$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69755fd2-2bf9-468e-a4b8-8294aacd571a.roa File: 69755fd2-2bf9-468e-a4b8-8294aacd571a.roa (raw, json) Hash identifier: 62rmZj88KkhSA6hmEfvsWuShIjZCsY29cVLAoDiiP0U= Subject key identifier: 3F:65:59:A5:52:F1:58:CA:18:B2:BC:57:F8:30:EC:3F:ED:39:19:9B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5E0C33D72B28DA22F8DA55374274D691F4CD4CAE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69755fd2-2bf9-468e-a4b8-8294aacd571a.roa Signing time: Fri 11 Apr 2025 00:31:22 +0000 ROA not before: Fri 11 Apr 2025 00:31:22 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0c:33:d7:2b:28:da:22:f8:da:55:37:42:74:d6:91:f4:cd:4c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:31:22 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=761b3d2af12f665362ee01ffc2b400adb077118a08734d78ffbb37dd3d0efb84, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:18:60:83:98:ab:e5:7e:71:c1:dd:50:53: 1d:87:5b:b1:29:4e:33:b1:37:91:96:20:e6:e4:e0: ce:b6:76:1a:70:ee:ca:62:61:cb:8b:49:2b:c4:ff: 44:e4:3e:5f:36:4c:eb:27:67:9b:62:ea:c0:8f:36: 89:41:4c:b4:80:64:c5:43:69:dd:bd:e6:da:78:ae: 07:f0:e6:4b:03:82:0a:95:91:69:f4:de:f4:8b:9e: cf:78:3b:ea:fc:5d:36:3c:46:7a:10:7f:7f:4c:5e: 23:68:48:3b:7f:6b:bb:08:ff:ec:12:26:69:79:bc: 18:15:12:22:97:1e:3d:c3:a1:d8:0c:9e:69:33:b5: 23:d9:ec:db:08:ee:f6:65:19:81:96:c7:ea:e3:85: 1b:a2:fb:8a:64:17:74:a9:12:1f:09:1f:25:5c:e7: 1e:4c:0e:1a:ba:c2:e7:f4:01:38:47:e4:9a:31:96: fd:ed:d4:d9:85:dc:d9:8a:41:79:af:4b:c7:b9:48: c2:95:24:33:f5:e6:5f:f5:f5:4d:cf:77:0d:14:38: 2d:28:94:4c:ce:2b:bd:64:07:bc:e5:ca:fe:23:ee: e9:33:d0:86:33:82:b5:72:54:d8:5a:ac:85:15:31: 8f:1e:93:96:61:e7:ae:89:aa:09:f0:32:86:cf:a3: 0b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:65:59:A5:52:F1:58:CA:18:B2:BC:57:F8:30:EC:3F:ED:39:19:9B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69755fd2-2bf9-468e-a4b8-8294aacd571a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c08::/48 Signature Algorithm: sha256WithRSAEncryption 9a:26:d1:65:fa:6c:bf:a9:36:80:c3:f0:79:3c:c5:84:f5:ed: ab:03:96:61:e6:e7:3a:ce:a7:57:ce:17:26:e8:7b:47:56:21: 13:c3:69:08:4b:de:3e:00:93:a4:e4:c5:c4:cb:4a:90:10:02: e4:38:8c:5a:09:d2:a5:bb:03:4b:4a:5a:ee:86:bc:88:f8:39: ce:93:d5:6b:84:2e:6a:64:89:04:a9:a8:9c:c0:1e:17:89:75: dc:ba:fa:1f:21:f3:3b:9e:80:9c:4a:af:ca:b5:d7:9f:c8:33: b1:20:30:1a:ff:af:90:2a:42:79:d2:e7:f3:5c:dc:20:7c:da: 81:e1:75:db:2f:e7:13:34:15:6c:56:35:a4:14:fe:d2:94:88: 8e:ef:70:a7:1f:62:1e:17:34:8b:7d:ec:d7:c0:68:22:05:f5: 88:36:9d:61:a8:15:b6:76:f7:27:56:0a:16:b8:62:07:2e:82: de:f1:80:24:07:58:2b:ef:a9:5a:4a:34:86:22:bb:a8:25:e1: 9d:99:7a:b8:62:97:b3:a6:ae:9c:5d:50:61:f0:d7:f1:ad:de: 5e:22:df:61:b7:3a:d0:84:a9:e2:36:6f:e5:03:e5:46:35:f6: 37:45:5e:51:a7:44:56:03:7a:6f:26:57:4d:d6:8d:c6:c4:8e: 17:76:69:65 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXgwz1yso2iL42lU3QnTWkfTNTK4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMTIyWhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjFiM2QyYWYxMmY2NjUzNjJlZTAxZmZjMmI0MDBhZGIw NzcxMThhMDg3MzRkNzhmZmJiMzdkZDNkMGVmYjg0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2NBhgg5ir5X5xwd1QUx2HW7EpTjOxN5GWIObk4M62dhpw 7spiYcuLSSvE/0TkPl82TOsnZ5ti6sCPNolBTLSAZMVDad295tp4rgfw5ksDggqV kWn03vSLns94O+r8XTY8RnoQf39MXiNoSDt/a7sI/+wSJml5vBgVEiKXHj3DodgM nmkztSPZ7NsI7vZlGYGWx+rjhRui+4pkF3SpEh8JHyVc5x5MDhq6wuf0AThH5Jox lv3t1NmF3NmKQXmvS8e5SMKVJDP15l/19U3Pdw0UOC0olEzOK71kB7zlyv4j7ukz 0IYzgrVyVNharIUVMY8ek5Zh566JqgnwMobPowtPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUP2VZpVLxWMoYsrxX+DDsP+05GZswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzY5NzU1ZmQyLTJiZjktNDY4ZS1hNGI4LTgyOTRhYWNkNTcxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAgwDQYJKoZIhvcNAQELBQADggEBAJom0WX6bL+pNoDD8Hk8xYT1 7asDlmHm5zrOp1fOFyboe0dWIRPDaQhL3j4Ak6TkxcTLSpAQAuQ4jFoJ0qW7A0tK Wu6GvIj4Oc6T1WuELmpkiQSpqJzAHheJddy6+h8h8zuegJxKr8q115/IM7EgMBr/ r5AqQnnS5/Nc3CB82oHhddsv5xM0FWxWNaQU/tKUiI7vcKcfYh4XNIt97NfAaCIF 9Yg2nWGoFbZ29ydWCha4Ygcugt7xgCQHWCvvqVpKNIYiu6gl4Z2Zerhil7Omrpxd UGHw1/Gt3l4i32G3OtCEqeI2b+UD5UY19jdFXlGnRFYDem8mV03WjcbEjhd2aWU= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:54 2025 by rpki-client