$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2133524a-1945-45c3-b339-b135ee710d9f.roa File: 2133524a-1945-45c3-b339-b135ee710d9f.roa (raw, json) Hash identifier: BonHNojwSyupYcWvldS6Bow+SQyhX1CZV/BZPmBh9e0= Subject key identifier: 18:5B:C3:3E:E5:B4:39:CC:04:67:BB:26:BB:26:19:42:CB:1E:0E:F9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0C1E00DD724969258D24376C1E9BB087A0A030EF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2133524a-1945-45c3-b339-b135ee710d9f.roa Signing time: Sat 26 Apr 2025 00:51:33 +0000 ROA not before: Sat 26 Apr 2025 00:51:33 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:308::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1e:00:dd:72:49:69:25:8d:24:37:6c:1e:9b:b0:87:a0:a0:30:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:51:33 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=61eb48d382f4eead8e20ea1ae9e1c523adb9baee73a4ee332716eacc30034df7, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:23:0c:b9:38:5a:21:36:37:ff:13:c9:91:59: 51:09:66:4f:ed:42:b8:1a:0b:b4:cb:8e:39:ce:69: 80:da:f9:81:13:02:8c:0e:7e:9f:7f:3d:37:e3:74: bd:06:5f:78:b1:ef:df:37:30:6c:f5:99:1c:df:38: 16:94:79:46:7f:c6:02:4f:5d:6c:50:9c:f2:7d:7a: 8e:33:7b:e6:26:d5:a3:09:5f:c9:21:26:34:ed:d1: c5:5c:d6:5b:a8:a5:1c:60:9b:b1:56:f3:c4:f1:18: ba:35:e8:5d:7b:a7:08:76:e1:1c:03:98:1d:e3:4f: 26:bf:7f:85:44:fb:ae:7e:6a:8e:01:e5:17:26:c0: 8c:8b:6f:cc:93:89:2a:13:50:d0:5a:f7:c3:b4:2a: a6:20:9f:cc:bb:1c:d4:1b:60:ec:cc:d4:10:84:5a: e5:4a:88:36:40:55:0c:b0:c8:63:ae:7d:10:d6:37: eb:67:fc:85:5c:44:61:d6:16:1c:d9:e7:15:d3:83: 24:a3:77:df:9b:6c:0a:ad:17:0a:ed:55:5a:e2:f5: b3:64:38:04:bb:df:7e:b6:c2:ff:ff:20:52:e6:6b: 6f:75:d3:35:7c:5b:fa:87:73:1d:7d:c8:e3:d6:34: f9:87:46:91:14:be:54:3a:26:07:8a:01:bc:98:fb: 5e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5B:C3:3E:E5:B4:39:CC:04:67:BB:26:BB:26:19:42:CB:1E:0E:F9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2133524a-1945-45c3-b339-b135ee710d9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:308::/48 Signature Algorithm: sha256WithRSAEncryption 85:1e:81:57:31:e5:ff:f4:be:57:23:83:8d:f2:bf:21:3e:f2: de:c9:8b:ee:a6:02:59:47:10:d6:4c:d0:2b:90:c5:39:a2:d1: c2:47:ec:f0:70:34:b3:d9:7e:94:64:a7:b0:38:0c:f9:d3:6c: a8:ac:ef:80:b3:21:01:7c:a4:a2:b5:41:75:74:4c:62:c0:73: 80:80:0e:30:f2:72:e1:41:7e:ea:8b:11:24:ac:98:5d:f9:3c: 94:15:48:64:e5:8e:a5:84:d3:47:db:d9:33:a9:49:91:7d:d5: 28:09:e0:e3:31:a7:45:8d:64:63:64:7a:b0:da:b1:0e:4c:6e: 2e:74:0a:10:dd:d1:a8:88:86:0b:f1:d8:60:bf:31:ea:75:48: f8:68:45:62:4e:ac:16:3e:ba:0d:2f:27:a9:61:cc:e7:c2:51: a1:a9:04:cc:c8:77:47:5c:dd:5d:b8:f5:ed:05:1b:f5:22:54: 4e:f6:2a:6d:b3:dc:ef:c2:1a:3a:9d:eb:df:e6:0a:1c:a1:41: a3:0e:78:c1:82:e0:87:93:7a:db:af:99:b5:4b:52:57:ab:31: b6:a9:d0:94:76:2d:9f:a1:47:e3:2b:53:45:fa:2a:35:ad:06: 40:32:2e:d5:38:98:d7:ef:bc:82:48:1a:a5:62:3f:d6:bd:2d: 9e:a0:64:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDB4A3XJJaSWNJDdsHpuwh6CgMO8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MTMzWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MWViNDhkMzgyZjRlZWFkOGUyMGVhMWFlOWUxYzUyM2Fk YjliYWVlNzNhNGVlMzMyNzE2ZWFjYzMwMDM0ZGY3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0Iwy5OFohNjf/E8mRWVEJZk/tQrgaC7TLjjnOaYDa+YET AowOfp9/PTfjdL0GX3ix7983MGz1mRzfOBaUeUZ/xgJPXWxQnPJ9eo4ze+Ym1aMJ X8khJjTt0cVc1luopRxgm7FW88TxGLo16F17pwh24RwDmB3jTya/f4VE+65+ao4B 5RcmwIyLb8yTiSoTUNBa98O0KqYgn8y7HNQbYOzM1BCEWuVKiDZAVQywyGOufRDW N+tn/IVcRGHWFhzZ5xXTgySjd9+bbAqtFwrtVVri9bNkOAS73362wv//IFLma291 0zV8W/qHcx19yOPWNPmHRpEUvlQ6JgeKAbyY+155AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGFvDPuW0OcwEZ7smuyYZQsseDvkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzIxMzM1MjRhLTE5NDUtNDVjMy1iMzM5LWIxMzVlZTcxMGQ5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwgwDQYJKoZIhvcNAQELBQADggEBAIUegVcx5f/0vlcjg43yvyE+ 8t7Ji+6mAllHENZM0CuQxTmi0cJH7PBwNLPZfpRkp7A4DPnTbKis74CzIQF8pKK1 QXV0TGLAc4CADjDycuFBfuqLESSsmF35PJQVSGTljqWE00fb2TOpSZF91SgJ4OMx p0WNZGNkerDasQ5Mbi50ChDd0aiIhgvx2GC/Mep1SPhoRWJOrBY+ug0vJ6lhzOfC UaGpBMzId0dc3V249e0FG/UiVE72Km2z3O/CGjqd69/mChyhQaMOeMGC4IeTetuv mbVLUlerMbap0JR2LZ+hR+MrU0X6KjWtBkAyLtU4mNfvvIJIGqViP9a9LZ6gZGQ= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:17 2025 by rpki-client