$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa File: 4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa (raw, json) Hash identifier: zrOHUn7LIQz7Ea6aN25r61OK3RbQ6CS38SqJM7O2+PI= Subject key identifier: E8:CA:B8:B9:C0:EF:90:67:BE:13:95:DB:96:32:69:0A:F4:8D:E8:76 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6CB16B9EBD947DD6800836A989D6120111988F0F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa Signing time: Fri 11 Apr 2025 00:31:26 +0000 ROA not before: Fri 11 Apr 2025 00:31:26 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b1:6b:9e:bd:94:7d:d6:80:08:36:a9:89:d6:12:01:11:98:8f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:31:26 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=a49a8b2a6bfad38511f2540565f65b2552d89ea8cefccc94fd0e77e64a01bc83, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:5d:ee:54:3a:e9:1b:95:c8:eb:d8:4f:d3: 3a:54:af:67:ac:a8:78:24:80:1e:4b:e9:ef:fd:58: b6:c1:7c:c7:09:c3:ca:b5:36:a6:a5:b9:87:db:97: f0:4a:b4:49:f8:26:b4:f4:b6:5f:cb:ef:3f:b4:6c: ad:42:9d:27:77:76:55:2e:aa:9e:10:62:0b:fa:c6: 68:50:2b:af:15:89:fb:b2:b2:f1:65:21:33:57:bd: 54:75:af:b1:9d:04:4f:b4:e2:3b:93:db:1f:71:3a: cc:2b:a6:46:65:fe:f3:bd:1b:e7:ae:bb:4d:60:7e: b3:65:8c:46:e3:a7:33:2e:a6:76:36:20:b6:51:59: a3:33:3b:05:a1:9a:b2:34:26:27:76:a7:aa:e5:9b: 25:55:cf:96:e3:2c:20:d0:d4:77:ed:33:b3:29:be: ab:41:4e:09:5f:7c:92:01:7f:01:3a:ed:32:0f:b8: a0:46:73:00:70:83:4e:f8:7c:9d:b1:d4:7f:11:9a: 84:f6:2b:d1:32:85:9f:a8:79:09:5b:db:d2:74:d8: ac:0d:9e:6b:8f:5c:be:13:a5:0e:02:2e:1f:a2:f0: 2a:44:dd:29:e8:e9:91:05:6f:2c:bc:b7:7b:b5:16: dd:0a:40:f7:22:da:de:09:1d:7d:2b:8e:3e:4c:f0: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CA:B8:B9:C0:EF:90:67:BE:13:95:DB:96:32:69:0A:F4:8D:E8:76 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c09::/48 Signature Algorithm: sha256WithRSAEncryption 6c:c5:eb:21:e1:fa:76:42:7d:03:96:b5:81:46:bf:53:4b:a8: b5:45:7f:e4:60:60:06:5f:60:cc:7c:1d:92:2b:4c:e4:3e:8a: af:20:b8:9a:cd:7c:6d:46:2b:bc:a0:62:a5:41:7c:74:7e:1a: a9:57:a9:91:eb:7b:78:9f:fc:36:64:b3:eb:d8:ef:8a:f2:7a: 1b:0d:49:a2:97:fe:27:fe:a4:c5:9c:1d:98:9a:de:33:86:65: 06:ea:c7:1c:df:49:ad:a4:6a:65:a1:a3:62:c7:67:0a:0c:9c: e5:8e:96:a1:2c:58:8a:2d:23:67:e6:89:b7:03:06:30:d3:43: 5b:db:60:7b:f6:33:e1:66:c5:25:24:14:ec:8e:f6:22:99:36: 4c:86:8e:c6:b4:61:72:11:06:ce:30:d8:74:6c:67:79:06:1c: a6:da:be:2e:32:bb:89:b4:18:fb:1f:b5:97:bb:ae:c5:aa:b7: 65:0a:0e:cc:73:8d:6d:ae:19:00:7b:b4:a6:e6:9c:d5:b3:22: 30:c1:98:95:f0:3a:08:d3:d7:2e:5d:6c:5b:f3:da:93:7d:3a: 4b:8f:7c:e8:b3:53:d1:cc:12:91:ce:17:9e:06:40:c6:69:a1: 2d:45:ee:67:c3:ff:27:bd:11:0f:4b:4c:5a:d6:f8:a1:2d:68: a9:aa:8a:a7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbLFrnr2UfdaACDapidYSARGYjw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMTI2WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDlhOGIyYTZiZmFkMzg1MTFmMjU0MDU2NWY2NWIyNTUy ZDg5ZWE4Y2VmY2NjOTRmZDBlNzdlNjRhMDFiYzgzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4KV3uVDrpG5XI69hP0zpUr2esqHgkgB5L6e/9WLbBfMcJ w8q1NqaluYfbl/BKtEn4JrT0tl/L7z+0bK1CnSd3dlUuqp4QYgv6xmhQK68Vifuy svFlITNXvVR1r7GdBE+04juT2x9xOswrpkZl/vO9G+euu01gfrNljEbjpzMupnY2 ILZRWaMzOwWhmrI0Jid2p6rlmyVVz5bjLCDQ1HftM7MpvqtBTglffJIBfwE67TIP uKBGcwBwg074fJ2x1H8RmoT2K9EyhZ+oeQlb29J02KwNnmuPXL4TpQ4CLh+i8CpE 3Sno6ZEFbyy8t3u1Ft0KQPci2t4JHX0rjj5M8A3BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6Mq4ucDvkGe+E5XbljJpCvSN6HYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRjOGUxYThiLWFjMmYtNGVmMy1iYjg0LWU1NGY0N2JlNTZhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAkwDQYJKoZIhvcNAQELBQADggEBAGzF6yHh+nZCfQOWtYFGv1NL qLVFf+RgYAZfYMx8HZIrTOQ+iq8guJrNfG1GK7ygYqVBfHR+GqlXqZHre3if/DZk s+vY74ryehsNSaKX/if+pMWcHZia3jOGZQbqxxzfSa2kamWho2LHZwoMnOWOlqEs WIotI2fmibcDBjDTQ1vbYHv2M+FmxSUkFOyO9iKZNkyGjsa0YXIRBs4w2HRsZ3kG HKbavi4yu4m0GPsftZe7rsWqt2UKDsxzjW2uGQB7tKbmnNWzIjDBmJXwOgjT1y5d bFvz2pN9OkuPfOizU9HMEpHOF54GQMZpoS1F7mfD/ye9EQ9LTFrW+KEtaKmqiqc= -----END CERTIFICATE-----Generated at Sun Apr 27 17:14:30 2025 by rpki-client