$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/261a9d57-7d2a-4862-8ccb-7296ebb1656e.roa File: 261a9d57-7d2a-4862-8ccb-7296ebb1656e.roa (raw, json) Hash identifier: LORTWPDZDHlEJGtyZ9VTkvd6uPSpv/EipEvgfo55DWo= Subject key identifier: 55:27:7B:7C:C0:35:51:AF:05:9A:74:41:CC:DE:A1:B6:B9:FF:6F:47 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5676E28EAAA7FBD2DD455D7D38DF177A0092E7EE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/261a9d57-7d2a-4862-8ccb-7296ebb1656e.roa Signing time: Fri 25 Apr 2025 17:40:06 +0000 ROA not before: Fri 25 Apr 2025 17:40:06 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:f03d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:76:e2:8e:aa:a7:fb:d2:dd:45:5d:7d:38:df:17:7a:00:92:e7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 25 17:40:06 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=8acb19470f613ce274b01568dab95166231cf8fe2e06b793c329fef3e883da48, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6c:97:51:4a:a2:29:54:49:49:69:5e:cd:2a: 60:c6:35:5d:94:be:80:fb:f9:d3:93:b2:c6:bc:a8: df:bc:6c:3e:05:fd:7c:a9:ce:90:dc:37:5c:1c:51: a9:50:fb:75:e0:6d:36:51:25:92:94:1d:16:72:4b: bd:97:5d:1c:1a:94:9d:36:6f:de:d6:b4:ed:d2:b6: 66:d8:ce:33:c8:0f:de:d0:31:b2:44:a8:ce:90:7b: 51:89:a5:d7:d7:ac:83:04:66:47:19:44:c2:56:4c: 09:ce:69:35:b6:06:07:65:dd:6f:20:2a:5b:12:27: ac:f9:87:75:a0:9c:2a:9c:40:46:69:84:eb:64:9d: 7a:b2:4e:65:b5:9c:25:8d:a0:8b:fa:a5:37:fb:fd: 14:54:81:c5:b4:b9:50:b9:69:90:71:a8:77:60:07: f5:f9:fb:3a:9c:76:0d:63:7d:e2:2f:dd:3b:6d:a8: eb:8b:fd:d3:0d:35:44:c3:88:f9:03:52:3b:1b:50: b7:64:cc:5a:5a:56:6d:a7:4f:08:c8:51:a7:08:9b: 94:62:9c:73:0a:47:1e:91:64:21:75:8f:3e:46:13: 99:06:96:be:5b:af:31:30:ed:ff:74:d4:2f:94:22: 2a:ce:ed:5b:fa:76:83:56:04:1b:99:51:b9:3f:42: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:27:7B:7C:C0:35:51:AF:05:9A:74:41:CC:DE:A1:B6:B9:FF:6F:47 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/261a9d57-7d2a-4862-8ccb-7296ebb1656e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03d::/48 Signature Algorithm: sha256WithRSAEncryption 5d:46:70:1b:be:ae:fc:5a:8a:a2:f0:dc:80:b0:49:f3:45:3e: c8:6a:70:0e:6e:41:78:90:6e:e8:5a:98:76:50:46:7a:a7:87: ff:25:80:59:5d:ac:11:b4:39:7e:a4:79:62:00:ac:3c:e3:da: 10:a1:e9:c8:08:1f:d8:b1:64:0c:96:80:0c:09:e9:a0:01:af: 31:aa:8b:75:48:e7:5a:6c:61:ee:7e:d6:99:69:96:28:8a:a2: f5:91:53:4a:9a:8a:17:19:c2:dc:57:f3:83:be:77:10:b5:41: 32:04:6b:74:20:73:7f:d8:c9:28:ee:17:53:32:23:f4:db:f3: 3f:50:e7:e0:81:5a:0a:dd:10:3d:91:1e:7d:07:14:e6:27:72: ec:81:3b:c0:13:f0:f5:46:99:a1:4b:49:f2:48:d0:6f:aa:3e: 46:21:03:fa:8d:92:af:1a:89:31:0f:90:87:92:a7:89:f2:b8: 70:7e:48:76:48:9c:e9:40:aa:83:2f:10:59:6c:dd:d8:84:23: 2b:34:d4:6b:08:a6:71:e7:ab:a0:df:f2:69:02:e0:9b:a5:df: 30:bc:66:55:b3:fc:6a:0f:ee:c5:17:a3:74:d9:2a:3b:e5:8d: e1:fb:19:d4:43:ce:3d:51:c8:8b:11:55:02:db:8d:02:20:60: 89:39:5a:b1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVnbijqqn+9LdRV19ON8XegCS5+4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI1MTc0MDA2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWNiMTk0NzBmNjEzY2UyNzRiMDE1NjhkYWI5NTE2NjIz MWNmOGZlMmUwNmI3OTNjMzI5ZmVmM2U4ODNkYTQ4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDibJdRSqIpVElJaV7NKmDGNV2UvoD7+dOTssa8qN+8bD4F /XypzpDcN1wcUalQ+3XgbTZRJZKUHRZyS72XXRwalJ02b97WtO3StmbYzjPID97Q MbJEqM6Qe1GJpdfXrIMEZkcZRMJWTAnOaTW2Bgdl3W8gKlsSJ6z5h3WgnCqcQEZp hOtknXqyTmW1nCWNoIv6pTf7/RRUgcW0uVC5aZBxqHdgB/X5+zqcdg1jfeIv3Ttt qOuL/dMNNUTDiPkDUjsbULdkzFpaVm2nTwjIUacIm5RinHMKRx6RZCF1jz5GE5kG lr5brzEw7f901C+UIirO7Vv6doNWBBuZUbk/Qnv3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVSd7fMA1Ua8FmnRBzN6htrn/b0cwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI2MWE5ZDU3LTdkMmEtNDg2Mi04Y2NiLTcyOTZlYmIxNjU2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D0wDQYJKoZIhvcNAQELBQADggEBAF1GcBu+rvxaiqLw3ICwSfNF PshqcA5uQXiQbuhamHZQRnqnh/8lgFldrBG0OX6keWIArDzj2hCh6cgIH9ixZAyW gAwJ6aABrzGqi3VI51psYe5+1plpliiKovWRU0qaihcZwtxX84O+dxC1QTIEa3Qg c3/YySjuF1MyI/Tb8z9Q5+CBWgrdED2RHn0HFOYncuyBO8AT8PVGmaFLSfJI0G+q PkYhA/qNkq8aiTEPkIeSp4nyuHB+SHZInOlAqoMvEFls3diEIys01GsIpnHnq6Df 8mkC4Jul3zC8ZlWz/GoP7sUXo3TZKjvljeH7GdRDzj1RyIsRVQLbjQIgYIk5WrE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:17:52 2025 by rpki-client