$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/24011dfd-46c4-4be5-8b52-f8dc7d0aab56.roa File: 24011dfd-46c4-4be5-8b52-f8dc7d0aab56.roa (raw, json) Hash identifier: pn/GQWfum3SbKiCY0Sdt+0EoMDzJtNP1bf2lVo0WFyw= Subject key identifier: 02:AF:41:10:3F:43:2D:77:DD:C1:4C:C6:E8:FF:AE:EC:5B:DE:45:FF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6B0B60786DCDD98EB44048F3E075B30BCE41BF54 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/24011dfd-46c4-4be5-8b52-f8dc7d0aab56.roa Signing time: Sat 26 Apr 2025 00:51:25 +0000 ROA not before: Sat 26 Apr 2025 00:51:25 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:100::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0b:60:78:6d:cd:d9:8e:b4:40:48:f3:e0:75:b3:0b:ce:41:bf:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:51:25 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=da23d05e7def863690a122f742fd20ff4ebee22acba189647be1783073d840ff, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:88:04:33:58:f9:c7:d4:81:63:5d:51:24: f1:3a:70:ec:f4:1a:06:01:3b:d2:c4:17:4d:f9:cc: eb:7c:5d:96:2e:9d:2d:6b:45:43:05:9d:a3:0f:22: b8:cf:78:a7:8b:82:e3:88:fe:e0:dc:66:fd:34:f1: 44:37:2c:a4:f1:92:84:c8:09:b9:42:ed:c7:ba:af: d6:a7:77:67:10:d2:18:da:9b:c4:42:9d:dd:3e:76: 4e:f6:81:b5:ba:43:a9:c0:c0:62:c1:c3:d4:07:f8: ff:f1:26:96:9c:36:c9:de:4e:25:f6:cb:2c:f3:63: 7b:df:f4:2f:0a:68:8c:91:07:64:54:bb:ba:87:ae: 2f:8d:75:b7:ec:a6:ff:70:fd:34:79:20:0b:b0:0f: 36:9d:2c:99:64:47:7a:bb:9c:d4:53:10:83:b9:ec: a8:ef:98:c7:c8:5e:5e:de:6c:96:70:82:fa:94:ca: 5f:dd:2f:48:bc:e9:78:17:2e:d9:69:2e:89:cb:84: 4c:e7:db:17:2c:28:5b:94:7f:65:93:0f:5a:43:03: 1b:b5:5f:7d:fc:5c:40:94:6a:79:cb:e4:af:92:7a: 8d:79:38:0c:5f:b9:7d:6a:e8:33:1c:16:78:a3:24: be:21:d1:03:c9:32:6c:2c:e7:a0:50:58:d3:16:50: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AF:41:10:3F:43:2D:77:DD:C1:4C:C6:E8:FF:AE:EC:5B:DE:45:FF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/24011dfd-46c4-4be5-8b52-f8dc7d0aab56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:100::/42 Signature Algorithm: sha256WithRSAEncryption 30:a1:f6:54:79:fd:99:f4:fb:13:f4:8a:61:de:f0:c2:bd:fe: 17:41:da:bb:3f:9b:6b:7d:65:bc:9b:08:1b:51:fe:eb:e4:ef: 3e:f4:10:b9:8b:6d:36:ce:6b:c8:94:51:ba:cf:48:24:d6:e5: ab:54:48:d5:01:c6:91:b3:9a:59:b6:85:bb:31:34:11:d1:8e: 2d:06:f8:a8:2c:aa:33:cb:bb:e5:7e:75:ab:26:b3:11:56:80: da:02:dc:9d:be:2f:ab:0e:38:e2:c5:b6:85:eb:5b:3f:8e:25: dd:ee:30:10:cd:c7:45:8f:01:18:0d:b8:e2:37:59:2e:bd:d6: a0:d7:3a:c6:d7:68:a4:92:21:f6:66:fe:c4:43:2c:20:96:c9: be:5a:44:20:ef:10:b8:f1:45:c1:1a:b1:52:25:32:4d:45:f1: 32:a5:b4:8c:09:05:55:9a:cb:b9:8c:a2:ac:8e:d1:04:66:12: cf:29:cc:92:f4:c6:fe:71:12:12:88:97:10:be:0f:21:d1:99: 43:1a:17:3d:ed:c2:ec:3d:ff:8c:6f:13:ff:6a:d0:27:86:68: 05:bf:8c:1e:a3:27:0e:f8:1d:76:8c:c5:33:62:49:c5:f9:b1: 80:73:f9:1f:ba:4e:0b:ab:74:92:52:38:ef:15:31:d3:e5:85: ae:79:39:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUawtgeG3N2Y60QEjz4HWzC85Bv1QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MTI1WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTIzZDA1ZTdkZWY4NjM2OTBhMTIyZjc0MmZkMjBmZjRl YmVlMjJhY2JhMTg5NjQ3YmUxNzgzMDczZDg0MGZmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+2YgEM1j5x9SBY11RJPE6cOz0GgYBO9LEF035zOt8XZYu nS1rRUMFnaMPIrjPeKeLguOI/uDcZv008UQ3LKTxkoTICblC7ce6r9and2cQ0hja m8RCnd0+dk72gbW6Q6nAwGLBw9QH+P/xJpacNsneTiX2yyzzY3vf9C8KaIyRB2RU u7qHri+Ndbfspv9w/TR5IAuwDzadLJlkR3q7nNRTEIO57KjvmMfIXl7ebJZwgvqU yl/dL0i86XgXLtlpLonLhEzn2xcsKFuUf2WTD1pDAxu1X338XECUannL5K+Seo15 OAxfuX1q6DMcFnijJL4h0QPJMmws56BQWNMWUFGlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAq9BED9DLXfdwUzG6P+u7FveRf8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI0MDExZGZkLTQ2YzQtNGJlNS04YjUyLWY4ZGM3ZDBhYWI1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmBZzAAQAwDQYJKoZIhvcNAQELBQADggEBADCh9lR5/Zn0+xP0imHe8MK9 /hdB2rs/m2t9ZbybCBtR/uvk7z70ELmLbTbOa8iUUbrPSCTW5atUSNUBxpGzmlm2 hbsxNBHRji0G+KgsqjPLu+V+dasmsxFWgNoC3J2+L6sOOOLFtoXrWz+OJd3uMBDN x0WPARgNuOI3WS691qDXOsbXaKSSIfZm/sRDLCCWyb5aRCDvELjxRcEasVIlMk1F 8TKltIwJBVWay7mMoqyO0QRmEs8pzJL0xv5xEhKIlxC+DyHRmUMaFz3twuw9/4xv E/9q0CeGaAW/jB6jJw74HXaMxTNiScX5sYBz+R+6TgurdJJSOO8VMdPlha55OQs= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:29 2025 by rpki-client