$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa File: f8738a51-4689-46b8-a472-d4d0afaca2d7.roa (raw, json) Hash identifier: BWnbUSM/QPAJCOj9Jlal7rahtO+zrfk67I+zluw54Wg= Subject key identifier: 6D:15:AA:17:2A:85:BB:ED:51:F1:39:93:DF:DD:2C:BD:14:2B:EC:DB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 73777E96BA3EA6C9475EE979325B40008B2336E8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa Signing time: Tue 06 May 2025 00:40:01 +0000 ROA not before: Tue 06 May 2025 00:40:01 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:77:7e:96:ba:3e:a6:c9:47:5e:e9:79:32:5b:40:00:8b:23:36:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 6 00:40:01 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=4a590872982ef631d3fe9a5b51aa723b901a4d6dd7521a1d24de2127666bfd00, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:49:31:33:9c:96:3b:54:36:85:b8:f5:42: 92:5a:9e:1e:7d:ff:cd:fa:af:c4:15:e3:58:8f:d1: 5b:0e:71:96:86:15:94:a3:a8:0c:b0:c6:c1:20:83: 8c:6d:65:e0:42:fe:56:76:76:56:3c:d5:91:5c:8f: 4b:eb:e1:af:25:42:e6:74:fa:91:5b:8e:12:b8:c2: 03:f9:ed:a1:52:05:c3:f4:fc:55:ed:47:70:6b:e5: 29:ea:ba:32:c5:2b:08:73:ff:43:29:ef:3f:b1:0c: cb:a1:79:06:2b:03:67:a1:ef:d8:2c:49:8c:1b:22: 8c:9b:90:5e:2b:bd:b2:65:08:cf:c8:22:e1:6b:fa: 10:53:2a:41:05:49:d3:e7:d6:95:b7:9d:80:62:df: 4e:ba:74:3e:b3:61:89:63:8f:7e:21:91:0d:cd:31: 62:37:84:2a:86:11:8f:19:42:da:58:f9:e0:f7:c5: ac:42:29:80:ac:85:b6:39:dc:1c:c6:59:36:08:62: 6e:ce:86:bf:3b:5d:55:43:76:fd:40:17:d6:5c:8b: 8b:c9:3f:dc:43:2b:14:74:9b:b9:2c:52:6e:56:be: 6f:4e:b5:14:f9:8d:02:41:7c:a3:35:50:b4:ea:ad: 7b:ac:b8:9e:75:67:65:bb:7b:bb:f3:e6:d5:16:dd: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:15:AA:17:2A:85:BB:ED:51:F1:39:93:DF:DD:2C:BD:14:2B:EC:DB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4::/48 Signature Algorithm: sha256WithRSAEncryption 78:0f:81:63:9e:02:fe:80:71:de:2d:ac:6c:22:cd:0e:e6:98: ca:17:2e:db:f9:07:fa:18:20:e7:93:c7:77:5c:18:29:35:fd: 85:0a:4c:99:c1:1e:81:aa:9b:80:3b:85:8d:95:ed:b2:4d:5c: 07:86:c2:39:4c:49:74:c9:51:38:70:9f:5f:55:98:61:e8:70: 6c:1d:3f:97:ed:eb:ae:d7:ba:14:de:8a:cc:d6:61:e2:b9:be: ef:78:5b:8c:c5:e3:c2:19:c9:1a:25:2c:91:43:a4:99:1a:56: 00:9f:b5:c7:86:a9:22:f6:94:be:b7:e4:39:a5:a6:a5:43:96: ac:7d:f3:ea:f0:c0:68:6d:08:a7:6d:ba:6d:5c:a9:d2:11:e5: 21:a8:7c:54:41:c3:66:a7:07:ab:96:c3:ad:72:e4:bc:6f:53: d1:19:d7:0b:2e:69:db:40:ac:55:f1:68:cf:88:01:ff:37:8b: 58:e2:f7:c6:94:93:93:69:fd:1b:34:b4:19:d1:ad:3d:34:b7: e1:1a:4e:c2:ae:97:bd:f0:29:ca:93:03:4b:5f:39:5e:af:c0: ad:81:d9:a4:f8:4e:b2:22:52:9c:e8:e2:66:9c:bb:2a:35:63: 2d:98:56:93:81:5f:f8:94:4d:13:a0:5a:ac:15:65:7d:83:4b: a4:d0:1e:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUc3d+lro+pslHXul5MltAAIsjNugwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTA2MDA0MDAxWhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTU5MDg3Mjk4MmVmNjMxZDNmZTlhNWI1MWFhNzIzYjkw MWE0ZDZkZDc1MjFhMWQyNGRlMjEyNzY2NmJmZDAwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAkkkxM5yWO1Q2hbj1QpJanh59/836r8QV41iP0VsOcZaG FZSjqAywxsEgg4xtZeBC/lZ2dlY81ZFcj0vr4a8lQuZ0+pFbjhK4wgP57aFSBcP0 /FXtR3Br5SnqujLFKwhz/0Mp7z+xDMuheQYrA2eh79gsSYwbIoybkF4rvbJlCM/I IuFr+hBTKkEFSdPn1pW3nYBi3066dD6zYYljj34hkQ3NMWI3hCqGEY8ZQtpY+eD3 xaxCKYCshbY53BzGWTYIYm7Ohr87XVVDdv1AF9Zci4vJP9xDKxR0m7ksUm5Wvm9O tRT5jQJBfKM1ULTqrXusuJ51Z2W7e7vz5tUW3YKVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbRWqFyqFu+1R8TmT390svRQr7NswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4NzM4YTUxLTQ2ODktNDZiOC1hNDcyLWQ0ZDBhZmFjYTJkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAQwDQYJKoZIhvcNAQELBQADggEBAHgPgWOeAv6Acd4trGwizQ7m mMoXLtv5B/oYIOeTx3dcGCk1/YUKTJnBHoGqm4A7hY2V7bJNXAeGwjlMSXTJUThw n19VmGHocGwdP5ft667XuhTeiszWYeK5vu94W4zF48IZyRolLJFDpJkaVgCftceG qSL2lL635DmlpqVDlqx98+rwwGhtCKdtum1cqdIR5SGofFRBw2anB6uWw61y5Lxv U9EZ1wsuadtArFXxaM+IAf83i1ji98aUk5Np/Rs0tBnRrT00t+EaTsKul73wKcqT A0tfOV6vwK2B2aT4TrIiUpzo4macuyo1Yy2YVpOBX/iUTROgWqwVZX2DS6TQHlk= -----END CERTIFICATE-----Generated at Sat May 10 04:41:22 2025 by rpki-client