$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4be413ac-e934-49e3-991f-a9e6650a7cd0.roa File: 4be413ac-e934-49e3-991f-a9e6650a7cd0.roa (raw, json) Hash identifier: ukNZmizeQAzJlGqKAZLlcUQvYnF1iaAKeU6o5vP2eg0= Subject key identifier: 4A:7A:4B:4B:1B:B2:E6:FC:4A:68:CA:1F:45:41:C1:FD:A8:AB:58:5B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 76A7A5822EF7DA667D9ED01698A1311D838DE1BF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4be413ac-e934-49e3-991f-a9e6650a7cd0.roa Signing time: Fri 11 Apr 2025 00:30:31 +0000 ROA not before: Fri 11 Apr 2025 00:30:31 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a7:a5:82:2e:f7:da:66:7d:9e:d0:16:98:a1:31:1d:83:8d:e1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:30:31 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=aedcc45a051bf10e02da2bbd876a408348d9785579118b4c1d224196cb2f0bdb, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:4c:bd:28:6b:94:55:f3:50:f6:49:0c:b4: 6f:b9:60:35:11:0e:a3:9b:c3:6e:47:86:ee:f2:cb: 63:e0:3a:99:7b:1d:8c:2a:5b:dd:39:af:7a:ab:24: 7f:1d:19:60:f6:3f:25:14:91:d3:59:7f:ed:bc:b0: f6:bc:63:ed:d9:10:79:b4:b6:34:3c:c9:ef:54:9b: 9b:c4:11:14:58:e1:36:9d:ef:00:fc:ff:7a:df:d0: 06:3f:6f:e1:dd:b1:d0:b5:54:1b:18:19:4c:78:f4: 2f:eb:18:52:7b:89:aa:43:47:9c:6c:10:d6:05:17: 0b:9f:ba:65:dc:4d:8c:2c:bb:da:a0:87:75:7f:66: 9a:bb:c8:6d:01:f1:54:d1:e6:59:a8:4d:d0:58:c0: ec:d9:1b:5d:ad:e4:6d:47:b2:ff:92:e7:74:9c:52: c9:67:f6:b6:ce:e7:e8:4b:b2:db:98:3e:a8:c2:da: eb:69:71:d8:6b:cf:91:a6:31:a8:76:3c:47:d8:5c: cf:b6:1c:39:41:d2:18:6f:9a:36:41:1e:71:3d:97: ae:b4:bc:f1:7f:c8:87:11:4d:d2:94:25:de:28:48: de:98:47:90:cb:50:52:d7:14:93:38:b8:60:a8:30: d7:ef:e1:b0:53:2f:2f:a6:05:24:f8:f6:9f:05:a8: ca:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7A:4B:4B:1B:B2:E6:FC:4A:68:CA:1F:45:41:C1:FD:A8:AB:58:5B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4be413ac-e934-49e3-991f-a9e6650a7cd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c06::/48 Signature Algorithm: sha256WithRSAEncryption 4a:d7:50:23:a8:75:52:00:43:b8:1e:7b:fb:d0:e2:14:85:c8: 3f:c0:82:49:8b:e1:67:81:07:bb:75:4a:61:a9:a4:93:0f:2d: 57:e9:c5:3f:f3:46:de:82:cb:e1:3d:7b:f7:a1:00:0d:8d:b9: 27:c6:64:11:8d:8a:6c:b9:6a:1d:68:4c:8c:e1:14:de:00:55: 2f:8c:9c:da:93:c5:2d:b8:8b:77:a3:a9:5b:26:6e:6d:cd:ea: 09:a4:e4:74:10:42:02:e6:dd:66:28:78:01:7d:77:19:28:72: de:ea:80:df:ff:0c:08:a9:63:d6:c8:be:cb:9a:18:04:38:12: 30:cb:a9:60:c9:ee:4b:1f:b9:f5:88:f0:56:a8:26:41:e2:a6: 9d:00:af:46:2f:f8:2e:ef:32:d5:26:4f:af:eb:ee:62:7f:58: 5d:7c:d1:d6:50:74:3d:bc:17:73:1a:08:8a:25:cb:b6:7b:27: 32:f8:ff:8f:2e:61:16:92:95:bb:75:be:79:a8:f6:4a:27:09: 85:dd:ab:8e:35:a3:22:8f:b9:c7:a7:94:c1:ad:a2:34:e3:62: 20:96:2a:45:e8:e7:b7:c3:08:00:73:54:52:e8:d3:18:c4:15: 6c:2b:d3:d0:10:df:99:f5:64:6a:e4:af:67:b1:5f:2f:99:be: 49:92:c8:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdqelgi732mZ9ntAWmKExHYON4b8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMDMxWhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZWRjYzQ1YTA1MWJmMTBlMDJkYTJiYmQ4NzZhNDA4MzQ4 ZDk3ODU1NzkxMThiNGMxZDIyNDE5NmNiMmYwYmRiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVNUy9KGuUVfNQ9kkMtG+5YDURDqObw25Hhu7yy2PgOpl7 HYwqW905r3qrJH8dGWD2PyUUkdNZf+28sPa8Y+3ZEHm0tjQ8ye9Um5vEERRY4Tad 7wD8/3rf0AY/b+HdsdC1VBsYGUx49C/rGFJ7iapDR5xsENYFFwufumXcTYwsu9qg h3V/Zpq7yG0B8VTR5lmoTdBYwOzZG12t5G1Hsv+S53ScUsln9rbO5+hLstuYPqjC 2utpcdhrz5GmMah2PEfYXM+2HDlB0hhvmjZBHnE9l660vPF/yIcRTdKUJd4oSN6Y R5DLUFLXFJM4uGCoMNfv4bBTLy+mBST49p8FqMpzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSnpLSxuy5vxKaMofRUHB/airWFswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRiZTQxM2FjLWU5MzQtNDllMy05OTFmLWE5ZTY2NTBhN2NkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAYwDQYJKoZIhvcNAQELBQADggEBAErXUCOodVIAQ7gee/vQ4hSF yD/AgkmL4WeBB7t1SmGppJMPLVfpxT/zRt6Cy+E9e/ehAA2NuSfGZBGNimy5ah1o TIzhFN4AVS+MnNqTxS24i3ejqVsmbm3N6gmk5HQQQgLm3WYoeAF9dxkoct7qgN// DAipY9bIvsuaGAQ4EjDLqWDJ7ksfufWI8FaoJkHipp0Ar0Yv+C7vMtUmT6/r7mJ/ WF180dZQdD28F3MaCIoly7Z7JzL4/48uYRaSlbt1vnmo9konCYXdq441oyKPucen lMGtojTjYiCWKkXo57fDCABzVFLo0xjEFWwr09AQ35n1ZGrkr2exXy+ZvkmSyAs= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:55 2025 by rpki-client