$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15573dbf-b10c-436f-b5d6-7526187c5030.roa File: 15573dbf-b10c-436f-b5d6-7526187c5030.roa (raw, json) Hash identifier: 04udL6TKhw0LQbEDcNYPg4koMY5nmiaRiDxq8OazXt0= Subject key identifier: CC:2A:E4:32:C1:78:D1:51:F2:73:46:2D:E4:EB:78:D8:D5:BA:3B:5F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2865830EE42FDA67382596A5297D772C64824C22 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15573dbf-b10c-436f-b5d6-7526187c5030.roa Signing time: Mon 28 Apr 2025 15:30:24 +0000 ROA not before: Mon 28 Apr 2025 15:30:24 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:54a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:65:83:0e:e4:2f:da:67:38:25:96:a5:29:7d:77:2c:64:82:4c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 28 15:30:24 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=45b826515b1eb12b79ee61d82edcf5e81478d413f8fcfdac4251da8ba0292af9, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e9:0d:15:b4:36:22:49:79:7e:39:b7:21:1a: 71:c1:81:68:cc:55:33:56:ee:53:23:a2:cf:4a:04: 75:b0:f0:39:2e:a9:14:35:f8:93:ad:a7:1b:81:bf: 6b:02:a1:fe:42:50:42:d8:8e:00:1e:34:98:2d:db: 87:fc:fe:fb:fd:b1:b6:68:1b:8c:50:97:39:bc:ae: 32:3f:69:e0:f1:2b:a1:aa:f5:7b:36:6e:40:ae:8e: f3:5b:30:8b:01:ef:3e:dd:9e:f9:3a:d6:3b:3d:f4: 29:02:54:df:2a:7f:68:10:5b:f8:08:e5:a9:d1:59: f5:f7:b5:4a:4d:f8:31:ca:d3:ae:83:e4:ba:a8:fa: f6:07:16:c0:e7:54:44:33:f4:ac:79:d0:ea:61:b7: fb:89:ed:7a:64:f9:69:57:9a:d5:08:b4:a8:f2:1d: 06:0f:9d:f6:38:b8:75:c0:b0:73:95:fc:45:8c:99: e7:4d:e4:f5:be:09:a0:46:b5:01:15:a2:b8:34:f5: 58:ba:e3:c5:fd:89:e5:b0:41:28:1d:a0:c5:ef:b2: 4c:2a:69:0d:07:c3:a3:11:1c:f9:57:34:d7:cf:81: be:0e:62:97:57:3c:30:8d:82:06:69:c5:30:74:42: b1:70:b5:6d:a6:a4:1f:77:c7:6b:dd:cd:92:f2:88: 33:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2A:E4:32:C1:78:D1:51:F2:73:46:2D:E4:EB:78:D8:D5:BA:3B:5F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15573dbf-b10c-436f-b5d6-7526187c5030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54a::/48 Signature Algorithm: sha256WithRSAEncryption 48:75:2a:c9:52:5f:e1:5c:1b:fa:5d:82:ff:47:a9:83:80:1e: 92:49:6c:cf:94:e7:31:a3:1a:10:ba:0a:f2:20:9b:c3:eb:d6: 55:ce:b7:40:a9:24:b2:26:60:68:8b:8a:01:36:61:31:b8:50: 21:d4:2c:27:f3:ea:d8:38:c7:79:d4:78:84:83:14:c8:6a:24: ae:86:91:5f:ce:38:83:d3:30:ab:ba:bb:f5:43:ed:ee:b6:89: fc:d2:7e:5a:ee:f9:15:69:73:bd:dc:7e:7b:22:2d:f3:cb:69: 33:f7:30:0a:bb:19:cb:2f:42:09:27:ae:98:9f:4e:27:8d:2d: 44:16:f1:4e:81:13:7e:39:73:d7:c8:1a:4d:b0:f6:52:e2:33: 7d:92:83:4e:f0:8e:92:88:7b:f1:e3:5e:d0:62:f9:5e:80:9a: a5:99:ce:86:f9:e9:9d:f1:ff:35:29:22:d2:7d:f9:61:ed:19: 2e:97:d1:77:85:2e:be:c4:38:80:8b:61:11:32:a1:0b:2e:02: 8b:18:83:83:c0:a3:03:24:1d:82:a6:2c:ab:5e:3c:57:69:df: 41:6d:bb:21:d2:eb:f0:ca:39:25:cc:97:dc:a9:24:f8:37:e7: df:46:5d:7a:b7:e8:7d:05:10:bc:e8:51:dd:88:b9:9a:df:2e: c8:c2:10:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKGWDDuQv2mc4JZalKX13LGSCTCIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI4MTUzMDI0WhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NWI4MjY1MTViMWViMTJiNzllZTYxZDgyZWRjZjVlODE0 NzhkNDEzZjhmY2ZkYWM0MjUxZGE4YmEwMjkyYWY5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW6Q0VtDYiSXl+ObchGnHBgWjMVTNW7lMjos9KBHWw8Dku qRQ1+JOtpxuBv2sCof5CUELYjgAeNJgt24f8/vv9sbZoG4xQlzm8rjI/aeDxK6Gq 9Xs2bkCujvNbMIsB7z7dnvk61js99CkCVN8qf2gQW/gI5anRWfX3tUpN+DHK066D 5Lqo+vYHFsDnVEQz9Kx50Opht/uJ7Xpk+WlXmtUItKjyHQYPnfY4uHXAsHOV/EWM medN5PW+CaBGtQEVorg09Vi648X9ieWwQSgdoMXvskwqaQ0Hw6MRHPlXNNfPgb4O YpdXPDCNggZpxTB0QrFwtW2mpB93x2vdzZLyiDNPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzCrkMsF40VHyc0Yt5Ot42NW6O18wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE1NTczZGJmLWIxMGMtNDM2Zi1iNWQ2LTc1MjYxODdjNTAzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUowDQYJKoZIhvcNAQELBQADggEBAEh1KslSX+FcG/pdgv9HqYOA HpJJbM+U5zGjGhC6CvIgm8Pr1lXOt0CpJLImYGiLigE2YTG4UCHULCfz6tg4x3nU eISDFMhqJK6GkV/OOIPTMKu6u/VD7e62ifzSflru+RVpc73cfnsiLfPLaTP3MAq7 GcsvQgknrpifTieNLUQW8U6BE345c9fIGk2w9lLiM32Sg07wjpKIe/HjXtBi+V6A mqWZzob56Z3x/zUpItJ9+WHtGS6X0XeFLr7EOICLYREyoQsuAosYg4PAowMkHYKm LKtePFdp30FtuyHS6/DKOSXMl9ypJPg3599GXXq36H0FELzoUd2IuZrfLsjCEEA= -----END CERTIFICATE-----Generated at Mon May 5 17:16:03 2025 by rpki-client