$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa File: 22382750-431d-4ab9-aa08-e0f973e067f8.roa (raw, json) Hash identifier: 3rj7wiA2QLK9DMHVvs48rwjiiFPYkS4rABj4PyC9+fk= Subject key identifier: AC:99:F5:8F:FC:BA:97:2F:94:50:23:EA:D3:D2:90:00:F7:31:AF:02 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 17755D2A9D03C9F3045654DF367DEAE8997AB1E3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa Signing time: Fri 25 Apr 2025 18:10:07 +0000 ROA not before: Fri 25 Apr 2025 18:10:07 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f00c::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:75:5d:2a:9d:03:c9:f3:04:56:54:df:36:7d:ea:e8:99:7a:b1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:10:07 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=1c487c81a859df876bf8dc4e669123e137c8812960c9181794a73c63612204f8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:55:75:6b:bf:5b:ff:74:3a:e3:bd:b0:f4: 57:fe:52:94:27:db:23:35:cf:1c:9b:4f:1d:bc:c6: 3b:0b:38:a6:0f:14:85:03:93:b2:7e:02:e6:9a:a2: ca:b8:f4:d8:74:ad:aa:71:45:66:a5:18:d2:51:33: bc:7b:e3:19:17:70:8f:6a:9b:6f:e1:b0:c1:a9:44: ae:38:e9:92:f8:f9:bd:af:1c:6a:0e:72:06:da:61: 99:22:8f:dd:ac:a1:d4:a6:b4:a1:c7:b1:d7:53:7b: 75:e4:64:f0:0c:e8:e0:41:3c:f1:56:7c:1e:9f:b4: c1:f7:b8:f0:44:36:e9:0a:f7:34:58:df:e0:12:57: 78:b8:58:82:46:fa:e9:2a:20:f2:99:54:c2:dd:13: 31:fb:1d:21:d1:17:bf:5b:3c:ea:66:62:70:05:8f: 0b:8c:0b:d6:dd:0e:d1:8a:c9:04:5c:41:c9:99:8e: 98:22:bd:ca:de:43:1e:1c:78:6e:7e:ad:52:f3:28: ef:d5:a1:f4:5a:8c:a8:de:ac:75:e1:7b:96:42:41: 33:19:64:ce:52:2f:a4:b6:b9:ec:d1:b2:ae:c3:b1: 59:55:0e:80:aa:73:da:62:2b:de:5a:07:a9:80:00: 15:45:37:51:93:76:bb:04:1d:79:9f:06:d9:d7:39: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:99:F5:8F:FC:BA:97:2F:94:50:23:EA:D3:D2:90:00:F7:31:AF:02 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f00c::/39 Signature Algorithm: sha256WithRSAEncryption 26:19:f0:d1:99:2f:90:66:f9:09:04:4e:7e:e9:65:d5:57:1a: db:4f:1f:39:88:0d:00:79:42:74:1e:c9:8d:ae:fb:dd:9e:3b: b6:bf:a4:23:6e:a7:52:f1:a6:92:05:cb:6c:0d:1b:9b:2a:e6: b9:19:79:8a:20:ba:ed:b3:d2:ad:67:82:24:50:06:03:50:f9: 38:7e:1a:50:72:03:d5:88:95:ce:db:06:7d:f5:6b:99:c1:83: 09:f3:10:57:f1:e8:00:d5:8a:21:03:cb:59:ba:81:97:5f:a2: 33:89:31:2c:7b:dc:6f:4f:1a:47:1c:09:8c:53:f1:f5:02:be: ad:eb:d1:ad:e2:61:26:da:39:05:40:d9:c0:7b:99:3a:4c:e8: 13:98:93:4a:69:7f:dd:4a:4f:01:73:6b:b4:1e:63:39:1f:d3: 39:b0:3f:3c:56:50:e3:f7:a8:cd:23:46:5d:cc:69:1e:b2:e7: 11:83:f5:7e:cf:64:46:26:d6:f5:b6:30:1a:c1:66:a6:f0:1f: c6:2b:f8:15:39:23:ed:73:4a:bf:a7:1d:43:ca:93:ba:e5:ca: 6c:aa:13:6f:3b:b6:66:15:84:df:86:b4:f7:9e:d7:2e:3f:99: fd:b1:3a:bf:18:05:a6:9d:0f:be:7a:9b:c9:63:ca:cd:33:d1: a9:a8:da:fc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUF3VdKp0DyfMEVlTfNn3q6Jl6seMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgxMDA3WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzQ4N2M4MWE4NTlkZjg3NmJmOGRjNGU2NjkxMjNlMTM3 Yzg4MTI5NjBjOTE4MTc5NGE3M2M2MzYxMjIwNGY4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0jVV1a79b/3Q6472w9Ff+UpQn2yM1zxybTx28xjsLOKYP FIUDk7J+Auaaosq49Nh0rapxRWalGNJRM7x74xkXcI9qm2/hsMGpRK446ZL4+b2v HGoOcgbaYZkij92sodSmtKHHsddTe3XkZPAM6OBBPPFWfB6ftMH3uPBENukK9zRY 3+ASV3i4WIJG+ukqIPKZVMLdEzH7HSHRF79bPOpmYnAFjwuMC9bdDtGKyQRcQcmZ jpgivcreQx4ceG5+rVLzKO/VofRajKjerHXhe5ZCQTMZZM5SL6S2uezRsq7DsVlV DoCqc9piK95aB6mAABVFN1GTdrsEHXmfBtnXOdlNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUrJn1j/y6ly+UUCPq09KQAPcxrwIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIyMzgyNzUwLTQzMWQtNGFiOS1hYTA4LWUwZjk3M2UwNjdmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAPAMADANBgkqhkiG9w0BAQsFAAOCAQEAJhnw0ZkvkGb5CQROfull1Vca 208fOYgNAHlCdB7Jja773Z47tr+kI26nUvGmkgXLbA0bmyrmuRl5iiC67bPSrWeC JFAGA1D5OH4aUHID1YiVztsGffVrmcGDCfMQV/HoANWKIQPLWbqBl1+iM4kxLHvc b08aRxwJjFPx9QK+revRreJhJto5BUDZwHuZOkzoE5iTSml/3UpPAXNrtB5jOR/T ObA/PFZQ4/eozSNGXcxpHrLnEYP1fs9kRibW9bYwGsFmpvAfxiv4FTkj7XNKv6cd Q8qTuuXKbKoTbzu2ZhWE34a0957XLj+Z/bE6vxgFpp0PvnqbyWPKzTPRqaja/A== -----END CERTIFICATE-----Generated at Sun May 11 12:45:38 2025 by rpki-client