$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8eb2ef72-1951-4670-8ba4-4f5f7aebc2f4.roa File: 8eb2ef72-1951-4670-8ba4-4f5f7aebc2f4.roa (raw, json) Hash identifier: 5FavA34gGHw5yTzl1KqDU36KhDwPtvcuNoV2A2h7msQ= Subject key identifier: F1:4F:2A:00:C7:35:82:84:81:6D:43:86:F6:21:27:59:66:74:E4:2F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 258FB22869FBB3F371DD4DA89D495281346F0707 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8eb2ef72-1951-4670-8ba4-4f5f7aebc2f4.roa Signing time: Sat 26 Apr 2025 00:50:12 +0000 ROA not before: Sat 26 Apr 2025 00:50:12 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:545::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8f:b2:28:69:fb:b3:f3:71:dd:4d:a8:9d:49:52:81:34:6f:07:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:50:12 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=f654020def8254bc7151acb7e3310a80fa0159f6b7c5e63491f48ca4838e2313, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:47:12:f5:cf:5a:c3:da:05:d2:6e:b7:fd: 11:ca:5e:e4:e7:02:b9:d8:57:34:7e:68:5a:6c:f6: 1a:b8:4f:f2:d2:28:8d:2d:c7:58:d9:13:ee:c1:93: 1d:ab:c5:63:35:56:95:ff:15:bf:bf:d0:52:dd:96: a1:73:7f:36:88:33:f9:cb:9a:c2:ed:ee:f4:5f:47: a2:99:52:ca:91:eb:61:e1:5e:c5:d8:e5:b6:57:82: 16:c4:06:de:0b:0d:58:42:b3:91:9b:3c:43:6b:a8: 8a:94:84:6f:7d:df:40:c9:46:91:cf:d3:21:e3:40: 5f:98:49:2e:06:8d:44:83:1e:59:d1:25:c6:de:b6: 4a:8b:cb:74:72:9d:5e:58:fe:06:3a:a3:7e:7f:f3: a5:9c:d9:cc:55:eb:ce:29:74:65:b1:f4:7b:c5:9b: d3:13:d5:40:84:25:0e:b3:cb:f9:98:60:b3:22:3f: 84:7b:04:ad:2f:ec:44:8e:c9:ca:93:6b:66:d0:81: eb:0a:d6:24:50:a1:97:a3:66:d4:68:4f:bf:ae:2f: c8:86:0b:54:c8:7d:81:58:6b:b9:b5:01:bd:ec:dd: 9d:1f:74:20:f6:15:b6:ef:36:19:35:2e:05:fd:37: ce:b1:84:ac:85:1f:c3:19:2e:6f:f8:0e:b9:b6:dc: d2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4F:2A:00:C7:35:82:84:81:6D:43:86:F6:21:27:59:66:74:E4:2F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8eb2ef72-1951-4670-8ba4-4f5f7aebc2f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:545::/48 Signature Algorithm: sha256WithRSAEncryption 1f:f0:2e:de:94:0f:6a:39:b8:02:73:68:25:41:56:32:54:b2: b0:fc:01:06:b4:39:c3:ac:09:1f:c6:b2:9b:ab:5d:24:f6:29: 8e:f4:2e:fb:75:8e:97:ca:6b:6a:4a:ea:79:f2:b3:3d:19:65: 74:40:15:b6:d3:96:cb:1b:12:ac:4d:eb:87:35:6e:97:e8:59: 21:e0:2a:c3:eb:9b:a9:19:16:3a:53:79:25:58:87:cc:ad:9a: 1e:a2:f9:aa:05:71:61:8c:f3:82:13:a9:c4:06:31:c1:59:43: 87:a9:d9:dc:b4:93:64:3b:6b:0e:68:56:39:83:31:f3:27:b7: 42:3b:fd:f0:f4:3c:cf:85:3d:db:44:59:67:f4:ef:b6:ed:67: 2c:d3:52:46:4c:69:82:cd:e7:e3:32:5f:3e:4b:4e:80:39:65: 3c:21:44:de:3e:4b:f2:05:2a:ea:27:11:e8:2d:bb:f0:b9:63: 9f:a2:a7:2e:7b:4c:72:93:b2:66:4a:e7:28:83:5a:0f:24:92: b0:de:13:f3:19:98:f3:db:ac:3a:68:91:32:dc:51:d6:65:82: 84:83:f8:d8:94:38:9a:63:6f:60:b8:c1:09:a2:62:59:49:93: 82:a0:80:c2:92:fc:01:07:fc:27:2f:bf:bf:df:8c:8a:7f:85: eb:86:3b:c9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJY+yKGn7s/Nx3U2onUlSgTRvBwcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MDEyWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjU0MDIwZGVmODI1NGJjNzE1MWFjYjdlMzMxMGE4MGZh MDE1OWY2YjdjNWU2MzQ5MWY0OGNhNDgzOGUyMzEzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwU0cS9c9aw9oF0m63/RHKXuTnArnYVzR+aFps9hq4T/LS KI0tx1jZE+7Bkx2rxWM1VpX/Fb+/0FLdlqFzfzaIM/nLmsLt7vRfR6KZUsqR62Hh XsXY5bZXghbEBt4LDVhCs5GbPENrqIqUhG9930DJRpHP0yHjQF+YSS4GjUSDHlnR JcbetkqLy3RynV5Y/gY6o35/86Wc2cxV684pdGWx9HvFm9MT1UCEJQ6zy/mYYLMi P4R7BK0v7ESOycqTa2bQgesK1iRQoZejZtRoT7+uL8iGC1TIfYFYa7m1Ab3s3Z0f dCD2FbbvNhk1LgX9N86xhKyFH8MZLm/4Drm23NLnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8U8qAMc1goSBbUOG9iEnWWZ05C8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzhlYjJlZjcyLTE5NTEtNDY3MC04YmE0LTRmNWY3YWViYzJmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUUwDQYJKoZIhvcNAQELBQADggEBAB/wLt6UD2o5uAJzaCVBVjJU srD8AQa0OcOsCR/GspurXST2KY70Lvt1jpfKa2pK6nnysz0ZZXRAFbbTlssbEqxN 64c1bpfoWSHgKsPrm6kZFjpTeSVYh8ytmh6i+aoFcWGM84ITqcQGMcFZQ4ep2dy0 k2Q7aw5oVjmDMfMnt0I7/fD0PM+FPdtEWWf077btZyzTUkZMaYLN5+MyXz5LToA5 ZTwhRN4+S/IFKuonEegtu/C5Y5+ipy57THKTsmZK5yiDWg8kkrDeE/MZmPPbrDpo kTLcUdZlgoSD+NiUOJpjb2C4wQmiYllJk4KggMKS/AEH/Ccvv7/fjIp/heuGO8k= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:56 2025 by rpki-client