$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa File: 2d483f0f-c559-4f53-a15a-67216b94ba21.roa (raw, json) Hash identifier: 1/r8a7lVRngq3CasvnOt76WnUByaseJffxgC9h3c4wM= Subject key identifier: C7:D5:C9:58:03:B6:2D:6B:AC:7F:F2:F5:56:7A:6D:F7:6C:79:D5:4D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 09EC340618690A98544F38899293F8ED2378EE8B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa Signing time: Sat 26 Apr 2025 00:51:05 +0000 ROA not before: Sat 26 Apr 2025 00:51:05 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:387::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ec:34:06:18:69:0a:98:54:4f:38:89:92:93:f8:ed:23:78:ee:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:51:05 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=65cb713438b52406ce3780e34b1923c129b378d6355ed6310cc60c5c433a6b5c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:83:51:36:8e:3e:59:69:a1:90:60:a7:33:70: 79:e5:b1:f8:fb:b2:db:6a:7d:19:13:50:96:fd:3e: 10:5d:e6:75:33:a0:ed:47:d1:d6:54:85:98:d7:0b: 2e:29:51:43:b1:00:54:4a:ed:c0:5a:75:5d:b8:73: a7:9e:18:af:61:91:9d:0f:39:b5:e1:c1:88:ad:be: 4c:1a:2a:2c:f9:00:4b:c6:95:2e:05:b6:a2:fb:af: b3:ec:a8:c2:08:85:cd:c1:4d:8d:a1:c2:13:f4:8e: ac:a9:81:fc:f9:71:5d:a2:2a:b0:c8:27:bf:21:ea: 9a:df:59:9e:be:d4:3a:f7:eb:72:b7:b3:46:09:d5: 25:72:aa:da:82:fe:ab:a3:57:ab:bc:50:36:57:e1: 03:b1:27:c3:5f:1e:1c:68:9a:3a:83:80:6a:57:75: e3:69:9e:58:da:8a:e0:91:f9:16:f6:a9:76:b8:a6: 6d:e2:c6:a9:dc:b5:6a:84:40:5b:10:8e:71:7e:61: e3:1c:37:73:20:ae:5b:91:ee:d7:f8:f8:49:9c:ce: 2b:c6:e4:75:55:67:f7:77:38:6f:68:ca:1a:9a:3b: 34:6b:88:b2:7e:33:b9:e6:31:a3:03:8f:e8:47:87: f3:89:99:6b:9b:bb:75:37:da:19:f9:de:26:71:3a: 6f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D5:C9:58:03:B6:2D:6B:AC:7F:F2:F5:56:7A:6D:F7:6C:79:D5:4D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2d483f0f-c559-4f53-a15a-67216b94ba21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:387::/48 Signature Algorithm: sha256WithRSAEncryption 53:b6:5f:9f:df:12:5b:22:1f:4c:35:f9:b6:90:4e:78:8f:d6: fd:7c:dc:4d:9e:c1:7d:74:ec:a9:c4:82:d0:4a:48:90:56:73: 2e:1f:1a:a6:9d:99:42:a4:ba:d9:43:3f:14:d5:ce:12:79:a5: 04:6f:87:2d:10:cf:16:06:33:69:72:e0:f1:45:8c:32:e0:57: a6:c1:7b:84:0d:2c:d9:47:7c:64:66:de:61:c3:36:f7:68:aa: cc:2b:70:92:3e:2c:5b:2a:58:3b:b0:8f:7e:ab:07:7a:24:07: 88:b1:8d:37:26:72:c9:0d:50:19:19:8a:f3:38:fb:82:8c:ce: d0:93:86:65:1a:32:fd:39:1c:6f:99:1a:1e:ad:cb:ae:59:49: 17:34:be:db:4f:e9:54:b1:c6:af:3f:4f:a3:a1:dc:1e:62:10: 93:21:76:26:09:dc:5b:fa:63:4b:03:05:da:24:85:f2:61:a6: 9c:d8:42:7e:45:6c:3a:58:e9:3d:2d:f1:74:cd:83:4e:c5:19: 15:85:ca:72:0e:aa:40:4a:ff:9a:4a:17:65:29:34:65:10:fa: f4:d3:d5:7f:a2:9a:ca:3b:88:c4:b3:f5:97:86:53:62:1c:a4: 9e:9a:22:fd:c5:ae:ec:5f:21:a6:63:55:0f:62:e0:b0:b9:57: 26:5c:3c:66 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCew0BhhpCphUTziJkpP47SN47oswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MTA1WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWNiNzEzNDM4YjUyNDA2Y2UzNzgwZTM0YjE5MjNjMTI5 YjM3OGQ2MzU1ZWQ2MzEwY2M2MGM1YzQzM2E2YjVjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcg1E2jj5ZaaGQYKczcHnlsfj7sttqfRkTUJb9PhBd5nUz oO1H0dZUhZjXCy4pUUOxAFRK7cBadV24c6eeGK9hkZ0PObXhwYitvkwaKiz5AEvG lS4FtqL7r7PsqMIIhc3BTY2hwhP0jqypgfz5cV2iKrDIJ78h6prfWZ6+1Dr363K3 s0YJ1SVyqtqC/qujV6u8UDZX4QOxJ8NfHhxomjqDgGpXdeNpnljaiuCR+Rb2qXa4 pm3ixqnctWqEQFsQjnF+YeMcN3MgrluR7tf4+EmczivG5HVVZ/d3OG9oyhqaOzRr iLJ+M7nmMaMDj+hHh/OJmWubu3U32hn53iZxOm/jAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUx9XJWAO2LWusf/L1Vnpt92x51U0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJkNDgzZjBmLWM1NTktNGY1My1hMTVhLTY3MjE2Yjk0YmEyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4cwDQYJKoZIhvcNAQELBQADggEBAFO2X5/fElsiH0w1+baQTniP 1v183E2ewX107KnEgtBKSJBWcy4fGqadmUKkutlDPxTVzhJ5pQRvhy0QzxYGM2ly 4PFFjDLgV6bBe4QNLNlHfGRm3mHDNvdoqswrcJI+LFsqWDuwj36rB3okB4ixjTcm cskNUBkZivM4+4KMztCThmUaMv05HG+ZGh6ty65ZSRc0vttP6VSxxq8/T6Oh3B5i EJMhdiYJ3Fv6Y0sDBdokhfJhppzYQn5FbDpY6T0t8XTNg07FGRWFynIOqkBK/5pK F2UpNGUQ+vTT1X+imso7iMSz9ZeGU2IcpJ6aIv3FruxfIaZjVQ9i4LC5VyZcPGY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:50 2025 by rpki-client