$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa File: 91a27594-a038-483a-a558-a5377f4d266f.roa (raw, json) Hash identifier: VSn+wHM3ltR3gechRAUuG3AWF5V0oSU1O9dAh7HkuCM= Subject key identifier: E3:76:C2:20:B3:89:4C:F5:DE:CC:2A:6D:64:74:B3:90:3D:44:A0:92 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 0E922B0DBAF5A299397BC4F815293F399B1EE2CB Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa Signing time: Fri 11 Apr 2025 00:20:06 +0000 ROA not before: Fri 11 Apr 2025 00:20:06 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2606:f40:fffc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:92:2b:0d:ba:f5:a2:99:39:7b:c4:f8:15:29:3f:39:9b:1e:e2:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Apr 11 00:20:06 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=df337dd99ebe13469b671583973e444358251c8c8daacfebef5396712d734b4c, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:c7:8b:a6:b1:c7:22:8d:d4:ed:60:05:df: 8b:1e:b6:2e:a2:a4:94:18:7c:10:e6:22:f0:cd:3d: 33:a5:4c:5e:7c:20:38:08:73:83:49:24:51:68:b8: d9:04:c8:93:83:08:34:02:b6:9f:fa:ab:e5:f6:80: fa:a6:75:d9:e2:b5:7d:50:cc:01:5c:4d:dd:bb:01: ff:29:39:11:56:19:9d:6f:96:d1:68:9f:c5:97:56: 00:bc:29:15:45:bd:bd:06:c5:1d:35:27:36:fe:b6: f9:8e:a0:c1:98:84:95:5d:70:f1:ae:31:c1:8e:e8: af:44:d1:60:0e:99:15:33:9a:11:66:70:d3:57:52: 57:71:c9:12:b8:ec:56:93:1e:09:b6:0b:21:19:a4: 85:d2:6d:ef:b1:87:73:74:0d:74:e4:b9:ed:87:de: fe:d5:dd:2c:b0:2f:fa:c6:a5:5b:37:a3:f4:dd:72: 18:14:76:fb:07:84:bb:b3:5e:27:e4:64:4a:f8:bf: 78:a0:f0:d5:26:42:35:28:f0:88:2c:41:4e:35:fb: 46:68:24:bf:d4:e9:b8:37:35:1b:33:80:70:56:33: 93:f2:e9:88:3e:75:5e:e4:9b:09:8a:2c:b8:0d:a7: 06:55:fd:9b:94:15:0b:d9:4b:f3:04:05:a0:52:76: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:76:C2:20:B3:89:4C:F5:DE:CC:2A:6D:64:74:B3:90:3D:44:A0:92 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/91a27594-a038-483a-a558-a5377f4d266f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:f40:fffc::/48 Signature Algorithm: sha256WithRSAEncryption ab:e5:7b:6d:ed:8f:cf:52:58:7e:a4:c5:59:fa:2b:69:1f:68: a0:79:98:dd:43:b7:7a:fe:f3:eb:13:c0:26:69:f3:c6:d7:5f: fa:4d:35:ec:df:fc:8f:73:d8:d9:ba:e2:b1:35:b3:20:c0:17: 27:ae:4f:9a:d6:4d:13:6b:84:12:8d:85:d2:37:02:15:21:cd: d5:0e:bc:c3:54:45:dd:f4:d9:a4:78:69:80:dc:ec:6a:12:1c: de:d6:82:b2:30:be:86:fa:08:9b:3a:3b:9f:0e:cb:02:c0:a1: de:b5:ff:a9:3f:b4:bc:a0:a1:b9:7f:bc:ad:7a:9a:fc:4e:af: 48:71:06:ad:ff:ec:e9:4d:3a:c8:53:9f:0b:88:be:93:49:c6: 6f:61:41:8b:a9:1a:5b:6b:db:28:2e:26:37:eb:2e:cf:1f:0b: cd:1f:be:21:c0:40:4a:08:8b:5f:c6:08:e4:a3:54:db:5e:d9: 10:60:6f:60:0a:c9:c8:90:2b:73:48:2e:a9:3d:6e:72:1f:1f: 68:b7:e7:07:03:36:04:09:59:63:4e:4c:62:63:74:4c:26:fe: ed:ae:63:b1:6a:2b:3d:c5:71:ea:72:81:98:b6:b7:44:0f:23: 18:35:41:74:67:07:b0:d6:db:e9:46:ed:03:ff:2e:9a:58:9c: 5b:33:63:43 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDpIrDbr1opk5e8T4FSk/OZse4sswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjUwNDExMDAyMDA2WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjMzN2RkOTllYmUxMzQ2OWI2NzE1ODM5NzNlNDQ0MzU4 MjUxYzhjOGRhYWNmZWJlZjUzOTY3MTJkNzM0YjRjMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf2seLprHHIo3U7WAF34seti6ipJQYfBDmIvDNPTOlTF58 IDgIc4NJJFFouNkEyJODCDQCtp/6q+X2gPqmddnitX1QzAFcTd27Af8pORFWGZ1v ltFon8WXVgC8KRVFvb0GxR01Jzb+tvmOoMGYhJVdcPGuMcGO6K9E0WAOmRUzmhFm cNNXUldxyRK47FaTHgm2CyEZpIXSbe+xh3N0DXTkue2H3v7V3SywL/rGpVs3o/Td chgUdvsHhLuzXifkZEr4v3ig8NUmQjUo8IgsQU41+0ZoJL/U6bg3NRszgHBWM5Py 6Yg+dV7kmwmKLLgNpwZV/ZuUFQvZS/MEBaBSdmbzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU43bCILOJTPXezCptZHSzkD1EoJIwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzkxYTI3NTk0LWEwMzgtNDgzYS1hNTU4LWE1Mzc3ZjRkMjY2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBg9A//wwDQYJKoZIhvcNAQELBQADggEBAKvle23tj89SWH6kxVn6K2kf aKB5mN1Dt3r+8+sTwCZp88bXX/pNNezf/I9z2Nm64rE1syDAFyeuT5rWTRNrhBKN hdI3AhUhzdUOvMNURd302aR4aYDc7GoSHN7WgrIwvob6CJs6O58OywLAod61/6k/ tLygobl/vK16mvxOr0hxBq3/7OlNOshTnwuIvpNJxm9hQYupGltr2yguJjfrLs8f C80fviHAQEoIi1/GCOSjVNte2RBgb2AKyciQK3NILqk9bnIfH2i35wcDNgQJWWNO TGJjdEwm/u2uY7FqKz3FcepygZi2t0QPIxg1QXRnB7DW2+lG7QP/LppYnFszY0M= -----END CERTIFICATE-----Generated at Sat Apr 26 13:21:04 2025 by rpki-client