$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa File: 5443f26e-949a-460a-b187-e26290bfcf24.roa (raw, json) Hash identifier: CXwUMA9hktBgqq4Alzowhb97jwmZB5HUI9MuIslhr0Y= Subject key identifier: AD:19:D6:0A:56:D7:AB:95:10:9D:5D:42:CC:5E:F1:69:A9:87:15:F0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 339E841357B953BF77974261BF383EE5BA73C97A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa Signing time: Tue 29 Apr 2025 00:30:21 +0000 ROA not before: Tue 29 Apr 2025 00:30:21 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:9e:84:13:57:b9:53:bf:77:97:42:61:bf:38:3e:e5:ba:73:c9:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 29 00:30:21 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=a281ce979e54c899141077ddd1c127f95b28d61e823f67ef9770f8e905d13759, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:ab:e6:74:a0:8e:fe:c1:fb:28:91:19:b2: 5a:77:51:80:aa:f0:07:8d:9f:32:58:a5:65:4b:04: 2d:16:9d:b3:8f:dd:a9:48:d4:74:4a:e1:8c:13:ba: d2:5c:51:68:13:b3:da:f5:0a:8a:b1:bb:41:0c:e0: 64:db:63:c4:84:43:f6:3f:82:92:c5:2f:e2:0e:a4: a6:8c:47:1b:d4:05:ef:16:4e:46:ab:22:1d:67:e9: 54:9d:3d:a4:3f:cd:1b:29:5e:7b:73:47:eb:2b:14: 82:1d:fb:6a:0c:86:13:31:19:a8:a7:c0:85:66:d0: 55:39:c9:f1:fc:88:ca:5a:89:da:c8:7e:d9:c6:36: 25:f7:2b:d5:ff:25:0c:64:1b:cb:15:63:13:bd:20: 9e:12:ea:d1:f1:55:5f:04:b8:a8:83:61:51:01:74: 4d:6e:93:63:a7:38:95:53:19:0e:2b:c0:c5:1e:0e: 8c:e5:d4:42:19:06:1c:45:3f:0d:7e:54:b4:67:d5: 5d:a4:22:59:56:57:ea:95:04:74:19:35:6a:ec:17: 1c:ef:ef:a4:1b:48:03:ee:f3:33:57:38:fe:b1:14: 2f:20:18:f7:4c:e8:7e:be:26:2e:06:26:f9:88:b9: 8a:ae:59:77:69:cc:23:40:65:cd:f6:71:02:13:ef: 49:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:19:D6:0A:56:D7:AB:95:10:9D:5D:42:CC:5E:F1:69:A9:87:15:F0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4000::/44 Signature Algorithm: sha256WithRSAEncryption 43:6c:4c:b9:aa:49:d3:c2:fb:6e:3a:52:8a:b9:e6:1d:7d:6f: 50:6d:57:98:44:11:a7:b5:1a:b6:e1:9e:e3:0f:ab:c1:cb:10: 4a:8d:72:c8:e8:ae:3d:50:9b:c1:9b:68:a6:c9:81:63:18:8d: 15:60:e1:0e:fd:ff:a8:a1:66:95:bf:a0:a6:87:67:08:d6:4d: 71:82:4f:35:f9:0f:ec:54:5e:be:1b:f9:ce:33:60:d3:e6:70: 08:24:0a:44:b4:3c:3c:45:3a:ff:b1:2b:cf:6e:6c:91:b4:17: 31:fc:57:33:69:72:39:12:0b:3f:49:9a:c6:1e:3f:43:dd:14: 6c:d8:69:e9:68:fa:f9:fb:65:bd:eb:b3:c9:8a:0c:34:5f:0a: 3b:1d:d2:c2:07:b6:c4:b2:de:40:5c:f8:82:58:5f:2a:a2:63: a2:80:47:86:00:bb:96:36:05:71:05:72:51:a1:2e:df:35:b2: 0d:9d:dc:00:b7:10:8c:8b:00:f1:22:49:d6:41:55:97:d3:f9: 33:c5:77:2a:04:38:b0:cc:97:50:9f:76:09:65:02:4c:69:f2: 13:88:96:ea:d6:a5:d6:01:73:e2:c6:9e:0b:cc:c1:94:8c:2e: 3c:60:24:a2:0c:e8:7e:c7:23:a3:ba:06:ac:36:ec:60:e9:ff: f3:6e:be:8e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM56EE1e5U793l0Jhvzg+5bpzyXowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI5MDAzMDIxWhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjgxY2U5NzllNTRjODk5MTQxMDc3ZGRkMWMxMjdmOTVi MjhkNjFlODIzZjY3ZWY5NzcwZjhlOTA1ZDEzNzU5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5FKvmdKCO/sH7KJEZslp3UYCq8AeNnzJYpWVLBC0WnbOP 3alI1HRK4YwTutJcUWgTs9r1Coqxu0EM4GTbY8SEQ/Y/gpLFL+IOpKaMRxvUBe8W TkarIh1n6VSdPaQ/zRspXntzR+srFIId+2oMhhMxGainwIVm0FU5yfH8iMpaidrI ftnGNiX3K9X/JQxkG8sVYxO9IJ4S6tHxVV8EuKiDYVEBdE1uk2OnOJVTGQ4rwMUe Dozl1EIZBhxFPw1+VLRn1V2kIllWV+qVBHQZNWrsFxzv76QbSAPu8zNXOP6xFC8g GPdM6H6+Ji4GJvmIuYquWXdpzCNAZc32cQIT70khAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrRnWClbXq5UQnV1CzF7xaamHFfAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU0NDNmMjZlLTk0OWEtNDYwYS1iMTg3LWUyNjI5MGJmY2YyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwQAAwDQYJKoZIhvcNAQELBQADggEBAENsTLmqSdPC+246Uoq55h19 b1BtV5hEEae1GrbhnuMPq8HLEEqNcsjorj1Qm8GbaKbJgWMYjRVg4Q79/6ihZpW/ oKaHZwjWTXGCTzX5D+xUXr4b+c4zYNPmcAgkCkS0PDxFOv+xK89ubJG0FzH8VzNp cjkSCz9JmsYeP0PdFGzYaelo+vn7Zb3rs8mKDDRfCjsd0sIHtsSy3kBc+IJYXyqi Y6KAR4YAu5Y2BXEFclGhLt81sg2d3AC3EIyLAPEiSdZBVZfT+TPFdyoEOLDMl1Cf dgllAkxp8hOIlurWpdYBc+LGngvMwZSMLjxgJKIM6H7HI6O6Bqw27GDp//Nuvo4= -----END CERTIFICATE-----Generated at Wed May 14 03:22:25 2025 by rpki-client