$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a046f509-2a7a-4f07-bb1f-b51c79bee36b.roa File: a046f509-2a7a-4f07-bb1f-b51c79bee36b.roa (raw, json) Hash identifier: 4P4umqkHGWRTg6UFL28+CR8B0BT482Y61dUvJMLnHP0= Subject key identifier: 69:F9:A8:C8:68:51:CB:C3:72:E5:1D:AD:21:6D:19:AF:12:B3:71:6C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 49A05B8B6A6DCF95C3864D652A0ACF964F36024C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a046f509-2a7a-4f07-bb1f-b51c79bee36b.roa Signing time: Fri 11 Apr 2025 00:31:02 +0000 ROA not before: Fri 11 Apr 2025 00:31:02 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a0:5b:8b:6a:6d:cf:95:c3:86:4d:65:2a:0a:cf:96:4f:36:02:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:31:02 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=ef8a3dd97b59496c0bf6e4ab8f8e55695b335b248083273ad97b42815acb1049, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:9e:b4:11:90:c5:a5:fa:76:3e:c8:40:7a: 68:af:84:09:02:71:cc:6e:02:d5:79:5a:d3:db:a7: 41:52:42:f0:36:5d:e3:37:c7:bf:60:1e:4d:05:b5: 16:89:ec:0b:0b:fb:2e:bd:f5:a5:f4:bb:5e:25:22: d2:95:b8:11:5e:a5:88:31:e6:8e:93:39:b6:e1:4f: 2c:35:00:80:3f:21:74:38:6b:56:3a:bd:26:0b:ec: 28:cf:fd:7d:7c:f0:60:ac:9f:7e:52:22:e0:0d:54: 4d:5c:43:c8:be:71:34:9a:6c:17:dc:6e:cb:ec:05: fe:58:ab:73:83:33:3a:ec:75:45:d9:0c:f2:4c:90: 94:5a:f2:3c:5a:c9:9f:8e:7f:0e:9f:44:39:97:fd: 32:d4:12:db:2c:ae:c4:d8:85:5c:7a:d1:5f:00:64: 50:af:b4:46:b4:9b:bc:a3:3e:af:29:68:9c:2d:97: e8:bd:ce:e8:5f:be:b8:4a:89:fe:d7:29:ae:94:47: f7:ca:db:81:5b:0e:5e:50:ad:82:e6:a1:99:c3:44: 93:1e:33:90:5a:88:13:f8:09:46:cc:1a:28:a6:cd: b9:c9:ec:32:2a:01:ae:0f:00:f4:da:55:2a:e1:ef: 9c:fe:64:5c:26:30:15:b6:e5:4c:d4:dc:c1:45:b9: dd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F9:A8:C8:68:51:CB:C3:72:E5:1D:AD:21:6D:19:AF:12:B3:71:6C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a046f509-2a7a-4f07-bb1f-b51c79bee36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c13::/48 Signature Algorithm: sha256WithRSAEncryption 31:67:15:d5:59:0c:cf:e8:3c:0f:8f:e0:d9:f4:49:28:df:b4: 07:cd:66:3a:3b:0a:27:34:6d:b0:30:f5:0d:cd:7b:e1:5a:81: cb:01:d7:c3:68:77:3d:b1:e6:ea:9e:90:68:f7:bf:95:23:f5: 59:10:ee:ed:84:f4:a2:94:58:38:29:9a:88:90:9e:0b:b4:f3: e5:43:81:79:c0:fd:b9:5e:bb:9a:f6:fe:13:29:91:43:08:18: 62:5e:75:6a:1b:5f:cb:fb:71:34:51:58:0e:5a:ba:31:0b:00: b5:ae:92:cc:2d:23:60:fa:49:07:e4:fb:43:85:b6:fb:40:8c: ca:eb:de:9a:62:bf:f3:62:82:3f:9c:ff:0e:1b:40:43:b3:da: 59:85:1e:fa:47:8b:a8:a3:c0:67:55:71:d6:26:b7:1d:e0:18: 18:3f:82:56:8a:53:2b:c5:93:c0:90:81:97:7d:5f:1a:c6:57: b1:c9:b9:35:96:01:1e:d1:74:53:51:0d:50:7c:ca:c8:93:be: 0d:df:5a:52:85:5e:ba:46:af:40:7a:2c:03:54:b2:57:58:f2: 40:d3:c6:89:52:ee:79:56:d3:c8:ef:a0:ba:8a:59:d3:a3:eb: 84:02:06:76:13:ce:05:f5:54:77:71:25:53:51:cd:bb:7d:cf: 3a:c0:93:d6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSaBbi2ptz5XDhk1lKgrPlk82AkwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMTAyWhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjhhM2RkOTdiNTk0OTZjMGJmNmU0YWI4ZjhlNTU2OTVi MzM1YjI0ODA4MzI3M2FkOTdiNDI4MTVhY2IxMDQ5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFOJ60EZDFpfp2PshAemivhAkCccxuAtV5WtPbp0FSQvA2 XeM3x79gHk0FtRaJ7AsL+y699aX0u14lItKVuBFepYgx5o6TObbhTyw1AIA/IXQ4 a1Y6vSYL7CjP/X188GCsn35SIuANVE1cQ8i+cTSabBfcbsvsBf5Yq3ODMzrsdUXZ DPJMkJRa8jxayZ+Ofw6fRDmX/TLUEtssrsTYhVx60V8AZFCvtEa0m7yjPq8paJwt l+i9zuhfvrhKif7XKa6UR/fK24FbDl5QrYLmoZnDRJMeM5BaiBP4CUbMGiimzbnJ 7DIqAa4PAPTaVSrh75z+ZFwmMBW25UzU3MFFud0BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUafmoyGhRy8Ny5R2tIW0ZrxKzcWwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2EwNDZmNTA5LTJhN2EtNGYwNy1iYjFmLWI1MWM3OWJlZTM2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBMwDQYJKoZIhvcNAQELBQADggEBADFnFdVZDM/oPA+P4Nn0SSjf tAfNZjo7Cic0bbAw9Q3Ne+FagcsB18Nodz2x5uqekGj3v5Uj9VkQ7u2E9KKUWDgp moiQngu08+VDgXnA/bleu5r2/hMpkUMIGGJedWobX8v7cTRRWA5aujELALWukswt I2D6SQfk+0OFtvtAjMrr3ppiv/Nigj+c/w4bQEOz2lmFHvpHi6ijwGdVcdYmtx3g GBg/glaKUyvFk8CQgZd9XxrGV7HJuTWWAR7RdFNRDVB8ysiTvg3fWlKFXrpGr0B6 LANUsldY8kDTxolS7nlW08jvoLqKWdOj64QCBnYTzgX1VHdxJVNRzbt9zzrAk9Y= -----END CERTIFICATE-----Generated at Sat Apr 26 15:49:36 2025 by rpki-client