$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa File: 35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa (raw, json) Hash identifier: fm0/qzWABRkEtqukamoJXuUGYLvadjpN/2W6KBKao0c= Subject key identifier: 97:56:72:1C:42:E7:C0:36:0D:2E:6F:27:DE:66:D6:82:A0:D9:50:12 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 042A28FD6003F507117DA15DB1BB13979C5DBE25 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa Signing time: Sat 26 Apr 2025 00:50:07 +0000 ROA not before: Sat 26 Apr 2025 00:50:07 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:398::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2a:28:fd:60:03:f5:07:11:7d:a1:5d:b1:bb:13:97:9c:5d:be:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:50:07 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=a6f7d93907e1f529a819b9a60106bc5915a67134934d594919bbb2b397e1248b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f9:45:4b:54:26:19:e1:22:5d:1f:9c:dd:de: fe:fc:02:2b:fc:de:9e:7d:1c:3d:24:18:83:b7:98: 44:58:cc:2a:8d:90:5e:6a:74:b8:dc:04:d0:c0:96: d7:fc:67:bb:b4:6d:77:f0:e6:2b:33:ad:66:54:be: e1:2c:2d:8c:50:ef:34:37:34:7c:12:a8:81:d4:1e: 05:11:68:34:70:ce:86:67:6c:a7:32:8e:5d:18:a1: 9a:7d:4b:de:2e:c1:5b:08:99:7d:a9:6c:32:78:77: a9:7f:3b:fa:98:11:26:a7:f4:40:ab:d5:6f:c0:5e: d5:8e:09:4a:14:95:37:5e:f3:e0:6d:f3:6a:db:b4: f6:74:d4:59:1a:a0:9a:c4:ca:95:da:e5:cb:01:28: 63:f2:eb:3f:10:47:08:54:74:eb:83:c4:7d:c3:a2: f3:bc:99:6b:18:f1:ba:00:78:80:ff:7a:0f:98:49: b7:39:8c:30:24:92:23:a8:17:1b:16:43:f0:35:a0: 31:09:9f:c5:e3:70:55:61:e6:ef:ec:c2:0e:b2:7d: 03:e6:7a:5a:78:6d:02:dd:47:73:e1:dc:0b:ae:c6: bc:e8:b5:7d:0e:60:64:4c:dd:f9:1e:b3:ea:5e:7a: c7:32:c0:a3:9e:28:8c:67:20:ca:65:b0:42:80:2e: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:56:72:1C:42:E7:C0:36:0D:2E:6F:27:DE:66:D6:82:A0:D9:50:12 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:398::/48 Signature Algorithm: sha256WithRSAEncryption 39:d2:94:f9:f7:5a:5b:b9:f8:c2:d8:83:4b:e9:86:bd:69:f2: 62:44:3f:17:98:83:80:65:ad:61:e3:ac:a1:f2:3a:8b:47:e4: aa:61:2e:e1:18:3e:ae:92:bf:1f:40:7c:8d:47:27:8c:8f:9c: df:af:10:b3:4a:c6:3f:61:14:27:06:ab:e4:b1:b1:84:b0:79: 87:80:80:66:d9:8a:e8:71:75:5e:40:77:9f:d1:17:19:e1:11: 87:ba:94:41:64:3d:25:7c:41:f5:91:09:31:bf:59:3e:ef:d3: 18:39:8d:46:31:9f:be:b6:7f:a5:55:7a:cd:e0:c4:f2:ee:b4: 5e:90:37:b2:6a:e6:59:16:9d:a4:33:a8:a7:bc:95:bc:24:c2: 4b:15:ea:73:e0:6b:93:09:8c:68:fe:c3:93:b8:ea:c0:4b:11: e9:f4:04:d5:2d:f2:03:82:d2:20:7b:d1:29:aa:24:49:d4:f7: 57:87:47:46:c2:89:6e:42:8a:82:02:ad:a2:e6:3a:15:f8:8f: b4:a3:59:dc:4d:13:a8:a8:7c:b0:c9:7a:4f:ca:f4:fc:98:bf: 28:a4:53:74:7b:7f:2d:20:e6:68:2d:47:34:ed:89:94:9c:a8: cf:93:47:88:bc:06:44:02:91:d1:9d:c4:0c:13:14:32:b9:3d: 62:85:fe:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBCoo/WAD9QcRfaFdsbsTl5xdviUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MDA3WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNmY3ZDkzOTA3ZTFmNTI5YTgxOWI5YTYwMTA2YmM1OTE1 YTY3MTM0OTM0ZDU5NDkxOWJiYjJiMzk3ZTEyNDhiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCL+UVLVCYZ4SJdH5zd3v78Aiv83p59HD0kGIO3mERYzCqN kF5qdLjcBNDAltf8Z7u0bXfw5iszrWZUvuEsLYxQ7zQ3NHwSqIHUHgURaDRwzoZn bKcyjl0YoZp9S94uwVsImX2pbDJ4d6l/O/qYESan9ECr1W/AXtWOCUoUlTde8+Bt 82rbtPZ01FkaoJrEypXa5csBKGPy6z8QRwhUdOuDxH3DovO8mWsY8boAeID/eg+Y Sbc5jDAkkiOoFxsWQ/A1oDEJn8XjcFVh5u/swg6yfQPmelp4bQLdR3Ph3Auuxrzo tX0OYGRM3fkes+peescywKOeKIxnIMplsEKALvZNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUl1ZyHELnwDYNLm8n3mbWgqDZUBIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM1ZWE0Y2JmLTU0MjktNDE4Ni1hMGZlLWNjOGM2Y2FhOWZmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5gwDQYJKoZIhvcNAQELBQADggEBADnSlPn3Wlu5+MLYg0vphr1p 8mJEPxeYg4BlrWHjrKHyOotH5KphLuEYPq6Svx9AfI1HJ4yPnN+vELNKxj9hFCcG q+SxsYSweYeAgGbZiuhxdV5Ad5/RFxnhEYe6lEFkPSV8QfWRCTG/WT7v0xg5jUYx n762f6VVes3gxPLutF6QN7Jq5lkWnaQzqKe8lbwkwksV6nPga5MJjGj+w5O46sBL Een0BNUt8gOC0iB70SmqJEnU91eHR0bCiW5CioICraLmOhX4j7SjWdxNE6iofLDJ ek/K9PyYvyikU3R7fy0g5mgtRzTtiZScqM+TR4i8BkQCkdGdxAwTFDK5PWKF/kY= -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:07 2025 by rpki-client