$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa File: 57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa (raw, json) Hash identifier: nEG6OKA0OVknLRUa7sklF39tXhoo77DFOHizZGCg1pA= Subject key identifier: 74:52:44:76:ED:F8:E2:0B:19:6C:3F:31:B1:EB:D3:99:33:E8:0F:4F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 30FD2F6F45FB7E96EAE57703A5280DB9416C375F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa Signing time: Fri 11 Apr 2025 00:31:24 +0000 ROA not before: Fri 11 Apr 2025 00:31:24 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fd:2f:6f:45:fb:7e:96:ea:e5:77:03:a5:28:0d:b9:41:6c:37:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:31:24 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=f477c11a02533e14e367d50be0ce7139b231ac144c9070727616ff1a91f43b9d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:03:dd:48:cd:0a:2c:c7:9d:f8:d8:be:f9: f4:03:4b:36:d0:ff:5e:a4:99:98:4b:8e:a5:c0:34: f2:0a:e3:f4:3f:ee:7e:fe:91:ee:c7:b3:57:c8:83: 7f:65:9c:c0:11:57:9b:1e:c7:40:a4:89:75:37:4e: 33:d4:ee:11:d0:d5:cb:d2:b7:6b:f2:45:b9:d3:88: 8b:3a:78:5f:29:53:10:9f:96:64:36:59:a5:3c:b1: bb:49:ea:cd:17:74:1d:f2:38:8c:88:e8:e0:f1:58: b2:0c:d3:43:4a:bc:c9:09:cd:91:c0:69:32:42:49: c1:32:0f:71:b0:a1:3c:21:2b:db:a7:9b:9b:f4:15: 90:e1:9d:8d:bb:be:41:ba:58:0d:60:6e:cd:01:ce: 9c:c8:95:49:80:c0:ab:1e:ff:be:0c:fc:f1:71:ad: 1c:d5:7a:27:31:68:71:31:17:01:a5:55:1d:3c:dd: 2d:af:32:1b:35:48:73:ca:09:1d:16:7c:c2:8d:24: 9d:60:b6:5e:8f:c2:8f:3f:02:ed:f3:96:fc:cf:05: 31:6c:95:04:29:4b:a8:9a:1a:7b:a1:dd:35:f8:42: ae:1e:c7:48:6b:ff:1e:c1:d1:8a:d5:9e:55:ac:bb: 72:63:93:06:02:0a:19:e6:cf:ab:d0:79:8e:50:53: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:52:44:76:ED:F8:E2:0B:19:6C:3F:31:B1:EB:D3:99:33:E8:0F:4F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c09::/48 Signature Algorithm: sha256WithRSAEncryption a6:86:2e:ce:d9:c6:55:32:97:5d:67:21:08:73:18:a8:4a:37: d8:9e:f5:9e:3a:52:2a:7f:c2:a3:fa:f0:b1:ce:a8:e6:3b:d1: 96:40:fc:ac:2a:2e:5b:e4:fd:d2:60:4a:30:eb:c2:97:8f:99: ce:ee:1b:d5:c2:00:c8:41:4a:4e:77:4d:04:e7:34:53:72:95: ad:80:c9:b2:9e:bc:16:7c:cb:9c:81:0e:99:ed:eb:38:38:b3: d3:06:f6:85:7c:d4:c7:38:43:41:a4:bd:bf:77:83:a4:af:b6: a2:08:b7:fc:e2:6f:40:eb:b7:0d:7a:52:3d:63:a6:70:37:a2: 28:46:28:50:3a:1e:52:06:1d:b7:c0:03:b9:2f:89:7d:0c:ad: 8f:a5:6b:24:1e:30:94:36:59:47:c7:1f:71:95:25:27:0e:be: 15:c2:9e:83:bd:a9:a2:61:4b:32:65:c5:49:04:7f:f7:19:fe: 0a:32:aa:33:5f:ff:ac:51:6c:5a:3a:51:d7:ef:81:e2:31:04: cb:87:81:b3:7d:05:60:b9:0e:4a:b0:b8:b7:00:10:fd:a2:67: da:57:e2:60:b7:c1:63:88:88:91:69:bd:1d:0a:5c:43:ac:1b: 4f:02:b5:74:74:ec:95:c0:0d:65:d0:53:ea:56:77:21:b6:99: c4:33:42:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMP0vb0X7fpbq5XcDpSgNuUFsN18wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMTI0WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDc3YzExYTAyNTMzZTE0ZTM2N2Q1MGJlMGNlNzEzOWIy MzFhYzE0NGM5MDcwNzI3NjE2ZmYxYTkxZjQzYjlkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8FwPdSM0KLMed+Ni++fQDSzbQ/16kmZhLjqXANPIK4/Q/ 7n7+ke7Hs1fIg39lnMARV5sex0CkiXU3TjPU7hHQ1cvSt2vyRbnTiIs6eF8pUxCf lmQ2WaU8sbtJ6s0XdB3yOIyI6ODxWLIM00NKvMkJzZHAaTJCScEyD3GwoTwhK9un m5v0FZDhnY27vkG6WA1gbs0BzpzIlUmAwKse/74M/PFxrRzVeicxaHExFwGlVR08 3S2vMhs1SHPKCR0WfMKNJJ1gtl6Pwo8/Au3zlvzPBTFslQQpS6iaGnuh3TX4Qq4e x0hr/x7B0YrVnlWsu3JjkwYCChnmz6vQeY5QU/n1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdFJEdu344gsZbD8xsevTmTPoD08wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU3ZTc2ZTM2LTFiMWMtNDdmZS04OWUxLTE3ZmE3YTM5YzBhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAkwDQYJKoZIhvcNAQELBQADggEBAKaGLs7ZxlUyl11nIQhzGKhK N9ie9Z46Uip/wqP68LHOqOY70ZZA/KwqLlvk/dJgSjDrwpePmc7uG9XCAMhBSk53 TQTnNFNyla2AybKevBZ8y5yBDpnt6zg4s9MG9oV81Mc4Q0Gkvb93g6SvtqIIt/zi b0Drtw16Uj1jpnA3oihGKFA6HlIGHbfAA7kviX0MrY+layQeMJQ2WUfHH3GVJScO vhXCnoO9qaJhSzJlxUkEf/cZ/goyqjNf/6xRbFo6UdfvgeIxBMuHgbN9BWC5Dkqw uLcAEP2iZ9pX4mC3wWOIiJFpvR0KXEOsG08CtXR07JXADWXQU+pWdyG2mcQzQio= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:57 2025 by rpki-client