$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d2c81ea-9409-45ff-91e4-45a394e9fb80.roa File: 3d2c81ea-9409-45ff-91e4-45a394e9fb80.roa (raw, json) Hash identifier: vNp6LGbPlM7wlKDZBDhYTyLjbxE5tlHgbelAtnHzvDY= Subject key identifier: 2F:FC:4F:31:10:58:54:05:2E:CA:FF:F7:03:68:73:C0:1A:1E:C5:A5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7D42B39F2BE2FAFDDD0F658DDB85453A55572F33 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d2c81ea-9409-45ff-91e4-45a394e9fb80.roa Signing time: Tue 01 Apr 2025 15:00:20 +0000 ROA not before: Tue 01 Apr 2025 15:00:20 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:62b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:42:b3:9f:2b:e2:fa:fd:dd:0f:65:8d:db:85:45:3a:55:57:2f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 15:00:20 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: serialNumber=e7e0fc13fb3d1cf5c868c1dedc50d03acd61d3503087344312f736bb97b1ed03, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:68:98:d4:3c:f2:95:a5:ca:f9:50:0a:5a: bc:44:84:f0:2b:59:75:d5:49:5f:a3:d3:57:27:17: b8:aa:20:81:e5:af:20:a2:af:a2:dc:f7:4c:0f:11: 77:36:cd:5c:0e:69:13:4e:a4:e8:cc:d9:66:f2:32: e4:a5:d7:1f:e9:b0:50:6d:68:3c:0a:8f:79:df:39: f0:d6:47:c9:8b:25:39:c9:36:fb:17:25:f7:ea:20: e9:61:8c:01:88:7d:db:65:7e:c0:0d:f7:d1:11:d9: fc:be:fb:d7:71:a6:30:4f:af:05:66:f2:9a:25:c3: 1f:82:3c:86:9d:3a:b2:e9:c1:8b:44:d8:c1:36:da: ac:03:9c:59:30:b4:04:65:0d:19:a5:6b:4d:81:b5: 5b:8a:b0:6c:43:d3:5f:28:5a:4d:be:a0:58:28:49: 46:80:e2:32:f4:ee:be:15:58:b1:2c:7f:87:c3:98: 84:85:75:95:9e:ea:07:4c:28:38:cf:a2:52:98:6f: 8a:48:38:3b:d0:eb:fc:27:70:c7:a0:40:a1:d5:c2: ff:7f:e7:bd:08:55:c7:80:81:86:18:c9:f9:9b:c0: 4f:1c:5b:92:a1:53:d3:e4:cd:1e:6e:82:68:cc:e6: d3:db:f0:c5:81:23:c8:dc:46:ba:0f:e4:fd:d9:77: 76:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FC:4F:31:10:58:54:05:2E:CA:FF:F7:03:68:73:C0:1A:1E:C5:A5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d2c81ea-9409-45ff-91e4-45a394e9fb80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:62b::/48 Signature Algorithm: sha256WithRSAEncryption ad:96:c9:26:70:b8:0b:05:5e:bd:c5:61:96:50:f2:2d:b7:10: f3:ba:72:43:37:09:d4:85:cf:4a:b1:bc:b9:54:8d:6c:e7:69: b4:b6:25:eb:f6:19:9b:6f:10:c1:1d:ad:a6:58:d0:fb:6d:e0: 16:b3:85:58:61:db:1a:a4:bf:9a:50:cd:bf:c3:3e:07:29:ee: 6d:68:34:b6:ba:81:99:fa:f8:da:95:d0:9a:02:9f:c7:51:89: b6:46:33:15:cc:0b:12:23:de:23:d5:7d:22:72:17:c9:78:32: 97:f5:13:38:af:41:b6:ae:b6:84:b1:db:2d:c9:b9:76:d9:7b: 6a:d7:a4:13:39:12:87:fb:3d:5b:93:2b:d9:50:e4:70:1f:9a: f8:10:c1:7e:04:c1:3b:95:8b:87:d0:bd:64:6c:2c:af:8d:13: 15:8b:c1:3d:96:87:78:a9:9e:d3:6b:3c:2e:55:72:ab:1f:70: 2b:5c:a0:63:4d:79:37:a9:e8:db:54:ec:74:c5:b5:9b:79:cf: db:c0:be:55:17:cb:f8:96:42:05:6f:e5:ec:d6:79:b0:70:16: 6d:48:cb:c3:df:41:ae:89:09:7d:43:e1:03:27:b9:7c:44:96: b4:73:1c:86:dc:ab:e8:28:b2:a8:0a:40:3c:7e:e0:f3:4a:71: e3:5a:37:ac -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfUKznyvi+v3dD2WN24VFOlVXLzMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMTUwMDIwWhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlN2UwZmMxM2ZiM2QxY2Y1Yzg2OGMxZGVkYzUwZDAzYWNk NjFkMzUwMzA4NzM0NDMxMmY3MzZiYjk3YjFlZDAzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC47miY1DzylaXK+VAKWrxEhPArWXXVSV+j01cnF7iqIIHl ryCir6Lc90wPEXc2zVwOaRNOpOjM2WbyMuSl1x/psFBtaDwKj3nfOfDWR8mLJTnJ NvsXJffqIOlhjAGIfdtlfsAN99ER2fy++9dxpjBPrwVm8polwx+CPIadOrLpwYtE 2ME22qwDnFkwtARlDRmla02BtVuKsGxD018oWk2+oFgoSUaA4jL07r4VWLEsf4fD mISFdZWe6gdMKDjPolKYb4pIODvQ6/wncMegQKHVwv9/570IVceAgYYYyfmbwE8c W5KhU9PkzR5ugmjM5tPb8MWBI8jcRroP5P3Zd3ZNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUL/xPMRBYVAUuyv/3A2hzwBoexaUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzNkMmM4MWVhLTk0MDktNDVmZi05MWU0LTQ1YTM5NGU5ZmI4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABiswDQYJKoZIhvcNAQELBQADggEBAK2WySZwuAsFXr3FYZZQ8i23 EPO6ckM3CdSFz0qxvLlUjWznabS2Jev2GZtvEMEdraZY0Ptt4BazhVhh2xqkv5pQ zb/DPgcp7m1oNLa6gZn6+NqV0JoCn8dRibZGMxXMCxIj3iPVfSJyF8l4Mpf1Eziv QbautoSx2y3JuXbZe2rXpBM5Eof7PVuTK9lQ5HAfmvgQwX4EwTuVi4fQvWRsLK+N ExWLwT2Wh3ipntNrPC5VcqsfcCtcoGNNeTep6NtU7HTFtZt5z9vAvlUXy/iWQgVv 5ezWebBwFm1Iy8PfQa6JCX1D4QMnuXxElrRzHIbcq+gosqgKQDx+4PNKceNaN6w= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:39 2025 by rpki-client