$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa File: 4d9dc189-6c00-4764-9c0c-c990d1727298.roa (raw, json) Hash identifier: halH0B/+BcOsnhsllTriKw2cXGSf3UausuDXEEez804= Subject key identifier: 7D:80:0D:C3:22:07:55:8A:DF:23:01:A3:ED:8D:49:B0:BC:5F:8C:26 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 74884F2092A9317E037DF6A909B6704D2E3933D6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa Signing time: Fri 25 Apr 2025 17:51:12 +0000 ROA not before: Fri 25 Apr 2025 17:51:12 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:88:4f:20:92:a9:31:7e:03:7d:f6:a9:09:b6:70:4d:2e:39:33:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 17:51:12 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=362f2847a3a4ca9b383db7762da913523bcf4f1ccbc73afb7570d9e9155e709e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:85:ea:42:64:01:57:bb:98:ec:72:f0:1b: 41:77:cc:27:2a:8d:45:0f:bb:a1:be:8f:f4:31:22: ce:16:84:85:da:01:4c:37:3b:5e:3e:2c:5f:e1:d7: 1c:7e:ff:0e:6b:04:93:24:ba:1c:e2:cb:38:2d:54: 3b:24:55:a6:d6:a5:f4:43:e0:09:3b:0f:5c:d9:6c: ed:62:2b:9d:c7:6a:98:bb:47:48:fa:0b:75:ae:38: e5:c0:05:0a:49:9b:27:ce:d9:e2:3b:2a:79:9d:5e: a2:f4:73:33:fd:2e:a5:6f:37:e5:0e:29:3c:7a:dd: c3:33:be:de:c4:fe:6f:15:22:95:dd:2f:f5:e2:9e: 1d:d1:68:eb:08:c1:fc:77:22:fe:13:9e:8f:31:b9: a1:66:61:2b:9f:40:00:fe:3b:1a:9b:69:7d:b6:62: 62:17:8e:31:f0:da:ef:98:6a:b4:53:c5:93:cc:a4: 1c:d0:b1:fe:6b:bd:e9:d9:f9:8e:46:f9:12:83:b3: 03:d3:8f:08:df:ef:62:97:4d:72:9e:10:bc:e3:6c: 67:66:76:38:04:a8:c3:1c:96:53:ec:18:71:81:63: 60:f4:23:aa:60:5e:cb:04:85:81:17:7d:00:46:6b: 22:86:d9:31:e4:72:05:27:f6:10:8e:70:16:bb:24: 3c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:80:0D:C3:22:07:55:8A:DF:23:01:A3:ED:8D:49:B0:BC:5F:8C:26 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:600::/48 Signature Algorithm: sha256WithRSAEncryption 10:7a:63:e9:50:e8:4b:4d:23:8f:bc:e2:1d:05:76:07:ab:78: 0b:9d:5c:b7:12:82:e4:36:d3:ec:7d:05:6a:97:89:55:84:18: d6:23:1b:35:39:ea:01:b7:91:90:df:0a:4e:b0:61:f4:d0:8a: 56:39:aa:a1:4a:0d:a9:b1:fa:32:c1:82:7d:93:fa:5b:21:a3: 5d:42:74:74:a0:2a:0f:09:5f:1c:6a:18:04:95:65:e7:4c:bb: 6f:35:da:39:a6:2f:aa:ae:1a:ed:58:78:d3:8c:d0:26:c2:58: 20:38:b6:16:3d:bf:6b:61:2c:ad:ce:cd:b6:01:a5:63:66:4c: d7:fb:fb:0c:a9:2f:ab:10:9d:ee:a6:11:89:be:c5:78:e3:52: dc:68:42:90:b1:34:6e:8c:64:ec:0a:55:47:1f:72:a4:39:7d: 05:95:93:73:16:f4:1b:e8:f1:e3:e3:e9:8f:48:16:c1:65:af: cd:8b:a3:18:55:1f:87:01:3b:db:75:f7:ac:5c:25:8e:53:00: 1a:8b:71:c5:53:69:6f:79:1c:29:5c:ca:ce:0d:f9:23:87:48: 14:3d:73:00:97:bd:41:89:45:0c:1b:2b:ea:06:79:48:1d:9b: 42:8d:c9:a1:7f:45:69:64:96:d8:cf:be:10:68:92:15:60:cb: 28:12:5b:5b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdIhPIJKpMX4DffapCbZwTS45M9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTc1MTEyWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjJmMjg0N2EzYTRjYTliMzgzZGI3NzYyZGE5MTM1MjNi Y2Y0ZjFjY2JjNzNhZmI3NTcwZDllOTE1NWU3MDllMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu0oXqQmQBV7uY7HLwG0F3zCcqjUUPu6G+j/QxIs4WhIXa AUw3O14+LF/h1xx+/w5rBJMkuhziyzgtVDskVabWpfRD4Ak7D1zZbO1iK53Hapi7 R0j6C3WuOOXABQpJmyfO2eI7KnmdXqL0czP9LqVvN+UOKTx63cMzvt7E/m8VIpXd L/Xinh3RaOsIwfx3Iv4Tno8xuaFmYSufQAD+OxqbaX22YmIXjjHw2u+YarRTxZPM pBzQsf5rvenZ+Y5G+RKDswPTjwjf72KXTXKeELzjbGdmdjgEqMMcllPsGHGBY2D0 I6pgXssEhYEXfQBGayKG2THkcgUn9hCOcBa7JDzRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfYANwyIHVYrfIwGj7Y1JsLxfjCYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRkOWRjMTg5LTZjMDAtNDc2NC05YzBjLWM5OTBkMTcyNzI5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgAwDQYJKoZIhvcNAQELBQADggEBABB6Y+lQ6EtNI4+84h0Fdger eAudXLcSguQ20+x9BWqXiVWEGNYjGzU56gG3kZDfCk6wYfTQilY5qqFKDamx+jLB gn2T+lsho11CdHSgKg8JXxxqGASVZedMu2812jmmL6quGu1YeNOM0CbCWCA4thY9 v2thLK3OzbYBpWNmTNf7+wypL6sQne6mEYm+xXjjUtxoQpCxNG6MZOwKVUcfcqQ5 fQWVk3MW9Bvo8ePj6Y9IFsFlr82LoxhVH4cBO9t196xcJY5TABqLccVTaW95HClc ys4N+SOHSBQ9cwCXvUGJRQwbK+oGeUgdm0KNyaF/RWlkltjPvhBokhVgyygSW1s= -----END CERTIFICATE-----Generated at Mon May 5 07:53:44 2025 by rpki-client