$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a80f0b97-d9da-4f60-9430-57b44809fe13.roa File: a80f0b97-d9da-4f60-9430-57b44809fe13.roa (raw, json) Hash identifier: V6UHZkFuBEyUwkH8E9MWK088ZIJ95MrYYeXxdb7Se2U= Subject key identifier: E2:E0:8F:87:62:7C:AE:F8:E0:43:51:2A:40:52:E0:D6:3F:36:28:5D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 42FA2777FB8216370013A1D3CB5968C95F7C6EC6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a80f0b97-d9da-4f60-9430-57b44809fe13.roa Signing time: Sat 05 Apr 2025 00:10:16 +0000 ROA not before: Sat 05 Apr 2025 00:10:16 +0000 ROA not after: Sat 10 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:3b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fa:27:77:fb:82:16:37:00:13:a1:d3:cb:59:68:c9:5f:7c:6e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 5 00:10:16 2025 GMT Not After : May 10 23:59:59 2025 GMT Subject: serialNumber=0cacf8fd8a4f91447de65d6cecad7cbbc61e6f498a2fa52327347ad1b2a15b2f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:88:b2:d5:66:5d:e3:fe:47:72:30:23:1d:63: 5d:79:c4:55:a5:80:55:aa:c4:ea:7d:66:5b:20:8d: aa:60:73:71:78:01:6d:e4:38:6e:a5:9d:f1:9e:0f: 61:1a:fd:50:e0:3d:11:6b:dd:ca:4f:52:00:5b:9f: e7:37:4c:c2:f7:21:9c:a1:c0:4f:eb:73:11:57:9c: 18:70:ac:bd:87:04:9a:5e:db:eb:c5:fe:a7:3e:51: 28:d6:80:62:f0:8d:ae:a5:64:7b:f6:24:aa:59:c7: 82:60:f4:56:ac:d6:30:03:7f:33:04:be:45:18:1f: 9a:b8:58:08:08:0e:6d:3d:1c:5b:28:6c:8e:37:09: 63:30:01:4b:03:b9:78:96:8b:67:0c:2f:fd:02:75: 3c:ea:b4:2e:aa:4a:57:b7:2f:be:22:6a:91:15:91: bb:52:22:51:5d:36:dd:2b:b5:09:3c:cb:45:50:dc: 80:f1:fd:bb:47:ad:c1:49:f1:18:8f:98:1f:1d:81: 87:e1:54:a0:56:49:7d:ab:54:62:45:f8:83:95:3b: ef:e8:95:0e:85:f3:4c:b7:e9:b4:ba:66:d8:92:5d: 83:27:0a:d3:b6:22:7a:db:c8:f0:97:03:d1:18:a3: c4:35:b3:85:50:cc:df:10:76:d8:61:2b:68:37:55: d8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E0:8F:87:62:7C:AE:F8:E0:43:51:2A:40:52:E0:D6:3F:36:28:5D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a80f0b97-d9da-4f60-9430-57b44809fe13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3b4::/48 Signature Algorithm: sha256WithRSAEncryption 20:3f:27:cd:ef:7f:9d:52:a4:a2:5f:04:19:0a:b1:4e:fd:90: c7:4c:7f:6a:e2:bb:e7:c0:7b:37:82:1e:ed:13:7a:cb:af:c1: c3:02:a0:39:07:75:22:c4:ed:4a:04:71:9d:9f:30:10:f7:d4: 2f:92:e6:0b:6e:ef:d0:2e:bb:d6:c0:da:89:80:53:fa:5b:b0: 5f:dc:0e:4f:3b:be:33:9e:19:76:8c:fa:76:ae:4a:a5:9c:72: ae:85:a1:9a:b9:a8:f0:f3:f0:68:46:ba:ab:58:85:86:5c:3c: 7e:15:8c:69:7f:f1:e9:e8:75:f0:c2:df:45:12:b5:9c:a2:59: 64:fa:24:fa:e4:93:13:c5:09:36:29:c9:03:11:ee:a4:b4:0c: dc:01:72:c0:e8:9f:49:af:52:de:e4:c1:09:41:24:d8:b9:9f: 17:8a:7f:48:b4:56:88:02:b6:10:8e:f0:c6:e9:a2:19:ed:ce: 39:eb:77:d9:c4:a8:35:b5:aa:dc:03:d8:57:df:f5:aa:f1:b6: 94:6f:80:d1:c4:41:6b:fd:28:49:c5:df:b2:39:31:10:7f:20: 78:bd:62:97:b9:6e:ef:ff:fa:3f:ad:da:ad:ff:62:b7:03:38: 7c:00:1e:b2:7b:8c:85:b0:77:76:02:8e:2d:ad:d1:46:4c:42: 16:97:f9:dd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQvond/uCFjcAE6HTy1loyV98bsYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDA1MDAxMDE2WhcNMjUwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2FjZjhmZDhhNGY5MTQ0N2RlNjVkNmNlY2FkN2NiYmM2 MWU2ZjQ5OGEyZmE1MjMyNzM0N2FkMWIyYTE1YjJmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuiLLVZl3j/kdyMCMdY115xFWlgFWqxOp9Zlsgjapgc3F4 AW3kOG6lnfGeD2Ea/VDgPRFr3cpPUgBbn+c3TML3IZyhwE/rcxFXnBhwrL2HBJpe 2+vF/qc+USjWgGLwja6lZHv2JKpZx4Jg9Fas1jADfzMEvkUYH5q4WAgIDm09HFso bI43CWMwAUsDuXiWi2cML/0CdTzqtC6qSle3L74iapEVkbtSIlFdNt0rtQk8y0VQ 3IDx/btHrcFJ8RiPmB8dgYfhVKBWSX2rVGJF+IOVO+/olQ6F80y36bS6ZtiSXYMn CtO2InrbyPCXA9EYo8Q1s4VQzN8QdthhK2g3VdjnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4uCPh2J8rvjgQ1EqQFLg1j82KF0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E4MGYwYjk3LWQ5ZGEtNGY2MC05NDMwLTU3YjQ0ODA5ZmUxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA7QwDQYJKoZIhvcNAQELBQADggEBACA/J83vf51SpKJfBBkKsU79 kMdMf2riu+fAezeCHu0TesuvwcMCoDkHdSLE7UoEcZ2fMBD31C+S5gtu79Auu9bA 2omAU/pbsF/cDk87vjOeGXaM+nauSqWccq6FoZq5qPDz8GhGuqtYhYZcPH4VjGl/ 8enodfDC30UStZyiWWT6JPrkkxPFCTYpyQMR7qS0DNwBcsDon0mvUt7kwQlBJNi5 nxeKf0i0VogCthCO8Mbpohntzjnrd9nEqDW1qtwD2Fff9arxtpRvgNHEQWv9KEnF 37I5MRB/IHi9Ype5bu//+j+t2q3/YrcDOHwAHrJ7jIWwd3YCji2t0UZMQhaX+d0= -----END CERTIFICATE-----Generated at Sat Apr 26 18:36:23 2025 by rpki-client