$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa File: 941f79ce-715f-49f4-a576-333c065d82c6.roa (raw, json) Hash identifier: HJNXR11c8nRl3tXT2U2MzebHaW6Vy/c6QcARcL6Vdh8= Subject key identifier: E5:FE:F4:E7:50:21:41:D4:43:0E:F8:C9:AA:3F:18:B7:DB:1A:3A:09 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4CC2B99D195A305ECBBB297398A6B542E5CDE8AA Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa Signing time: Sat 26 Apr 2025 00:50:09 +0000 ROA not before: Sat 26 Apr 2025 00:50:09 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:48f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c2:b9:9d:19:5a:30:5e:cb:bb:29:73:98:a6:b5:42:e5:cd:e8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:50:09 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=0542c0594e20718df42a075877adf0a40c86a246b65fe30416a25ea742cee76d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:79:c2:c1:2a:9f:a7:62:82:31:de:4e:7c: 9c:7d:e1:b9:18:74:16:c0:f5:ab:a2:6c:61:ac:db: 2b:8e:f1:19:a0:d2:96:a9:4b:ff:a9:0b:c4:4e:39: 39:ac:62:e7:61:f1:16:e7:a4:51:ca:a5:95:49:f4: c2:ee:87:1d:b9:04:1e:c8:5e:85:2c:a1:cc:70:dc: 68:ed:5e:c9:bb:ca:2c:2d:67:1d:7f:f8:1e:10:a3: fb:21:a3:b8:07:68:59:b8:61:89:4c:f1:d7:e8:ec: 18:8f:0a:61:ec:b9:cf:3e:65:48:42:46:71:f5:af: 83:10:b3:aa:26:13:c3:cb:53:11:d7:46:96:38:1f: b5:97:c3:01:ed:16:9f:ce:4c:8b:c2:5f:16:b1:98: 7f:8c:83:aa:5e:89:0a:f4:66:c5:0a:4c:bd:88:fe: 84:3f:af:3e:f3:cb:b0:47:19:fe:ec:86:74:04:11: 92:73:56:8c:0a:c4:0b:57:3a:54:7a:4f:95:bc:cd: 7f:a2:4d:85:3d:6a:79:a8:25:59:b5:61:9a:9d:d4: 3c:29:ce:94:d5:1a:69:db:79:d7:96:bb:94:3d:d7: a2:10:b4:64:dd:42:67:b0:98:72:22:c0:a7:58:8e: 39:61:41:4b:04:41:cf:70:ba:d5:57:cd:6b:89:c0: 7d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FE:F4:E7:50:21:41:D4:43:0E:F8:C9:AA:3F:18:B7:DB:1A:3A:09 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:48f::/48 Signature Algorithm: sha256WithRSAEncryption 7e:35:51:b8:68:d5:1d:79:b3:aa:ea:c7:e6:f1:35:f9:2e:d2: 8f:24:5f:5e:e9:75:68:b7:2d:46:15:2a:05:ee:ed:fb:41:41: e0:6f:70:d8:db:58:39:c8:24:5e:d0:8f:15:b9:28:b4:75:c3: e4:0d:b4:2d:6b:dd:11:7e:47:26:0d:c9:84:41:fa:3d:17:a5: 86:b5:e5:bd:9a:85:3c:63:f7:1d:fd:12:eb:b3:ab:f6:74:fe: 73:70:dd:59:f6:d1:81:eb:fb:49:e2:d2:2c:2e:8d:f1:dd:9b: bb:17:e6:69:40:36:c7:80:8d:19:e6:3c:9b:fc:4e:c4:fe:8d: 12:37:02:5f:9f:b8:e0:4e:27:66:b7:0c:16:01:5a:d2:1d:47: cd:98:f7:59:dd:de:de:07:11:26:35:ca:83:29:81:f2:0c:a0: c9:49:05:36:e9:1a:4c:5a:d4:d1:00:85:7e:74:36:7c:c4:26: 4e:0c:a8:5c:89:da:1b:cb:47:53:69:95:76:69:31:22:b8:de: d5:ac:a8:d2:56:60:f8:e9:88:22:de:1d:c7:18:7d:d8:9a:dd: 8b:ee:36:82:03:e6:0a:1b:56:54:4e:b3:1e:72:f2:38:74:12: 31:1b:8a:f2:6e:a2:83:cc:1b:d2:21:06:d4:5b:e7:3c:32:f6: f4:c0:2b:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTMK5nRlaMF7LuylzmKa1QuXN6KowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MDA5WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTQyYzA1OTRlMjA3MThkZjQyYTA3NTg3N2FkZjBhNDBj ODZhMjQ2YjY1ZmUzMDQxNmEyNWVhNzQyY2VlNzZkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD9XnCwSqfp2KCMd5OfJx94bkYdBbA9auibGGs2yuO8Rmg 0papS/+pC8ROOTmsYudh8RbnpFHKpZVJ9MLuhx25BB7IXoUsocxw3GjtXsm7yiwt Zx1/+B4Qo/sho7gHaFm4YYlM8dfo7BiPCmHsuc8+ZUhCRnH1r4MQs6omE8PLUxHX RpY4H7WXwwHtFp/OTIvCXxaxmH+Mg6peiQr0ZsUKTL2I/oQ/rz7zy7BHGf7shnQE EZJzVowKxAtXOlR6T5W8zX+iTYU9anmoJVm1YZqd1DwpzpTVGmnbedeWu5Q916IQ tGTdQmewmHIiwKdYjjlhQUsEQc9wutVXzWuJwH3lAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5f7051AhQdRDDvjJqj8Yt9saOgkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk0MWY3OWNlLTcxNWYtNDlmNC1hNTc2LTMzM2MwNjVkODJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABI8wDQYJKoZIhvcNAQELBQADggEBAH41Ubho1R15s6rqx+bxNfku 0o8kX17pdWi3LUYVKgXu7ftBQeBvcNjbWDnIJF7QjxW5KLR1w+QNtC1r3RF+RyYN yYRB+j0XpYa15b2ahTxj9x39Euuzq/Z0/nNw3Vn20YHr+0ni0iwujfHdm7sX5mlA NseAjRnmPJv8TsT+jRI3Al+fuOBOJ2a3DBYBWtIdR82Y91nd3t4HESY1yoMpgfIM oMlJBTbpGkxa1NEAhX50NnzEJk4MqFyJ2hvLR1NplXZpMSK43tWsqNJWYPjpiCLe HccYfdia3YvuNoID5gobVlROsx5y8jh0EjEbivJuooPMG9IhBtRb5zwy9vTAK7Y= -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:05 2025 by rpki-client