$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa File: bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa (raw, json) Hash identifier: DDExMIoZfNeVekCHM3Y0ZETVQ1Cq1VfimCDqAuaN6Mc= Subject key identifier: AE:30:67:BA:16:A3:31:69:4A:72:DD:52:5B:36:05:21:15:2F:F5:B2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 733E15F5F79150C297DA0B10B0FBE015F6C22474 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa Signing time: Fri 25 Apr 2025 18:01:03 +0000 ROA not before: Fri 25 Apr 2025 18:01:03 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e400::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3e:15:f5:f7:91:50:c2:97:da:0b:10:b0:fb:e0:15:f6:c2:24:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 18:01:03 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=846a0a09a49ff7a0db8c95e023dc81c35a606b8c12f1ca41b4c58ab2bd0a2e21, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:80:10:97:42:ca:9f:a6:70:68:8b:a2:cb: 22:a5:d8:19:db:a8:f4:ea:a7:55:03:90:49:c0:d3: 9e:b9:5f:cf:58:14:e2:aa:53:b4:90:12:70:27:95: 25:48:6d:e0:bc:03:e5:5b:ed:d4:f7:21:78:f8:84: 91:27:32:76:aa:d4:91:57:eb:ef:29:52:91:f4:74: cb:c8:d9:27:3c:94:4a:7c:7d:b1:22:de:13:7a:5b: 1e:bf:c1:77:31:26:46:00:ae:53:41:fa:fd:00:70: 2f:60:f9:66:30:fc:83:71:2b:c7:99:af:91:7f:1d: 8e:bb:ef:ed:69:3a:2c:67:a9:1f:94:42:c0:f6:98: 95:f6:d8:ee:14:22:42:82:97:5b:0e:3c:74:e7:d4: 3b:94:24:9e:77:0d:48:f3:22:0c:e7:78:ec:49:1e: 31:6e:a8:e8:c5:54:74:ef:bc:dc:56:78:31:42:2d: fe:94:68:8c:5c:5a:ab:89:07:50:9d:b3:29:48:8a: ca:0a:fb:4e:4a:df:49:36:e4:ec:ad:93:61:c3:b1: 7d:f9:8f:9e:57:81:d7:81:46:3e:ee:36:c6:f7:f9: 33:31:08:6f:d6:e1:e9:19:41:06:82:21:65:61:51: eb:12:19:56:42:9d:12:75:c7:e4:47:4d:9b:c9:e4: 31:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:30:67:BA:16:A3:31:69:4A:72:DD:52:5B:36:05:21:15:2F:F5:B2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e400::/42 Signature Algorithm: sha256WithRSAEncryption 21:0b:9e:04:2c:37:0c:29:f7:e7:fe:4c:8b:11:7b:5a:1a:bc: 14:b3:04:b5:24:b6:e5:59:e1:24:8c:ff:3a:6b:e7:57:0c:da: 40:1b:f9:cd:ac:74:76:96:b0:de:d9:81:8a:a1:b2:05:f9:af: 2a:c3:d5:2f:3d:78:9e:e9:33:fa:67:59:90:26:bf:e7:7e:9a: e2:39:dc:a6:fe:6e:ae:99:72:3d:74:16:43:3a:08:79:e4:4b: d7:a9:c5:ed:3b:c4:37:f1:8c:09:b9:f0:e9:2f:7f:9a:4f:04: 2e:62:55:fe:87:f7:15:fa:87:47:73:e9:c1:1a:8d:13:90:52: ea:3b:2f:24:a3:1a:a5:26:f7:12:3e:93:95:a1:de:56:1b:31: 31:cf:d8:14:cb:91:b6:df:d9:37:71:5d:ef:36:ec:4a:c7:af: c9:8b:80:2a:84:df:47:00:4a:a8:b9:88:f1:8d:af:0f:08:96: 91:00:b8:19:87:df:e5:ec:36:55:53:f7:51:fe:df:bb:bb:51: 69:dd:d5:b4:62:41:ee:4f:48:c3:a5:4a:43:b5:d4:ef:7d:e3: 19:cf:40:de:28:50:cd:31:4c:43:c1:aa:4c:89:55:23:ba:68: 68:b9:74:5a:e6:2a:5a:df:06:1c:79:d9:b9:42:cd:09:64:23: 82:3f:d3:91 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcz4V9feRUMKX2gsQsPvgFfbCJHQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTgwMTAzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDZhMGEwOWE0OWZmN2EwZGI4Yzk1ZTAyM2RjODFjMzVh NjA2YjhjMTJmMWNhNDFiNGM1OGFiMmJkMGEyZTIxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu5YAQl0LKn6ZwaIuiyyKl2BnbqPTqp1UDkEnA0565X89Y FOKqU7SQEnAnlSVIbeC8A+Vb7dT3IXj4hJEnMnaq1JFX6+8pUpH0dMvI2Sc8lEp8 fbEi3hN6Wx6/wXcxJkYArlNB+v0AcC9g+WYw/INxK8eZr5F/HY677+1pOixnqR+U QsD2mJX22O4UIkKCl1sOPHTn1DuUJJ53DUjzIgzneOxJHjFuqOjFVHTvvNxWeDFC Lf6UaIxcWquJB1CdsylIisoK+05K30k25Oytk2HDsX35j55XgdeBRj7uNsb3+TMx CG/W4ekZQQaCIWVhUesSGVZCnRJ1x+RHTZvJ5DHjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrjBnuhajMWlKct1SWzYFIRUv9bIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmMjdmZGI3LTg0YmYtNDBkMi05MDZhLTdiNGMxZmY0MDViMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75AAwDQYJKoZIhvcNAQELBQADggEBACELngQsNwwp9+f+TIsRe1oa vBSzBLUktuVZ4SSM/zpr51cM2kAb+c2sdHaWsN7ZgYqhsgX5ryrD1S89eJ7pM/pn WZAmv+d+muI53Kb+bq6Zcj10FkM6CHnkS9epxe07xDfxjAm58Okvf5pPBC5iVf6H 9xX6h0dz6cEajROQUuo7LySjGqUm9xI+k5Wh3lYbMTHP2BTLkbbf2TdxXe827ErH r8mLgCqE30cASqi5iPGNrw8IlpEAuBmH3+XsNlVT91H+37u7UWnd1bRiQe5PSMOl SkO11O994xnPQN4oUM0xTEPBqkyJVSO6aGi5dFrmKlrfBhx52blCzQlkI4I/05E= -----END CERTIFICATE-----Generated at Sun May 11 10:23:29 2025 by rpki-client