$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa File: 1311a895-43fc-49eb-996b-222d911710a4.roa (raw, json) Hash identifier: Ah0j6NlOxCFaXL+Zwz7q4XrmtzTzgO+hlrsCJabWshM= Subject key identifier: D2:9C:8A:35:D7:92:21:48:EB:1A:D2:C3:71:F1:56:5A:13:35:FF:34 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 33671F826D5DBE686D935E4B27A7114E53B69F06 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa Signing time: Fri 11 Apr 2025 00:30:09 +0000 ROA not before: Fri 11 Apr 2025 00:30:09 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:67:1f:82:6d:5d:be:68:6d:93:5e:4b:27:a7:11:4e:53:b6:9f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:30:09 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=b917d3c09018fb022a14e5245512609b7b3bfa82d3124325a0634b1056d3d269, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:f8:ad:82:da:c3:55:2f:a9:63:6a:22:83: 46:3a:1b:ff:f7:f6:4e:35:d2:e7:c4:7f:b8:ab:0d: e5:4c:78:8a:b1:ac:d8:36:ce:9c:06:0a:7a:71:0a: 4a:ed:d7:78:10:db:00:64:53:27:20:84:b3:5b:ea: 82:cc:c2:2b:a7:3e:56:75:04:78:17:12:fe:e2:58: 2c:0a:69:e5:1c:af:87:16:78:da:58:c2:39:ec:8c: 61:15:94:58:54:2a:8a:76:7f:e6:ae:76:83:2b:37: 51:fe:bc:86:01:25:dd:85:90:b8:fc:d7:26:cf:3e: bb:ec:38:4e:a9:08:97:2f:80:2a:ca:35:46:68:8a: 71:6c:b2:2b:76:f1:cd:27:c7:d6:f3:00:04:9b:93: 07:52:15:90:05:2d:96:f7:03:70:95:ea:b4:64:f0: 89:89:90:aa:e7:e9:d7:3f:70:12:72:28:a9:45:13: 75:35:be:32:b8:61:5a:3a:95:d9:13:7c:8d:74:b0: 65:3a:b8:3d:93:fb:a2:61:88:b6:23:e4:0f:f4:e3: 92:4f:6b:43:a7:af:a7:82:6f:71:8a:f1:90:8c:c5: 33:88:01:f7:11:9b:7a:90:c7:66:43:d2:c0:0f:b5: 06:a0:22:86:71:f5:f7:20:46:c0:16:5a:81:b5:3c: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9C:8A:35:D7:92:21:48:EB:1A:D2:C3:71:F1:56:5A:13:35:FF:34 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c00::/48 Signature Algorithm: sha256WithRSAEncryption aa:03:e9:be:df:db:50:48:c1:fb:c4:57:57:73:f8:69:9d:4d: 35:92:cc:6d:5d:c8:17:27:6a:8b:43:4b:54:8e:a6:60:95:9d: 8a:c5:b8:a7:b8:04:ad:1d:84:38:62:20:cf:32:db:98:2f:6a: 65:b9:99:94:58:64:15:70:84:01:e3:73:cf:be:1c:58:00:3e: a5:98:64:de:58:76:9a:e9:7a:c4:0c:aa:ca:61:04:9c:f7:e9: 7e:77:e9:d1:e4:e8:1a:09:2a:80:7e:00:49:ef:69:da:0f:80: 7e:fe:14:5f:ad:18:a5:53:9b:c7:cd:b0:63:57:14:02:c5:80: 58:2c:ad:49:07:c9:2f:8f:6e:0d:78:a9:23:70:41:f1:82:34: 36:89:74:d4:ff:12:0b:b9:9e:0a:64:1f:0a:01:48:5b:d8:56: 25:69:bc:17:27:7a:73:f3:ed:1f:7d:a0:39:41:cb:62:48:bd: e2:e6:55:65:aa:83:44:a6:e9:36:5b:d8:ed:31:3b:5a:8f:43: 83:7b:aa:71:8d:b0:29:85:62:a4:60:2c:9e:11:44:d8:e0:88: af:24:d7:8f:50:12:76:51:13:b1:48:c7:d6:f5:30:cb:92:cc: 3c:33:45:c6:ce:c2:44:87:f2:88:06:59:fa:cf:cb:e0:cb:81: e5:7b:93:e9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM2cfgm1dvmhtk15LJ6cRTlO2nwYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMDA5WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTE3ZDNjMDkwMThmYjAyMmExNGU1MjQ1NTEyNjA5Yjdi M2JmYTgyZDMxMjQzMjVhMDYzNGIxMDU2ZDNkMjY5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjRfitgtrDVS+pY2oig0Y6G//39k410ufEf7irDeVMeIqx rNg2zpwGCnpxCkrt13gQ2wBkUycghLNb6oLMwiunPlZ1BHgXEv7iWCwKaeUcr4cW eNpYwjnsjGEVlFhUKop2f+audoMrN1H+vIYBJd2FkLj81ybPPrvsOE6pCJcvgCrK NUZoinFssit28c0nx9bzAASbkwdSFZAFLZb3A3CV6rRk8ImJkKrn6dc/cBJyKKlF E3U1vjK4YVo6ldkTfI10sGU6uD2T+6JhiLYj5A/045JPa0Onr6eCb3GK8ZCMxTOI AfcRm3qQx2ZD0sAPtQagIoZx9fcgRsAWWoG1PCkZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0pyKNdeSIUjrGtLDcfFWWhM1/zQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzEzMTFhODk1LTQzZmMtNDllYi05OTZiLTIyMmQ5MTE3MTBhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAAwDQYJKoZIhvcNAQELBQADggEBAKoD6b7f21BIwfvEV1dz+Gmd TTWSzG1dyBcnaotDS1SOpmCVnYrFuKe4BK0dhDhiIM8y25gvamW5mZRYZBVwhAHj c8++HFgAPqWYZN5YdprpesQMqsphBJz36X536dHk6BoJKoB+AEnvadoPgH7+FF+t GKVTm8fNsGNXFALFgFgsrUkHyS+Pbg14qSNwQfGCNDaJdNT/Egu5ngpkHwoBSFvY ViVpvBcnenPz7R99oDlBy2JIveLmVWWqg0Sm6TZb2O0xO1qPQ4N7qnGNsCmFYqRg LJ4RRNjgiK8k149QEnZRE7FIx9b1MMuSzDwzRcbOwkSH8ogGWfrPy+DLgeV7k+k= -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:42 2025 by rpki-client