$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa File: 1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa (raw, json) Hash identifier: 0HLizjiKp37Kb2L9bY7SI6/l53TZKdPAox9yC+zjefk= Subject key identifier: CA:8C:DD:14:D0:C3:CC:BE:E5:88:7A:D0:30:A9:5B:44:F5:38:38:20 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1C836935A7FBC68B305C8F370195456C055B9119 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa Signing time: Fri 11 Apr 2025 00:20:13 +0000 ROA not before: Fri 11 Apr 2025 00:20:13 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:402::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:83:69:35:a7:fb:c6:8b:30:5c:8f:37:01:95:45:6c:05:5b:91:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:20:13 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=528a6535d3f6427ebfa45895b964c930f33eda0e3a5fe03e3aa45667b593539c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fe:72:b7:fa:b5:4a:7a:01:c1:ce:0a:44:2a: 6d:8b:fb:3b:59:ed:85:3f:4e:ad:d9:e5:56:a3:7a: 26:f7:17:c2:15:84:cd:f3:41:fa:ff:86:80:f6:35: 6e:e8:82:ad:97:c5:8f:0e:b1:6c:bb:e5:a6:56:35: 86:30:10:e4:90:ef:03:d6:35:aa:e1:1c:b9:30:ee: e9:70:ba:bc:50:03:2e:e6:77:ab:8a:4e:63:26:5d: 47:59:c1:a7:f4:0f:af:09:27:aa:8a:65:56:9a:e8: 25:f4:4e:74:63:b4:c2:39:8d:8b:48:d1:98:6a:5f: 3d:c8:89:0a:79:97:24:e1:71:a6:0d:07:b2:c4:1a: cc:eb:4c:fe:64:76:4a:0a:27:ad:80:93:f7:20:a0: ec:8c:64:21:d5:19:9c:24:8c:4f:75:ca:14:55:d4: 8d:99:0e:80:0b:71:07:51:56:90:2d:b4:09:03:82: a0:17:60:b8:88:fc:4b:e4:74:e9:4e:37:e4:6c:ef: 68:48:6a:ff:6a:61:57:1d:fc:68:f6:03:e7:4f:e7: 63:6d:ea:f1:64:1d:10:b5:85:98:d5:47:05:cc:12: 15:db:72:84:e2:29:f3:1c:03:00:ae:06:af:1b:ae: db:0b:47:7c:f9:db:d7:4c:04:f3:1c:e5:41:8b:b2: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8C:DD:14:D0:C3:CC:BE:E5:88:7A:D0:30:A9:5B:44:F5:38:38:20 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:402::/47 Signature Algorithm: sha256WithRSAEncryption 30:95:f2:e2:4f:01:c8:b2:bb:7b:32:aa:6e:ff:0f:a5:97:1f: ae:48:18:54:f4:5b:cf:9b:02:65:ec:53:9d:96:05:b1:7c:1e: c5:bc:03:2e:18:68:ba:bf:dd:c5:7a:f4:79:9f:c3:e8:86:0c: 9d:7b:6d:12:27:07:e9:43:b3:7e:ec:74:57:fd:d9:38:88:4f: a7:b9:14:23:3e:09:6e:67:98:5e:1b:7b:5f:af:2e:71:f6:d5: 13:75:76:a6:9d:37:31:ab:a2:95:d3:b4:38:4e:ce:c5:2f:d5: 8b:31:5c:34:02:79:3f:14:15:86:0d:da:fb:58:58:c1:f6:fd: 7a:47:95:37:bb:e6:69:24:43:6d:92:7f:69:e0:38:f8:32:0e: 4a:43:f0:04:a6:ae:24:0d:f4:ab:91:5a:54:c1:21:49:ab:38: 05:ab:28:d4:da:71:d1:17:e3:07:8b:c5:05:9b:fa:55:0d:14: 56:a0:8b:e2:65:78:33:ae:10:6d:70:ae:50:1f:a7:e7:41:14: 05:ce:fd:c6:91:e1:b9:18:4b:a7:60:61:9f:c1:e4:57:53:4c: 41:2c:01:37:69:61:2a:e6:d6:85:5f:c7:00:25:d4:77:d9:00: d4:9d:9a:3a:82:74:af:a1:3a:af:c3:73:2e:f1:4a:47:cb:ff: 67:68:b6:f6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHINpNaf7xoswXI83AZVFbAVbkRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAyMDEzWhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjhhNjUzNWQzZjY0MjdlYmZhNDU4OTViOTY0YzkzMGYz M2VkYTBlM2E1ZmUwM2UzYWE0NTY2N2I1OTM1MzljMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj/nK3+rVKegHBzgpEKm2L+ztZ7YU/Tq3Z5Vajeib3F8IV hM3zQfr/hoD2NW7ogq2XxY8OsWy75aZWNYYwEOSQ7wPWNarhHLkw7ulwurxQAy7m d6uKTmMmXUdZwaf0D68JJ6qKZVaa6CX0TnRjtMI5jYtI0ZhqXz3IiQp5lyThcaYN B7LEGszrTP5kdkoKJ62Ak/cgoOyMZCHVGZwkjE91yhRV1I2ZDoALcQdRVpAttAkD gqAXYLiI/EvkdOlON+Rs72hIav9qYVcd/Gj2A+dP52Nt6vFkHRC1hZjVRwXMEhXb coTiKfMcAwCuBq8brtsLR3z529dMBPMc5UGLstERAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyozdFNDDzL7liHrQMKlbRPU4OCAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE0NzFjZDdkLWY0ZGMtNGY5ZS05MDk3LTE4OGRmZGViY2M3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmBZzABAIwDQYJKoZIhvcNAQELBQADggEBADCV8uJPAciyu3syqm7/D6WX H65IGFT0W8+bAmXsU52WBbF8HsW8Ay4YaLq/3cV69Hmfw+iGDJ17bRInB+lDs37s dFf92TiIT6e5FCM+CW5nmF4be1+vLnH21RN1dqadNzGropXTtDhOzsUv1YsxXDQC eT8UFYYN2vtYWMH2/XpHlTe75mkkQ22Sf2ngOPgyDkpD8ASmriQN9KuRWlTBIUmr OAWrKNTacdEX4weLxQWb+lUNFFagi+JleDOuEG1wrlAfp+dBFAXO/caR4bkYS6dg YZ/B5FdTTEEsATdpYSrm1oVfxwAl1HfZANSdmjqCdK+hOq/Dcy7xSkfL/2dotvY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:41 2025 by rpki-client