$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa File: 89848d84-ccf0-40c8-b12a-ac4d8910d997.roa (raw, json) Hash identifier: orHjulF1P3flVA9zUAWJT03KEgzaWthxduPgkBRtGcw= Subject key identifier: 16:95:E6:E4:1E:12:53:37:91:39:15:60:63:6D:08:EB:94:1D:13:86 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7969819F571C5F31AD69FCC2A0508D2BCEB1C7EA Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa Signing time: Fri 25 Apr 2025 17:40:26 +0000 ROA not before: Fri 25 Apr 2025 17:40:26 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:69:81:9f:57:1c:5f:31:ad:69:fc:c2:a0:50:8d:2b:ce:b1:c7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 25 17:40:26 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=b1a9962a9fccd58a033fb26c547ee2988e1a7e585f4e46a9d3eaf4235297b1dc, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:2e:b4:a7:fb:88:da:8b:5c:50:0c:d2:e7: f8:f5:c3:eb:2f:6f:3e:35:4d:2f:d5:70:27:ef:7e: 95:44:34:72:3c:43:d2:0b:cb:62:cf:df:40:9f:df: db:42:31:bc:ad:5d:4e:26:2e:26:c8:39:d0:74:30: 8a:fe:ca:e1:04:ec:f3:04:bd:f0:86:13:8b:78:ab: 8d:31:68:be:d3:3a:bd:e6:5f:34:1a:20:bf:04:74: a1:aa:fa:f3:55:82:79:d6:82:7d:ce:e9:3f:53:6f: 5a:3d:69:0e:a5:d7:fa:05:c2:2a:f8:7f:86:28:44: 95:6d:23:72:be:62:a3:da:cc:8c:89:20:50:16:96: af:ad:ad:bd:30:5c:fc:8d:ba:8b:bc:b1:50:78:03: ff:75:aa:43:9d:e2:95:e7:e0:03:63:91:14:55:e9: b4:8d:8f:f0:95:1a:c1:c7:e9:c7:21:47:60:26:8f: bc:25:f5:81:0c:bb:ad:9e:85:77:bc:c0:5c:d0:1d: 10:fc:d2:6d:ad:d4:b4:bc:ad:08:c9:a1:91:3a:86: 1a:42:02:60:25:28:5d:d9:2b:dc:c7:32:2c:c7:fd: 3b:92:1b:22:23:4b:53:7a:52:99:08:0a:4c:99:7e: 9a:a4:8f:73:c5:93:12:2e:9e:db:85:f9:11:e7:db: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:95:E6:E4:1E:12:53:37:91:39:15:60:63:6D:08:EB:94:1D:13:86 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3a7::/48 Signature Algorithm: sha256WithRSAEncryption 4b:3c:2f:fe:db:dd:3a:dc:83:21:e2:1c:f7:c2:64:48:0d:9d: d5:de:48:55:12:fd:6b:5d:89:55:0e:5e:cf:8b:c3:2b:7b:c5: 84:28:17:8e:1e:03:9f:37:48:a5:08:e4:4d:c1:36:e3:ee:3d: 62:49:3b:28:a6:08:f4:0c:af:87:d4:3b:8b:e4:ad:a5:51:b0: 40:77:27:25:d2:ea:9f:f1:96:4b:a7:04:03:cb:aa:90:e7:b4: a0:f8:c2:54:e9:0c:a4:da:db:28:e7:ac:67:6c:60:aa:f8:bc: 0b:eb:f4:fd:0a:f8:52:72:14:f2:a7:3d:38:2c:5a:43:40:3a: fa:d6:9f:d2:a1:28:40:ba:00:c4:51:9b:db:fc:4c:ee:97:3a: 3f:1b:39:64:31:54:69:54:ec:dd:31:88:74:af:c7:60:04:6b: f8:be:3a:24:06:b9:94:36:15:b9:3a:9f:21:50:37:1b:40:66: 7d:03:f6:e3:92:c7:d1:dc:d8:71:fa:ec:07:a1:8a:6c:3f:26: 17:3e:a7:f1:9e:16:ff:c5:4f:3d:58:72:65:30:8d:22:b4:51: 91:13:0f:6b:16:c2:76:9d:39:c9:44:ba:10:26:89:70:a0:4d: 42:08:15:41:33:b9:96:30:de:ad:51:6f:bd:05:4d:8d:3e:51: 50:33:12:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeWmBn1ccXzGtafzCoFCNK86xx+owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI1MTc0MDI2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWE5OTYyYTlmY2NkNThhMDMzZmIyNmM1NDdlZTI5ODhl MWE3ZTU4NWY0ZTQ2YTlkM2VhZjQyMzUyOTdiMWRjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDETy60p/uI2otcUAzS5/j1w+svbz41TS/VcCfvfpVENHI8 Q9ILy2LP30Cf39tCMbytXU4mLibIOdB0MIr+yuEE7PMEvfCGE4t4q40xaL7TOr3m XzQaIL8EdKGq+vNVgnnWgn3O6T9Tb1o9aQ6l1/oFwir4f4YoRJVtI3K+YqPazIyJ IFAWlq+trb0wXPyNuou8sVB4A/91qkOd4pXn4ANjkRRV6bSNj/CVGsHH6cchR2Am j7wl9YEMu62ehXe8wFzQHRD80m2t1LS8rQjJoZE6hhpCAmAlKF3ZK9zHMizH/TuS GyIjS1N6UpkICkyZfpqkj3PFkxIuntuF+RHn21N7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFpXm5B4SUzeRORVgY20I65QdE4YwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg5ODQ4ZDg0LWNjZjAtNDBjOC1iMTJhLWFjNGQ4OTEwZDk5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA6cwDQYJKoZIhvcNAQELBQADggEBAEs8L/7b3TrcgyHiHPfCZEgN ndXeSFUS/WtdiVUOXs+Lwyt7xYQoF44eA583SKUI5E3BNuPuPWJJOyimCPQMr4fU O4vkraVRsEB3JyXS6p/xlkunBAPLqpDntKD4wlTpDKTa2yjnrGdsYKr4vAvr9P0K +FJyFPKnPTgsWkNAOvrWn9KhKEC6AMRRm9v8TO6XOj8bOWQxVGlU7N0xiHSvx2AE a/i+OiQGuZQ2Fbk6nyFQNxtAZn0D9uOSx9Hc2HH67Aehimw/Jhc+p/GeFv/FTz1Y cmUwjSK0UZETD2sWwnadOclEuhAmiXCgTUIIFUEzuZYw3q1Rb70FTY0+UVAzEts= -----END CERTIFICATE-----Generated at Sun Apr 27 07:57:39 2025 by rpki-client