$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa File: db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa (raw, json) Hash identifier: VsUdayQKr0dH3fuW4LXG95MDPI3uv588PLZayDCnGms= Subject key identifier: 66:19:57:FF:99:21:FA:0D:34:F9:50:68:40:4D:DE:C2:E2:56:BC:60 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7914EACD07E2B9D3F47B2B60DC7A153924433F7A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa Signing time: Fri 11 Apr 2025 00:31:06 +0000 ROA not before: Fri 11 Apr 2025 00:31:06 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:14:ea:cd:07:e2:b9:d3:f4:7b:2b:60:dc:7a:15:39:24:43:3f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:31:06 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=b301ee7f8fcf317703439096337b9e6a1f1c5643e24eba232b0ee68046e259b5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:07:73:69:9c:bd:8a:4d:df:44:28:21:a2: ff:b8:b6:d2:1b:f9:e2:47:12:d0:80:48:82:2c:4d: f5:05:f7:4d:8a:92:80:b1:ec:5a:c8:76:9e:c4:f4: c2:63:f1:db:24:32:1a:62:10:c6:35:a7:7c:a7:8b: 3e:56:9b:67:d6:6b:59:2e:a2:ce:47:ac:f7:b7:e4: 80:85:3c:e8:a2:f3:04:3f:43:8c:23:54:b3:e5:06: 00:26:5c:8e:88:d4:4e:49:a6:38:ed:5b:73:e6:4e: e5:94:2a:b4:95:f4:59:2d:87:13:04:ff:5e:7b:e2: 3a:7f:30:e4:65:16:2c:81:32:cc:6c:44:e7:10:21: e8:f9:f2:33:9c:7f:e7:0d:5b:b6:3f:63:8d:0b:1f: 05:a4:8d:b3:0f:a2:36:ab:17:4b:c5:6b:98:c8:8a: f5:48:01:79:bf:01:c4:fe:ec:e5:f7:e0:ee:dd:5e: 93:ee:fb:78:20:59:a4:b5:2e:48:81:8d:c1:b6:99: 86:1d:5a:58:ea:01:ea:f3:8e:89:ad:0b:49:5a:27: a6:3e:e7:6a:33:ad:ce:76:5e:0d:97:37:0c:68:b7: 36:e9:0c:e6:71:24:9e:a0:89:1c:de:2c:c5:77:06: 85:a2:b0:fc:60:01:54:f3:51:46:70:c5:e6:f9:6c: d2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:19:57:FF:99:21:FA:0D:34:F9:50:68:40:4D:DE:C2:E2:56:BC:60 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c14::/48 Signature Algorithm: sha256WithRSAEncryption 04:61:14:23:83:63:dc:a3:ca:e6:c6:62:e7:95:0b:be:ae:e5: 07:37:91:dd:31:f7:88:2b:9c:f4:3d:73:7a:a5:f3:51:fb:d5: 97:d7:13:eb:ba:1b:f1:e4:35:c8:1b:23:99:38:96:94:88:52: 8f:92:65:88:df:14:d9:59:54:62:50:d2:0f:06:34:95:b2:a6: 55:97:4a:53:d9:56:c5:c0:0c:bf:99:2b:4d:61:ca:6f:37:e3: 1d:45:c0:85:3f:6a:85:4d:e3:fc:99:a8:b9:58:c2:ea:ab:53: 73:dc:ee:b6:a4:5c:a4:37:0a:4c:91:91:61:64:9a:2d:12:f1: be:87:ec:62:2d:1f:3d:c1:71:4f:fd:2a:17:e2:35:b5:87:b7: 82:67:16:9b:29:32:4a:08:46:ba:d1:3f:e4:7f:0e:7b:1a:de: 5b:16:5c:c0:51:01:25:00:5d:4c:c0:59:0a:05:3e:3c:b8:3f: 83:9e:50:b1:19:89:cb:47:c5:fb:31:1b:89:be:3e:37:94:ed: ff:b4:78:86:4b:3d:29:06:98:c3:2a:a0:52:48:8a:b4:c4:9e: 84:02:74:4f:d4:f7:59:95:e0:af:b5:8b:88:2f:9e:ff:82:98: f4:02:68:ae:e1:f5:2e:a1:0a:f0:9c:01:21:90:99:38:cd:65: c6:b6:88:31 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeRTqzQfiudP0eytg3HoVOSRDP3owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMTA2WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzAxZWU3ZjhmY2YzMTc3MDM0MzkwOTYzMzdiOWU2YTFm MWM1NjQzZTI0ZWJhMjMyYjBlZTY4MDQ2ZTI1OWI1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4vwdzaZy9ik3fRCghov+4ttIb+eJHEtCASIIsTfUF902K koCx7FrIdp7E9MJj8dskMhpiEMY1p3yniz5Wm2fWa1kuos5HrPe35ICFPOii8wQ/ Q4wjVLPlBgAmXI6I1E5JpjjtW3PmTuWUKrSV9FkthxME/1574jp/MORlFiyBMsxs ROcQIej58jOcf+cNW7Y/Y40LHwWkjbMPojarF0vFa5jIivVIAXm/AcT+7OX34O7d XpPu+3ggWaS1LkiBjcG2mYYdWljqAerzjomtC0laJ6Y+52ozrc52Xg2XNwxotzbp DOZxJJ6giRzeLMV3BoWisPxgAVTzUUZwxeb5bNILAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZhlX/5kh+g00+VBoQE3ewuJWvGAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2RiM2JiZmU4LTI3MTgtNDVlMS1hM2E1LWFmYmY1NzJkMDBjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBQwDQYJKoZIhvcNAQELBQADggEBAARhFCODY9yjyubGYueVC76u 5Qc3kd0x94grnPQ9c3ql81H71ZfXE+u6G/HkNcgbI5k4lpSIUo+SZYjfFNlZVGJQ 0g8GNJWyplWXSlPZVsXADL+ZK01hym834x1FwIU/aoVN4/yZqLlYwuqrU3Pc7rak XKQ3CkyRkWFkmi0S8b6H7GItHz3BcU/9KhfiNbWHt4JnFpspMkoIRrrRP+R/Dnsa 3lsWXMBRASUAXUzAWQoFPjy4P4OeULEZictHxfsxG4m+PjeU7f+0eIZLPSkGmMMq oFJIirTEnoQCdE/U91mV4K+1i4gvnv+CmPQCaK7h9S6hCvCcASGQmTjNZca2iDE= -----END CERTIFICATE-----Generated at Sun Apr 27 12:16:13 2025 by rpki-client