$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa File: 6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa (raw, json) Hash identifier: dekUkFtaNX2x0Xk4NOES0I5oly9sm3AekrqTBFs4kqQ= Subject key identifier: 7F:F4:19:CA:A6:71:CE:7F:D7:F7:11:98:AA:A5:1E:9E:17:4E:12:FC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1D08867AAC8E3F25FF8D39D1344B0CAC83CBB0F0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa Signing time: Thu 01 May 2025 21:37:01 +0000 ROA not before: Thu 01 May 2025 21:37:01 +0000 ROA not after: Thu 05 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:08:86:7a:ac:8e:3f:25:ff:8d:39:d1:34:4b:0c:ac:83:cb:b0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 1 21:37:01 2025 GMT Not After : Jun 5 23:59:59 2025 GMT Subject: serialNumber=03af2f2969a658929478b4c6f2f75db54302b8847946bf693c41c926c0b6be7a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:3b:f8:a2:6e:57:e3:80:6d:91:16:99:57: 06:8e:46:ef:50:9b:ea:72:eb:6e:cb:a8:c0:12:ca: 57:3b:62:46:29:06:e4:b5:6a:f3:4f:48:d6:14:e1: e9:e4:da:25:2c:7f:c1:18:9e:e0:06:95:83:86:a6: 50:5c:cc:4f:cf:5f:16:1c:b1:c1:40:ae:57:9b:27: e5:c0:94:b6:7e:df:43:76:d3:82:bf:47:cc:2f:cb: 73:9c:9a:d5:35:56:1e:8b:03:c4:80:48:d1:e0:ec: 07:76:61:42:68:36:d1:24:15:45:73:f4:da:99:b8: 31:27:7f:91:81:13:64:12:fc:c1:0f:0f:63:bf:fd: fa:43:4c:6a:3d:ae:97:f4:4a:e9:8f:73:5c:a3:67: a8:0c:e2:e8:92:d5:b2:31:ff:58:ad:a4:18:cf:3f: b4:25:8e:a5:cf:22:5b:8c:87:6f:d7:49:da:b6:af: 21:4a:0b:43:61:00:3e:51:7e:03:9c:6a:31:a8:26: 23:dc:d2:4f:95:8c:5a:1c:84:f4:05:e6:6d:b4:cc: aa:54:71:52:b8:1d:95:bb:b2:e1:12:85:c5:b2:9a: 37:b9:8e:4a:e4:a8:c4:7e:6c:70:d1:a6:5f:75:d3: 5b:fb:59:c3:bd:48:22:66:9a:38:9a:9a:d4:5c:8e: f2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F4:19:CA:A6:71:CE:7F:D7:F7:11:98:AA:A5:1E:9E:17:4E:12:FC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1100::/40 Signature Algorithm: sha256WithRSAEncryption 48:58:e9:b3:ae:04:c7:d4:a5:bf:28:f4:ff:d9:67:85:84:d1: ad:3c:d9:01:7f:a1:e7:5d:04:54:6d:63:20:b2:0c:25:b3:d0: 6e:1d:50:e6:5c:bf:69:8d:b9:5d:27:32:f8:ab:cb:84:1e:6c: 18:b0:4a:fe:00:7b:1b:23:3f:2a:31:29:96:89:10:5e:36:f5: 34:42:ef:d4:78:51:c6:5a:bc:6f:a2:20:99:b8:d9:15:d2:e7: 7a:c8:1b:89:bd:7c:b4:96:7d:2c:14:21:62:15:7a:11:6a:b6: c3:0b:d9:2f:e4:76:01:b2:11:df:11:42:7a:d8:2d:d2:df:26: 75:8b:cd:3a:e3:3a:68:1f:2d:34:c1:23:b7:74:35:5d:01:ef: 11:c5:71:9e:92:f1:c0:f1:1b:59:2d:c3:16:28:06:c5:05:35: e1:f3:49:7c:72:f9:a5:a1:45:3e:40:da:96:a6:75:c2:af:08: 16:11:15:8f:da:f3:61:a7:1b:23:02:c1:bf:7e:6d:e7:ea:4b: 08:21:77:97:ee:ed:09:8a:9a:3d:51:40:f5:7f:34:3b:5b:90: aa:f8:51:ee:d9:97:a7:bd:ed:55:78:f0:16:8d:84:e3:f7:fe: 79:07:e7:ad:85:12:41:72:11:da:cf:b4:69:6d:2c:de:b6:2c: 35:41:39:c8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHQiGeqyOPyX/jTnRNEsMrIPLsPAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTAxMjEzNzAxWhcNMjUwNjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2FmMmYyOTY5YTY1ODkyOTQ3OGI0YzZmMmY3NWRiNTQz MDJiODg0Nzk0NmJmNjkzYzQxYzkyNmMwYjZiZTdhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Qzv4om5X44BtkRaZVwaORu9Qm+py627LqMASylc7YkYp BuS1avNPSNYU4enk2iUsf8EYnuAGlYOGplBczE/PXxYcscFArlebJ+XAlLZ+30N2 04K/R8wvy3OcmtU1Vh6LA8SASNHg7Ad2YUJoNtEkFUVz9NqZuDEnf5GBE2QS/MEP D2O//fpDTGo9rpf0SumPc1yjZ6gM4uiS1bIx/1itpBjPP7QljqXPIluMh2/XSdq2 ryFKC0NhAD5RfgOcajGoJiPc0k+VjFochPQF5m20zKpUcVK4HZW7suEShcWymje5 jkrkqMR+bHDRpl9101v7WcO9SCJmmjiamtRcjvKRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUf/QZyqZxzn/X9xGYqqUenhdOEvwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZlYWY5YWI1LWVjOGItNDJlYi1hZGU5LTc4MWJmMTIyMTJhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwETANBgkqhkiG9w0BAQsFAAOCAQEASFjps64Ex9Slvyj0/9lnhYTR rTzZAX+h510EVG1jILIMJbPQbh1Q5ly/aY25XScy+KvLhB5sGLBK/gB7GyM/KjEp lokQXjb1NELv1HhRxlq8b6IgmbjZFdLnesgbib18tJZ9LBQhYhV6EWq2wwvZL+R2 AbIR3xFCetgt0t8mdYvNOuM6aB8tNMEjt3Q1XQHvEcVxnpLxwPEbWS3DFigGxQU1 4fNJfHL5paFFPkDalqZ1wq8IFhEVj9rzYacbIwLBv35t5+pLCCF3l+7tCYqaPVFA 9X80O1uQqvhR7tmXp73tVXjwFo2E4/f+eQfnrYUSQXIR2s+0aW0s3rYsNUE5yA== -----END CERTIFICATE-----Generated at Fri May 9 02:31:11 2025 by rpki-client