$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa File: 4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa (raw, json) Hash identifier: FBrdjsh+UvQDOohkEZQQE+D88yLbA4Hz0EC2ZepO0vI= Subject key identifier: 05:39:29:62:58:DD:D3:7F:06:C7:EA:BB:5E:01:70:11:F7:4A:3E:3A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 47EA16FB59EEE9203A8FCBE0BF3CD51D0B00FB20 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa Signing time: Sat 26 Apr 2025 00:50:21 +0000 ROA not before: Sat 26 Apr 2025 00:50:21 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:548::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ea:16:fb:59:ee:e9:20:3a:8f:cb:e0:bf:3c:d5:1d:0b:00:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:50:21 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=0ce030f9e0b7603edf7cfb2d1d7b5885bc2fa2e7ebb1c09304e960eacfa85d99, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:60:b2:b8:dd:0a:3a:f1:b0:80:c7:84:4e: 85:05:91:48:cb:22:74:a6:4f:03:6d:90:a6:dc:22: f9:2a:96:1c:f4:64:0d:02:45:e4:44:c3:86:88:16: 9e:32:33:d9:57:d9:7e:2a:9e:06:60:80:ea:be:2f: 6c:93:4a:1a:23:dc:a9:f5:6a:24:47:ee:9c:7a:81: ff:84:af:d1:1e:8b:57:f4:c3:19:67:53:13:6c:5a: 98:be:87:ab:34:fc:71:28:87:cf:37:df:3c:cd:7b: f7:28:4c:ec:ef:fb:20:e9:9f:29:5c:8e:7c:7d:93: 51:71:10:06:93:f2:24:0b:0c:ca:5e:86:d6:78:0a: 33:ab:d1:90:01:0d:cb:3f:b5:d6:e2:67:64:8b:25: ab:f8:e9:5a:f0:34:a5:aa:40:db:ce:10:ec:24:b6: e9:31:ba:5c:63:9a:1a:ad:da:bc:dd:d1:15:8e:93: 3f:a8:5d:44:75:7c:ac:8a:9e:e1:b4:58:08:4a:f4: 37:0d:7d:ef:4c:d7:38:15:34:14:17:dc:eb:30:2b: 8b:83:fa:14:8a:a4:df:e6:f2:e6:57:11:d4:af:cd: 0c:63:41:5b:0e:82:0c:2a:6f:6f:41:03:e1:68:79: f3:27:cd:a3:b1:34:bb:17:d3:eb:43:a5:7a:5a:56: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:39:29:62:58:DD:D3:7F:06:C7:EA:BB:5E:01:70:11:F7:4A:3E:3A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:548::/48 Signature Algorithm: sha256WithRSAEncryption a8:78:ec:58:72:c1:6d:45:57:d5:f7:95:73:01:a0:d4:b7:e8: 0c:db:3b:e7:f0:f1:0e:df:ff:d3:31:9d:da:47:9f:e1:c6:36: 00:cd:50:ea:8d:0d:eb:7a:29:c8:8a:c7:8f:43:72:bd:7b:82: 15:5b:d2:7c:41:92:0e:9b:17:53:57:21:47:e2:ba:29:4c:04: 7f:d9:6a:f8:9c:fd:07:76:c7:d2:ae:5a:d7:50:e6:e8:06:35: 30:49:61:69:7a:f6:e4:61:df:da:11:3d:8a:c8:f7:84:b6:45: 42:55:e1:8e:fa:eb:d5:f0:d6:18:93:36:52:d5:4d:06:bd:eb: c2:fa:01:3d:80:0e:ac:6b:df:59:c2:e3:e1:fc:29:b6:40:b3: d1:42:04:66:0a:72:47:b4:3e:cc:0b:1e:94:98:d4:f7:6a:9a: ac:39:3f:ce:94:a8:c1:05:f6:0b:ca:f7:ba:82:2d:0b:89:c1: 58:a8:71:3f:9f:6e:c9:5e:20:e3:97:c7:17:33:3f:55:59:26: 82:b3:9b:ca:ea:e9:3b:1d:68:86:5f:d2:e8:4d:62:a9:b3:e5: 49:fb:db:0a:98:7c:f3:e1:12:c7:5f:b3:c8:84:7e:a9:19:f7: 68:1c:e1:1d:0e:4a:df:7a:f3:4c:b7:e0:29:f3:98:dc:e4:43: 4a:56:74:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR+oW+1nu6SA6j8vgvzzVHQsA+yAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MDIxWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2UwMzBmOWUwYjc2MDNlZGY3Y2ZiMmQxZDdiNTg4NWJj MmZhMmU3ZWJiMWMwOTMwNGU5NjBlYWNmYTg1ZDk5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCt2CyuN0KOvGwgMeEToUFkUjLInSmTwNtkKbcIvkqlhz0 ZA0CReREw4aIFp4yM9lX2X4qngZggOq+L2yTShoj3Kn1aiRH7px6gf+Er9Eei1f0 wxlnUxNsWpi+h6s0/HEoh8833zzNe/coTOzv+yDpnylcjnx9k1FxEAaT8iQLDMpe htZ4CjOr0ZABDcs/tdbiZ2SLJav46VrwNKWqQNvOEOwktukxulxjmhqt2rzd0RWO kz+oXUR1fKyKnuG0WAhK9DcNfe9M1zgVNBQX3OswK4uD+hSKpN/m8uZXEdSvzQxj QVsOggwqb29BA+FoefMnzaOxNLsX0+tDpXpaVqD5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBTkpYljd038Gx+q7XgFwEfdKPjowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQ2MjhmZGMwLWEzMWYtNDM3ZC04ZTMzLWI4Zjg5MWIxZGQxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUgwDQYJKoZIhvcNAQELBQADggEBAKh47FhywW1FV9X3lXMBoNS3 6AzbO+fw8Q7f/9MxndpHn+HGNgDNUOqNDet6KciKx49Dcr17ghVb0nxBkg6bF1NX IUfiuilMBH/Zavic/Qd2x9KuWtdQ5ugGNTBJYWl69uRh39oRPYrI94S2RUJV4Y76 69Xw1hiTNlLVTQa968L6AT2ADqxr31nC4+H8KbZAs9FCBGYKcke0PswLHpSY1Pdq mqw5P86UqMEF9gvK97qCLQuJwViocT+fbsleIOOXxxczP1VZJoKzm8rq6TsdaIZf 0uhNYqmz5Un72wqYfPPhEsdfs8iEfqkZ92gc4R0OSt9680y34CnzmNzkQ0pWdLA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:59 2025 by rpki-client