$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f4d9a8e-be4a-4717-b47c-2e16952fd9a5.roa File: 6f4d9a8e-be4a-4717-b47c-2e16952fd9a5.roa (raw, json) Hash identifier: DqKfcZJJlAxan9cvGTPZqIkXJJvqwSkSbmSAH07Tovc= Subject key identifier: 9F:23:1F:D5:6F:7C:C1:33:E1:7E:5B:05:44:AF:17:B2:37:D4:13:76 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0B371EC54EC3234FD297B60CBC31205DC2A3F4C3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f4d9a8e-be4a-4717-b47c-2e16952fd9a5.roa Signing time: Mon 21 Apr 2025 18:31:04 +0000 ROA not before: Mon 21 Apr 2025 18:31:04 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:37:1e:c5:4e:c3:23:4f:d2:97:b6:0c:bc:31:20:5d:c2:a3:f4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 21 18:31:04 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=b45ad566cab44c889215f0afbfd4f81d9bfd9aedf0eff4b3ed2dc74eb06cac7b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:b4:3a:23:56:1e:5e:80:99:fa:ba:65:79: fa:8d:00:01:89:b2:56:22:22:f2:10:b2:86:61:bc: 56:70:90:63:e5:77:85:2c:8f:28:a2:22:18:68:6d: 17:8c:ce:76:f9:ce:dc:58:80:09:b1:98:5f:ec:f9: 64:c4:1c:b3:5a:3f:69:ec:9f:5d:5f:86:cb:9a:f5: df:9a:85:7e:4d:20:0d:08:5a:c2:ad:c8:ca:d1:8f: 3e:32:48:fc:a5:77:2f:07:14:35:62:54:06:1e:ab: 37:d8:9d:a1:e3:dc:84:ec:2f:5c:76:36:4b:e3:d4: fd:ad:1c:71:b9:5e:e3:69:e6:07:e5:33:a7:fb:b7: 41:52:72:32:96:50:4c:f5:63:da:29:c0:e3:42:65: e6:0b:24:c9:7d:ce:e7:b0:8f:fb:57:b8:62:ab:e2: 50:3a:71:39:36:63:59:00:e8:4f:96:cb:a0:d5:07: 09:38:92:0a:fd:22:75:15:60:86:f5:14:a2:77:ec: d2:56:9f:3f:00:63:b7:da:19:93:12:27:dd:78:f6: bc:70:9e:1f:0c:ff:3e:9f:cd:7f:78:6d:9e:04:6d: 1b:94:f5:65:af:d7:3a:d8:23:29:f3:48:dd:e8:80: bc:cd:bf:d1:62:fe:15:98:51:88:4e:66:d4:2b:32: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:23:1F:D5:6F:7C:C1:33:E1:7E:5B:05:44:AF:17:B2:37:D4:13:76 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f4d9a8e-be4a-4717-b47c-2e16952fd9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1f::/48 Signature Algorithm: sha256WithRSAEncryption a9:3a:c9:c0:ce:ab:75:d6:fb:62:26:d7:d6:8c:1a:30:e1:12: 55:28:f6:3b:b2:37:7f:e6:be:97:30:9e:16:64:09:c6:2b:b2: 65:bb:42:23:1d:53:69:9b:33:6f:8b:2a:8b:af:19:04:d1:c4: f0:28:04:c6:bc:54:9e:8a:8e:a8:19:76:1e:72:55:45:5d:4b: d3:ce:4c:09:f3:5e:ac:cd:1b:68:89:6b:f2:c0:df:38:26:46: 80:c4:33:56:47:32:7e:3b:33:e1:f9:85:51:15:d6:fd:f2:33: 5e:33:99:45:c5:fe:22:ed:a7:b6:20:83:44:19:39:94:81:e4: a4:64:59:6f:28:35:c5:17:b3:af:1e:a6:88:8e:8b:1e:c9:51: 4e:6c:11:19:3b:f7:79:f1:1b:20:8a:3d:20:62:f3:36:7b:23: 83:b4:f4:39:9d:79:78:d1:a5:9d:51:40:8d:66:e0:18:f7:7d: 34:e6:88:0f:18:f5:44:2c:02:ab:75:db:2f:68:1c:aa:52:f6: 30:71:10:24:31:fc:34:2b:eb:8a:19:30:62:6e:98:21:c2:14: 84:1e:1d:e1:55:f3:45:a9:cd:4f:cc:53:f1:2b:5b:c1:19:88: 29:6f:b9:66:5c:2a:4f:16:54:41:b4:68:73:e4:32:ec:9b:b9: ea:5c:d1:70 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCzcexU7DI0/Sl7YMvDEgXcKj9MMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDIxMTgzMTA0WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDVhZDU2NmNhYjQ0Yzg4OTIxNWYwYWZiZmQ0ZjgxZDli ZmQ5YWVkZjBlZmY0YjNlZDJkYzc0ZWIwNmNhYzdiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8UrQ6I1YeXoCZ+rplefqNAAGJslYiIvIQsoZhvFZwkGPl d4UsjyiiIhhobReMznb5ztxYgAmxmF/s+WTEHLNaP2nsn11fhsua9d+ahX5NIA0I WsKtyMrRjz4ySPyldy8HFDViVAYeqzfYnaHj3ITsL1x2Nkvj1P2tHHG5XuNp5gfl M6f7t0FScjKWUEz1Y9opwONCZeYLJMl9zuewj/tXuGKr4lA6cTk2Y1kA6E+Wy6DV Bwk4kgr9InUVYIb1FKJ37NJWnz8AY7faGZMSJ9149rxwnh8M/z6fzX94bZ4EbRuU 9WWv1zrYIynzSN3ogLzNv9Fi/hWYUYhOZtQrMgMBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnyMf1W98wTPhflsFRK8XsjfUE3YwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzZmNGQ5YThlLWJlNGEtNDcxNy1iNDdjLTJlMTY5NTJmZDlhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADB8wDQYJKoZIhvcNAQELBQADggEBAKk6ycDOq3XW+2Im19aMGjDh ElUo9juyN3/mvpcwnhZkCcYrsmW7QiMdU2mbM2+LKouvGQTRxPAoBMa8VJ6KjqgZ dh5yVUVdS9POTAnzXqzNG2iJa/LA3zgmRoDEM1ZHMn47M+H5hVEV1v3yM14zmUXF /iLtp7Ygg0QZOZSB5KRkWW8oNcUXs68epoiOix7JUU5sERk793nxGyCKPSBi8zZ7 I4O09DmdeXjRpZ1RQI1m4Bj3fTTmiA8Y9UQsAqt12y9oHKpS9jBxECQx/DQr64oZ MGJumCHCFIQeHeFV80WpzU/MU/ErW8EZiClvuWZcKk8WVEG0aHPkMuybuepc0XA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:58 2025 by rpki-client