$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa File: 5ab304f6-e1e5-467a-88a2-103320530506.roa (raw, json) Hash identifier: YMAB1Bp3gLHsk5hVhAS5T2ALJsnzI7jTSUOWZ6m1AgI= Subject key identifier: 1A:76:F3:10:51:92:A4:86:20:29:76:3B:59:BE:13:2A:3F:71:9E:68 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2B5F3BE3F2BC513D5B687299E684CAE938180C77 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa Signing time: Tue 01 Apr 2025 00:51:22 +0000 ROA not before: Tue 01 Apr 2025 00:51:22 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:627::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5f:3b:e3:f2:bc:51:3d:5b:68:72:99:e6:84:ca:e9:38:18:0c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:51:22 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: serialNumber=21dbb371d88f970d292d1e16aa9d0db7edfc6b94571eb6a594ee3988f86b88ab, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:c4:d1:a5:ab:12:36:8a:ae:0e:66:36:f5: f6:e4:93:16:f1:7a:e3:18:b5:96:7c:23:89:3e:53: fd:66:0e:96:05:b2:ad:14:98:ab:2b:7a:70:d0:27: 98:32:d6:e5:d8:c9:73:dd:ee:42:d7:1f:1d:96:0f: 41:e3:ba:1c:e9:8a:bd:a5:01:eb:62:06:bd:df:45: 12:c4:4e:f4:c8:75:b0:fb:21:f0:da:96:6a:c5:0f: 5b:00:0e:48:65:4f:49:6d:43:5b:38:95:70:8c:ae: 54:df:8f:85:f0:69:72:d9:9d:00:18:c6:ee:5e:60: 9c:32:7b:46:99:f5:04:ce:2b:a0:1a:53:18:de:62: 39:b2:bc:79:46:31:d8:75:91:e1:82:75:1d:a9:2a: 37:1e:d8:d1:9d:0c:f8:a2:24:0c:88:1e:e3:4c:37: e8:fd:82:76:34:c8:9a:17:f3:95:66:52:07:94:ce: 71:c5:79:17:5b:f7:8f:93:a2:fe:55:1c:c5:86:95: 88:c0:bb:8b:60:72:1d:82:3f:36:5c:96:04:9e:a8: ab:a0:15:24:42:ab:a6:e4:8e:87:d0:00:ed:33:87: 0a:25:d1:22:be:cc:7c:9f:4a:ad:d8:38:65:e0:45: 6e:8a:b9:8d:bd:b3:67:bc:8a:9d:87:3f:4c:93:2a: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:76:F3:10:51:92:A4:86:20:29:76:3B:59:BE:13:2A:3F:71:9E:68 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:627::/48 Signature Algorithm: sha256WithRSAEncryption 17:a9:fc:a0:84:d2:c9:09:6c:cc:9f:e6:4e:e9:28:e5:01:db: 59:37:a5:2c:96:ca:9b:c9:16:47:2a:0e:34:63:4a:03:c8:c2: 40:ff:36:ee:07:e9:47:53:51:65:16:6b:13:45:1f:97:1a:e7: b1:0a:0f:d9:f6:1e:b8:d7:dc:b1:eb:06:63:da:1b:71:db:cd: 62:83:00:b7:aa:42:d2:c1:d5:ee:16:84:ac:fc:91:1e:9c:ea: 0c:16:13:f6:c0:93:d3:a3:55:1b:01:f9:99:a8:d9:8d:c4:0c: 61:24:4a:8a:66:ad:42:97:77:cb:43:42:17:02:54:65:49:2e: ad:9b:fa:38:77:5d:1d:e7:78:60:59:4f:6d:28:42:3c:b6:8f: 48:95:3d:a3:cf:9b:e0:27:70:dc:e0:01:4b:01:f8:3c:7e:7f: 56:a9:4a:b2:08:af:15:fa:46:a6:eb:8d:06:ef:e0:6b:08:fd: b0:67:d4:a3:d4:bc:57:a6:fe:7a:b1:8a:66:92:cc:f7:54:cd: 2e:f0:bd:c6:00:6e:d6:11:d3:9e:71:12:4d:7f:11:1b:c1:07: 5c:9c:c7:82:35:df:87:99:fc:72:51:15:64:13:10:5c:7b:97: ff:83:9f:9f:78:5b:bc:01:a2:ac:2e:f6:81:7c:72:81:28:e9: 5a:9b:85:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK1874/K8UT1baHKZ5oTK6TgYDHcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA1MTIyWhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMWRiYjM3MWQ4OGY5NzBkMjkyZDFlMTZhYTlkMGRiN2Vk ZmM2Yjk0NTcxZWI2YTU5NGVlMzk4OGY4NmI4OGFiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj68TRpasSNoquDmY29fbkkxbxeuMYtZZ8I4k+U/1mDpYF sq0UmKsrenDQJ5gy1uXYyXPd7kLXHx2WD0Hjuhzpir2lAetiBr3fRRLETvTIdbD7 IfDalmrFD1sADkhlT0ltQ1s4lXCMrlTfj4XwaXLZnQAYxu5eYJwye0aZ9QTOK6Aa UxjeYjmyvHlGMdh1keGCdR2pKjce2NGdDPiiJAyIHuNMN+j9gnY0yJoX85VmUgeU znHFeRdb94+Tov5VHMWGlYjAu4tgch2CPzZclgSeqKugFSRCq6bkjofQAO0zhwol 0SK+zHyfSq3YOGXgRW6KuY29s2e8ip2HP0yTKqJvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGnbzEFGSpIYgKXY7Wb4TKj9xnmgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVhYjMwNGY2LWUxZTUtNDY3YS04OGEyLTEwMzMyMDUzMDUwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABicwDQYJKoZIhvcNAQELBQADggEBABep/KCE0skJbMyf5k7pKOUB 21k3pSyWypvJFkcqDjRjSgPIwkD/Nu4H6UdTUWUWaxNFH5ca57EKD9n2HrjX3LHr BmPaG3HbzWKDALeqQtLB1e4WhKz8kR6c6gwWE/bAk9OjVRsB+Zmo2Y3EDGEkSopm rUKXd8tDQhcCVGVJLq2b+jh3XR3neGBZT20oQjy2j0iVPaPPm+AncNzgAUsB+Dx+ f1apSrIIrxX6RqbrjQbv4GsI/bBn1KPUvFem/nqximaSzPdUzS7wvcYAbtYR055x Ek1/ERvBB1ycx4I134eZ/HJRFWQTEFx7l/+Dn594W7wBoqwu9oF8coEo6VqbhT8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:51:55 2025 by rpki-client