$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa File: bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa (raw, json) Hash identifier: DOEjI91u80hrjxDAyahmCF2i/n1/ZMXKlN7Z6p7+Hmo= Subject key identifier: AA:1B:AC:39:4C:B7:18:49:C2:2C:72:6D:62:E8:EA:20:DB:F8:7E:EF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 64DB4C47E6ED157FA1DEB47483ED4A6494C36B64 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa Signing time: Tue 29 Apr 2025 00:30:20 +0000 ROA not before: Tue 29 Apr 2025 00:30:20 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f2:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:db:4c:47:e6:ed:15:7f:a1:de:b4:74:83:ed:4a:64:94:c3:6b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 29 00:30:20 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=bbc16d960600bd3aa8c44ab25a6d263ac3ddda3337a388f091ac0985dba4e9c8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:4e:7f:2f:fd:58:b9:0d:07:29:eb:dc:6c: 61:55:9f:06:f9:1e:ac:ac:da:6d:8e:48:17:76:30: 2d:02:77:6f:5c:63:70:3e:7e:7d:70:7a:d3:92:e6: c7:0f:e7:e5:ed:f9:b6:62:5f:32:dc:bc:4a:c7:16: 98:62:b4:09:f4:b5:68:8c:27:64:4a:18:35:58:94: 25:e2:51:0b:a5:55:e9:6e:10:5f:e8:51:b1:47:b8: 18:13:3f:e1:67:c6:85:96:d7:d1:f7:04:38:c9:88: f0:5b:c4:8a:14:0c:8f:d2:dd:47:8c:00:03:d6:c5: b4:3d:52:32:f7:09:cb:bb:2e:29:2d:07:1b:9a:79: ba:e0:62:24:3b:7b:66:07:57:27:26:bb:21:39:f3: d3:71:dd:08:3c:eb:3d:5c:36:17:9b:c2:bd:4f:a3: f8:8d:c3:0e:04:aa:44:36:7f:e5:f7:d4:da:3c:4f: db:d1:2c:70:16:8c:e3:05:e8:1f:89:cf:19:02:a1: 19:c9:06:a8:d9:a5:6f:be:4b:42:cb:73:47:7c:02: f0:94:b3:3a:8e:a5:91:c6:a8:95:56:f5:8a:d5:d2: 94:88:9e:95:9e:54:ed:db:bd:9f:cc:97:ba:ac:af: 5e:e5:ab:fa:b4:95:de:82:66:e7:ef:44:54:1e:fc: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1B:AC:39:4C:B7:18:49:C2:2C:72:6D:62:E8:EA:20:DB:F8:7E:EF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7000::/44 Signature Algorithm: sha256WithRSAEncryption 1b:e1:c8:fd:ac:28:d3:b9:a8:9d:c8:d1:55:7b:f9:fd:bc:f3: 94:f1:a3:81:19:11:0c:c3:1b:20:13:43:47:bf:70:60:03:f1: 4f:16:d9:bc:63:37:17:b9:0b:35:41:7d:43:cd:ac:e0:7b:ee: a0:49:28:68:36:db:66:9e:83:4e:df:31:2a:cc:b5:72:09:42: 61:d0:b3:cf:b9:f3:b9:5a:f0:98:1c:95:d7:a5:b3:a5:ed:e8: eb:99:f6:16:84:ea:da:7c:66:42:d1:d1:c8:a7:82:34:d2:80: ee:c0:a8:c3:70:35:06:c4:c9:f8:ba:30:2a:50:94:ba:61:df: ed:9a:7a:1d:f0:a6:17:e4:d1:9e:72:40:85:27:86:78:b2:4c: c5:11:f9:35:8b:92:9f:e1:ce:0e:62:2d:6b:af:8e:43:18:e6: 4f:1f:bd:92:31:b1:6c:68:4b:73:d4:e8:5f:53:0b:7f:91:ad: eb:b5:ad:d2:97:0e:1d:79:20:a6:b7:b0:96:27:db:e7:5d:6b: 38:c1:35:ac:5b:95:4b:15:c4:cf:aa:04:39:3d:ec:4a:15:ef: 66:b9:84:5d:27:58:f9:b3:3f:d1:e9:1b:63:5d:a4:0b:9e:a7: ee:58:03:7b:ba:5c:97:7b:60:f7:d9:b0:d7:58:29:1b:ec:be: 92:36:ed:72 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZNtMR+btFX+h3rR0g+1KZJTDa2QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI5MDAzMDIwWhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmMxNmQ5NjA2MDBiZDNhYThjNDRhYjI1YTZkMjYzYWMz ZGRkYTMzMzdhMzg4ZjA5MWFjMDk4NWRiYTRlOWM4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6TU5/L/1YuQ0HKevcbGFVnwb5Hqys2m2OSBd2MC0Cd29c Y3A+fn1wetOS5scP5+Xt+bZiXzLcvErHFphitAn0tWiMJ2RKGDVYlCXiUQulVelu EF/oUbFHuBgTP+FnxoWW19H3BDjJiPBbxIoUDI/S3UeMAAPWxbQ9UjL3Ccu7Likt BxuaebrgYiQ7e2YHVycmuyE589Nx3Qg86z1cNhebwr1Po/iNww4EqkQ2f+X31No8 T9vRLHAWjOMF6B+JzxkCoRnJBqjZpW++S0LLc0d8AvCUszqOpZHGqJVW9YrV0pSI npWeVO3bvZ/Ml7qsr17lq/q0ld6CZufvRFQe/OBZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqhusOUy3GEnCLHJtYujqINv4fu8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JkN2QyYjE1LTcxOGYtNDNmYi1iOTFkLWMwYmM3Zjc1ZThkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDycAAwDQYJKoZIhvcNAQELBQADggEBABvhyP2sKNO5qJ3I0VV7+f28 85Txo4EZEQzDGyATQ0e/cGAD8U8W2bxjNxe5CzVBfUPNrOB77qBJKGg222aeg07f MSrMtXIJQmHQs8+587la8Jgcldels6Xt6OuZ9haE6tp8ZkLR0cingjTSgO7AqMNw NQbEyfi6MCpQlLph3+2aeh3wphfk0Z5yQIUnhniyTMUR+TWLkp/hzg5iLWuvjkMY 5k8fvZIxsWxoS3PU6F9TC3+Rreu1rdKXDh15IKa3sJYn2+ddazjBNaxblUsVxM+q BDk97EoV72a5hF0nWPmzP9HpG2NdpAuep+5YA3u6XJd7YPfZsNdYKRvsvpI27XI= -----END CERTIFICATE-----Generated at Wed May 7 09:46:53 2025 by rpki-client