$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c95d920e-7e95-4907-9edf-29509d14ad36.roa File: c95d920e-7e95-4907-9edf-29509d14ad36.roa (raw, json) Hash identifier: gJphlL7zFFORdd7hNWUTNC2WvzldYV05TEkSakEX1KU= Subject key identifier: 35:83:69:BF:3D:17:7B:07:AC:AD:58:70:BF:DE:CC:0B:C9:D3:85:B4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1EED034D9BDE9D9C26D3EF57C5B2A0D86C91B61A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c95d920e-7e95-4907-9edf-29509d14ad36.roa Signing time: Fri 25 Apr 2025 18:00:15 +0000 ROA not before: Fri 25 Apr 2025 18:00:15 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:eb00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ed:03:4d:9b:de:9d:9c:26:d3:ef:57:c5:b2:a0:d8:6c:91:b6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:00:15 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=bf8f96e6aa850288c3de673013682259ae5d5214a1cadf1888c79aec27f6a1db, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:70:dd:7d:f5:27:42:e7:8c:cc:9e:a2:b3:04: 18:03:17:dc:b8:e4:7f:3d:eb:aa:f1:a6:e1:7a:ff: 86:67:0f:f8:e5:08:ff:dc:7d:52:4e:a3:0b:3f:a6: e7:8b:ec:ef:33:08:3d:43:46:d8:cd:80:9c:38:21: 2c:e9:7e:98:dd:76:d7:23:19:d6:b0:ff:57:71:34: c5:64:6f:0e:40:08:f7:d0:86:70:32:85:48:70:42: ac:94:f3:66:c4:73:9b:2e:4e:33:9f:fe:f5:cb:c7: b6:58:8f:a0:d1:4e:14:65:c8:d0:70:f4:dc:33:90: 5a:e4:35:b9:2e:3e:44:79:5a:99:98:cf:7c:a9:99: ef:57:b3:78:2e:d6:b1:82:de:cd:b1:b9:37:70:de: bd:a7:16:cb:df:6a:85:15:57:10:67:80:2a:c7:72: ed:39:25:54:31:ab:94:ab:eb:97:04:0e:23:2e:3f: 31:21:d8:10:09:27:d0:ea:d5:eb:3d:72:14:0a:eb: 43:07:3b:17:ce:7b:2b:9a:8a:06:0b:b7:6f:30:0d: b5:ad:ee:44:e7:72:87:f1:9d:d6:58:c3:b8:70:5f: 24:69:c4:41:13:9c:98:80:b8:92:d9:0f:e3:0a:0d: e0:eb:81:a6:f6:a9:42:cd:c0:2b:7e:a3:7a:ef:27: a9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:83:69:BF:3D:17:7B:07:AC:AD:58:70:BF:DE:CC:0B:C9:D3:85:B4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c95d920e-7e95-4907-9edf-29509d14ad36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:eb00::/42 Signature Algorithm: sha256WithRSAEncryption 0b:2b:81:b3:e4:cd:3b:d4:15:75:46:dd:76:90:e0:1e:50:a3: ac:6f:eb:bf:9e:e2:55:6c:b5:8c:55:df:8d:16:c4:13:af:4f: 47:38:78:c4:56:ea:ce:f2:8c:f9:97:47:99:ad:d7:bf:66:b5: 9a:75:89:a4:ed:5f:8c:29:0d:d3:f6:31:5a:04:68:ec:7c:d5: 8b:1f:cc:86:d1:ca:c0:2f:55:33:f4:ac:c6:6c:30:bb:77:b2: f6:9b:9e:ca:b9:7c:ea:4f:c9:a0:d9:f1:e7:a0:2b:5f:cf:fd: ca:ec:4a:a8:d2:2e:45:84:f6:3f:9c:11:3a:8f:8d:fd:df:ca: 33:38:96:92:e7:5f:2b:bc:e7:fa:57:54:b2:5c:23:de:1d:2c: ed:ca:de:f8:f0:d9:c4:df:66:20:29:a9:a7:4f:9c:8e:3c:50: 0d:f5:78:99:6f:05:1d:11:76:29:9c:75:df:16:0d:2a:08:ec: b9:19:24:cd:09:7b:34:b2:d9:d1:07:a9:85:21:23:88:9f:0f: 9a:85:62:79:97:bc:a4:97:16:50:a0:72:b0:fe:a1:79:8a:de: c1:22:9e:c2:84:96:36:94:22:72:68:ee:c0:39:83:0f:83:68: b5:d1:f9:91:90:d4:c4:70:6f:97:29:53:6f:9d:ca:30:9d:52: c4:7b:b2:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHu0DTZvenZwm0+9XxbKg2GyRthowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgwMDE1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjhmOTZlNmFhODUwMjg4YzNkZTY3MzAxMzY4MjI1OWFl NWQ1MjE0YTFjYWRmMTg4OGM3OWFlYzI3ZjZhMWRiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmcN199SdC54zMnqKzBBgDF9y45H8966rxpuF6/4ZnD/jl CP/cfVJOows/pueL7O8zCD1DRtjNgJw4ISzpfpjddtcjGdaw/1dxNMVkbw5ACPfQ hnAyhUhwQqyU82bEc5suTjOf/vXLx7ZYj6DRThRlyNBw9NwzkFrkNbkuPkR5WpmY z3ypme9Xs3gu1rGC3s2xuTdw3r2nFsvfaoUVVxBngCrHcu05JVQxq5Sr65cEDiMu PzEh2BAJJ9Dq1es9chQK60MHOxfOeyuaigYLt28wDbWt7kTncofxndZYw7hwXyRp xEETnJiAuJLZD+MKDeDrgab2qULNwCt+o3rvJ6lDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNYNpvz0XewesrVhwv97MC8nThbQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M5NWQ5MjBlLTdlOTUtNDkwNy05ZWRmLTI5NTA5ZDE0YWQzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76wAwDQYJKoZIhvcNAQELBQADggEBAAsrgbPkzTvUFXVG3XaQ4B5Q o6xv67+e4lVstYxV340WxBOvT0c4eMRW6s7yjPmXR5mt179mtZp1iaTtX4wpDdP2 MVoEaOx81YsfzIbRysAvVTP0rMZsMLt3svabnsq5fOpPyaDZ8eegK1/P/crsSqjS LkWE9j+cETqPjf3fyjM4lpLnXyu85/pXVLJcI94dLO3K3vjw2cTfZiApqadPnI48 UA31eJlvBR0Rdimcdd8WDSoI7LkZJM0JezSy2dEHqYUhI4ifD5qFYnmXvKSXFlCg crD+oXmK3sEinsKEljaUInJo7sA5gw+DaLXR+ZGQ1MRwb5cpU2+dyjCdUsR7stI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:48 2025 by rpki-client