$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa File: 4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa (raw, json) Hash identifier: TiCibDF9gOY4jAg0iWmXW0tqfLIg7USINmLkbejw1H4= Subject key identifier: 85:72:3C:A5:E4:6C:43:32:34:03:7F:E6:A2:53:93:FD:AF:A5:AF:FD Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 637905314CA4F356DD23902F3DE46BCF5041F7C9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa Signing time: Fri 02 May 2025 00:20:17 +0000 ROA not before: Fri 02 May 2025 00:20:17 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c50::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:79:05:31:4c:a4:f3:56:dd:23:90:2f:3d:e4:6b:cf:50:41:f7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 2 00:20:17 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=294335df443beb28364bcda9589e8c2138f19c659dbf063b7079de4920eb4867, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:19:24:3b:c3:dc:06:22:a3:6f:be:db:55: e2:dd:93:21:15:ea:55:1d:42:ca:39:3b:cf:55:0c: f5:54:72:a5:4d:1b:14:b9:2a:32:10:52:d3:3c:c4: d0:ed:ba:ce:7c:a3:17:ed:22:58:58:40:7b:8a:f0: 7d:d8:fd:18:dd:16:70:82:01:38:49:a3:0a:8f:b1: 6e:d9:22:c5:1f:eb:df:18:40:46:5f:5e:a5:23:94: f9:31:04:ab:7b:ba:4b:89:d5:25:ac:f9:14:bf:31: 31:f6:d3:3b:18:e8:78:c4:4c:90:bf:22:80:20:15: ae:b3:4c:21:83:1f:29:a8:2e:89:36:71:d9:bc:0a: 18:46:ed:14:7f:0e:34:de:e0:6b:9c:11:c2:bc:8c: 30:dc:c7:33:96:bd:78:e2:7f:91:1d:a1:22:53:6a: 64:b3:2f:d2:53:b5:11:51:39:55:02:fe:6b:0d:b9: 93:ad:07:31:29:d1:40:2a:8e:fe:53:98:67:cf:dc: f1:cc:98:e6:2e:8d:3f:f3:15:77:2f:60:eb:96:52: fe:29:19:26:0c:d5:f0:9c:a6:af:67:20:27:6c:bc: 81:e1:30:98:6c:ca:34:ed:a8:eb:28:35:0f:20:46: 96:8a:bb:fd:3a:fd:52:4d:7b:ba:0a:e2:53:4a:81: e2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:72:3C:A5:E4:6C:43:32:34:03:7F:E6:A2:53:93:FD:AF:A5:AF:FD X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c50::/44 Signature Algorithm: sha256WithRSAEncryption ab:6b:e9:30:ff:49:7d:83:4b:a2:8a:19:75:bf:20:9a:aa:1d: 1d:e7:b4:89:11:63:6b:7a:6d:73:ff:7a:37:e1:6c:c0:fb:ab: bf:9f:44:17:0b:de:a1:48:26:b1:46:76:08:58:45:90:98:e0: 88:0e:77:42:df:7f:d6:2e:ed:32:e2:1f:31:de:10:a8:16:31: 09:63:ee:98:d4:5c:a6:b5:6d:37:89:1e:a0:41:5d:57:63:96: a7:9c:09:aa:df:f7:9f:64:03:68:de:e6:07:a4:33:af:3f:8f: 9b:7c:c9:8a:f4:5e:1f:6e:1a:05:b3:31:ff:b6:44:a2:4b:06: 67:21:7b:dc:a9:04:08:01:38:0e:92:ee:72:f3:49:c0:32:b5: 32:00:63:84:ca:ad:69:a6:44:ce:91:07:53:30:25:8a:73:47: 1d:44:b3:1e:df:36:6b:56:42:be:1d:33:ac:2f:89:85:25:77: 7c:2e:c2:e5:48:db:63:a3:28:90:5f:24:9d:5c:69:71:5d:e2: aa:61:bb:54:cf:56:74:be:e2:2d:df:b1:6b:ea:39:9d:b7:86: 69:0c:56:cf:b2:fd:1c:d1:18:a5:dc:be:a9:f1:dc:de:96:f9: 80:78:22:1a:98:0c:dd:49:ab:6f:fc:67:b8:1c:b1:e1:8c:e3: 17:44:f9:37 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY3kFMUyk81bdI5AvPeRrz1BB98kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTAyMDAyMDE3WhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTQzMzVkZjQ0M2JlYjI4MzY0YmNkYTk1ODllOGMyMTM4 ZjE5YzY1OWRiZjA2M2I3MDc5ZGU0OTIwZWI0ODY3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAphkkO8PcBiKjb77bVeLdkyEV6lUdQso5O89VDPVUcqVN GxS5KjIQUtM8xNDtus58oxftIlhYQHuK8H3Y/RjdFnCCAThJowqPsW7ZIsUf698Y QEZfXqUjlPkxBKt7ukuJ1SWs+RS/MTH20zsY6HjETJC/IoAgFa6zTCGDHymoLok2 cdm8ChhG7RR/DjTe4GucEcK8jDDcxzOWvXjif5EdoSJTamSzL9JTtRFROVUC/msN uZOtBzEp0UAqjv5TmGfP3PHMmOYujT/zFXcvYOuWUv4pGSYM1fCcpq9nICdsvIHh MJhsyjTtqOsoNQ8gRpaKu/06/VJNe7oK4lNKgeLjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhXI8peRsQzI0A3/molOT/a+lr/0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRkZTVkOGYwLTIzZmQtNGI4NS1iMGE4LWRiYmYwYzY3ZjI1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADFAwDQYJKoZIhvcNAQELBQADggEBAKtr6TD/SX2DS6KKGXW/IJqq HR3ntIkRY2t6bXP/ejfhbMD7q7+fRBcL3qFIJrFGdghYRZCY4IgOd0Lff9Yu7TLi HzHeEKgWMQlj7pjUXKa1bTeJHqBBXVdjlqecCarf959kA2je5gekM68/j5t8yYr0 Xh9uGgWzMf+2RKJLBmche9ypBAgBOA6S7nLzScAytTIAY4TKrWmmRM6RB1MwJYpz Rx1Esx7fNmtWQr4dM6wviYUld3wuwuVI22OjKJBfJJ1caXFd4qphu1TPVnS+4i3f sWvqOZ23hmkMVs+y/RzRGKXcvqnx3N6W+YB4IhqYDN1Jq2/8Z7gcseGM4xdE+Tc= -----END CERTIFICATE-----Generated at Mon May 5 21:23:43 2025 by rpki-client