$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/528d6c76-ba88-4516-b69f-df07440b7bef.roa File: 528d6c76-ba88-4516-b69f-df07440b7bef.roa (raw, json) Hash identifier: XpGl6TTV3Q5j0p1hjM7b4fHoP3ynWI2tKnFThTSg+Ng= Subject key identifier: 40:7E:B7:AB:F7:68:9E:DD:B1:6D:4F:E7:20:AA:25:49:B1:9A:40:3D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6E4BA3720EB90851C187A877EEBA74A3E8AAB404 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/528d6c76-ba88-4516-b69f-df07440b7bef.roa Signing time: Sat 26 Apr 2025 00:50:10 +0000 ROA not before: Sat 26 Apr 2025 00:50:10 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:544::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4b:a3:72:0e:b9:08:51:c1:87:a8:77:ee:ba:74:a3:e8:aa:b4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:50:10 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=358c3593da89f9ec43b35c83c4fe6bc5f5e5d353aa8eb83700e1c3812adb786b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:c2:10:4b:14:e5:95:72:f0:0b:93:65:a5: 8b:b3:f1:96:bf:c2:60:e9:c4:03:98:4f:24:76:9c: 2f:de:99:be:c7:40:6c:20:63:a5:0e:08:a9:f3:90: ad:ed:31:e8:ef:bb:28:78:26:31:f0:26:9d:97:ed: 11:c0:01:b4:7a:1f:ae:ed:29:bd:2a:e6:7e:a9:4e: 78:7a:37:08:24:c4:fb:9c:a7:9a:b6:f3:cc:cb:7e: ec:13:01:1e:90:68:ec:c4:23:d4:b4:07:50:b9:72: e2:52:53:24:70:bf:62:11:d4:57:2a:a6:b6:b8:d5: 01:bc:71:28:6d:5e:80:e4:71:97:2b:07:23:85:04: b1:2c:55:24:94:d3:90:bc:99:87:8c:74:96:8e:c5: 16:68:92:f5:03:40:31:03:b4:04:9a:dc:79:32:61: d6:de:04:6d:d3:50:7d:73:81:5e:62:76:16:d1:92: 95:0a:03:fd:86:53:38:07:8b:cb:e4:87:60:10:a8: ea:3e:13:a6:1c:3a:6b:f6:f8:59:8f:ce:32:a9:91: ae:c9:e9:8b:1e:98:97:c0:ae:1f:f9:2a:16:1a:03: 91:fa:74:df:d4:09:4e:ec:f2:7a:5a:8d:a5:3a:89: f9:f8:24:84:d3:f9:49:1d:ef:d2:44:22:bb:c3:c9: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7E:B7:AB:F7:68:9E:DD:B1:6D:4F:E7:20:AA:25:49:B1:9A:40:3D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/528d6c76-ba88-4516-b69f-df07440b7bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:544::/48 Signature Algorithm: sha256WithRSAEncryption 84:7d:40:16:18:fd:e1:62:ae:9b:25:bd:d1:a3:45:89:f6:d5: 2a:2d:6d:2e:fe:3f:d3:1a:d2:9b:28:e1:fa:80:c3:e6:4d:4b: b9:65:a9:7a:5d:80:97:7a:10:74:6d:03:13:b3:c0:23:4a:49: 0e:0e:3f:f2:85:7f:5b:fc:5c:c5:0a:dc:1c:1d:69:b7:68:f9: f7:3a:d4:cd:bb:32:31:05:a7:15:d2:e7:42:d1:6c:c6:35:2a: 1d:87:b6:e2:53:6e:71:6c:cd:fd:db:7a:38:03:04:c2:b4:8e: fb:5f:0b:05:70:1f:38:3e:19:d6:04:fa:26:9c:4f:ac:68:c3: 05:c3:95:65:c8:8c:35:c6:94:79:bc:18:18:1e:ab:38:cf:18: b1:18:51:22:e9:c4:f0:e5:62:68:a0:2e:9a:76:ea:05:24:e3: ed:73:eb:5f:bc:03:8b:c1:40:c9:c7:ea:49:7a:c5:39:1f:88: d2:7e:10:4e:e7:4e:3c:05:42:2c:67:1e:42:2f:c0:09:5c:23: 84:7c:5f:42:79:b1:c0:c1:d1:9a:9d:4b:37:6c:34:77:f5:ed: 16:3b:6a:e6:b4:11:76:ec:ef:40:e3:39:4d:fd:89:3a:8d:35: 48:0a:01:07:e7:d5:1e:6b:14:1b:4f:58:00:b3:d3:e7:62:82: 61:3a:94:00 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbkujcg65CFHBh6h37rp0o+iqtAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MDEwWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNThjMzU5M2RhODlmOWVjNDNiMzVjODNjNGZlNmJjNWY1 ZTVkMzUzYWE4ZWI4MzcwMGUxYzM4MTJhZGI3ODZiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCodcIQSxTllXLwC5NlpYuz8Za/wmDpxAOYTyR2nC/emb7H QGwgY6UOCKnzkK3tMejvuyh4JjHwJp2X7RHAAbR6H67tKb0q5n6pTnh6NwgkxPuc p5q288zLfuwTAR6QaOzEI9S0B1C5cuJSUyRwv2IR1Fcqpra41QG8cShtXoDkcZcr ByOFBLEsVSSU05C8mYeMdJaOxRZokvUDQDEDtASa3HkyYdbeBG3TUH1zgV5idhbR kpUKA/2GUzgHi8vkh2AQqOo+E6YcOmv2+FmPzjKpka7J6YsemJfArh/5KhYaA5H6 dN/UCU7s8npajaU6ifn4JITT+Ukd79JEIrvDyYA1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQH63q/dont2xbU/nIKolSbGaQD0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzUyOGQ2Yzc2LWJhODgtNDUxNi1iNjlmLWRmMDc0NDBiN2JlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUQwDQYJKoZIhvcNAQELBQADggEBAIR9QBYY/eFirpslvdGjRYn2 1SotbS7+P9Ma0pso4fqAw+ZNS7llqXpdgJd6EHRtAxOzwCNKSQ4OP/KFf1v8XMUK 3Bwdabdo+fc61M27MjEFpxXS50LRbMY1Kh2HtuJTbnFszf3bejgDBMK0jvtfCwVw Hzg+GdYE+iacT6xowwXDlWXIjDXGlHm8GBgeqzjPGLEYUSLpxPDlYmigLpp26gUk 4+1z61+8A4vBQMnH6kl6xTkfiNJ+EE7nTjwFQixnHkIvwAlcI4R8X0J5scDB0Zqd SzdsNHf17RY7aua0EXbs70DjOU39iTqNNUgKAQfn1R5rFBtPWACz0+digmE6lAA= -----END CERTIFICATE-----Generated at Thu May 8 05:17:10 2025 by rpki-client