$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c22e6618-b748-4a32-bb84-d93856f3a960.roa File: c22e6618-b748-4a32-bb84-d93856f3a960.roa (raw, json) Hash identifier: xH4jclBK9FMDbOLvrbDvvsx/Glu+xbjxeeTABGqT/7U= Subject key identifier: 05:F3:73:11:77:CF:60:24:58:C2:8D:35:4B:47:37:1C:74:EF:0A:A6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1C826CDC68C0F2A4BFE7C47D780CB302631E68D4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c22e6618-b748-4a32-bb84-d93856f3a960.roa Signing time: Fri 25 Apr 2025 17:40:36 +0000 ROA not before: Fri 25 Apr 2025 17:40:36 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:82:6c:dc:68:c0:f2:a4:bf:e7:c4:7d:78:0c:b3:02:63:1e:68:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 25 17:40:36 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=0591b07ec1c18c37e2db6c4365d5354bdf2e3ee6b7b645e2da4b2a413e5557c5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:06:0e:c4:a4:d5:1e:ba:6e:1e:e6:99:88: 7e:7e:e0:1d:6b:6f:6d:cd:76:14:eb:3a:91:c4:83: 82:e8:13:00:45:7d:39:80:61:44:38:ac:8a:0c:b4: 6f:0d:9f:d4:e6:3c:9b:dd:11:be:e3:48:de:4a:0b: e1:bf:44:58:ef:ff:bc:af:76:3b:33:6c:94:f3:cc: 9e:e5:04:2b:59:5e:49:23:1a:78:fd:c7:23:7f:3f: f2:46:cc:5c:9c:1f:93:4e:df:28:49:73:2a:a7:03: ab:2a:e2:1e:c0:49:04:4a:3b:b0:74:d6:87:40:96: 5b:35:cd:02:02:7e:db:fd:84:9d:25:ac:bf:5e:53: 31:a8:85:34:0b:7e:73:05:17:83:fc:3b:b3:6c:30: cd:03:89:30:8c:7b:97:e3:2d:9e:b0:9f:e5:48:c3: 1b:6f:e0:29:e9:2a:0e:76:c7:64:3e:4f:0c:b1:4f: 2f:5a:18:64:6b:87:0c:d7:44:24:23:b5:89:f8:d3: 5b:07:44:59:94:40:ae:62:19:d9:19:9b:e2:67:05: ec:73:8f:83:19:46:74:d0:78:c9:e1:07:c2:d0:f1: 68:bb:76:88:76:8b:4e:27:6e:c0:3f:b9:36:21:da: 00:f9:bd:38:dd:db:7d:b0:01:9e:9e:d1:e4:32:4d: 1b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F3:73:11:77:CF:60:24:58:C2:8D:35:4B:47:37:1C:74:EF:0A:A6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c22e6618-b748-4a32-bb84-d93856f3a960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c30::/44 Signature Algorithm: sha256WithRSAEncryption 97:2b:c6:c9:d6:46:1e:e5:ce:6a:f6:ed:1a:55:1e:f3:d8:8d: ea:ef:30:76:3c:80:a6:6b:2d:79:87:45:dd:0e:68:57:23:9c: 0d:57:81:03:e9:66:46:bd:d8:a0:34:f0:c9:3f:5b:de:8e:74: 29:45:20:9d:6f:2f:2c:49:81:04:bb:b5:bd:8d:d0:57:b4:3b: 97:aa:81:95:cf:28:18:c1:c8:1d:08:9c:4a:2e:4d:ba:20:7e: f2:f0:a9:69:42:c0:4c:d1:58:a4:f5:ee:f6:7b:a8:1c:2b:7e: cb:7b:c2:30:26:2f:33:c7:30:cd:e1:d3:6d:3e:39:de:9b:40: c1:06:17:bc:0a:51:dc:c0:32:05:77:fc:34:52:b0:b2:a1:46: ad:60:42:6d:18:fe:cf:75:19:be:95:2e:95:ed:aa:4d:ab:e5: b5:ba:f9:0e:79:08:6d:91:0c:59:34:8f:fc:25:61:1a:39:18: 70:b7:e3:76:42:58:39:1d:e8:ce:41:7d:bd:fc:8c:58:60:d3: ef:12:79:ab:ad:5b:e8:75:15:19:02:bf:62:9b:f5:0a:2a:8d: 58:cd:5b:06:e8:e8:81:7b:f0:f3:ad:3c:2d:6d:40:ff:2c:3c: d9:69:cc:87:ff:e4:c0:f9:7e:9d:76:4e:5c:cd:f9:69:dd:ce: 30:13:d6:9e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHIJs3GjA8qS/58R9eAyzAmMeaNQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI1MTc0MDM2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTkxYjA3ZWMxYzE4YzM3ZTJkYjZjNDM2NWQ1MzU0YmRm MmUzZWU2YjdiNjQ1ZTJkYTRiMmE0MTNlNTU1N2M1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4CwYOxKTVHrpuHuaZiH5+4B1rb23NdhTrOpHEg4LoEwBF fTmAYUQ4rIoMtG8Nn9TmPJvdEb7jSN5KC+G/RFjv/7yvdjszbJTzzJ7lBCtZXkkj Gnj9xyN/P/JGzFycH5NO3yhJcyqnA6sq4h7ASQRKO7B01odAlls1zQICftv9hJ0l rL9eUzGohTQLfnMFF4P8O7NsMM0DiTCMe5fjLZ6wn+VIwxtv4CnpKg52x2Q+Twyx Ty9aGGRrhwzXRCQjtYn401sHRFmUQK5iGdkZm+JnBexzj4MZRnTQeMnhB8LQ8Wi7 doh2i04nbsA/uTYh2gD5vTjd232wAZ6e0eQyTRs9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBfNzEXfPYCRYwo01S0c3HHTvCqYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2MyMmU2NjE4LWI3NDgtNGEzMi1iYjg0LWQ5Mzg1NmYzYTk2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADDAwDQYJKoZIhvcNAQELBQADggEBAJcrxsnWRh7lzmr27RpVHvPY jervMHY8gKZrLXmHRd0OaFcjnA1XgQPpZka92KA08Mk/W96OdClFIJ1vLyxJgQS7 tb2N0Fe0O5eqgZXPKBjByB0InEouTbogfvLwqWlCwEzRWKT17vZ7qBwrfst7wjAm LzPHMM3h020+Od6bQMEGF7wKUdzAMgV3/DRSsLKhRq1gQm0Y/s91Gb6VLpXtqk2r 5bW6+Q55CG2RDFk0j/wlYRo5GHC343ZCWDkd6M5Bfb38jFhg0+8SeautW+h1FRkC v2Kb9QoqjVjNWwbo6IF78POtPC1tQP8sPNlpzIf/5MD5fp12TlzN+WndzjAT1p4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:30 2025 by rpki-client