$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d3ff66-a8d4-4624-b122-66d52c0c5489.roa File: 69d3ff66-a8d4-4624-b122-66d52c0c5489.roa (raw, json) Hash identifier: oiYauQOcnZqOiDswgXwTnIUGhjK65CQMnhLVk6TmLM8= Subject key identifier: 0B:45:49:61:A3:A6:32:4C:BF:A3:62:6E:C6:D1:64:8C:06:5E:E4:CA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3FDA7186A7DECF7F4F15459F7F2E69F980A6B808 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d3ff66-a8d4-4624-b122-66d52c0c5489.roa Signing time: Fri 11 Apr 2025 00:30:06 +0000 ROA not before: Fri 11 Apr 2025 00:30:06 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:da:71:86:a7:de:cf:7f:4f:15:45:9f:7f:2e:69:f9:80:a6:b8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:30:06 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=43bd589f0a067916557b408e28a769078680539c35321376ec5182a548b545cf, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8c:72:92:a3:a3:05:88:3c:b5:ff:ea:e9:f0: 46:47:0f:71:21:20:64:39:a8:a6:9e:62:c2:30:07: 6f:d3:f4:59:0b:3c:c7:59:f0:80:95:ff:31:0d:22: ef:d2:d9:1d:ff:4a:33:d3:69:82:0e:3c:69:76:71: 67:83:10:ff:b3:44:b1:8d:ae:46:ac:f9:a6:fd:32: 5f:04:b7:32:b8:a4:ec:b9:3e:52:7b:5a:0c:02:cf: ea:af:e1:7e:d8:9e:c0:97:95:67:21:55:f3:b0:5d: 7a:a8:8a:1d:fe:5c:10:29:a5:6f:fa:bd:f1:81:52: 48:ed:5a:7f:b9:16:1f:d1:67:6b:6d:67:a5:dd:30: 78:49:0e:74:52:13:64:b3:4a:66:bf:aa:a1:89:2b: 1c:05:08:18:ec:f7:47:c4:2f:45:d5:f1:7d:cd:64: 3a:e3:00:30:1e:d9:48:08:7f:c1:44:ed:ae:07:35: 7a:5a:71:52:3d:f1:8d:53:dc:ea:33:75:17:65:28: 22:a8:51:56:ae:9e:6c:81:f9:e6:7e:22:63:17:84: 4c:aa:aa:4b:66:7d:c2:b2:9e:fc:df:e1:a3:b6:b4: 0d:57:55:90:72:e1:e7:a2:d9:af:2e:38:fd:33:67: 3a:d4:13:73:d7:d7:c1:98:53:6e:ef:9b:b0:d3:94: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:45:49:61:A3:A6:32:4C:BF:A3:62:6E:C6:D1:64:8C:06:5E:E4:CA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69d3ff66-a8d4-4624-b122-66d52c0c5489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c00::/48 Signature Algorithm: sha256WithRSAEncryption a0:02:5a:1a:5e:ab:fd:5f:6c:0f:16:dc:4a:ae:a2:83:c5:c2: 94:3f:ef:28:5d:95:7b:a3:1f:ea:85:39:3b:50:6d:96:fc:0a: 35:c4:c2:99:47:f3:74:86:0f:bc:0c:bc:5a:9a:11:a3:7e:35: 80:1a:0c:d6:fa:21:0f:c5:2f:43:9a:60:b5:5d:d7:c9:19:c2: 6d:d2:93:d7:3e:e9:d1:ae:93:04:dc:a9:72:e3:30:f3:54:f4: 1c:90:9c:29:5c:2e:e6:88:27:b9:05:26:e3:fd:0d:6e:c9:8b: 63:b6:7c:df:b6:f5:b2:cc:6b:63:ac:fe:89:05:11:88:83:d6: 86:7b:77:49:1d:46:99:8c:04:8c:11:c9:15:b8:fc:da:7e:ed: 2c:75:c5:2c:c2:60:eb:df:b9:de:86:c6:a9:aa:58:32:35:b8: 43:b4:82:eb:1d:e5:48:b8:a1:39:4d:8c:de:e5:c7:49:13:a9: 01:1c:c6:68:a9:04:1e:a3:cc:e8:18:8b:a3:d0:cf:ca:87:cb: 3e:99:64:1b:7b:3f:14:18:25:34:5b:be:39:e2:aa:be:10:78: ff:f6:f6:a3:ca:e3:96:e5:5a:01:33:22:f2:42:bc:25:84:b6: ce:9f:c5:ca:de:af:f4:62:87:fb:ed:33:4a:ba:40:e2:64:0c: c7:6c:78:05 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP9pxhqfez39PFUWffy5p+YCmuAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMDA2WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0M2JkNTg5ZjBhMDY3OTE2NTU3YjQwOGUyOGE3NjkwNzg2 ODA1MzljMzUzMjEzNzZlYzUxODJhNTQ4YjU0NWNmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVjHKSo6MFiDy1/+rp8EZHD3EhIGQ5qKaeYsIwB2/T9FkL PMdZ8ICV/zENIu/S2R3/SjPTaYIOPGl2cWeDEP+zRLGNrkas+ab9Ml8EtzK4pOy5 PlJ7WgwCz+qv4X7YnsCXlWchVfOwXXqoih3+XBAppW/6vfGBUkjtWn+5Fh/RZ2tt Z6XdMHhJDnRSE2SzSma/qqGJKxwFCBjs90fEL0XV8X3NZDrjADAe2UgIf8FE7a4H NXpacVI98Y1T3OozdRdlKCKoUVaunmyB+eZ+ImMXhEyqqktmfcKynvzf4aO2tA1X VZBy4eei2a8uOP0zZzrUE3PX18GYU27vm7DTlNy3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUC0VJYaOmMky/o2JuxtFkjAZe5MowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzY5ZDNmZjY2LWE4ZDQtNDYyNC1iMTIyLTY2ZDUyYzBjNTQ4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAAwDQYJKoZIhvcNAQELBQADggEBAKACWhpeq/1fbA8W3EquooPF wpQ/7yhdlXujH+qFOTtQbZb8CjXEwplH83SGD7wMvFqaEaN+NYAaDNb6IQ/FL0Oa YLVd18kZwm3Sk9c+6dGukwTcqXLjMPNU9ByQnClcLuaIJ7kFJuP9DW7Ji2O2fN+2 9bLMa2Os/okFEYiD1oZ7d0kdRpmMBIwRyRW4/Np+7Sx1xSzCYOvfud6GxqmqWDI1 uEO0gusd5Ui4oTlNjN7lx0kTqQEcxmipBB6jzOgYi6PQz8qHyz6ZZBt7PxQYJTRb vjniqr4QeP/29qPK45blWgEzIvJCvCWEts6fxcrer/Rih/vtM0q6QOJkDMdseAU= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:47 2025 by rpki-client