$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/45ca2c55-207f-453b-96fb-935857108122.roa File: 45ca2c55-207f-453b-96fb-935857108122.roa (raw, json) Hash identifier: LAzzaUM5qm+C9q5Lf854KehPPAWObC/jpGsOnWF3SHM= Subject key identifier: 8B:4F:B8:DF:04:29:FF:09:A3:00:3F:D9:DF:18:82:B2:79:6C:E8:83 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1019A71013D97840B665141767F7599C146B32F7 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/45ca2c55-207f-453b-96fb-935857108122.roa Signing time: Fri 11 Apr 2025 00:30:08 +0000 ROA not before: Fri 11 Apr 2025 00:30:08 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:19:a7:10:13:d9:78:40:b6:65:14:17:67:f7:59:9c:14:6b:32:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:30:08 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=7d663194f427fbf6aed889cb58003a77d490beba445c60b62ab0a4459d2909d9, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:f1:eb:44:ef:d8:a8:9f:18:fe:5b:f3:ff: 9d:3d:7e:e1:bb:d1:75:62:49:06:92:0c:7c:7c:c4: e1:a3:ca:f0:33:53:32:1b:f7:da:0d:34:1f:b0:26: 3f:ea:f0:ca:47:01:2c:8d:e5:e9:d5:2e:50:c5:ed: 0d:8f:a6:4c:99:54:81:4d:c0:7e:9c:b7:66:1d:b5: 64:42:2f:ea:99:1b:cd:5e:9b:37:82:23:94:ef:3d: b5:61:2b:7c:1b:ff:f4:a4:a2:d6:34:11:eb:b7:92: 79:45:2a:fe:5c:ae:d5:22:08:e7:6e:f4:07:97:f7: 50:5b:30:5c:3a:40:1d:e8:fc:26:91:15:e5:19:a0: f2:ce:fe:ec:19:20:52:29:f3:4c:9a:8a:0d:67:d2: 54:25:7c:03:f2:f6:b3:56:22:d7:e0:02:21:cf:90: e0:78:0c:a5:30:e5:5f:1b:6d:44:27:be:b0:d2:f3: 5e:a1:56:5b:db:e7:85:3a:64:f5:58:b8:e2:0f:d4: ec:48:e0:4e:bf:54:4c:09:7a:b4:6e:f1:15:fa:b2: a4:0b:a8:38:82:d9:a8:6b:f1:2a:e9:a5:b2:d5:60: d7:94:c8:05:6d:3b:44:f1:3f:86:88:80:0c:b4:67: eb:af:44:41:d1:3b:4e:ac:df:7c:b8:21:b1:07:fa: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4F:B8:DF:04:29:FF:09:A3:00:3F:D9:DF:18:82:B2:79:6C:E8:83 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/45ca2c55-207f-453b-96fb-935857108122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c00::/48 Signature Algorithm: sha256WithRSAEncryption 5e:b4:5c:5b:7e:b5:4b:ae:10:d8:09:02:12:f7:69:9e:1e:61: c4:d1:c9:c0:e4:72:7e:0e:57:a6:2f:f8:98:6b:d3:72:a8:26: 5e:e1:55:15:bb:f7:05:b2:3c:23:f3:c6:18:5d:af:19:7d:9a: 56:82:cc:87:6f:4b:ce:49:d3:22:01:3d:51:a2:95:ab:b7:46: ed:07:ea:a6:61:09:e1:bf:e3:70:88:b7:39:7c:ed:88:ea:a0: bd:a1:38:64:3b:10:3b:f3:22:1f:35:95:ac:8b:5a:67:ae:5a: 1c:20:9b:f4:2b:ab:80:1c:4d:d2:69:70:d8:38:58:72:89:7a: de:fd:64:dc:82:a8:8e:c1:53:e1:70:bc:b5:df:fe:3e:80:92: 66:2e:bb:c3:4d:ea:20:7a:a5:ae:f8:70:ec:92:af:d9:0c:b3: a1:fb:54:4e:6b:58:f5:b1:37:e2:d2:f0:e0:ff:d2:28:ab:c6: e1:14:a9:02:79:6e:53:23:a2:cd:44:76:c6:49:7b:db:52:94: 21:7a:13:6f:bf:9e:58:ec:38:63:f4:57:b7:c2:6d:9d:f8:ab: 90:56:86:e1:07:97:24:99:85:cd:0a:d9:7c:aa:68:b3:70:82: c8:89:5b:cc:f6:3f:e8:14:c8:da:8c:f7:fd:9a:00:da:d4:99: f9:70:d4:b9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEBmnEBPZeEC2ZRQXZ/dZnBRrMvcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMDA4WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDY2MzE5NGY0MjdmYmY2YWVkODg5Y2I1ODAwM2E3N2Q0 OTBiZWJhNDQ1YzYwYjYyYWIwYTQ0NTlkMjkwOWQ5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEWvHrRO/YqJ8Y/lvz/509fuG70XViSQaSDHx8xOGjyvAz UzIb99oNNB+wJj/q8MpHASyN5enVLlDF7Q2PpkyZVIFNwH6ct2YdtWRCL+qZG81e mzeCI5TvPbVhK3wb//SkotY0Eeu3knlFKv5crtUiCOdu9AeX91BbMFw6QB3o/CaR FeUZoPLO/uwZIFIp80yaig1n0lQlfAPy9rNWItfgAiHPkOB4DKUw5V8bbUQnvrDS 816hVlvb54U6ZPVYuOIP1OxI4E6/VEwJerRu8RX6sqQLqDiC2ahr8SrppbLVYNeU yAVtO0TxP4aIgAy0Z+uvREHRO06s33y4IbEH+p1hAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUi0+43wQp/wmjAD/Z3xiCsnls6IMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQ1Y2EyYzU1LTIwN2YtNDUzYi05NmZiLTkzNTg1NzEwODEyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAAwDQYJKoZIhvcNAQELBQADggEBAF60XFt+tUuuENgJAhL3aZ4e YcTRycDkcn4OV6Yv+Jhr03KoJl7hVRW79wWyPCPzxhhdrxl9mlaCzIdvS85J0yIB PVGilau3Ru0H6qZhCeG/43CItzl87YjqoL2hOGQ7EDvzIh81layLWmeuWhwgm/Qr q4AcTdJpcNg4WHKJet79ZNyCqI7BU+FwvLXf/j6AkmYuu8NN6iB6pa74cOySr9kM s6H7VE5rWPWxN+LS8OD/0iirxuEUqQJ5blMjos1EdsZJe9tSlCF6E2+/nljsOGP0 V7fCbZ34q5BWhuEHlySZhc0K2XyqaLNwgsiJW8z2P+gUyNqM9/2aANrUmflw1Lk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:44 2025 by rpki-client