$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/20c667f4-bcb2-45e2-b6d7-0a8c6c2c17ee.roa File: 20c667f4-bcb2-45e2-b6d7-0a8c6c2c17ee.roa (raw, json) Hash identifier: 8l5lIwapybfYD5qiH2cQHAuWel2or8YV7JKx6kVi9Zk= Subject key identifier: B4:51:B2:7D:17:7E:6A:7E:31:0C:34:67:B4:CC:C8:32:36:9E:06:55 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4A59C5444E3011D77693F365EC9C15811A944415 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/20c667f4-bcb2-45e2-b6d7-0a8c6c2c17ee.roa Signing time: Tue 06 May 2025 00:30:20 +0000 ROA not before: Tue 06 May 2025 00:30:20 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:59:c5:44:4e:30:11:d7:76:93:f3:65:ec:9c:15:81:1a:94:44:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 6 00:30:20 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=3b8230af9252f02a5684213071101a67d79e7267aa783f7504f84f9feb918c6a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7e:ea:3a:7f:df:b0:3a:24:02:31:36:92:a5: d0:d4:d2:5f:71:48:5b:30:d7:b3:6b:6c:5e:aa:76: be:27:41:9e:c6:ea:fb:01:ff:bc:ae:04:39:3f:52: 8d:b3:46:86:df:b3:f7:3b:2a:22:06:a6:44:02:3a: eb:e9:67:c6:d6:76:bc:f1:6b:37:16:8f:f5:46:5f: ac:05:3b:39:50:57:ab:5d:03:90:cb:e3:a9:78:fc: 98:94:de:e1:c5:6b:4a:a2:5c:de:77:fd:b3:27:be: 56:8b:85:9d:e5:45:16:b2:45:95:11:88:b4:67:02: 46:4a:08:13:ff:94:bc:d3:bf:3a:6e:ee:2b:fb:d3: 58:90:c7:86:35:b7:d6:05:11:e6:1f:6d:5e:9c:58: f0:ba:9c:0b:e1:e0:9b:a5:a6:94:1e:35:17:e9:3b: 46:cd:05:11:c0:01:86:6e:1c:28:d6:1d:f8:1e:c5: 1d:87:88:87:8e:77:22:8e:5e:01:89:ed:eb:67:a4: d5:3f:22:e3:59:45:0a:5f:6f:05:a7:92:f6:50:77: 0b:ce:1a:ce:6c:d0:33:02:a3:29:64:ca:ed:05:b2: 8c:c2:4e:d7:48:26:b4:98:e2:92:d1:e9:3d:1f:02: 1d:37:84:9b:e1:c9:f0:af:de:4e:bd:92:d3:56:20: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:51:B2:7D:17:7E:6A:7E:31:0C:34:67:B4:CC:C8:32:36:9E:06:55 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/20c667f4-bcb2-45e2-b6d7-0a8c6c2c17ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c05::/48 Signature Algorithm: sha256WithRSAEncryption 40:99:e6:27:e2:f9:8c:3c:21:9c:77:25:5c:6b:5c:05:76:19: 51:2a:ce:ad:09:6c:66:31:e0:72:57:70:f2:d7:55:06:09:19: f4:73:6c:47:e9:c5:51:81:d1:3d:f2:ce:79:8c:f7:2d:cd:74: 61:d0:6b:ee:58:b4:14:fe:49:0e:44:53:14:ae:c6:7e:73:48: 38:a2:a6:46:33:d0:21:69:72:29:93:16:0d:08:a2:a3:2e:b2: 2c:75:b8:48:8c:1c:8b:71:41:d9:03:00:33:5a:11:97:0e:cb: 1d:c4:d5:41:06:cc:28:8f:06:73:af:4a:bd:78:de:9f:45:44: 1b:ad:7a:03:73:78:58:7c:b6:c2:54:be:22:4c:8f:ab:00:53: 58:00:c0:6b:6b:04:e9:20:61:4f:3b:3a:c1:8d:6b:9a:d6:6c: 0f:3a:10:a4:03:0d:7c:1d:ff:14:27:39:6f:7a:9f:a8:11:e3: 81:78:8c:aa:6d:ca:df:9b:ab:78:fc:10:51:97:4d:be:70:8d: a1:0b:fa:f0:83:81:35:f4:38:56:ae:0d:71:45:dd:fc:6a:e9: 15:4f:14:db:06:06:60:af:f4:11:b6:39:1e:9f:bd:2a:3d:3c: a0:61:d6:a2:74:4b:bb:f9:cd:e2:f8:6f:ad:3a:00:ca:e5:27: 03:63:30:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSlnFRE4wEdd2k/Nl7JwVgRqURBUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTA2MDAzMDIwWhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjgyMzBhZjkyNTJmMDJhNTY4NDIxMzA3MTEwMWE2N2Q3 OWU3MjY3YWE3ODNmNzUwNGY4NGY5ZmViOTE4YzZhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqfuo6f9+wOiQCMTaSpdDU0l9xSFsw17NrbF6qdr4nQZ7G 6vsB/7yuBDk/Uo2zRobfs/c7KiIGpkQCOuvpZ8bWdrzxazcWj/VGX6wFOzlQV6td A5DL46l4/JiU3uHFa0qiXN53/bMnvlaLhZ3lRRayRZURiLRnAkZKCBP/lLzTvzpu 7iv701iQx4Y1t9YFEeYfbV6cWPC6nAvh4JulppQeNRfpO0bNBRHAAYZuHCjWHfge xR2HiIeOdyKOXgGJ7etnpNU/IuNZRQpfbwWnkvZQdwvOGs5s0DMCoylkyu0FsozC TtdIJrSY4pLR6T0fAh03hJvhyfCv3k69ktNWIHA3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtFGyfRd+an4xDDRntMzIMjaeBlUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzIwYzY2N2Y0LWJjYjItNDVlMi1iNmQ3LTBhOGM2YzJjMTdlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAUwDQYJKoZIhvcNAQELBQADggEBAECZ5ifi+Yw8IZx3JVxrXAV2 GVEqzq0JbGYx4HJXcPLXVQYJGfRzbEfpxVGB0T3yznmM9y3NdGHQa+5YtBT+SQ5E UxSuxn5zSDiipkYz0CFpcimTFg0IoqMusix1uEiMHItxQdkDADNaEZcOyx3E1UEG zCiPBnOvSr143p9FRButegNzeFh8tsJUviJMj6sAU1gAwGtrBOkgYU87OsGNa5rW bA86EKQDDXwd/xQnOW96n6gR44F4jKptyt+bq3j8EFGXTb5wjaEL+vCDgTX0OFau DXFF3fxq6RVPFNsGBmCv9BG2OR6fvSo9PKBh1qJ0S7v5zeL4b606AMrlJwNjMOI= -----END CERTIFICATE-----Generated at Wed May 7 02:28:51 2025 by rpki-client