$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/161ac2ec-73e2-4141-816b-51a4598669a3.roa File: 161ac2ec-73e2-4141-816b-51a4598669a3.roa (raw, json) Hash identifier: xstca+okYEivWDcwRkRQc8j7KKZzTtvKdQeLidvn0bY= Subject key identifier: D3:32:B1:5A:05:E8:A8:25:4E:AB:48:76:AA:0C:F2:DE:A8:EC:39:C8 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1B47CF12DD1A9AB2F4762737140D7AB345B68AC5 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/161ac2ec-73e2-4141-816b-51a4598669a3.roa Signing time: Mon 28 Apr 2025 15:30:37 +0000 ROA not before: Mon 28 Apr 2025 15:30:37 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:613::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:47:cf:12:dd:1a:9a:b2:f4:76:27:37:14:0d:7a:b3:45:b6:8a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 28 15:30:37 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=5af1263d9e8323518cf6df232299cebe43d983d1cb21d8ae3c1844079a0752f8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:31:55:1d:81:1d:4f:f9:40:39:b6:28:87: 30:d2:cc:20:75:8e:82:89:11:eb:ec:3e:83:d2:f5: 67:06:da:74:da:3b:c0:5c:14:1f:51:cf:22:cf:f9: e6:bf:61:4c:1e:a4:da:eb:50:88:7b:25:6d:6f:20: 19:3d:21:1d:a9:4f:06:b0:4f:01:a5:0f:3c:72:7d: 82:1a:08:d7:e8:ab:b5:dc:24:c7:e5:d1:81:03:86: 4e:22:e8:26:5f:11:4d:5d:88:e2:2f:b8:09:1f:53: 42:58:a1:3e:1f:6e:ea:73:a5:03:88:c4:2f:82:b0: bf:cb:3b:08:87:de:33:31:06:bb:36:ce:8a:ff:ef: 84:2c:47:01:ee:1a:b3:58:84:f2:e2:f4:06:85:95: 9e:2d:f3:59:28:ad:de:cc:b2:27:7d:52:b5:d2:db: 46:73:08:49:61:e9:c6:b8:0d:80:17:79:06:38:68: ac:b0:20:93:8d:3e:de:66:a5:01:49:30:84:83:74: 31:15:bb:76:68:59:01:97:8e:d6:b1:62:ff:42:8f: 77:ad:0e:63:f6:aa:f8:00:da:7a:a5:2a:dd:58:d6: fd:61:8f:a1:c8:86:43:6f:55:84:03:25:53:2b:e5: 57:fc:8b:31:6f:83:ae:e3:c1:42:2c:a8:3f:0f:52: 58:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:32:B1:5A:05:E8:A8:25:4E:AB:48:76:AA:0C:F2:DE:A8:EC:39:C8 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/161ac2ec-73e2-4141-816b-51a4598669a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:613::/48 Signature Algorithm: sha256WithRSAEncryption a6:e5:dd:ad:61:04:b4:41:0e:77:dd:a6:81:6a:1a:54:c4:ae: 91:61:be:03:9a:e1:3d:42:4b:89:e5:05:7c:35:8d:e4:06:72: ff:b9:ef:54:23:09:5f:c9:96:a6:be:e6:3d:5e:22:32:eb:63: 3e:fc:97:2f:97:8b:b3:75:2a:02:11:b4:31:7a:ed:a8:f0:30: 26:ca:b5:86:73:9f:7b:5a:17:82:29:9d:0f:67:91:55:52:8d: 4a:2a:3c:6c:3d:98:1f:d3:18:dc:b3:5a:d5:74:95:5b:bf:3f: 4e:43:74:4c:d4:20:f8:64:74:68:98:c9:16:2b:5e:68:a0:66: 8c:04:90:7b:e0:31:98:10:78:6b:20:57:fe:5f:79:a8:42:bb: f9:26:63:3b:17:65:14:b7:57:c5:99:c5:7d:67:7f:34:ad:b2: bc:9e:15:70:c4:1e:bb:82:cb:68:37:f8:e8:b7:86:c9:a9:a2: fa:53:c3:4e:32:a7:52:0c:b3:9a:b0:52:08:ee:8e:72:c9:6d: 77:c1:36:99:13:e3:fc:9b:ce:a2:93:23:e8:53:f3:bf:7e:d9: 0b:ba:a5:d9:e4:49:88:a7:62:76:cd:53:89:46:38:cc:c8:e1: 1e:5e:ff:ef:57:14:44:24:8f:7e:98:68:e3:ed:77:e8:a0:df: 26:a3:43:19 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG0fPEt0amrL0dic3FA16s0W2isUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI4MTUzMDM3WhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YWYxMjYzZDllODMyMzUxOGNmNmRmMjMyMjk5Y2ViZTQz ZDk4M2QxY2IyMWQ4YWUzYzE4NDQwNzlhMDc1MmY4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfLjFVHYEdT/lAObYohzDSzCB1joKJEevsPoPS9WcG2nTa O8BcFB9RzyLP+ea/YUwepNrrUIh7JW1vIBk9IR2pTwawTwGlDzxyfYIaCNfoq7Xc JMfl0YEDhk4i6CZfEU1diOIvuAkfU0JYoT4fbupzpQOIxC+CsL/LOwiH3jMxBrs2 zor/74QsRwHuGrNYhPLi9AaFlZ4t81kord7Msid9UrXS20ZzCElh6ca4DYAXeQY4 aKywIJONPt5mpQFJMISDdDEVu3ZoWQGXjtaxYv9Cj3etDmP2qvgA2nqlKt1Y1v1h j6HIhkNvVYQDJVMr5Vf8izFvg67jwUIsqD8PUlj9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0zKxWgXoqCVOq0h2qgzy3qjsOcgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE2MWFjMmVjLTczZTItNDE0MS04MTZiLTUxYTQ1OTg2NjlhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhMwDQYJKoZIhvcNAQELBQADggEBAKbl3a1hBLRBDnfdpoFqGlTE rpFhvgOa4T1CS4nlBXw1jeQGcv+571QjCV/Jlqa+5j1eIjLrYz78ly+Xi7N1KgIR tDF67ajwMCbKtYZzn3taF4IpnQ9nkVVSjUoqPGw9mB/TGNyzWtV0lVu/P05DdEzU IPhkdGiYyRYrXmigZowEkHvgMZgQeGsgV/5feahCu/kmYzsXZRS3V8WZxX1nfzSt sryeFXDEHruCy2g3+Oi3hsmpovpTw04yp1IMs5qwUgjujnLJbXfBNpkT4/ybzqKT I+hT879+2Qu6pdnkSYinYnbNU4lGOMzI4R5e/+9XFEQkj36YaOPtd+ig3yajQxk= -----END CERTIFICATE-----Generated at Tue May 6 22:48:59 2025 by rpki-client