$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f4036dc-8480-4293-abd3-d3d98916d275.roa File: 1f4036dc-8480-4293-abd3-d3d98916d275.roa (raw, json) Hash identifier: rL3QJr9xFPOZ/pI4ZwM5CWtmn/Yfib5b3bllGjaKp0s= Subject key identifier: 9C:CC:94:D5:92:64:D2:DA:AE:6C:37:BD:19:8D:59:3F:1F:78:24:70 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7907973F288E24349FFCAAADF8AC8A5CAF5C7CEE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f4036dc-8480-4293-abd3-d3d98916d275.roa Signing time: Fri 25 Apr 2025 17:40:42 +0000 ROA not before: Fri 25 Apr 2025 17:40:42 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c48::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:07:97:3f:28:8e:24:34:9f:fc:aa:ad:f8:ac:8a:5c:af:5c:7c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 25 17:40:42 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=102deec8a18da126e7cf74742fb331a7160dbe15801f336aa4f867beab3cf5eb, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:3f:62:6c:fe:54:a7:06:50:42:61:4d:3e: d0:10:51:de:5e:4e:f0:4c:b9:21:41:43:27:7c:dc: 13:36:9d:69:88:b1:6c:41:52:0d:ef:5c:34:ba:f3: 0d:1c:79:21:b6:58:24:9b:db:16:f6:90:0c:04:bb: ba:76:44:e1:7d:48:f2:2a:fc:01:49:8b:9e:bd:5e: d8:41:2e:f0:64:2a:da:f7:71:4b:09:b5:e2:96:83: dc:9c:8a:4f:95:32:3c:05:53:6d:59:22:dc:3f:52: be:ad:73:68:13:b6:35:db:97:eb:f3:3b:4c:f3:f3: b0:81:e3:e5:3a:28:8b:2a:83:5a:54:59:76:a2:45: 66:ac:af:20:18:48:5f:ec:82:3b:ba:98:96:3b:57: 0a:1f:51:df:74:a8:9f:10:ef:c4:9a:be:6b:64:93: 8b:dd:27:61:dd:e1:88:5b:10:c1:46:b0:e1:76:37: 23:05:82:66:dc:98:b7:83:8d:13:83:0d:8b:55:ed: 1c:aa:a0:d0:21:a4:97:3e:f3:6d:b4:77:5d:96:56: 73:39:41:5d:ff:c9:13:6c:33:7f:f6:16:b9:df:29: f8:c1:28:c2:ad:a8:2f:80:21:3f:1f:cf:32:83:e4: bd:97:97:f6:bd:d6:ed:fe:3c:7e:56:0b:3d:8d:e7: 1f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CC:94:D5:92:64:D2:DA:AE:6C:37:BD:19:8D:59:3F:1F:78:24:70 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f4036dc-8480-4293-abd3-d3d98916d275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c48::/45 Signature Algorithm: sha256WithRSAEncryption 76:78:91:37:e2:9b:b0:88:35:b9:68:16:b0:ed:8d:8b:09:d8: 1e:78:c2:bb:fc:3c:78:c7:d1:b8:50:aa:0b:a5:ae:a4:97:c9: 19:c9:5b:e8:ff:06:f6:e2:2b:09:46:b9:6e:67:84:bc:89:51: ee:d4:3e:a8:be:48:20:81:07:1c:fc:25:a1:e4:8b:60:52:a5: fd:f1:41:d1:37:f2:26:7f:f5:ed:ed:61:c1:66:a5:51:f6:c2: ab:1b:08:a1:5f:90:05:ac:0f:fd:bd:96:e1:75:3c:dc:8f:b3: 18:8b:a2:42:84:ab:50:aa:29:f5:0b:43:f2:52:ca:9a:96:39: 4e:4e:88:62:f7:10:80:25:a9:df:8c:72:82:5b:b8:5e:04:f1: 40:0c:1d:3c:d8:7e:c1:6e:4c:c9:f7:29:30:cf:88:9f:a3:f6: fc:0f:8b:82:2d:d7:38:96:a3:bc:87:7e:db:b7:31:f8:ad:b4: 10:77:42:80:42:6c:a9:e4:f5:88:b1:c8:ea:05:7a:63:1d:3f: 95:5d:7b:a6:60:84:d8:fd:e6:b4:1d:73:38:b4:06:ae:f5:b8: f6:fb:7c:26:86:84:d3:b6:81:05:bf:ea:ba:39:00:6f:4c:dc: e2:eb:bc:03:e2:f3:9a:5d:81:76:89:6d:98:c8:73:03:e8:1e: e4:26:a0:ea -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeQeXPyiOJDSf/Kqt+KyKXK9cfO4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI1MTc0MDQyWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDJkZWVjOGExOGRhMTI2ZTdjZjc0NzQyZmIzMzFhNzE2 MGRiZTE1ODAxZjMzNmFhNGY4NjdiZWFiM2NmNWViMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxeT9ibP5UpwZQQmFNPtAQUd5eTvBMuSFBQyd83BM2nWmI sWxBUg3vXDS68w0ceSG2WCSb2xb2kAwEu7p2ROF9SPIq/AFJi569XthBLvBkKtr3 cUsJteKWg9ycik+VMjwFU21ZItw/Ur6tc2gTtjXbl+vzO0zz87CB4+U6KIsqg1pU WXaiRWasryAYSF/sgju6mJY7VwofUd90qJ8Q78Savmtkk4vdJ2Hd4YhbEMFGsOF2 NyMFgmbcmLeDjRODDYtV7RyqoNAhpJc+8220d12WVnM5QV3/yRNsM3/2FrnfKfjB KMKtqC+AIT8fzzKD5L2Xl/a91u3+PH5WCz2N5x99AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnMyU1ZJk0tqubDe9GY1ZPx94JHAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFmNDAzNmRjLTg0ODAtNDI5My1hYmQzLWQzZDk4OTE2ZDI3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmBZzADEgwDQYJKoZIhvcNAQELBQADggEBAHZ4kTfim7CINbloFrDtjYsJ 2B54wrv8PHjH0bhQqgulrqSXyRnJW+j/BvbiKwlGuW5nhLyJUe7UPqi+SCCBBxz8 JaHki2BSpf3xQdE38iZ/9e3tYcFmpVH2wqsbCKFfkAWsD/29luF1PNyPsxiLokKE q1CqKfULQ/JSypqWOU5OiGL3EIAlqd+McoJbuF4E8UAMHTzYfsFuTMn3KTDPiJ+j 9vwPi4It1ziWo7yHftu3MfittBB3QoBCbKnk9YixyOoFemMdP5Vde6ZghNj95rQd czi0Bq71uPb7fCaGhNO2gQW/6ro5AG9M3OLrvAPi85pdgXaJbZjIcwPoHuQmoOo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:36 2025 by rpki-client