$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c074e997-21e0-4ace-b7d2-d0f332e6ce0e.roa File: c074e997-21e0-4ace-b7d2-d0f332e6ce0e.roa (raw, json) Hash identifier: 7UKxH7tJ0qv7VfX60w9lafDJEWMFqgwPU5pn+On41PU= Subject key identifier: 1C:C8:6B:7B:0E:41:85:F8:F6:94:3D:1E:96:A2:D1:B4:F8:4E:0C:43 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 46EC381B13D167E45B5CF59612F79C3FBF3BE56E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c074e997-21e0-4ace-b7d2-d0f332e6ce0e.roa Signing time: Fri 11 Apr 2025 00:30:24 +0000 ROA not before: Fri 11 Apr 2025 00:30:24 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ec:38:1b:13:d1:67:e4:5b:5c:f5:96:12:f7:9c:3f:bf:3b:e5:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:30:24 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=dac35f2423cb059e9a0dd865ba28cf712d7f9474fc013d751c233e5fdfd0e093, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:fb:e4:7a:e2:f2:2b:35:a5:f4:ee:88:55: 71:4e:14:ce:2b:8b:c5:e4:76:7b:83:c0:81:20:d8: 83:cf:a3:2a:5a:86:2c:66:a9:b2:c9:04:50:93:38: df:8f:30:48:9d:bc:56:c9:67:75:1e:65:08:db:c1: df:c2:8a:f8:51:41:05:3c:39:4e:79:05:50:c5:30: 14:64:1a:df:b3:a6:4b:82:63:79:9d:8a:00:60:a0: e7:fa:e4:25:3d:12:65:c3:a8:5c:fe:5e:6e:fc:60: 38:57:b2:95:6c:60:1b:c1:01:7f:34:bb:60:76:93: b1:17:3b:a1:01:a9:0e:71:5a:ea:aa:ec:ad:26:76: 8a:64:62:4a:6a:89:89:7a:ff:46:91:60:c2:5a:0c: 26:46:b7:b2:b6:2e:56:e6:8e:c4:3b:bc:7b:39:ee: bb:0b:d2:f7:d9:ba:b6:b2:47:de:a8:33:4a:c8:0e: c3:85:40:e7:91:e0:dc:2c:f2:aa:b2:7f:ce:ff:45: 8c:c5:66:2e:79:2d:14:a1:ce:ac:5a:7b:6c:01:5e: ac:84:1f:d2:3d:28:b9:7c:86:72:f7:db:97:85:54: 63:d8:82:55:f7:73:d3:e8:11:dd:8c:31:d0:b1:ce: f0:1b:92:0e:4d:58:56:a5:1b:3d:dc:f4:6d:2b:61: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C8:6B:7B:0E:41:85:F8:F6:94:3D:1E:96:A2:D1:B4:F8:4E:0C:43 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c074e997-21e0-4ace-b7d2-d0f332e6ce0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c04::/48 Signature Algorithm: sha256WithRSAEncryption 1c:04:c9:09:79:50:aa:ee:ae:2b:1a:5f:1c:35:0e:5d:f8:ec: 20:76:95:81:9a:de:28:1c:5f:60:8a:ad:03:2c:ce:21:87:22: 08:eb:3a:9e:26:40:27:e0:43:7c:1b:8c:b1:70:70:fa:c3:e3: 31:5f:60:6c:02:0b:a2:5d:fa:d0:57:4a:21:a4:ba:5c:df:a5: a7:a9:fc:d6:0a:42:e3:42:25:c5:f7:17:78:3b:ac:52:c5:bf: b3:2a:25:4a:d2:f2:0b:68:27:43:b1:fa:e6:e4:28:88:73:f6: 3c:b2:ec:20:e0:66:7a:73:26:50:6d:ed:2e:51:db:2e:05:7f: a7:c9:28:85:1a:d1:6b:27:b3:6f:b5:a1:be:73:7d:e3:aa:10: da:37:93:2d:9b:cb:b7:52:15:37:0a:54:9f:77:53:ad:91:bd: 74:18:5c:de:b4:30:78:b0:eb:0d:60:db:64:32:d7:c9:c6:db: c3:36:c0:3d:e3:0f:38:7a:ce:4c:3b:d1:5c:62:3a:bf:09:0c: 11:aa:5f:87:17:4b:d9:06:40:78:96:3a:e6:27:16:c5:0f:f3: 7e:25:20:5c:1d:d7:ae:e6:1f:bd:51:24:a8:2d:64:a9:44:91: 0c:8e:80:c8:42:8e:a1:63:44:d3:e5:4b:06:78:a1:93:08:26: 72:0f:eb:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURuw4GxPRZ+RbXPWWEvecP7875W4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMDI0WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWMzNWYyNDIzY2IwNTllOWEwZGQ4NjViYTI4Y2Y3MTJk N2Y5NDc0ZmMwMTNkNzUxYzIzM2U1ZmRmZDBlMDkzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC74/vkeuLyKzWl9O6IVXFOFM4ri8XkdnuDwIEg2IPPoypa hixmqbLJBFCTON+PMEidvFbJZ3UeZQjbwd/CivhRQQU8OU55BVDFMBRkGt+zpkuC Y3mdigBgoOf65CU9EmXDqFz+Xm78YDhXspVsYBvBAX80u2B2k7EXO6EBqQ5xWuqq 7K0mdopkYkpqiYl6/0aRYMJaDCZGt7K2LlbmjsQ7vHs57rsL0vfZurayR96oM0rI DsOFQOeR4Nws8qqyf87/RYzFZi55LRShzqxae2wBXqyEH9I9KLl8hnL325eFVGPY glX3c9PoEd2MMdCxzvAbkg5NWFalGz3c9G0rYdqRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHMhrew5Bhfj2lD0elqLRtPhODEMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2MwNzRlOTk3LTIxZTAtNGFjZS1iN2QyLWQwZjMzMmU2Y2UwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAQwDQYJKoZIhvcNAQELBQADggEBABwEyQl5UKrurisaXxw1Dl34 7CB2lYGa3igcX2CKrQMsziGHIgjrOp4mQCfgQ3wbjLFwcPrD4zFfYGwCC6Jd+tBX SiGkulzfpaep/NYKQuNCJcX3F3g7rFLFv7MqJUrS8gtoJ0Ox+ubkKIhz9jyy7CDg ZnpzJlBt7S5R2y4Ff6fJKIUa0Wsns2+1ob5zfeOqENo3ky2by7dSFTcKVJ93U62R vXQYXN60MHiw6w1g22Qy18nG28M2wD3jDzh6zkw70VxiOr8JDBGqX4cXS9kGQHiW OuYnFsUP834lIFwd167mH71RJKgtZKlEkQyOgMhCjqFjRNPlSwZ4oZMIJnIP68o= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:32 2025 by rpki-client