$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99405eb0-4160-4fa4-8459-f6adcb4cceb6.roa File: 99405eb0-4160-4fa4-8459-f6adcb4cceb6.roa (raw, json) Hash identifier: byJpEPFnQNPhXo03oGL/0Maw4g3n2VzbCFS2056QmLE= Subject key identifier: 60:67:6B:27:DB:56:DE:13:21:3F:D2:41:B8:06:42:F5:85:16:BD:05 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 35C7E8AA001BD52CFE4DDFF6F36CED661E8914A8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99405eb0-4160-4fa4-8459-f6adcb4cceb6.roa Signing time: Tue 01 Apr 2025 00:51:09 +0000 ROA not before: Tue 01 Apr 2025 00:51:09 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:54a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c7:e8:aa:00:1b:d5:2c:fe:4d:df:f6:f3:6c:ed:66:1e:89:14:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:51:09 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: serialNumber=f19db6c559a4b40ef079daabdd5779b3aa05949ce8da6f862b0740c9536c44c1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:65:e1:2e:f5:b9:42:ed:c7:59:71:88:bc: eb:60:19:e7:fc:fb:d7:6c:b8:e2:0e:34:a5:b2:ad: 04:05:c1:1e:0f:eb:f2:f5:1d:2a:f1:3c:33:1d:19: b2:5d:b5:ed:cb:a4:91:94:b5:de:a9:1b:18:0a:fd: d6:f9:70:8a:9c:9f:e2:ce:8d:e0:58:98:6d:48:5a: 2a:15:01:88:42:4a:ae:9b:f7:76:7c:3d:69:4e:73: 51:08:f9:a4:6f:f4:4a:0b:d0:ca:83:c7:72:15:5d: 3b:75:15:c9:de:ed:7a:3d:bb:f3:58:da:0e:07:b1: e9:60:4d:4a:25:e6:ac:cc:58:87:a0:dc:52:e7:11: d6:bc:e7:e5:c5:0e:12:e1:09:ad:db:35:7f:72:b1: ca:ea:34:91:45:8b:00:ce:81:29:83:e9:9a:1e:e8: 7c:48:7e:6a:71:cf:3f:33:21:5f:c8:d0:2e:09:af: 24:52:01:c7:73:4b:e4:86:34:8d:9d:69:c2:6a:9f: 15:18:1c:20:21:ea:67:b7:2f:ba:c9:a2:c2:28:9a: 70:28:0a:73:d1:c1:1f:38:d6:d4:b1:ad:b1:93:0b: 07:02:df:a7:de:f2:a1:b7:a1:94:62:1d:29:54:45: 46:93:3f:97:4e:68:5d:d3:d8:c5:e9:60:d3:88:5f: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:67:6B:27:DB:56:DE:13:21:3F:D2:41:B8:06:42:F5:85:16:BD:05 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99405eb0-4160-4fa4-8459-f6adcb4cceb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54a::/48 Signature Algorithm: sha256WithRSAEncryption 63:0a:62:0e:d1:78:56:14:5e:c1:89:6c:bb:44:74:30:7c:28: e5:dc:94:dd:03:8c:88:03:31:21:1a:10:09:5d:24:08:64:7a: 88:3c:30:e5:42:9d:e3:16:76:0a:84:af:3c:f8:01:db:c1:a4: 30:b6:69:7d:0e:f9:73:4f:d3:39:4c:f0:5a:9f:67:f5:f0:d1: c7:8d:0a:3f:d1:74:86:a4:d0:4a:64:9f:03:64:ef:65:74:14: e9:83:b0:9d:4a:45:c5:49:28:0b:64:9d:a0:09:c1:f1:2b:7a: ee:e3:b4:ae:21:28:73:10:8e:25:9e:2f:01:9a:fd:1f:f4:ed: 5c:85:13:87:75:32:8a:28:3f:8b:07:17:ee:84:a4:61:dd:75: ed:48:b2:9d:03:2d:6e:89:84:e3:7b:68:dd:7f:45:78:3f:8c: 08:39:a3:76:45:9c:3a:fe:74:66:ae:1f:85:1f:ab:6c:ea:40: fd:86:f0:79:8d:cf:3b:bf:e0:b8:2e:a0:0f:34:0e:fe:13:66: 69:6a:97:e3:be:29:17:5a:6f:df:fc:9e:ba:3f:81:5a:7e:22: 33:06:41:99:72:44:48:34:9d:1a:86:38:f6:93:ed:86:2d:4b: 01:f9:21:d7:bc:31:0d:45:aa:60:e8:b3:7b:9b:16:13:48:e1: 82:7b:10:70 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNcfoqgAb1Sz+Td/282ztZh6JFKgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA1MTA5WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTlkYjZjNTU5YTRiNDBlZjA3OWRhYWJkZDU3NzliM2Fh MDU5NDljZThkYTZmODYyYjA3NDBjOTUzNmM0NGMxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC37mXhLvW5Qu3HWXGIvOtgGef8+9dsuOIONKWyrQQFwR4P 6/L1HSrxPDMdGbJdte3LpJGUtd6pGxgK/db5cIqcn+LOjeBYmG1IWioVAYhCSq6b 93Z8PWlOc1EI+aRv9EoL0MqDx3IVXTt1Fcne7Xo9u/NY2g4HselgTUol5qzMWIeg 3FLnEda85+XFDhLhCa3bNX9yscrqNJFFiwDOgSmD6Zoe6HxIfmpxzz8zIV/I0C4J ryRSAcdzS+SGNI2dacJqnxUYHCAh6me3L7rJosIomnAoCnPRwR841tSxrbGTCwcC 36fe8qG3oZRiHSlURUaTP5dOaF3T2MXpYNOIX0MXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYGdrJ9tW3hMhP9JBuAZC9YUWvQUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk5NDA1ZWIwLTQxNjAtNGZhNC04NDU5LWY2YWRjYjRjY2ViNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUowDQYJKoZIhvcNAQELBQADggEBAGMKYg7ReFYUXsGJbLtEdDB8 KOXclN0DjIgDMSEaEAldJAhkeog8MOVCneMWdgqErzz4AdvBpDC2aX0O+XNP0zlM 8FqfZ/Xw0ceNCj/RdIak0EpknwNk72V0FOmDsJ1KRcVJKAtknaAJwfEreu7jtK4h KHMQjiWeLwGa/R/07VyFE4d1MoooP4sHF+6EpGHdde1Isp0DLW6JhON7aN1/RXg/ jAg5o3ZFnDr+dGauH4Ufq2zqQP2G8HmNzzu/4LguoA80Dv4TZmlql+O+KRdab9/8 nro/gVp+IjMGQZlyREg0nRqGOPaT7YYtSwH5Ide8MQ1FqmDos3ubFhNI4YJ7EHA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:04 2025 by rpki-client