$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa File: 1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa (raw, json) Hash identifier: ak7MBiTtB3+9TCmn6gmqY0BOQlpPC3gx9lt0jJTcWxg= Subject key identifier: 26:EB:D6:FD:A1:25:CE:9D:79:B5:86:F9:53:A8:ED:D6:BE:3F:23:2E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5393109B0CD3D6D26D088509D7F86C504C13A9E6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa Signing time: Fri 25 Apr 2025 17:40:10 +0000 ROA not before: Fri 25 Apr 2025 17:40:10 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:f03e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:93:10:9b:0c:d3:d6:d2:6d:08:85:09:d7:f8:6c:50:4c:13:a9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 25 17:40:10 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=8dab5e4533b39a9e3c47bcf3271ccde23d9073cdeb97d222adb96c845e469ae7, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:68:65:4d:fa:00:4e:bf:45:a6:d6:41:ed: 80:15:fb:ef:c2:a4:d5:19:b2:d5:2f:5e:25:40:52: bc:58:89:f2:63:ca:e6:44:77:02:e7:cc:8b:41:f5: 1c:98:95:f7:be:a0:1d:dc:d3:12:77:9a:e9:c2:c6: ce:ea:be:00:c1:83:2f:af:a5:69:fa:18:23:2a:dd: cc:97:84:3e:dc:ed:c3:43:36:b2:36:da:f0:94:0a: 07:cb:67:3c:4a:38:1a:38:2c:fd:a3:cb:33:48:14: cd:62:1c:05:03:1b:8d:1d:c0:07:d0:f6:f6:bb:73: 56:40:0a:65:d0:41:41:4a:ad:76:8e:b6:1c:ff:8b: d0:25:13:3c:40:78:90:ff:2c:79:6a:61:b6:b2:74: d9:30:e1:61:26:37:bd:9b:37:ca:77:72:fc:cf:4c: 1a:dc:2d:f5:16:37:64:41:46:34:c1:85:59:42:9a: 80:e4:dc:68:9b:43:ad:46:f9:65:be:84:85:b0:4e: b5:f8:d9:2a:41:2d:fc:22:9b:b9:5c:d8:fd:3a:17: 86:f1:72:04:77:12:62:c6:98:8c:7e:c7:59:6e:12: 5f:b0:50:d8:73:1c:05:13:2a:f5:00:2c:fe:32:45: e5:56:2e:22:07:60:e5:90:df:e1:a9:77:d0:ea:22: fd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EB:D6:FD:A1:25:CE:9D:79:B5:86:F9:53:A8:ED:D6:BE:3F:23:2E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03e::/48 Signature Algorithm: sha256WithRSAEncryption 1f:3d:e0:57:20:1a:ed:bb:86:1d:c2:b5:10:c5:62:7a:a6:f9: 2e:f5:4f:76:f2:b0:dd:71:dc:e1:e9:a9:d4:83:8f:87:ba:64: 2c:d0:61:2b:47:9d:6c:82:4f:e4:21:0e:9d:28:87:47:ab:ba: c6:ea:14:52:64:ec:5b:b7:f5:9d:24:d9:63:9d:e2:d3:1f:91: a4:c6:8b:e8:df:af:36:b4:99:57:62:3e:60:9c:bf:b8:58:09: b5:90:4f:46:ee:b5:b2:5c:e3:f9:b1:75:c4:a9:63:82:a2:e4: 74:b8:f0:11:ab:db:ca:79:96:04:cb:ca:ec:d4:75:ed:01:5b: 91:6c:0e:d0:61:0c:f8:07:40:76:d5:8f:dc:b4:88:c1:e7:fc: 67:11:9f:f5:95:7b:65:6c:48:d0:5a:db:7f:d3:2f:38:fb:6c: e3:d4:0c:a4:2d:17:2c:8f:58:1e:4f:d5:36:4a:9e:d1:1c:02: ac:2c:3e:ec:10:cb:b2:1f:bf:ac:69:e9:7a:f9:51:ea:e0:e7: 97:a2:e4:9f:66:e7:42:4e:dd:eb:df:c7:57:34:0f:6c:43:22: 89:1c:d1:18:50:2b:a5:ea:55:d4:89:52:14:6a:09:37:34:9d: 5b:40:b6:a1:9e:80:f3:0a:12:34:f8:93:bc:04:82:d9:fb:56: 9c:c2:c3:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUU5MQmwzT1tJtCIUJ1/hsUEwTqeYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI1MTc0MDEwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGFiNWU0NTMzYjM5YTllM2M0N2JjZjMyNzFjY2RlMjNk OTA3M2NkZWI5N2QyMjJhZGI5NmM4NDVlNDY5YWU3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3YGhlTfoATr9FptZB7YAV++/CpNUZstUvXiVAUrxYifJj yuZEdwLnzItB9RyYlfe+oB3c0xJ3munCxs7qvgDBgy+vpWn6GCMq3cyXhD7c7cND NrI22vCUCgfLZzxKOBo4LP2jyzNIFM1iHAUDG40dwAfQ9va7c1ZACmXQQUFKrXaO thz/i9AlEzxAeJD/LHlqYbaydNkw4WEmN72bN8p3cvzPTBrcLfUWN2RBRjTBhVlC moDk3GibQ61G+WW+hIWwTrX42SpBLfwim7lc2P06F4bxcgR3EmLGmIx+x1luEl+w UNhzHAUTKvUALP4yReVWLiIHYOWQ3+Gpd9DqIv0jAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJuvW/aElzp15tYb5U6jt1r4/Iy4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFmZGQxZjVkLWNhMmEtNDBiNy04NTE2LThlOGI3NGUwZWFjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D4wDQYJKoZIhvcNAQELBQADggEBAB894FcgGu27hh3CtRDFYnqm +S71T3bysN1x3OHpqdSDj4e6ZCzQYStHnWyCT+QhDp0oh0erusbqFFJk7Fu39Z0k 2WOd4tMfkaTGi+jfrza0mVdiPmCcv7hYCbWQT0butbJc4/mxdcSpY4Ki5HS48BGr 28p5lgTLyuzUde0BW5FsDtBhDPgHQHbVj9y0iMHn/GcRn/WVe2VsSNBa23/TLzj7 bOPUDKQtFyyPWB5P1TZKntEcAqwsPuwQy7Ifv6xp6Xr5Uerg55ei5J9m50JO3evf x1c0D2xDIokc0RhQK6XqVdSJUhRqCTc0nVtAtqGegPMKEjT4k7wEgtn7VpzCwws= -----END CERTIFICATE-----Generated at Tue May 6 00:10:58 2025 by rpki-client