$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa File: f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa (raw, json) Hash identifier: Stbt0ORrkz1dlZ1urUjZSakpz6pUdMXittIK4DmpIKA= Subject key identifier: 33:36:A0:49:DD:3B:F6:55:72:7E:AA:20:9C:FF:1C:B0:27:C2:01:0E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5F9F0E750D22AE9C346444EF2DA453341BCB167D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa Signing time: Fri 25 Apr 2025 17:40:29 +0000 ROA not before: Fri 25 Apr 2025 17:40:29 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:9f:0e:75:0d:22:ae:9c:34:64:44:ef:2d:a4:53:34:1b:cb:16:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 25 17:40:29 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=2fa0ebbe229002ef0154adffab81dd543d173b7fb77a730bafa6e13c02fbcd43, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:4f:f7:39:79:f4:40:72:ec:97:b0:32:9b: 64:99:eb:c2:44:ad:d8:0b:d4:e8:5b:68:64:22:6c: 69:9b:2d:8a:94:d7:3b:af:0c:3d:11:f5:55:7a:5a: ef:b7:de:34:bd:fb:e4:b5:28:69:08:ba:4c:0c:01: 0d:dc:1f:0b:e3:08:ff:b4:3d:f2:83:aa:1a:c7:fe: ff:b9:cf:ff:9a:ab:43:58:f1:92:31:0f:67:a5:e3: 5a:b1:2b:3a:3e:4e:70:6e:b3:03:a7:51:b0:d1:27: c5:29:4b:4d:63:47:03:09:07:f9:c0:1e:61:1e:13: 44:29:41:5f:dc:1c:a5:71:df:95:6e:88:e4:3f:20: 1e:08:5f:ec:12:b1:47:9a:94:26:c2:46:b6:07:b6: 1c:50:f6:e7:23:a2:3e:ad:22:ab:61:03:b5:38:0d: 1a:36:9f:f5:1f:d2:ec:5d:6b:87:d3:2f:c9:8f:e0: e3:96:53:27:c1:58:4a:06:5b:d0:94:f1:92:c7:06: d4:5a:9e:88:0e:d4:5d:7c:90:cb:bc:cc:b2:73:72: 55:ea:49:93:57:99:2d:c6:82:cd:63:37:ca:5c:16: 8e:3f:49:89:68:18:c1:de:6c:2b:cf:f8:0c:43:10: 5c:11:33:f3:cf:70:df:fc:b3:0d:47:19:c0:34:3a: c5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:36:A0:49:DD:3B:F6:55:72:7E:AA:20:9C:FF:1C:B0:27:C2:01:0E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c23::/48 Signature Algorithm: sha256WithRSAEncryption 51:10:12:c0:ba:8c:89:44:c8:de:2e:65:96:44:60:77:87:d1: db:f5:80:24:dd:9e:24:22:61:95:7e:fd:3f:26:3a:62:fb:9d: ef:c1:a2:97:d7:f7:0b:43:94:80:bd:4c:9f:21:31:61:13:81: 53:ee:b9:0d:aa:01:e0:ac:cd:d7:23:5c:6a:20:7f:93:d2:2f: 51:9c:20:93:f7:51:37:9f:bb:08:ba:fc:06:9e:ac:a9:09:02: 8c:4d:ed:35:a2:74:46:14:50:b9:89:85:16:a1:db:8d:ff:ba: 10:ae:00:97:9e:3d:3c:6c:0a:84:1c:11:6d:71:5e:2f:24:f2: ad:06:4b:0f:e6:2d:18:65:c7:54:a5:3a:39:a8:59:d0:c6:37: 9d:af:e2:13:c1:c0:c0:2f:49:b8:99:84:31:f3:7d:8a:c6:da: 18:58:b1:b1:b9:2c:e7:5a:39:87:b7:8e:80:0f:e5:60:3b:22: ae:4f:31:93:31:78:3f:6b:0e:1f:ac:8f:81:c4:c7:f6:da:bc: 56:92:c9:c8:ad:ec:e8:79:1b:bf:cc:45:9e:8b:b6:7f:f1:27: 8a:b8:b7:df:ab:ec:9c:a0:98:4f:ac:8c:a4:2b:31:aa:54:86: 29:23:82:ba:7b:6b:ae:a0:2b:99:e9:9d:31:41:f1:b3:36:07: 8e:02:52:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX58OdQ0irpw0ZETvLaRTNBvLFn0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI1MTc0MDI5WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmEwZWJiZTIyOTAwMmVmMDE1NGFkZmZhYjgxZGQ1NDNk MTczYjdmYjc3YTczMGJhZmE2ZTEzYzAyZmJjZDQzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrCU/3OXn0QHLsl7Aym2SZ68JErdgL1OhbaGQibGmbLYqU 1zuvDD0R9VV6Wu+33jS9++S1KGkIukwMAQ3cHwvjCP+0PfKDqhrH/v+5z/+aq0NY 8ZIxD2el41qxKzo+TnBuswOnUbDRJ8UpS01jRwMJB/nAHmEeE0QpQV/cHKVx35Vu iOQ/IB4IX+wSsUealCbCRrYHthxQ9ucjoj6tIqthA7U4DRo2n/Uf0uxda4fTL8mP 4OOWUyfBWEoGW9CU8ZLHBtRanogO1F18kMu8zLJzclXqSZNXmS3Ggs1jN8pcFo4/ SYloGMHebCvP+AxDEFwRM/PPcN/8sw1HGcA0OsXnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMzagSd079lVyfqognP8csCfCAQ4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y0NWUyZmM0LWUxNzEtNGFhMy04NjJiLTRhZjU3MjA4YzllZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADCMwDQYJKoZIhvcNAQELBQADggEBAFEQEsC6jIlEyN4uZZZEYHeH 0dv1gCTdniQiYZV+/T8mOmL7ne/BopfX9wtDlIC9TJ8hMWETgVPuuQ2qAeCszdcj XGogf5PSL1GcIJP3UTefuwi6/AaerKkJAoxN7TWidEYUULmJhRah243/uhCuAJee PTxsCoQcEW1xXi8k8q0GSw/mLRhlx1SlOjmoWdDGN52v4hPBwMAvSbiZhDHzfYrG 2hhYsbG5LOdaOYe3joAP5WA7Iq5PMZMxeD9rDh+sj4HEx/bavFaSycit7Oh5G7/M RZ6Ltn/xJ4q4t9+r7JygmE+sjKQrMapUhikjgrp7a66gK5npnTFB8bM2B44CUis= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:34 2025 by rpki-client