$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa File: d634cf95-850c-46d0-9812-120e229c9e7d.roa (raw, json) Hash identifier: CNOIrLU89EaMMvXSVQtlJO9I8+r5Ld//Mz+nWkTcbts= Subject key identifier: 4C:12:01:FB:D6:D3:5D:3C:C0:A2:06:69:06:29:98:1D:E7:68:77:01 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 30CF29DC42F6CC64AD4AB9E99925AC3D90BD31E1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa Signing time: Fri 11 Apr 2025 00:30:34 +0000 ROA not before: Fri 11 Apr 2025 00:30:34 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:cf:29:dc:42:f6:cc:64:ad:4a:b9:e9:99:25:ac:3d:90:bd:31:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:30:34 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=a9e4ad3b9f9b497a2facc4bef1741ae5a21b2109b43ba3f32c6e8d3c30a07280, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:b8:5b:f9:7f:17:98:cf:2b:27:ee:72:78: 02:a1:1b:20:b6:f3:24:ce:3d:34:8e:7a:ad:bd:70: 14:a3:e7:e2:f5:33:31:04:c9:85:b5:3f:f8:95:d7: de:8a:44:96:08:13:3b:d6:db:d0:ec:79:ae:1c:61: f6:a9:96:52:1b:eb:5d:33:7b:e4:03:9b:52:e7:c0: e1:69:fc:ce:6c:65:53:9a:0c:c6:de:34:51:cb:8a: 0a:ae:b5:8b:63:61:fa:cf:ec:03:f0:c2:39:86:0b: 59:35:5c:e9:b5:fe:05:96:b0:2f:b1:e8:5c:ca:75: 9a:1e:4c:46:9b:6b:01:f8:1c:c6:25:9f:ff:f8:85: b6:a3:3c:fc:b4:75:2e:db:a6:3a:a7:11:fb:a6:65: 60:1c:de:17:63:f4:e6:ca:67:7e:bb:b2:4f:df:73: b6:ec:1a:42:1d:7a:1f:66:37:e5:ee:9c:87:ee:57: 4f:52:c4:ad:60:c6:52:2f:f8:aa:27:7a:f5:2d:ed: 80:62:48:46:30:df:49:f4:88:a1:21:ca:6e:e2:7d: 32:09:f4:56:b2:0f:b2:5a:e1:e2:b6:09:92:a3:f4: 2f:fd:20:b8:6c:05:4c:21:f9:cf:a0:70:a4:3f:21: 98:f6:78:30:bc:77:65:c9:3d:5a:a0:50:f6:b1:95: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:12:01:FB:D6:D3:5D:3C:C0:A2:06:69:06:29:98:1D:E7:68:77:01 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c06::/48 Signature Algorithm: sha256WithRSAEncryption 59:2f:c5:d1:2f:66:34:7c:e7:51:6a:94:3b:a0:1e:9e:4e:25: 48:99:e0:ff:77:ee:22:8e:15:e1:99:d4:ba:d6:15:e0:2b:43: a0:cf:3c:44:86:c9:ea:0e:47:79:e7:93:c6:06:c5:79:69:13: 82:5a:8f:2e:2c:4f:c7:46:67:1a:67:25:90:ce:6c:2e:16:78: 54:bb:8f:37:d2:74:2b:9e:47:3b:d7:c0:95:2e:5e:2e:57:04: 37:6f:f3:e8:6d:e0:fe:7e:fd:74:03:da:70:e1:1a:4b:5c:42: 92:b0:2f:a1:0b:54:97:b4:2f:79:4b:ce:e3:d9:c2:dc:bf:b1: 44:1f:e3:02:e7:46:35:2a:0a:9e:e5:bf:4e:03:f8:6d:f5:04: 49:48:c3:ec:91:b3:1c:20:0b:11:2d:84:21:31:04:54:e2:55: 36:be:4f:c4:ad:5f:ea:3d:1f:01:10:42:ae:70:de:ec:1a:b0: cd:67:0e:4a:77:07:cf:56:7d:63:da:60:05:fb:84:e5:2d:fe: 08:9f:20:32:10:d6:5e:47:86:4b:6c:4a:75:07:d9:0e:41:2c: 78:7f:c9:73:bc:e4:99:b8:d2:35:a7:4f:9c:bb:19:a7:07:18: 4d:52:eb:2b:66:c7:18:f8:7c:02:19:a4:e1:de:e0:a0:53:5d: c8:ef:3e:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMM8p3EL2zGStSrnpmSWsPZC9MeEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMDM0WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWU0YWQzYjlmOWI0OTdhMmZhY2M0YmVmMTc0MWFlNWEy MWIyMTA5YjQzYmEzZjMyYzZlOGQzYzMwYTA3MjgwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs7bhb+X8XmM8rJ+5yeAKhGyC28yTOPTSOeq29cBSj5+L1 MzEEyYW1P/iV196KRJYIEzvW29Dsea4cYfapllIb610ze+QDm1LnwOFp/M5sZVOa DMbeNFHLigqutYtjYfrP7APwwjmGC1k1XOm1/gWWsC+x6FzKdZoeTEabawH4HMYl n//4hbajPPy0dS7bpjqnEfumZWAc3hdj9ObKZ367sk/fc7bsGkIdeh9mN+XunIfu V09SxK1gxlIv+KonevUt7YBiSEYw30n0iKEhym7ifTIJ9FayD7Ja4eK2CZKj9C/9 ILhsBUwh+c+gcKQ/IZj2eDC8d2XJPVqgUPaxlcGdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTBIB+9bTXTzAogZpBimYHedodwEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q2MzRjZjk1LTg1MGMtNDZkMC05ODEyLTEyMGUyMjljOWU3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAYwDQYJKoZIhvcNAQELBQADggEBAFkvxdEvZjR851FqlDugHp5O JUiZ4P937iKOFeGZ1LrWFeArQ6DPPESGyeoOR3nnk8YGxXlpE4Jajy4sT8dGZxpn JZDObC4WeFS7jzfSdCueRzvXwJUuXi5XBDdv8+ht4P5+/XQD2nDhGktcQpKwL6EL VJe0L3lLzuPZwty/sUQf4wLnRjUqCp7lv04D+G31BElIw+yRsxwgCxEthCExBFTi VTa+T8StX+o9HwEQQq5w3uwasM1nDkp3B89WfWPaYAX7hOUt/gifIDIQ1l5Hhkts SnUH2Q5BLHh/yXO85Jm40jWnT5y7GacHGE1S6ytmxxj4fAIZpOHe4KBTXcjvPtI= -----END CERTIFICATE-----Generated at Mon Apr 28 00:02:24 2025 by rpki-client