$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5664c850-a80d-4a7e-89b5-7e11c988b7e6.roa File: 5664c850-a80d-4a7e-89b5-7e11c988b7e6.roa (raw, json) Hash identifier: ABfUk9IFZLUhRM4u7AQsLpyz7sEz84A4KcL7N8vDE10= Subject key identifier: F0:EF:7C:D1:8D:2F:2E:E6:61:D6:A3:F2:D8:27:4F:BF:49:65:56:CF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6E002597F44E41AA1C56790F4BC6D06C90CFAB45 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5664c850-a80d-4a7e-89b5-7e11c988b7e6.roa Signing time: Mon 07 Apr 2025 15:20:17 +0000 ROA not before: Mon 07 Apr 2025 15:20:17 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:00:25:97:f4:4e:41:aa:1c:56:79:0f:4b:c6:d0:6c:90:cf:ab:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 7 15:20:17 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=0b8db5bdcb9b24b6abdfb90e064db295db33b06eace5ac857e473796ba17f383, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:bb:46:4b:df:38:be:85:08:90:6c:83:0e: 09:1f:bf:86:8d:56:b5:32:a6:51:06:75:f0:47:1d: b8:a4:7b:d7:17:a7:f4:5d:67:0e:58:c3:6e:15:3e: d2:9f:c6:e7:a3:7e:00:2c:1d:f2:f8:d5:d2:c5:0b: 0c:2a:10:ff:08:f6:5a:87:90:25:58:68:11:df:0f: 7c:23:4c:16:8e:48:fc:cf:6e:5d:d1:20:38:95:a8: 67:5c:58:b5:07:97:c7:9e:60:25:3e:d9:98:fb:84: 6a:21:89:70:4a:58:05:c9:53:21:06:c5:54:34:c1: e4:9c:ef:43:b5:b4:05:70:74:d7:80:62:46:8d:ef: 8b:c7:d1:ed:ad:b1:69:97:8b:bc:e9:66:a8:82:32: 71:b3:15:4c:10:cf:44:3b:fe:e2:3d:b7:ab:7b:11: 10:97:30:d1:e0:de:22:5c:15:5a:ad:f0:8a:c3:7a: b4:14:7c:fe:d9:0a:01:9b:cf:d5:e9:cb:40:59:d5: 20:be:c8:33:21:ac:b3:9e:5c:f1:fb:f6:b0:8e:f0: 24:de:33:6c:f1:80:42:85:ed:0b:c2:64:aa:8b:a0: 28:37:51:fe:88:81:ca:3f:5c:ed:5d:b6:7a:e2:d8: 1a:49:24:35:9d:6c:cb:9f:11:0f:59:58:b6:95:74: 70:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EF:7C:D1:8D:2F:2E:E6:61:D6:A3:F2:D8:27:4F:BF:49:65:56:CF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5664c850-a80d-4a7e-89b5-7e11c988b7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c60::/44 Signature Algorithm: sha256WithRSAEncryption a5:18:e2:77:c4:7b:64:db:b7:01:ae:d0:f1:3a:87:f3:dc:93: 20:c8:4e:59:e5:5a:55:1c:b3:e8:07:79:4c:8d:da:e3:81:3c: 98:8f:7f:11:19:e8:83:10:8a:12:8b:1f:1e:2d:02:59:c5:5a: e4:e1:ab:d9:e6:53:e7:62:34:09:f5:00:b7:24:e5:51:bf:07: 14:eb:22:47:70:c8:6f:33:c5:77:57:1f:d5:33:58:b6:18:a6: 96:8c:26:da:d9:3d:b5:f9:e4:61:a8:47:7f:ec:87:5a:fd:39: b5:ac:7d:35:22:03:a9:45:fc:37:89:6f:96:96:e2:33:d7:6d: 08:7a:ee:2b:46:d4:81:7f:54:11:18:b3:cf:27:6b:19:81:bb: e9:c2:3b:4c:c5:93:90:49:25:53:38:19:ea:92:43:48:a5:07: f5:8a:54:a8:13:4e:4e:e1:1a:67:d7:fa:72:6e:33:27:6a:c5: 5c:db:ee:09:af:01:47:95:0e:49:de:a1:10:ff:a0:b5:35:b2: df:01:7b:4c:b4:fb:67:95:c5:35:f6:4e:d1:a0:46:64:52:de: 7e:92:5f:cb:4e:8c:af:09:b1:e6:c0:cd:2d:fd:54:f3:63:e3: 26:de:bb:46:d5:06:c2:39:ce:e5:99:2b:1e:25:1a:79:db:dc: 77:10:63:8b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbgAll/ROQaocVnkPS8bQbJDPq0UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDA3MTUyMDE3WhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjhkYjViZGNiOWIyNGI2YWJkZmI5MGUwNjRkYjI5NWRi MzNiMDZlYWNlNWFjODU3ZTQ3Mzc5NmJhMTdmMzgzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSzrtGS984voUIkGyDDgkfv4aNVrUyplEGdfBHHbike9cX p/RdZw5Yw24VPtKfxuejfgAsHfL41dLFCwwqEP8I9lqHkCVYaBHfD3wjTBaOSPzP bl3RIDiVqGdcWLUHl8eeYCU+2Zj7hGohiXBKWAXJUyEGxVQ0weSc70O1tAVwdNeA YkaN74vH0e2tsWmXi7zpZqiCMnGzFUwQz0Q7/uI9t6t7ERCXMNHg3iJcFVqt8IrD erQUfP7ZCgGbz9Xpy0BZ1SC+yDMhrLOeXPH79rCO8CTeM2zxgEKF7QvCZKqLoCg3 Uf6Igco/XO1dtnri2BpJJDWdbMufEQ9ZWLaVdHBNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8O980Y0vLuZh1qPy2CdPv0llVs8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU2NjRjODUwLWE4MGQtNGE3ZS04OWI1LTdlMTFjOTg4YjdlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADGAwDQYJKoZIhvcNAQELBQADggEBAKUY4nfEe2TbtwGu0PE6h/Pc kyDITlnlWlUcs+gHeUyN2uOBPJiPfxEZ6IMQihKLHx4tAlnFWuThq9nmU+diNAn1 ALck5VG/BxTrIkdwyG8zxXdXH9UzWLYYppaMJtrZPbX55GGoR3/sh1r9ObWsfTUi A6lF/DeJb5aW4jPXbQh67itG1IF/VBEYs88naxmBu+nCO0zFk5BJJVM4GeqSQ0il B/WKVKgTTk7hGmfX+nJuMydqxVzb7gmvAUeVDkneoRD/oLU1st8Be0y0+2eVxTX2 TtGgRmRS3n6SX8tOjK8JsebAzS39VPNj4ybeu0bVBsI5zuWZKx4lGnnb3HcQY4s= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:31 2025 by rpki-client