$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa File: 96b3f615-0792-4abd-8381-86a2d78ce63d.roa (raw, json) Hash identifier: tsq6/hu+rciuHT8uYYyFRqZ4JIiSCHdDeZuXHtmPmZc= Subject key identifier: DC:25:E4:B0:5F:DD:D9:5B:57:8E:7D:F0:02:98:C6:83:4E:B8:44:16 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 304D0D88FD25A9D5E08954B47AD51D3A9F5DC66D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa Signing time: Sat 26 Apr 2025 00:50:18 +0000 ROA not before: Sat 26 Apr 2025 00:50:18 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:546::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4d:0d:88:fd:25:a9:d5:e0:89:54:b4:7a:d5:1d:3a:9f:5d:c6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:50:18 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=8a009f701ebc33f7d314ec4e6ab99f69c2cf70c9994b7c195cf5d46b54113f08, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:5c:9f:bf:89:28:d3:33:52:29:b9:e0:30: cf:f8:a8:27:08:d0:47:31:5b:d5:c4:9c:01:b5:81: 00:0b:50:d3:3a:ef:93:49:10:67:1b:1d:3f:ac:60: ed:4f:f1:ac:63:03:25:a7:42:93:9e:f5:09:2a:31: d8:4c:d6:84:97:b1:a1:97:47:f0:b2:fc:86:36:de: a6:09:51:b0:28:0d:62:15:e5:84:a4:fd:0c:31:30: 30:41:3c:ba:76:25:c2:35:f5:a0:a9:88:54:c6:f9: 73:38:e2:ef:d1:06:03:85:9e:0d:92:d7:d7:3b:f7: b6:54:c9:4c:42:67:f2:ae:ea:3d:e0:1f:94:f1:50: 5e:88:d4:60:6e:75:44:73:36:ff:9c:19:57:f5:c9: 03:7b:9b:95:1f:e1:32:b4:6d:01:b7:06:64:37:4e: 05:c9:84:fa:52:cf:a6:3d:bb:3c:58:5d:84:5e:0c: c0:31:74:ba:2b:a7:dd:90:93:d4:05:b3:59:5f:7e: df:bd:2b:38:fa:5c:19:db:5d:c1:77:17:b2:75:a6: 40:af:6c:bf:63:bc:72:5c:2f:72:cd:b0:7e:7a:f6: 3d:97:e2:8a:97:35:5a:c9:0d:71:5e:40:7c:99:70: 48:55:de:4c:e7:94:83:94:91:13:33:f0:6a:46:df: 2d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:25:E4:B0:5F:DD:D9:5B:57:8E:7D:F0:02:98:C6:83:4E:B8:44:16 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:546::/48 Signature Algorithm: sha256WithRSAEncryption 42:44:15:0a:cb:45:c8:c6:83:c3:d9:91:4a:82:6d:29:22:7e: 8c:19:34:42:40:d9:79:c9:d2:11:f4:19:0e:d9:b4:80:e8:66: e8:86:b9:34:97:05:77:68:9a:e9:05:b0:28:11:d3:d9:82:b7: 41:e5:0f:c3:9a:a6:c7:49:94:b7:87:b5:cc:3c:5e:51:b0:7d: d5:1d:37:9d:1d:5c:3c:12:20:59:ac:5c:20:e1:11:22:f0:95: 41:f4:0a:5d:a8:0f:9d:02:90:9a:0e:8a:ea:1e:8e:a0:9c:4c: 32:5e:56:53:62:9a:28:34:94:09:11:a6:d0:46:79:91:2d:aa: 15:06:09:ae:f8:6f:31:b6:d9:05:13:f0:48:37:b5:2f:5f:3f: a9:2c:33:16:38:16:4d:bc:02:b8:f9:9f:ab:ab:50:cf:b3:72: 5d:90:17:62:b9:27:5d:8e:d2:22:fd:76:92:e3:ba:a3:47:94: 62:89:ed:b6:9a:30:ad:d9:52:bb:3f:04:b7:95:01:fe:23:cc: 90:fd:a4:67:86:30:bd:4d:1b:3d:3b:e1:05:0d:fb:47:1f:41: 92:5c:9b:8e:61:f2:50:9d:c0:d4:4d:e7:f8:71:78:35:62:72: ea:da:ad:4d:0f:2b:17:21:43:14:1b:d1:ff:ab:58:15:02:76: a3:44:ef:53 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUME0NiP0lqdXgiVS0etUdOp9dxm0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MDE4WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTAwOWY3MDFlYmMzM2Y3ZDMxNGVjNGU2YWI5OWY2OWMy Y2Y3MGM5OTk0YjdjMTk1Y2Y1ZDQ2YjU0MTEzZjA4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNz1yfv4ko0zNSKbngMM/4qCcI0EcxW9XEnAG1gQALUNM6 75NJEGcbHT+sYO1P8axjAyWnQpOe9QkqMdhM1oSXsaGXR/Cy/IY23qYJUbAoDWIV 5YSk/QwxMDBBPLp2JcI19aCpiFTG+XM44u/RBgOFng2S19c797ZUyUxCZ/Ku6j3g H5TxUF6I1GBudURzNv+cGVf1yQN7m5Uf4TK0bQG3BmQ3TgXJhPpSz6Y9uzxYXYRe DMAxdLorp92Qk9QFs1lfft+9Kzj6XBnbXcF3F7J1pkCvbL9jvHJcL3LNsH569j2X 4oqXNVrJDXFeQHyZcEhV3kznlIOUkRMz8GpG3y1/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3CXksF/d2VtXjn3wApjGg064RBYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk2YjNmNjE1LTA3OTItNGFiZC04MzgxLTg2YTJkNzhjZTYzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUYwDQYJKoZIhvcNAQELBQADggEBAEJEFQrLRcjGg8PZkUqCbSki fowZNEJA2XnJ0hH0GQ7ZtIDoZuiGuTSXBXdomukFsCgR09mCt0HlD8OapsdJlLeH tcw8XlGwfdUdN50dXDwSIFmsXCDhESLwlUH0Cl2oD50CkJoOiuoejqCcTDJeVlNi mig0lAkRptBGeZEtqhUGCa74bzG22QUT8Eg3tS9fP6ksMxY4Fk28Arj5n6urUM+z cl2QF2K5J12O0iL9dpLjuqNHlGKJ7baaMK3ZUrs/BLeVAf4jzJD9pGeGML1NGz07 4QUN+0cfQZJcm45h8lCdwNRN5/hxeDVicurarU0PKxchQxQb0f+rWBUCdqNE71M= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:12 2025 by rpki-client