$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa File: f5342ecb-711b-446c-8167-0d2a93e65bea.roa (raw, json) Hash identifier: w5TKtGq2yGbqc4KynFlvVxGmev6jvpv1FTogNHBiRhc= Subject key identifier: 8F:52:4D:24:8D:F7:2F:FD:6E:43:CD:5C:51:7C:22:0E:0A:58:32:D2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6EC930A53EFF61AB55D8F221E478FE3A36A435D9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa Signing time: Fri 11 Apr 2025 00:40:14 +0000 ROA not before: Fri 11 Apr 2025 00:40:14 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c9:30:a5:3e:ff:61:ab:55:d8:f2:21:e4:78:fe:3a:36:a4:35:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:40:14 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=fd08325b33537e52c1117bf6fb1657934a30b927ec88cbaaec42c638bc402e28, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:33:f0:af:20:9c:11:f6:9d:60:f9:e3:2b:bf: 46:bf:96:dd:bf:cc:87:e5:88:64:34:4d:e3:e9:24: eb:ab:b6:2b:89:ea:1a:32:a0:86:75:26:c2:b5:8f: 9f:04:01:01:50:4d:cb:b3:4d:06:05:30:54:8a:2d: be:20:19:6e:86:8b:f5:62:4c:e4:da:74:1a:d5:74: 94:15:b7:0e:db:13:27:0e:3c:46:f9:16:93:a0:5b: 7b:24:73:9f:f5:a8:0b:70:0a:6d:a2:3e:ad:84:16: 88:fc:b5:a2:96:12:33:6e:8c:16:04:f5:e5:0b:95: 65:4b:be:d4:61:63:73:c2:74:14:3e:b4:83:16:bf: 46:b7:af:96:44:e0:86:dd:85:f0:17:15:ef:5b:f0: 8a:77:de:04:25:22:e6:cc:c9:79:49:9c:ec:af:2d: 40:96:bf:09:99:4e:c0:3b:e5:4f:d9:39:2b:b4:b7: f7:54:20:a3:0e:eb:31:45:31:2a:be:17:e9:fd:3f: f0:60:e5:6b:0a:ac:0f:1b:be:d8:d1:f5:41:7c:7d: 9b:0b:58:ac:f4:7a:b3:76:ff:f5:40:b7:f1:78:17: 01:90:f5:6b:3d:a1:91:59:44:f0:4c:3b:c0:4e:8e: f5:08:15:1b:72:b6:ca:de:0d:a0:c7:a9:ba:48:6e: 09:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:4D:24:8D:F7:2F:FD:6E:43:CD:5C:51:7C:22:0E:0A:58:32:D2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c18::/48 Signature Algorithm: sha256WithRSAEncryption 04:f3:a9:44:21:c7:9a:9b:ba:f8:19:18:15:3e:22:b5:46:45: 88:e2:61:35:03:65:6f:bf:99:c7:13:40:d6:d2:94:71:3d:d9: 11:a7:61:5c:31:58:e1:cc:a1:b5:68:d9:be:73:12:49:93:47: e1:3c:a4:14:56:83:5f:b0:a0:69:11:44:37:d7:78:1e:bd:c8: 91:c5:d0:6b:8a:86:8e:a9:cd:e2:4f:4d:48:76:07:bf:f9:45: 13:e5:0c:f8:96:a9:ab:07:ce:cd:f0:94:62:78:20:11:2c:2d: 79:4b:eb:c0:64:90:c8:ed:bf:16:96:58:bc:fc:43:0c:fb:f7: 66:76:be:66:cb:e2:c3:18:b9:ed:10:c5:0f:e2:45:d0:2b:4c: 3b:e6:bc:a6:cf:9e:fd:f0:33:f4:1c:bc:32:b8:88:59:31:65: 86:8b:9b:0d:17:ca:4d:22:a4:90:18:c6:db:63:ae:2a:8a:cc: c9:bd:ee:05:fa:78:60:2b:14:46:f3:ff:98:24:f5:85:5a:9b: ad:dc:9c:d9:24:43:94:b7:4e:56:98:3c:eb:82:00:d1:54:06: bf:5f:64:99:e4:de:a8:7a:c4:37:99:b1:77:fe:66:fe:95:e8: c9:bc:44:43:9b:9f:4d:38:a8:32:19:15:4d:12:bc:88:12:f3: 07:68:12:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbskwpT7/YatV2PIh5Hj+OjakNdkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDA0MDE0WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDA4MzI1YjMzNTM3ZTUyYzExMTdiZjZmYjE2NTc5MzRh MzBiOTI3ZWM4OGNiYWFlYzQyYzYzOGJjNDAyZTI4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTM/CvIJwR9p1g+eMrv0a/lt2/zIfliGQ0TePpJOurtiuJ 6hoyoIZ1JsK1j58EAQFQTcuzTQYFMFSKLb4gGW6Gi/ViTOTadBrVdJQVtw7bEycO PEb5FpOgW3skc5/1qAtwCm2iPq2EFoj8taKWEjNujBYE9eULlWVLvtRhY3PCdBQ+ tIMWv0a3r5ZE4IbdhfAXFe9b8Ip33gQlIubMyXlJnOyvLUCWvwmZTsA75U/ZOSu0 t/dUIKMO6zFFMSq+F+n9P/Bg5WsKrA8bvtjR9UF8fZsLWKz0erN2//VAt/F4FwGQ 9Ws9oZFZRPBMO8BOjvUIFRtytsreDaDHqbpIbgkvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUj1JNJI33L/1uQ81cUXwiDgpYMtIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y1MzQyZWNiLTcxMWItNDQ2Yy04MTY3LTBkMmE5M2U2NWJlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBgwDQYJKoZIhvcNAQELBQADggEBAATzqUQhx5qbuvgZGBU+IrVG RYjiYTUDZW+/mccTQNbSlHE92RGnYVwxWOHMobVo2b5zEkmTR+E8pBRWg1+woGkR RDfXeB69yJHF0GuKho6pzeJPTUh2B7/5RRPlDPiWqasHzs3wlGJ4IBEsLXlL68Bk kMjtvxaWWLz8Qwz792Z2vmbL4sMYue0QxQ/iRdArTDvmvKbPnv3wM/QcvDK4iFkx ZYaLmw0Xyk0ipJAYxttjriqKzMm97gX6eGArFEbz/5gk9YVam63cnNkkQ5S3TlaY POuCANFUBr9fZJnk3qh6xDeZsXf+Zv6V6Mm8REObn004qDIZFU0SvIgS8wdoEnk= -----END CERTIFICATE-----Generated at Sun Apr 27 12:09:11 2025 by rpki-client