$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa File: 0934543e-90db-4ba0-9848-455452e0c367.roa (raw, json) Hash identifier: JFTVC2ZpZtxxcnH+Ltw0h58iW4S9OHUyYGRU8SCjOVc= Subject key identifier: 17:9C:E1:90:E5:24:51:9B:5F:3B:1C:97:8E:0C:06:7A:F5:86:03:FE Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 081D708890CDA0551382B534673FBD2552AFED29 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa Signing time: Tue 06 May 2025 00:30:09 +0000 ROA not before: Tue 06 May 2025 00:30:09 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1d:70:88:90:cd:a0:55:13:82:b5:34:67:3f:bd:25:52:af:ed:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 6 00:30:09 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=bd677a49b02babe778b177e513dd1764f22c43f79046165e3317794754c06347, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:45:b5:c4:65:d3:75:af:43:3d:47:92:8b: 3c:69:ff:40:e4:c3:90:d3:5f:f3:d0:65:3c:2f:2c: f1:18:ae:4c:67:b4:5e:a1:79:08:a9:9f:d4:00:a1: d9:cc:92:cb:1b:e3:d1:08:a4:18:5c:a2:dd:dc:f5: 6b:8c:55:ee:b6:56:1c:f8:12:f7:b1:55:95:7c:c6: ac:68:82:cc:96:47:f8:ee:1a:f2:64:7a:7c:fd:a5: 06:a3:3b:cf:34:67:dd:b4:ef:c0:c1:66:61:b9:58: 22:33:f4:eb:42:eb:6e:e5:09:79:6b:ac:7a:d9:b8: 07:da:55:6c:cd:6c:d8:d1:d3:4c:b7:ff:31:db:b5: 6e:a5:8d:df:60:92:8a:f4:3a:57:f5:81:46:ce:f3: e6:87:bf:25:1e:fb:ca:db:e9:e2:25:6d:86:80:c3: 93:1e:b4:27:0f:d9:e2:1d:4e:98:29:c6:99:1e:ec: 98:67:c5:f9:a0:b9:21:a2:d7:87:2c:63:b5:a3:31: 00:14:c9:e6:0c:50:62:cc:96:4d:1b:23:b7:2e:02: 80:f0:c6:ed:14:6b:c0:b8:a9:ec:15:f8:d7:14:fa: ee:4b:90:c5:ac:7d:96:cb:13:c3:ad:8f:ad:e6:f5: 36:f0:b1:9c:98:44:1e:ea:c9:88:b0:ca:57:51:39: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9C:E1:90:E5:24:51:9B:5F:3B:1C:97:8E:0C:06:7A:F5:86:03:FE X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c02::/48 Signature Algorithm: sha256WithRSAEncryption 57:8a:8f:ab:05:61:46:a9:9c:7f:81:c1:e3:28:20:ce:0a:e3: 29:00:70:31:9b:f4:9b:e7:ac:5c:18:c9:bc:c2:54:19:28:f9: 93:29:e9:e8:51:13:63:8e:7c:3e:c6:c9:e0:7d:83:a1:ab:a0: 62:0a:46:dc:94:c0:b1:56:41:8c:2d:00:94:44:d6:b1:7e:93: d9:35:3a:67:cc:13:8c:6c:01:4e:40:5e:eb:ac:43:16:44:92: 24:49:cb:5a:cc:74:f3:18:f9:10:27:ae:f3:f6:74:aa:8c:9c: b0:0b:2d:1c:29:64:5b:3b:e8:ff:fe:30:54:98:fd:43:72:6f: 45:39:e2:b9:d8:00:bf:7d:86:66:36:a4:a2:3b:f2:10:dd:92: 4a:53:39:dd:8a:04:0f:65:d0:6f:38:f7:54:68:a2:67:56:76: c3:65:43:c1:86:58:2e:b2:3a:6c:f1:34:62:f6:c6:d4:ba:b3: 9c:e9:06:2d:54:a0:26:82:71:09:2e:ae:91:ae:bc:5e:30:cd: 67:01:bf:68:04:00:cc:ac:c2:ec:37:eb:61:bc:bb:93:33:73: 5e:b8:dc:26:a5:3a:34:64:82:51:3d:e9:e7:2a:b7:33:99:4c: 58:5b:97:52:77:40:14:0a:c8:08:40:f3:a4:bb:46:84:d8:78: 4e:12:72:77 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCB1wiJDNoFUTgrU0Zz+9JVKv7SkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTA2MDAzMDA5WhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDY3N2E0OWIwMmJhYmU3NzhiMTc3ZTUxM2RkMTc2NGYy MmM0M2Y3OTA0NjE2NWUzMzE3Nzk0NzU0YzA2MzQ3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6EUW1xGXTda9DPUeSizxp/0Dkw5DTX/PQZTwvLPEYrkxn tF6heQipn9QAodnMkssb49EIpBhcot3c9WuMVe62Vhz4EvexVZV8xqxogsyWR/ju GvJkenz9pQajO880Z92078DBZmG5WCIz9OtC627lCXlrrHrZuAfaVWzNbNjR00y3 /zHbtW6ljd9gkor0Olf1gUbO8+aHvyUe+8rb6eIlbYaAw5MetCcP2eIdTpgpxpke 7JhnxfmguSGi14csY7WjMQAUyeYMUGLMlk0bI7cuAoDwxu0Ua8C4qewV+NcU+u5L kMWsfZbLE8Otj63m9TbwsZyYRB7qyYiwyldROXKvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUF5zhkOUkUZtfOxyXjgwGevWGA/4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA5MzQ1NDNlLTkwZGItNGJhMC05ODQ4LTQ1NTQ1MmUwYzM2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAIwDQYJKoZIhvcNAQELBQADggEBAFeKj6sFYUapnH+BweMoIM4K 4ykAcDGb9JvnrFwYybzCVBko+ZMp6ehRE2OOfD7GyeB9g6GroGIKRtyUwLFWQYwt AJRE1rF+k9k1OmfME4xsAU5AXuusQxZEkiRJy1rMdPMY+RAnrvP2dKqMnLALLRwp ZFs76P/+MFSY/UNyb0U54rnYAL99hmY2pKI78hDdkkpTOd2KBA9l0G8491RoomdW dsNlQ8GGWC6yOmzxNGL2xtS6s5zpBi1UoCaCcQkurpGuvF4wzWcBv2gEAMyswuw3 62G8u5Mzc1643CalOjRkglE96ecqtzOZTFhbl1J3QBQKyAhA86S7RoTYeE4Scnc= -----END CERTIFICATE-----Generated at Tue May 6 07:48:51 2025 by rpki-client