$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa File: a625c009-eed5-4024-b5c0-469960c8e95e.roa (raw, json) Hash identifier: +gvpKvzHL/iyCV9TYLY9jYn8nXH+5EiIRl79nnGlo08= Subject key identifier: 17:FC:B1:78:91:69:BD:4E:11:B2:F8:21:C8:2F:E8:F6:8C:9A:70:69 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 03CEDEC1FAC9F189EDF7F3490C37674645AE469A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa Signing time: Sat 26 Apr 2025 00:51:38 +0000 ROA not before: Sat 26 Apr 2025 00:51:38 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:30b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ce:de:c1:fa:c9:f1:89:ed:f7:f3:49:0c:37:67:46:45:ae:46:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:51:38 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=ccd882c69e25494d378b53706618af2323c3e3a93702e12a1c9d5cb40c673447, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:50:1e:ee:3e:19:35:a1:61:6d:c4:f2:32: 1e:81:4b:12:93:aa:75:bb:54:ea:d0:b9:6b:61:a2: 5c:99:fd:e8:1e:ca:f1:78:bb:81:17:42:22:6a:a4: c4:a8:0c:03:4b:5c:b2:9a:fc:1b:49:4b:36:f1:0a: 5a:0b:49:d7:05:09:7b:58:fe:e9:87:33:8b:40:6c: f5:29:35:4c:c2:86:e4:e3:b4:5b:51:64:5a:e7:bb: 43:3e:8e:12:51:c0:f8:83:00:9a:b9:47:b4:c7:64: 87:bb:a8:6b:ea:f7:6b:96:1f:c5:4b:65:9f:d6:9a: 92:fb:94:77:ea:90:65:23:d8:69:b3:a7:c4:2e:9d: 8d:ef:43:c4:91:e6:78:fa:5a:74:19:cf:fd:29:1d: 4b:ba:08:bf:6d:37:ea:f7:d3:3c:e3:02:8f:85:7e: fb:f9:08:3f:78:3b:11:05:bd:c5:ac:10:cd:2f:21: 24:33:d5:86:c6:4c:63:3d:b8:97:fb:90:e1:b0:00: 12:d5:1a:d7:0a:fb:bb:4e:55:50:ed:fb:d7:4b:53: 45:20:ad:e9:01:c7:d2:de:73:6b:a2:f5:ae:e1:ba: 30:01:28:87:44:11:90:f5:da:e8:20:5a:26:b4:17: 3e:9e:b8:c9:03:d3:bd:45:03:60:02:d7:f3:e3:76: d8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FC:B1:78:91:69:BD:4E:11:B2:F8:21:C8:2F:E8:F6:8C:9A:70:69 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30b::/48 Signature Algorithm: sha256WithRSAEncryption 04:7d:07:89:67:89:97:e4:8b:e0:3e:60:9f:6a:bd:f4:81:03: 58:a9:b9:96:8e:aa:d9:18:f8:26:27:5a:c8:d6:da:20:b3:fc: b3:45:84:38:cb:89:36:29:e5:e0:44:96:d3:2f:76:0e:31:6e: 0d:7a:85:c6:f1:11:66:ba:5a:52:fb:0a:3b:b6:e9:40:8d:13: bb:ed:e7:5f:63:6d:89:7a:61:de:b3:20:b1:c5:ba:8e:e9:15: e5:84:2a:42:ad:a6:70:2a:92:d1:b4:a1:0a:83:89:b8:74:dd: 16:f9:35:62:2f:7f:d4:76:cd:36:c6:ce:cd:54:73:95:af:22: b1:c6:ef:69:b1:9b:b6:7e:06:fa:bd:c6:72:16:9b:52:6a:50: e4:b7:b4:ff:b6:12:aa:4e:79:26:59:d4:f5:a5:3c:15:90:ab: 4d:e1:1b:12:7f:99:f0:d1:9c:ad:b9:11:3d:90:d4:03:b4:ac: 45:33:3c:f3:a8:03:4f:2a:5b:42:25:cc:26:ef:32:99:6e:f2: da:ac:4c:f4:7a:48:e3:ef:aa:94:02:ff:5d:1d:2a:ea:66:c5: f2:25:30:d1:dd:35:ad:10:80:16:8a:a0:7a:ce:38:a5:35:d6: d4:c2:45:aa:8d:01:0e:23:a9:78:3f:a7:29:d1:61:78:49:f8: 51:9e:5d:31 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA87ewfrJ8Ynt9/NJDDdnRkWuRpowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MTM4WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjY2Q4ODJjNjllMjU0OTRkMzc4YjUzNzA2NjE4YWYyMzIz YzNlM2E5MzcwMmUxMmExYzlkNWNiNDBjNjczNDQ3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVCVAe7j4ZNaFhbcTyMh6BSxKTqnW7VOrQuWtholyZ/ege yvF4u4EXQiJqpMSoDANLXLKa/BtJSzbxCloLSdcFCXtY/umHM4tAbPUpNUzChuTj tFtRZFrnu0M+jhJRwPiDAJq5R7THZIe7qGvq92uWH8VLZZ/WmpL7lHfqkGUj2Gmz p8QunY3vQ8SR5nj6WnQZz/0pHUu6CL9tN+r30zzjAo+Ffvv5CD94OxEFvcWsEM0v ISQz1YbGTGM9uJf7kOGwABLVGtcK+7tOVVDt+9dLU0UgrekBx9Lec2ui9a7hujAB KIdEEZD12uggWia0Fz6euMkD071FA2AC1/PjdtidAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUF/yxeJFpvU4RsvghyC/o9oyacGkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E2MjVjMDA5LWVlZDUtNDAyNC1iNWMwLTQ2OTk2MGM4ZTk1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwswDQYJKoZIhvcNAQELBQADggEBAAR9B4lniZfki+A+YJ9qvfSB A1ipuZaOqtkY+CYnWsjW2iCz/LNFhDjLiTYp5eBEltMvdg4xbg16hcbxEWa6WlL7 Cju26UCNE7vt519jbYl6Yd6zILHFuo7pFeWEKkKtpnAqktG0oQqDibh03Rb5NWIv f9R2zTbGzs1Uc5WvIrHG72mxm7Z+Bvq9xnIWm1JqUOS3tP+2EqpOeSZZ1PWlPBWQ q03hGxJ/mfDRnK25ET2Q1AO0rEUzPPOoA08qW0IlzCbvMplu8tqsTPR6SOPvqpQC /10dKupmxfIlMNHdNa0QgBaKoHrOOKU11tTCRaqNAQ4jqXg/pynRYXhJ+FGeXTE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:50 2025 by rpki-client