$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa File: b2a4ddb8-c852-4876-b718-a984606f10af.roa (raw, json) Hash identifier: wOso4uLk9eBCULkC4dNZ60J0bTy2MQKBDx1i+SmBPg0= Subject key identifier: 3D:70:62:A0:F4:E0:46:AB:57:60:0B:3A:95:47:3B:AE:45:69:41:27 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5712A3F36ECE64462A1127DE036BCBFD22C45F65 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa Signing time: Fri 11 Apr 2025 00:31:36 +0000 ROA not before: Fri 11 Apr 2025 00:31:36 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:12:a3:f3:6e:ce:64:46:2a:11:27:de:03:6b:cb:fd:22:c4:5f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:31:36 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=bdbd02ece85e22a8b00d4e9d61ef2241e5099e5fe204c669f43c924ef589c403, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:40:ca:62:ab:cf:4c:00:50:23:22:c7:f8:52: 0c:9f:8b:24:b3:a5:cc:8f:1c:35:c6:3a:45:8b:2f: c3:e8:b5:30:67:40:dc:2b:f0:e6:03:89:6e:80:35: b4:7c:2d:bb:50:33:1f:30:03:e1:ad:26:77:3d:0a: af:7b:46:04:2f:87:65:19:f0:76:c4:ba:c6:d1:d5: 5a:10:6e:59:27:34:dd:57:1a:68:16:bf:89:bb:02: 01:1f:e9:19:e8:ab:ba:a2:55:6e:a1:02:68:e2:fa: d5:c1:c2:2c:47:f9:f3:c6:9a:0f:c0:50:59:9f:16: ff:80:80:54:51:be:0b:a2:ba:64:a9:40:35:49:7e: 71:75:c7:e9:26:58:f7:ab:6c:18:ba:ca:20:1c:47: bf:07:e9:00:a7:0b:75:81:a7:de:d8:d9:ff:9c:55: a2:e9:e9:8c:d1:be:9c:99:61:e1:19:a3:a6:e7:e3: 16:a0:ff:81:51:86:23:52:fc:c6:d5:29:0e:58:b6: 55:7d:e7:63:ed:87:56:d4:3b:82:86:fc:0b:83:59: b3:67:9a:ec:ec:db:8d:dc:c5:8f:f6:3c:d6:69:ae: e1:d3:eb:23:3d:2b:39:37:75:cf:f5:cc:51:db:33: bd:0f:ed:f7:f8:5e:18:4a:53:9b:7b:8a:b1:24:c6: b8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:70:62:A0:F4:E0:46:AB:57:60:0B:3A:95:47:3B:AE:45:69:41:27 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0c::/48 Signature Algorithm: sha256WithRSAEncryption 2a:17:61:16:02:1e:aa:f7:c0:51:27:a6:7c:e2:27:63:2a:e0: b5:77:e0:6e:33:17:f4:81:7a:99:4c:44:28:c7:60:d3:a1:a0: e2:4d:eb:7f:d7:39:c1:70:36:20:e6:25:36:f5:91:0b:08:8d: 9c:25:15:4e:fe:94:3f:19:68:e4:c4:19:f3:e2:76:39:95:62: dc:39:cc:36:7e:d8:29:7e:b1:d8:d2:da:24:46:03:86:10:ae: 3d:78:e2:df:b1:36:d3:72:02:c3:3e:af:3f:9e:4e:bb:f7:f3: cd:16:50:73:aa:cf:81:eb:6b:81:38:49:8d:0e:e6:0d:cb:4a: 02:31:fc:e8:10:52:13:21:ff:bd:4d:e3:86:dc:54:8e:7c:12: 58:72:a1:1b:6b:1a:21:38:5a:75:77:a7:d5:a6:87:06:e1:6a: 82:4b:50:31:45:e5:41:4f:c8:a6:3f:49:a2:b3:8b:0f:b6:d5: 43:02:05:a4:59:2b:60:55:11:9e:ff:45:28:9b:d1:9a:7d:9a: 6d:53:74:31:42:85:90:51:7a:1d:28:98:bb:7b:c0:0d:73:71: 41:ea:57:32:ce:1e:73:56:5a:bb:a5:d4:83:fa:4a:d1:26:4d: 80:02:d0:e2:4c:1a:e3:8a:37:57:b5:cb:f2:e9:8a:b7:00:05: 97:ee:e8:75 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVxKj827OZEYqESfeA2vL/SLEX2UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMTM2WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZGJkMDJlY2U4NWUyMmE4YjAwZDRlOWQ2MWVmMjI0MWU1 MDk5ZTVmZTIwNGM2NjlmNDNjOTI0ZWY1ODljNDAzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNQMpiq89MAFAjIsf4UgyfiySzpcyPHDXGOkWLL8PotTBn QNwr8OYDiW6ANbR8LbtQMx8wA+GtJnc9Cq97RgQvh2UZ8HbEusbR1VoQblknNN1X GmgWv4m7AgEf6Rnoq7qiVW6hAmji+tXBwixH+fPGmg/AUFmfFv+AgFRRvguiumSp QDVJfnF1x+kmWPerbBi6yiAcR78H6QCnC3WBp97Y2f+cVaLp6YzRvpyZYeEZo6bn 4xag/4FRhiNS/MbVKQ5YtlV952Pth1bUO4KG/AuDWbNnmuzs243cxY/2PNZpruHT 6yM9Kzk3dc/1zFHbM70P7ff4XhhKU5t7irEkxrgPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPXBioPTgRqtXYAs6lUc7rkVpQScwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IyYTRkZGI4LWM4NTItNDg3Ni1iNzE4LWE5ODQ2MDZmMTBhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAwwDQYJKoZIhvcNAQELBQADggEBACoXYRYCHqr3wFEnpnziJ2Mq 4LV34G4zF/SBeplMRCjHYNOhoOJN63/XOcFwNiDmJTb1kQsIjZwlFU7+lD8ZaOTE GfPidjmVYtw5zDZ+2Cl+sdjS2iRGA4YQrj144t+xNtNyAsM+rz+eTrv3880WUHOq z4Hra4E4SY0O5g3LSgIx/OgQUhMh/71N44bcVI58ElhyoRtrGiE4WnV3p9Wmhwbh aoJLUDFF5UFPyKY/SaKziw+21UMCBaRZK2BVEZ7/RSib0Zp9mm1TdDFChZBReh0o mLt7wA1zcUHqVzLOHnNWWrul1IP6StEmTYAC0OJMGuOKN1e1y/LpircABZfu6HU= -----END CERTIFICATE-----Generated at Sun Apr 27 12:06:50 2025 by rpki-client