$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa File: 280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa (raw, json) Hash identifier: GFDr5IHpda9kIQmDGS3qFX6IUr/Y4UmbdLDIIQivFEI= Subject key identifier: 98:E4:EC:0F:30:0F:7A:F2:EA:35:F8:4B:49:BE:05:40:AB:2A:97:9A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0BCD470419E3AE0D0D8121A6A17D0E7C9B1B8089 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa Signing time: Fri 11 Apr 2025 00:40:55 +0000 ROA not before: Fri 11 Apr 2025 00:40:55 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:f001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cd:47:04:19:e3:ae:0d:0d:81:21:a6:a1:7d:0e:7c:9b:1b:80:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:40:55 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=6510902558a04aceb7d15feb5d6c37f85ece30102b13489dbd6fc10d83d703e4, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:89:31:3d:a5:19:86:4f:d6:5b:bb:cd:a2: 38:7c:ae:bb:a0:03:0c:d3:aa:9a:56:ac:df:9d:f0: e5:f7:a9:ff:44:b5:da:1c:94:32:7a:a7:c7:4e:f7: ae:36:b1:71:b8:91:48:03:02:30:71:32:a2:3b:a0: 28:ae:05:cf:b1:c5:36:89:38:81:9e:b5:56:55:de: 7e:43:e0:2a:5b:1c:dd:63:a8:1d:53:26:10:16:7c: a2:fa:52:2b:18:7f:3f:70:33:c5:f9:91:81:ff:cc: 4b:42:b2:63:3e:4c:70:d9:99:f4:ee:24:86:4f:c8: 17:d8:68:54:01:58:ef:d6:79:b1:61:15:97:f7:ac: 2f:e5:92:76:68:4d:d9:05:af:50:c1:fe:8f:40:96: 62:7d:c5:41:e7:3a:18:8b:ed:24:29:18:3a:31:12: 16:80:64:99:a4:c1:31:f9:01:74:57:7e:71:6b:6a: 9d:83:3b:07:00:40:12:5a:68:ac:40:2c:c8:53:5f: 61:7d:33:73:0f:e1:d3:fa:56:f3:0e:12:14:b4:11: d4:cc:c7:b4:f0:2a:49:7d:b8:2d:a2:4e:2f:7e:a3: b8:ac:4d:0d:ef:6c:d7:6d:49:c4:b2:f5:bc:17:4a: b6:18:bb:60:aa:90:d5:7e:35:de:3f:f8:f7:c9:8a: 09:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E4:EC:0F:30:0F:7A:F2:EA:35:F8:4B:49:BE:05:40:AB:2A:97:9A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f001::/48 Signature Algorithm: sha256WithRSAEncryption a4:cf:02:07:82:04:52:6d:10:5c:69:d2:fa:3c:7c:e7:fe:23: a1:2f:b0:6b:ff:44:fd:42:ae:52:c0:ba:e5:bf:88:3b:78:fd: af:f8:89:0e:41:7b:47:d7:a6:1c:95:72:13:b9:2c:10:4b:cd: 18:eb:b6:59:fd:49:5a:4e:04:16:0a:44:a0:8c:66:7a:09:fb: d6:0a:59:11:27:ed:0b:44:86:81:dc:ba:58:5f:24:d6:d7:48: d4:1d:8a:2f:68:7a:ae:61:37:a3:ca:0f:0f:70:e6:be:87:8a: 1a:47:f3:17:bd:c2:de:ef:c5:d6:63:98:a5:10:26:87:1c:05: ab:d2:03:b8:ea:8d:74:ab:9f:a4:87:11:14:2f:3f:8e:e8:02: 71:38:aa:58:49:6d:fc:d9:dc:1d:f9:ea:f9:c5:69:05:2c:14: da:82:d4:e1:ce:4c:2c:e7:62:7a:ec:9b:75:4a:d0:77:36:13: 95:5d:74:06:60:73:d0:47:b5:b5:74:02:22:65:b4:cb:17:8d: c6:d9:84:cc:d0:90:c2:f0:5c:7e:e9:36:b8:6c:0b:e6:35:ce: 4a:fd:01:9a:f4:d3:e1:8f:83:d9:60:11:70:01:23:60:41:e5: 7d:7c:47:e4:54:3e:f4:07:71:b2:5b:da:70:c2:81:55:a9:37: 8d:69:e0:b4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC81HBBnjrg0NgSGmoX0OfJsbgIkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDA0MDU1WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTEwOTAyNTU4YTA0YWNlYjdkMTVmZWI1ZDZjMzdmODVl Y2UzMDEwMmIxMzQ4OWRiZDZmYzEwZDgzZDcwM2U0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWwokxPaUZhk/WW7vNojh8rrugAwzTqppWrN+d8OX3qf9E tdoclDJ6p8dO9642sXG4kUgDAjBxMqI7oCiuBc+xxTaJOIGetVZV3n5D4CpbHN1j qB1TJhAWfKL6UisYfz9wM8X5kYH/zEtCsmM+THDZmfTuJIZPyBfYaFQBWO/WebFh FZf3rC/lknZoTdkFr1DB/o9AlmJ9xUHnOhiL7SQpGDoxEhaAZJmkwTH5AXRXfnFr ap2DOwcAQBJaaKxALMhTX2F9M3MP4dP6VvMOEhS0EdTMx7TwKkl9uC2iTi9+o7is TQ3vbNdtScSy9bwXSrYYu2CqkNV+Nd4/+PfJiglNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmOTsDzAPevLqNfhLSb4FQKsql5owHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI4MDQxNWQxLTMyYTUtNDllMS1iYzNmLTlmZmU1M2JkNzI2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8AEwDQYJKoZIhvcNAQELBQADggEBAKTPAgeCBFJtEFxp0vo8fOf+ I6EvsGv/RP1CrlLAuuW/iDt4/a/4iQ5Be0fXphyVchO5LBBLzRjrtln9SVpOBBYK RKCMZnoJ+9YKWREn7QtEhoHculhfJNbXSNQdii9oeq5hN6PKDw9w5r6HihpH8xe9 wt7vxdZjmKUQJoccBavSA7jqjXSrn6SHERQvP47oAnE4qlhJbfzZ3B356vnFaQUs FNqC1OHOTCznYnrsm3VK0Hc2E5VddAZgc9BHtbV0AiJltMsXjcbZhMzQkMLwXH7p NrhsC+Y1zkr9AZr00+GPg9lgEXABI2BB5X18R+RUPvQHcbJb2nDCgVWpN41p4LQ= -----END CERTIFICATE-----Generated at Sat Apr 26 15:51:25 2025 by rpki-client