$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a24442-56c6-46d4-9923-f4d5b17fd850.roa File: f8a24442-56c6-46d4-9923-f4d5b17fd850.roa (raw, json) Hash identifier: LcLbFQ0kkd/c6Ci6u+/KJS46zuLK64cryKhIr5/t5ys= Subject key identifier: 08:35:98:48:89:66:26:EB:99:74:E3:DC:AE:8D:60:9C:EE:59:F3:F9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7514CE030A1AD8F575C66C36BAAB2667B01A5627 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a24442-56c6-46d4-9923-f4d5b17fd850.roa Signing time: Fri 25 Apr 2025 17:50:36 +0000 ROA not before: Fri 25 Apr 2025 17:50:36 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:14:ce:03:0a:1a:d8:f5:75:c6:6c:36:ba:ab:26:67:b0:1a:56:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 25 17:50:36 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=c58ac0ce87c5f2c0e81510dd8cbcc373c05e417d7b025239fae2f927cc206cc4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:78:de:ab:64:ef:0b:c4:8e:58:ff:2a:17: 46:51:10:eb:24:26:c9:6f:de:99:76:0b:f5:dd:d6: eb:0d:83:5e:da:28:c7:25:73:31:4d:6a:45:d2:00: c4:c6:d3:39:40:4c:66:98:92:0c:9b:da:b2:f2:7f: e6:ec:de:53:f1:a4:d8:20:11:bb:e4:c3:ed:af:80: fd:ca:27:5c:ca:01:71:1e:36:2d:eb:5f:ed:15:5d: b7:81:b2:ce:f0:b2:b6:40:84:55:7c:1d:9f:3f:f4: 4b:0f:49:79:83:4a:69:61:dc:0c:ef:f4:5e:db:8b: 6b:2f:31:0f:96:71:65:8a:75:f0:f8:59:56:4a:99: 36:53:21:2e:67:57:e3:20:91:6b:03:f9:73:aa:3c: 9b:b7:2d:77:b6:a9:52:e7:5e:c1:60:cc:dd:e0:51: 91:ef:d3:03:79:25:29:57:0f:45:fc:eb:a7:2e:95: df:a0:53:16:8f:c0:d9:37:29:83:fb:60:3a:13:69: 06:a1:6e:bc:8e:4d:61:56:6e:cb:d5:07:46:fa:90: d8:ab:d9:d2:e3:6a:dc:cd:34:64:b5:9e:fc:0b:8f: 79:41:91:a4:a6:31:e8:04:7a:43:f6:9a:6f:30:c4: b9:ee:e8:ba:a3:94:42:f3:c3:ff:ed:29:be:5e:73: c6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:35:98:48:89:66:26:EB:99:74:E3:DC:AE:8D:60:9C:EE:59:F3:F9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a24442-56c6-46d4-9923-f4d5b17fd850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6010::/44 Signature Algorithm: sha256WithRSAEncryption 0c:15:df:c6:29:de:ad:35:0f:75:35:9f:55:c3:74:26:68:1d: 51:15:c1:16:14:24:a8:99:3f:d2:45:e0:1a:55:3d:07:5b:1b: bb:08:20:6d:87:47:68:2d:0b:79:9b:ba:d2:0d:b8:db:2c:c9: a1:c0:66:77:dd:41:79:30:be:0e:48:b5:62:40:f4:7f:86:35: 89:69:3e:0e:71:94:0e:28:54:1b:56:a8:30:fe:d6:1f:ef:21: 5f:2c:30:64:29:5b:a4:94:99:90:bc:6b:ad:f0:12:00:e4:e8: 60:02:0c:de:ae:96:86:ff:9e:73:08:6f:0a:2a:61:76:b7:6c: 82:c6:fc:c2:31:16:eb:a3:3f:38:5b:0c:0b:9b:89:73:89:62: 81:3d:67:64:1e:90:2f:e8:d2:fa:79:44:da:8a:87:ac:63:36: d3:83:79:b5:e6:26:74:26:84:32:78:53:79:3e:04:d7:bc:c4: a4:28:74:6f:87:af:dc:7b:4a:77:23:34:84:1b:04:12:ac:6b: 29:4e:d7:7f:9f:d0:50:e6:50:30:48:3c:9b:06:6d:be:3d:0e: 97:cb:f6:f9:21:1d:a8:d0:0d:4a:26:3b:22:67:e1:f7:ed:e0: ba:1a:e4:0d:37:34:27:31:ad:ef:04:31:07:79:15:d4:d2:12: 9c:84:d7:ee -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdRTOAwoa2PV1xmw2uqsmZ7AaVicwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNDI1MTc1MDM2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNThhYzBjZTg3YzVmMmMwZTgxNTEwZGQ4Y2JjYzM3M2Mw NWU0MTdkN2IwMjUyMzlmYWUyZjkyN2NjMjA2Y2M0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtQnjeq2TvC8SOWP8qF0ZREOskJslv3pl2C/Xd1usNg17a KMclczFNakXSAMTG0zlATGaYkgyb2rLyf+bs3lPxpNggEbvkw+2vgP3KJ1zKAXEe Ni3rX+0VXbeBss7wsrZAhFV8HZ8/9EsPSXmDSmlh3Azv9F7bi2svMQ+WcWWKdfD4 WVZKmTZTIS5nV+MgkWsD+XOqPJu3LXe2qVLnXsFgzN3gUZHv0wN5JSlXD0X866cu ld+gUxaPwNk3KYP7YDoTaQahbryOTWFWbsvVB0b6kNir2dLjatzNNGS1nvwLj3lB kaSmMegEekP2mm8wxLnu6LqjlELzw//tKb5ec8arAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCDWYSIlmJuuZdOPcro1gnO5Z8/kwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4YTI0NDQyLTU2YzYtNDZkNC05OTIzLWY0ZDViMTdmZDg1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYBAwDQYJKoZIhvcNAQELBQADggEBAAwV38Yp3q01D3U1n1XDdCZo HVEVwRYUJKiZP9JF4BpVPQdbG7sIIG2HR2gtC3mbutINuNssyaHAZnfdQXkwvg5I tWJA9H+GNYlpPg5xlA4oVBtWqDD+1h/vIV8sMGQpW6SUmZC8a63wEgDk6GACDN6u lob/nnMIbwoqYXa3bILG/MIxFuujPzhbDAubiXOJYoE9Z2QekC/o0vp5RNqKh6xj NtODebXmJnQmhDJ4U3k+BNe8xKQodG+Hr9x7SncjNIQbBBKsaylO13+f0FDmUDBI PJsGbb49DpfL9vkhHajQDUomOyJn4fft4Loa5A03NCcxre8EMQd5FdTSEpyE1+4= -----END CERTIFICATE-----Generated at Mon May 12 10:23:37 2025 by rpki-client