$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/793099d2-d8bb-4f78-8e97-4cd87968a269.roa File: 793099d2-d8bb-4f78-8e97-4cd87968a269.roa (raw, json) Hash identifier: bzHtc2eT5KU9dbvd2k38kj5o6/6XAPA0WH6v/xPclaA= Subject key identifier: D1:15:E2:16:F4:E8:2E:7C:C8:95:83:67:39:BE:0D:D4:13:68:FC:A0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 443C5DCF2C02ABE4EF8CFE2C264484F8B4F8A376 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/793099d2-d8bb-4f78-8e97-4cd87968a269.roa Signing time: Fri 11 Apr 2025 00:30:32 +0000 ROA not before: Fri 11 Apr 2025 00:30:32 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3c:5d:cf:2c:02:ab:e4:ef:8c:fe:2c:26:44:84:f8:b4:f8:a3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:30:32 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=1308c79abf4a855b851e2678851dfb4ca04fb7ec7822feeab62088a68419ad86, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:07:f3:1e:72:2c:6e:70:48:f8:0b:c5:e0: d7:1e:cc:b2:95:5e:5d:72:f7:23:ad:38:c3:04:c7: c7:4b:40:e2:67:7b:fb:e4:3f:a0:33:05:40:ce:9f: 31:2e:89:9f:b4:3e:45:ca:45:05:85:38:2d:22:e5: 19:d2:b9:8d:db:57:06:1b:2f:53:ff:34:d1:52:cb: f5:b2:70:34:59:a1:32:f7:aa:ab:9f:71:61:17:60: dc:e2:c8:54:29:9f:d8:5c:b4:72:3b:1a:94:ed:97: ce:2c:6f:fd:3b:7a:57:8f:88:c7:3f:52:67:1c:96: b0:ee:00:8e:5a:21:dc:ca:9e:2f:5c:09:26:89:f1: 13:82:fc:01:89:6c:51:7d:be:14:82:bb:12:95:19: 3b:15:d7:17:ac:89:b8:b2:37:8c:b9:3b:86:39:c7: db:f3:7c:ef:88:28:17:be:fd:f3:ad:f2:f8:12:73: 1e:79:97:f2:cd:3b:82:96:a8:7b:83:24:80:c8:dd: e7:e6:41:24:16:1e:1b:0d:e2:7a:b1:e5:ea:85:ce: e9:02:ea:3f:be:94:80:1b:f1:a2:63:a6:67:22:8c: d7:86:5c:b9:4d:68:79:7f:03:6d:63:3f:40:a2:a6: ef:15:67:60:57:6b:f1:76:15:a2:72:5b:0e:8b:a4: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:15:E2:16:F4:E8:2E:7C:C8:95:83:67:39:BE:0D:D4:13:68:FC:A0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/793099d2-d8bb-4f78-8e97-4cd87968a269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c06::/48 Signature Algorithm: sha256WithRSAEncryption a6:cd:c7:3d:d2:cd:9a:6c:1e:b3:f9:bd:96:5a:95:c9:87:a2: 49:46:11:b7:a0:86:12:1e:6b:c9:c3:fb:e7:c9:80:90:26:63: 9c:16:d6:4d:2b:65:5c:ec:08:84:3c:27:33:0c:9b:36:de:75: 43:04:cc:b2:17:4c:d2:c1:cd:05:ec:25:f4:5d:32:0a:62:be: 43:07:59:67:b1:e7:f4:df:f4:93:be:36:4d:c5:c0:2f:9d:c9: e7:ea:ba:01:b2:ba:80:09:70:68:e4:54:48:13:79:c8:16:be: d9:a3:02:43:23:2b:d0:4c:81:3b:9a:76:de:14:51:f5:2d:17: b8:18:65:04:ba:2b:b9:b3:54:54:2b:72:4e:c7:df:d2:8f:2a: 7b:82:ec:fb:bc:1d:1f:92:cb:f6:b9:3b:7e:31:f2:52:72:e6: 7a:83:a0:b6:fc:95:ee:4b:56:4f:0b:e6:58:9d:8a:c4:e5:0b: a9:d0:45:33:84:f5:2b:cd:4d:d4:35:65:44:f0:cb:21:6d:0e: a9:96:32:02:28:c3:c9:16:d1:51:6b:8c:26:d7:3b:a4:68:fd: 3a:17:3e:23:4e:e8:f3:d8:44:3a:27:4b:56:34:38:d3:84:d0: 45:9d:d1:d9:f8:7e:ea:51:35:f4:ca:14:a3:90:03:97:64:2c: 9d:6f:6b:5b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURDxdzywCq+TvjP4sJkSE+LT4o3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMDMyWhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzA4Yzc5YWJmNGE4NTViODUxZTI2Nzg4NTFkZmI0Y2Ew NGZiN2VjNzgyMmZlZWFiNjIwODhhNjg0MTlhZDg2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD6QfzHnIsbnBI+AvF4NcezLKVXl1y9yOtOMMEx8dLQOJn e/vkP6AzBUDOnzEuiZ+0PkXKRQWFOC0i5RnSuY3bVwYbL1P/NNFSy/WycDRZoTL3 qqufcWEXYNziyFQpn9hctHI7GpTtl84sb/07elePiMc/UmcclrDuAI5aIdzKni9c CSaJ8ROC/AGJbFF9vhSCuxKVGTsV1xesibiyN4y5O4Y5x9vzfO+IKBe+/fOt8vgS cx55l/LNO4KWqHuDJIDI3efmQSQWHhsN4nqx5eqFzukC6j++lIAb8aJjpmcijNeG XLlNaHl/A21jP0Cipu8VZ2BXa/F2FaJyWw6LpC3fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0RXiFvToLnzIlYNnOb4N1BNo/KAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzc5MzA5OWQyLWQ4YmItNGY3OC04ZTk3LTRjZDg3OTY4YTI2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAYwDQYJKoZIhvcNAQELBQADggEBAKbNxz3SzZpsHrP5vZZalcmH oklGEbeghhIea8nD++fJgJAmY5wW1k0rZVzsCIQ8JzMMmzbedUMEzLIXTNLBzQXs JfRdMgpivkMHWWex5/Tf9JO+Nk3FwC+dyefqugGyuoAJcGjkVEgTecgWvtmjAkMj K9BMgTuadt4UUfUtF7gYZQS6K7mzVFQrck7H39KPKnuC7Pu8HR+Sy/a5O34x8lJy 5nqDoLb8le5LVk8L5lidisTlC6nQRTOE9SvNTdQ1ZUTwyyFtDqmWMgIow8kW0VFr jCbXO6Ro/ToXPiNO6PPYRDonS1Y0ONOE0EWd0dn4fupRNfTKFKOQA5dkLJ1va1s= -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:06 2025 by rpki-client