$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa File: a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa (raw, json) Hash identifier: FNjCeJo1xpVG8dAu/Z2qkUcDUkAny47NG66lGO/jl48= Subject key identifier: DD:9A:61:EF:8E:5E:9E:16:89:4B:8F:FF:09:D5:E9:2C:AA:0A:20:16 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4A41C11DA03980AF480EFAB5E3FF179041F166C2 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa Signing time: Fri 11 Apr 2025 00:40:18 +0000 ROA not before: Fri 11 Apr 2025 00:40:18 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:41:c1:1d:a0:39:80:af:48:0e:fa:b5:e3:ff:17:90:41:f1:66:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:40:18 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=607dd3f8a0e5684ba444436a7598b776173238f5267ed5ba2ed6867131f17e16, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:a9:28:4a:4f:64:aa:35:38:87:88:23:3f: 97:3a:c7:86:0d:27:90:3d:f3:22:7f:d1:ab:a0:0c: f7:62:ea:bf:ac:4f:cb:fe:9a:0a:76:e2:f8:18:ce: 99:05:a7:7c:e8:c1:02:f7:69:4e:3b:13:d1:9d:bc: 57:24:b6:b7:59:2b:70:7b:ac:d4:64:7a:3e:dd:08: 12:ad:38:ca:7d:96:d6:f1:7a:19:ac:09:06:b8:c2: 7a:fb:61:83:5f:1a:82:64:9e:64:55:b9:e3:71:df: 90:fd:f2:17:28:55:bc:9b:d5:4b:19:16:3f:66:8a: 37:ee:23:a7:35:7a:d3:1d:c0:dd:a5:0b:9b:9f:a7: 13:d7:60:a0:25:f0:3c:e0:f9:27:c3:59:09:41:04: 4b:13:ee:f6:ec:2d:27:08:ef:f6:f2:a5:eb:9a:6c: 0a:4a:50:a0:6f:5b:53:fb:67:99:0b:08:64:e7:e0: 72:83:a2:b1:a3:71:dd:30:4d:25:bb:2e:f7:47:87: 56:e2:19:48:e1:16:43:b7:62:ba:33:8f:f1:6c:be: 54:b4:61:01:ad:fd:e6:ba:23:fc:ec:4d:df:94:8d: 3d:1f:04:b4:c0:23:53:78:a7:be:a8:b7:03:96:ad: 0d:9c:d5:cb:3b:49:15:23:d8:3f:ff:b6:3b:ab:2d: a9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9A:61:EF:8E:5E:9E:16:89:4B:8F:FF:09:D5:E9:2C:AA:0A:20:16 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1a::/48 Signature Algorithm: sha256WithRSAEncryption 5c:f8:07:f2:0b:69:11:cf:2b:3f:bc:9c:d8:41:69:1c:94:7a: 88:13:e5:fc:a9:d1:ad:1d:19:c8:ff:1c:59:db:f4:71:21:c5: 40:fd:c9:fa:70:9a:cb:f4:aa:fd:e5:ed:61:37:4a:a8:fd:80: 08:f1:cc:84:cd:69:4d:ae:00:b8:13:aa:e2:f5:24:1c:0a:60: 78:4a:f3:34:7a:ec:ff:d0:44:80:25:89:e9:87:9c:bd:3d:89: 0d:76:b9:63:fc:6e:5d:51:0d:48:64:28:4d:4f:af:40:82:75: ce:2d:88:20:5d:28:25:47:45:73:9c:15:fb:85:b4:ae:d4:60: fd:8a:0e:ad:3c:0a:2c:6b:22:d6:50:e2:23:14:38:2f:9e:75: ed:e2:ac:69:df:b1:76:0d:12:83:7b:25:69:c2:12:2d:e0:dc: 08:f1:36:25:3f:f6:3d:aa:87:19:a6:f8:8a:1b:02:6c:7c:f4: da:ed:c3:97:0c:57:f4:5c:a7:ee:0b:9b:31:bb:0b:98:5d:1c: 47:94:13:3c:c2:10:bf:28:a0:58:4d:12:5f:17:cc:86:ff:cd: d1:00:e2:da:ba:6b:f3:da:55:a0:20:52:57:33:78:5d:fa:48: f1:8f:95:98:5a:57:c5:90:24:64:0c:f9:2c:f9:a6:9a:07:f7: 2f:63:de:94 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSkHBHaA5gK9IDvq14/8XkEHxZsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDA0MDE4WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDdkZDNmOGEwZTU2ODRiYTQ0NDQzNmE3NTk4Yjc3NjE3 MzIzOGY1MjY3ZWQ1YmEyZWQ2ODY3MTMxZjE3ZTE2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu66koSk9kqjU4h4gjP5c6x4YNJ5A98yJ/0augDPdi6r+s T8v+mgp24vgYzpkFp3zowQL3aU47E9GdvFcktrdZK3B7rNRkej7dCBKtOMp9ltbx ehmsCQa4wnr7YYNfGoJknmRVueNx35D98hcoVbyb1UsZFj9mijfuI6c1etMdwN2l C5ufpxPXYKAl8Dzg+SfDWQlBBEsT7vbsLScI7/bypeuabApKUKBvW1P7Z5kLCGTn 4HKDorGjcd0wTSW7LvdHh1biGUjhFkO3Yrozj/FsvlS0YQGt/ea6I/zsTd+UjT0f BLTAI1N4p76otwOWrQ2c1cs7SRUj2D//tjurLamzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3Zph745enhaJS4//CdXpLKoKIBYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E2MWUzYTEwLTFlMTMtNDI4MC1hYmRjLWM3ZjhjYjgwZGE4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBowDQYJKoZIhvcNAQELBQADggEBAFz4B/ILaRHPKz+8nNhBaRyU eogT5fyp0a0dGcj/HFnb9HEhxUD9yfpwmsv0qv3l7WE3Sqj9gAjxzITNaU2uALgT quL1JBwKYHhK8zR67P/QRIAliemHnL09iQ12uWP8bl1RDUhkKE1Pr0CCdc4tiCBd KCVHRXOcFfuFtK7UYP2KDq08CixrItZQ4iMUOC+ede3irGnfsXYNEoN7JWnCEi3g 3AjxNiU/9j2qhxmm+IobAmx89Nrtw5cMV/Rcp+4LmzG7C5hdHEeUEzzCEL8ooFhN El8XzIb/zdEA4tq6a/PaVaAgUlczeF36SPGPlZhaV8WQJGQM+Sz5ppoH9y9j3pQ= -----END CERTIFICATE-----Generated at Sat Apr 26 13:16:01 2025 by rpki-client