:a1:fa:3f:69:a9:ee:0f:23:00:e7:50:fb: 86:d7:50:ca:41:6b:3a:bf:e4:f5:2e:ef:d7:2e:3c:01:6c:0a: 19:80:47:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZZzaajsnDUQwnEfOj3zVRVbdVbAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgwMTEwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjZlZWJjOTc0ZWVmNjYxZWRmZjg2MzdjN2Q4ZThlZmY3 MzFkZDFmNzFlYTI5NTU0MGEzZjU0MDM2MDQyZTg0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeiponX942JP62c9A0QeCP2O4F3xctfSoGmpbK6KRXS7Au IKAn3o+J+gm6sjD/IJlnxBnvxWaJ929JSd2/aZ3/8mUw80uqoMB2Vfg7xWJe9lxD E71Cvwk9J9lZZ6itKdsD9AnEJI17yGzzE4H8rP7Jf7DQe6deweIWQcxFLfYV1hbY nEO3c8QFYab2LW7FqYDxe86uHSVRKP9dPc4N69H2UerjfXWR4D3eIYYifLSdvPr9 IEyXha3fR2Kl7Ji4f4BF3X5Y5YmemEokJ49PTLfQ95CXRTeJIqIH6wZFDFnxSTfO O2mO40kChFnDz3UgqXoE3h1QVUhwBgouKoLuFLUrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCPBDx9Qc5weXelfnJdZANhZxK1UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmM2FlZmQ3LTE0NGEtNDIxMC04NTMyLWE3YjZlMDUzM2RkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75wAwDQYJKoZIhvcNAQELBQADggEBAGicqFuIJA41PCxyGj5ooFg9 yvcsk91dPM2pmRbrUxZv7rXR/Hhkxuyu4bNCaMY43nQ8zOa5Ynwkl7WGjvsiSSyk 5CnBn67n4KtfeCtZtDHd8M1DIZC2JaSA/pc9sYAQxypvjs90FvcLye5hA0Cxv5gA z/AgfTBsbtI4jvNk3w9XFC6WbnqCMho6oiLiUP+hRHy8mMji8tvEFtrCBkje9xZf f1XqA3fwJTd8ZDNmy3V6D2EuaVk5sdcc5+w0i+OuWQ4A0+gEA12MVMJosfirdT7a 66HWIAh2rVVE4VLdjaH6P2mp7g8jAOdQ+4bXUMpBazq/5PUu79cuPAFsChmAR2Q= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:42 2025 by rpki-client