$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa File: bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa (raw, json) Hash identifier: LhZ0kS1PQIX2FBuBQIKIFkNofPs36zXUe576gurG1gk= Subject key identifier: 2F:42:F5:73:B7:5B:26:C1:6C:1C:A1:2F:32:24:07:A8:81:5D:9D:12 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 73024AE788EE906945AE38C8BBD35C48AA290C35 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa Signing time: Fri 11 Apr 2025 00:30:55 +0000 ROA not before: Fri 11 Apr 2025 00:30:55 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:02:4a:e7:88:ee:90:69:45:ae:38:c8:bb:d3:5c:48:aa:29:0c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:30:55 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=5505c344535eac50007d6ecbb9dc2e67d196a8fbea8203db74e6cfda679e7904, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:e8:f1:fc:96:49:f6:f4:84:bd:56:7d:3b: 96:f7:00:5c:c7:9d:5e:c4:85:5c:77:24:57:fe:cb: 51:e7:fd:33:9a:cb:71:d2:ab:35:cb:22:7a:6b:ed: a0:92:86:1e:f6:60:fe:4f:de:ec:4b:ce:50:90:fa: cf:ba:b2:2c:9f:f0:22:91:d7:c1:8d:ba:ef:7e:19: 26:12:4e:46:00:c6:4c:b6:99:4b:72:25:ce:27:31: 33:76:55:c5:9f:07:28:00:12:fa:d0:77:fa:8d:da: 8e:37:61:43:07:32:52:94:52:28:d2:1d:7f:33:9c: 27:1d:be:70:4d:db:85:e7:d8:37:75:ee:4d:2f:bf: 56:80:84:41:4d:11:44:ea:88:5e:1b:f7:6a:5b:df: 56:8c:b6:4c:17:51:84:c2:cd:59:a6:b1:22:0b:de: ac:ef:1c:9e:ed:87:5e:4c:69:93:03:d6:22:74:70: c7:25:73:f0:d2:5e:9c:56:95:25:a0:8d:24:ea:e4: c6:f3:94:90:7c:54:f4:0e:1a:02:58:56:24:88:8f: c9:ba:d9:46:d2:79:20:64:e8:82:25:8d:0e:c1:14: a9:d8:37:c5:62:35:ae:3f:53:57:4f:02:a3:2f:4c: 75:7a:29:30:4b:74:73:ba:55:13:1c:9f:62:a1:5a: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:42:F5:73:B7:5B:26:C1:6C:1C:A1:2F:32:24:07:A8:81:5D:9D:12 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c11::/48 Signature Algorithm: sha256WithRSAEncryption a4:a3:f2:3d:2f:7a:18:1e:1e:3a:58:1d:09:33:41:48:40:5c: cd:91:02:6d:67:7e:c8:6d:16:93:0e:d7:fb:48:df:c2:70:da: 4f:df:3a:cf:cf:7f:10:b9:57:15:4d:07:b7:b4:6c:67:d9:8c: e4:48:62:98:48:c8:5e:ae:4f:63:ba:6b:64:4d:9d:a5:3b:83: 2e:02:58:a2:d0:93:c8:71:03:58:c7:e2:7e:77:85:cb:b6:a9: 21:71:29:49:66:13:9c:8b:19:15:f3:20:c2:9a:95:0b:9f:74: 58:44:02:bc:fd:d6:e3:1a:09:b0:94:93:06:98:cb:88:49:74: 4e:09:e0:73:24:38:41:cb:be:22:54:67:50:8c:b2:03:cd:9b: e3:86:a3:0b:bb:39:7b:fc:8d:fb:89:c0:a7:82:89:2f:0f:05: 3f:26:18:bd:09:20:71:77:e7:59:33:21:86:a1:b4:2f:bb:60: 54:25:00:28:c9:2b:6a:f8:e3:2c:e3:72:a6:6d:2e:30:95:26: 10:99:df:37:9d:43:7a:18:25:4d:6d:d2:44:3b:2b:66:3d:cd: c3:11:b4:5b:30:06:56:e5:62:88:d2:cc:4a:5e:e7:e6:c6:a1: 1f:fd:ea:f8:cc:fa:76:52:9c:22:91:cb:a1:69:60:f2:0e:c9: e6:b3:56:62 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcwJK54jukGlFrjjIu9NcSKopDDUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMDU1WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTA1YzM0NDUzNWVhYzUwMDA3ZDZlY2JiOWRjMmU2N2Qx OTZhOGZiZWE4MjAzZGI3NGU2Y2ZkYTY3OWU3OTA0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJkOjx/JZJ9vSEvVZ9O5b3AFzHnV7EhVx3JFf+y1Hn/TOa y3HSqzXLInpr7aCShh72YP5P3uxLzlCQ+s+6siyf8CKR18GNuu9+GSYSTkYAxky2 mUtyJc4nMTN2VcWfBygAEvrQd/qN2o43YUMHMlKUUijSHX8znCcdvnBN24Xn2Dd1 7k0vv1aAhEFNEUTqiF4b92pb31aMtkwXUYTCzVmmsSIL3qzvHJ7th15MaZMD1iJ0 cMclc/DSXpxWlSWgjSTq5MbzlJB8VPQOGgJYViSIj8m62UbSeSBk6IIljQ7BFKnY N8ViNa4/U1dPAqMvTHV6KTBLdHO6VRMcn2KhWvK5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUL0L1c7dbJsFsHKEvMiQHqIFdnRIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JjM2M1MGZjLTQ5OTMtNGMwZi04NzE4LWY2NmZjOGZjY2NlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBEwDQYJKoZIhvcNAQELBQADggEBAKSj8j0vehgeHjpYHQkzQUhA XM2RAm1nfshtFpMO1/tI38Jw2k/fOs/PfxC5VxVNB7e0bGfZjORIYphIyF6uT2O6 a2RNnaU7gy4CWKLQk8hxA1jH4n53hcu2qSFxKUlmE5yLGRXzIMKalQufdFhEArz9 1uMaCbCUkwaYy4hJdE4J4HMkOEHLviJUZ1CMsgPNm+OGowu7OXv8jfuJwKeCiS8P BT8mGL0JIHF351kzIYahtC+7YFQlACjJK2r44yzjcqZtLjCVJhCZ3zedQ3oYJU1t 0kQ7K2Y9zcMRtFswBlblYojSzEpe5+bGoR/96vjM+nZSnCKRy6FpYPIOyeazVmI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:42 2025 by rpki-client