$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa File: f555d010-5e5e-4c02-8722-e69da1514f97.roa (raw, json) Hash identifier: xxoxgEcT07WXL3UnmmLvsZuNMP3j804Uz3gGe1JlYS8= Subject key identifier: DC:B5:F9:10:A3:4C:32:3B:AC:BF:F1:8D:43:65:65:34:6F:89:3A:3A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 519C00A4F15746E1ADDEBFDDB0D889B582D7DB4A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa Signing time: Fri 25 Apr 2025 17:50:50 +0000 ROA not before: Fri 25 Apr 2025 17:50:50 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9c:00:a4:f1:57:46:e1:ad:de:bf:dd:b0:d8:89:b5:82:d7:db:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 17:50:50 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=d5a30602777b166fdb6c8fef2428c9979773065c5e1a311de95f7fea820a4f56, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:ff:10:b7:f6:d5:73:b6:b1:cb:e0:51:75: b6:1c:ff:f8:4a:1d:1f:0b:c0:7f:a0:13:6a:4b:ee: b8:79:63:af:8e:fd:40:a2:a2:23:00:6e:18:f8:1b: 9a:9c:fa:1d:85:0f:74:8f:5c:fb:7a:da:1c:06:99: b3:cc:c4:c5:9a:fc:0d:f4:b9:87:6b:b6:92:75:88: 56:6a:d1:07:44:11:39:3b:b5:bd:70:2d:18:9c:bf: 6d:26:d2:70:ea:5d:82:0c:c0:90:56:42:4b:33:6c: 33:13:19:cf:9f:f8:19:d8:a6:cb:b9:f0:4e:89:62: 92:c9:58:e8:4e:77:2c:2e:a6:74:d2:bd:e3:b3:db: cf:4e:d3:80:fe:43:0d:ca:1e:58:05:d5:83:76:ad: 6c:16:cd:ed:05:7f:f3:03:e7:5d:4e:df:34:a0:2c: 86:12:bc:08:1a:60:31:7b:c4:d5:6e:b6:d6:59:4d: b4:58:6a:40:1e:a8:f0:ab:3a:fc:26:57:97:56:47: 26:3e:cb:55:6a:7d:b3:95:22:65:91:12:73:98:84: e2:0f:86:3d:6c:08:77:db:ef:23:5d:a1:f6:b5:b7: 29:34:1e:e5:dc:2d:70:f1:e2:e3:51:34:a0:67:13: 65:0e:6d:05:bd:9e:63:85:31:a4:98:41:f7:8a:d3: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B5:F9:10:A3:4C:32:3B:AC:BF:F1:8D:43:65:65:34:6F:89:3A:3A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:8000::/34 Signature Algorithm: sha256WithRSAEncryption 55:f8:6f:8b:10:9e:ab:3b:e9:c8:06:c4:26:63:07:65:72:fc: e4:02:8b:3d:1c:43:53:bf:45:70:f4:58:63:7a:49:e9:a9:39: 2f:f2:20:21:36:60:77:66:c9:d2:a6:b5:a7:21:03:fb:9e:9e: 92:da:dc:04:6b:8b:ff:31:0d:0b:9e:4b:9e:18:3b:c9:86:52: 69:63:75:bf:6d:11:4e:16:69:6e:07:0b:24:36:0f:b2:57:71: 10:22:36:10:23:09:4e:8c:3a:82:97:fa:06:24:dc:66:eb:e1: 62:4a:06:9b:39:18:b3:47:89:ae:98:da:79:c1:16:50:55:74: 67:b9:3a:ab:46:dc:a7:ed:57:c0:22:3a:8d:9c:10:2d:3b:c0: 68:20:d5:ff:fa:a3:18:d2:b6:ac:46:e3:c3:12:87:02:55:14: 8b:06:5a:a9:c7:95:cf:92:55:59:93:46:cd:85:88:70:f3:35: b6:d1:0b:67:ac:69:c5:a1:8b:a1:e0:de:f5:0f:c2:e5:24:9b: 1c:2a:2d:38:9b:55:73:c4:ff:f7:70:14:49:36:47:4b:24:22: 85:17:ef:24:11:cb:cd:7b:8b:e3:61:26:66:c4:0a:dd:23:f4: 6d:55:d9:6c:ec:5e:eb:68:8b:63:80:c3:9c:a8:03:45:2f:17: 96:8b:b3:50 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUZwApPFXRuGt3r/dsNiJtYLX20owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTc1MDUwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWEzMDYwMjc3N2IxNjZmZGI2YzhmZWYyNDI4Yzk5Nzk3 NzMwNjVjNWUxYTMxMWRlOTVmN2ZlYTgyMGE0ZjU2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqHf8Qt/bVc7axy+BRdbYc//hKHR8LwH+gE2pL7rh5Y6+O /UCioiMAbhj4G5qc+h2FD3SPXPt62hwGmbPMxMWa/A30uYdrtpJ1iFZq0QdEETk7 tb1wLRicv20m0nDqXYIMwJBWQkszbDMTGc+f+BnYpsu58E6JYpLJWOhOdywupnTS veOz289O04D+Qw3KHlgF1YN2rWwWze0Ff/MD511O3zSgLIYSvAgaYDF7xNVuttZZ TbRYakAeqPCrOvwmV5dWRyY+y1VqfbOVImWREnOYhOIPhj1sCHfb7yNdofa1tyk0 HuXcLXDx4uNRNKBnE2UObQW9nmOFMaSYQfeK0ySnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU3LX5EKNMMjusv/GNQ2VlNG+JOjowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y1NTVkMDEwLTVlNWUtNGMwMi04NzIyLWU2OWRhMTUxNGY5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgYmAPD7gDANBgkqhkiG9w0BAQsFAAOCAQEAVfhvixCeqzvpyAbEJmMHZXL8 5AKLPRxDU79FcPRYY3pJ6ak5L/IgITZgd2bJ0qa1pyED+56ektrcBGuL/zENC55L nhg7yYZSaWN1v20RThZpbgcLJDYPsldxECI2ECMJTow6gpf6BiTcZuvhYkoGmzkY s0eJrpjaecEWUFV0Z7k6q0bcp+1XwCI6jZwQLTvAaCDV//qjGNK2rEbjwxKHAlUU iwZaqceVz5JVWZNGzYWIcPM1ttELZ6xpxaGLoeDe9Q/C5SSbHCotOJtVc8T/93AU STZHSyQihRfvJBHLzXuL42EmZsQK3SP0bVXZbOxe62iLY4DDnKgDRS8XlouzUA== -----END CERTIFICATE-----Generated at Sat Apr 26 16:20:34 2025 by rpki-client