$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa File: 519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa (raw, json) Hash identifier: g6YmCDwADA/XtStXSE2uOudAzY3cj64/MOH47p4sFg0= Subject key identifier: CA:9A:6D:5C:EB:18:61:BF:AC:31:F0:B5:24:39:CB:BA:67:8F:13:5C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 595D74EB2E06AC46FA9C16C92736B4DD14AE30F2 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa Signing time: Fri 11 Apr 2025 00:40:51 +0000 ROA not before: Fri 11 Apr 2025 00:40:51 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5d:74:eb:2e:06:ac:46:fa:9c:16:c9:27:36:b4:dd:14:ae:30:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:40:51 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=db4f814d3da8bc99ca2c7291579ac25ca7aef7452d152de0806ca95fc9c6e238, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:14:27:e7:4a:dc:e6:fa:c7:e6:8d:36:8d: 23:23:4d:b8:3f:e5:28:12:42:d9:4c:8a:71:05:03: 4e:bf:84:03:1c:f8:71:cd:d3:ca:8a:04:91:e6:2e: dd:dc:50:9a:57:91:7a:b4:8a:95:b0:80:2e:e3:be: 99:94:7d:1c:38:a4:a8:36:f3:a6:84:2b:ca:48:82: 7a:df:28:ef:49:bb:99:7a:bf:6b:58:e4:b3:30:da: 83:f7:3c:f1:77:45:ed:39:cb:12:4e:c7:86:0f:31: fc:55:26:9b:26:ca:ae:20:ee:02:bb:19:69:1f:b7: 3f:23:c4:47:ff:9b:cd:e6:37:16:1e:db:3a:09:a8: a2:18:65:09:9b:35:fb:3e:f6:d5:b4:4c:48:3a:3f: 14:ad:57:2a:0a:c3:0b:1d:ee:e0:a5:ce:b8:17:bc: fd:17:6f:3d:73:39:bc:fc:c2:66:be:22:83:ba:5c: 7b:cd:45:26:5c:c8:6f:82:26:14:8b:24:42:ff:46: 01:5e:16:89:82:43:c1:7e:15:c8:2e:3f:66:0a:d8: 06:6c:5e:fc:b3:93:38:ea:32:dd:c2:8b:d9:4e:4a: f0:03:56:7e:94:ba:b5:4a:f7:20:c2:91:3d:19:03: 8c:e9:cd:6c:33:02:8f:f7:69:dd:7e:0d:21:25:c9: 8a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9A:6D:5C:EB:18:61:BF:AC:31:F0:B5:24:39:CB:BA:67:8F:13:5C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c20::/48 Signature Algorithm: sha256WithRSAEncryption 39:a9:b0:81:66:58:4d:0e:2f:e5:7f:55:21:1e:44:af:39:6d: 00:5d:1f:68:b9:24:d7:f0:1a:85:73:11:54:f3:ac:06:e8:16: 0b:be:0c:bf:8d:05:cd:d3:b4:40:0d:e9:9d:db:36:1f:8c:70: 5d:85:a8:d9:62:e1:f5:68:e8:2a:05:1a:89:1a:9e:2a:32:4f: 0b:a3:52:93:e6:7d:9e:33:ea:d1:49:c6:42:74:9c:f7:b1:de: f6:c4:ce:42:9f:d1:d3:69:18:40:ab:e1:20:2f:47:7e:d0:fb: cd:fb:6b:57:56:f7:1d:ed:09:a1:43:57:52:a5:c3:f1:c8:c2: 14:1e:5f:95:2b:80:9c:73:6e:37:03:44:9e:23:75:90:a7:10: 57:c7:3a:61:3e:fe:5d:0d:60:38:04:e4:10:c3:43:69:10:a4: da:e7:f3:cd:58:2c:92:02:91:45:9d:74:d7:b7:6a:d5:53:88: 8a:b6:78:49:12:46:5f:b7:2a:71:e2:0f:f8:4a:1f:f1:25:3c: 96:5e:77:fc:a0:c1:ad:f5:58:2f:55:14:53:3c:5c:82:ce:f8: da:b8:9c:7c:64:af:7d:ff:46:06:8a:15:b0:37:48:20:4b:d9: 00:b7:88:ee:a4:34:a3:37:5f:88:20:df:b0:8c:cc:6c:4b:73: 08:f8:43:ea -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWV106y4GrEb6nBbJJza03RSuMPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDA0MDUxWhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjRmODE0ZDNkYThiYzk5Y2EyYzcyOTE1NzlhYzI1Y2E3 YWVmNzQ1MmQxNTJkZTA4MDZjYTk1ZmM5YzZlMjM4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+bBQn50rc5vrH5o02jSMjTbg/5SgSQtlMinEFA06/hAMc +HHN08qKBJHmLt3cUJpXkXq0ipWwgC7jvpmUfRw4pKg286aEK8pIgnrfKO9Ju5l6 v2tY5LMw2oP3PPF3Re05yxJOx4YPMfxVJpsmyq4g7gK7GWkftz8jxEf/m83mNxYe 2zoJqKIYZQmbNfs+9tW0TEg6PxStVyoKwwsd7uClzrgXvP0Xbz1zObz8wma+IoO6 XHvNRSZcyG+CJhSLJEL/RgFeFomCQ8F+FcguP2YK2AZsXvyzkzjqMt3Ci9lOSvAD Vn6UurVK9yDCkT0ZA4zpzWwzAo/3ad1+DSElyYp9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUypptXOsYYb+sMfC1JDnLumePE1wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzUxOWNiOWRhLWJiNmMtNGVhNS1hNmFhLWU2YjY5ODQwYTg2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADCAwDQYJKoZIhvcNAQELBQADggEBADmpsIFmWE0OL+V/VSEeRK85 bQBdH2i5JNfwGoVzEVTzrAboFgu+DL+NBc3TtEAN6Z3bNh+McF2FqNli4fVo6CoF GokanioyTwujUpPmfZ4z6tFJxkJ0nPex3vbEzkKf0dNpGECr4SAvR37Q+837a1dW 9x3tCaFDV1Klw/HIwhQeX5UrgJxzbjcDRJ4jdZCnEFfHOmE+/l0NYDgE5BDDQ2kQ pNrn881YLJICkUWddNe3atVTiIq2eEkSRl+3KnHiD/hKH/ElPJZed/ygwa31WC9V FFM8XILO+Nq4nHxkr33/RgaKFbA3SCBL2QC3iO6kNKM3X4gg37CMzGxLcwj4Q+o= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:37 2025 by rpki-client