$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa File: f0f08d8e-64f4-4e2b-8f33-26427783e662.roa (raw, json) Hash identifier: qbg5DZcpFtTEA62udlTuGwGRjiPPSzJha6Q/hpZWHcA= Subject key identifier: 63:CC:76:D9:76:5D:F2:23:50:23:E2:26:A4:6B:5F:A7:F6:A8:A5:BE Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 68E0229D6180E215E509311CBAF1AED2D916A20A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa Signing time: Tue 01 Apr 2025 00:51:10 +0000 ROA not before: Tue 01 Apr 2025 00:51:10 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:54a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e0:22:9d:61:80:e2:15:e5:09:31:1c:ba:f1:ae:d2:d9:16:a2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:51:10 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: serialNumber=1cd74347477a1aa619a59808b5d5029b641fbeda998e79e9cbc6d09c62df79bf, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:f2:cf:d2:f1:0d:56:90:88:25:45:f0:4e: 7a:f9:97:16:55:b3:5f:b9:9c:6a:e4:71:45:17:00: e6:04:69:10:89:dd:8f:bb:32:fb:f5:0d:d4:36:8e: f8:40:0e:7f:bd:0e:59:dc:5f:40:fc:aa:dd:ad:98: 45:cf:66:ef:2f:00:81:7a:25:c2:2b:f0:84:b7:a9: b0:69:83:99:b2:3f:f6:47:0f:35:44:b9:79:da:20: a9:98:a9:10:79:c2:63:4c:44:a8:78:31:a7:73:68: ea:df:03:c8:ed:a5:11:67:29:3e:e1:0d:64:7d:1c: 42:5f:22:01:b5:12:df:1e:66:7c:d4:08:43:2a:76: a2:fe:8e:eb:82:f8:c8:4d:d3:32:a7:a0:31:14:6d: 81:e4:b7:88:91:10:ae:91:b4:02:f0:c8:f0:fd:76: 57:c2:e7:8e:98:16:ec:b1:3e:6b:c3:a3:67:69:d0: c1:00:73:24:7f:b3:af:e9:19:b2:24:ab:29:3b:7a: a8:00:e4:32:dd:dc:d1:9a:0f:4f:f5:34:e6:2d:01: 29:05:8c:b5:07:0b:4a:31:91:1f:c5:53:2b:94:01: e8:9b:95:40:b3:84:da:47:b5:e4:07:a9:4d:9a:88: c6:08:51:62:a2:07:2b:c3:07:9f:9f:7a:bc:d8:06: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CC:76:D9:76:5D:F2:23:50:23:E2:26:A4:6B:5F:A7:F6:A8:A5:BE X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54a::/48 Signature Algorithm: sha256WithRSAEncryption 21:27:a8:8b:5f:cd:12:ab:b9:0d:bf:ca:e1:6a:c7:1a:77:a0: a2:04:be:b9:80:cd:2b:d8:80:a7:70:0d:1b:1d:83:f5:ea:3f: 01:0a:37:47:69:4c:a9:0c:5e:e6:f6:8f:ec:38:aa:86:51:9f: 8a:9e:e0:25:30:1a:28:a3:a0:1c:f6:82:28:2e:3a:84:3e:8c: 87:27:6a:35:7f:88:90:59:63:82:16:c0:32:ab:04:d3:83:34: 00:63:72:56:f2:60:d8:9b:98:c2:ce:50:7d:11:56:16:21:7b: ed:e7:d6:e9:15:d1:bd:3f:88:d4:19:ec:27:ea:af:ad:52:34: fb:05:c6:e2:9b:a1:62:1e:a7:c5:7e:95:89:16:59:00:a1:98: 47:a5:06:7b:5e:5a:49:17:e6:f8:c1:c0:1e:67:44:73:83:fc: c4:e5:fe:20:52:eb:bb:9f:5b:3c:6e:c1:5c:8e:f5:cc:7c:dd: c3:1a:0d:b0:8f:12:c4:66:45:12:10:66:2a:6e:57:8d:5a:2d: 79:38:bf:17:0d:e5:1a:e7:7f:ed:3a:0b:8b:c3:b0:d8:b2:cd: 56:63:b1:7d:d5:ad:40:e6:a5:01:10:ba:e9:d6:91:3b:08:08: fd:a2:ff:ca:c9:c9:c7:af:8e:0d:ef:b5:ca:00:2d:96:23:b6: 9c:43:d0:7a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaOAinWGA4hXlCTEcuvGu0tkWogowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA1MTEwWhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2Q3NDM0NzQ3N2ExYWE2MTlhNTk4MDhiNWQ1MDI5YjY0 MWZiZWRhOTk4ZTc5ZTljYmM2ZDA5YzYyZGY3OWJmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3pPLP0vENVpCIJUXwTnr5lxZVs1+5nGrkcUUXAOYEaRCJ 3Y+7Mvv1DdQ2jvhADn+9DlncX0D8qt2tmEXPZu8vAIF6JcIr8IS3qbBpg5myP/ZH DzVEuXnaIKmYqRB5wmNMRKh4MadzaOrfA8jtpRFnKT7hDWR9HEJfIgG1Et8eZnzU CEMqdqL+juuC+MhN0zKnoDEUbYHkt4iREK6RtALwyPD9dlfC546YFuyxPmvDo2dp 0MEAcyR/s6/pGbIkqyk7eqgA5DLd3NGaD0/1NOYtASkFjLUHC0oxkR/FUyuUAeib lUCzhNpHteQHqU2aiMYIUWKiByvDB5+ferzYBgQ9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUY8x22XZd8iNQI+ImpGtfp/aopb4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YwZjA4ZDhlLTY0ZjQtNGUyYi04ZjMzLTI2NDI3NzgzZTY2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUowDQYJKoZIhvcNAQELBQADggEBACEnqItfzRKruQ2/yuFqxxp3 oKIEvrmAzSvYgKdwDRsdg/XqPwEKN0dpTKkMXub2j+w4qoZRn4qe4CUwGiijoBz2 giguOoQ+jIcnajV/iJBZY4IWwDKrBNODNABjclbyYNibmMLOUH0RVhYhe+3n1ukV 0b0/iNQZ7Cfqr61SNPsFxuKboWIep8V+lYkWWQChmEelBnteWkkX5vjBwB5nRHOD /MTl/iBS67ufWzxuwVyO9cx83cMaDbCPEsRmRRIQZipuV41aLXk4vxcN5Rrnf+06 C4vDsNiyzVZjsX3VrUDmpQEQuunWkTsICP2i/8rJycevjg3vtcoALZYjtpxD0Ho= -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:01 2025 by rpki-client