$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/555f0c83-1ce7-45af-b439-b2fab6a08187.roa File: 555f0c83-1ce7-45af-b439-b2fab6a08187.roa (raw, json) Hash identifier: qYbSGnvGBlfeMQoobE9tjVZ4CDF1gn+MGiuSxld5+/Q= Subject key identifier: 25:16:68:FE:FC:1F:F5:3A:8C:2C:80:B0:50:71:77:D1:21:D8:41:4A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6FAEE3CE1EF7DE5F7970DC64A31E51EB783D4500 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/555f0c83-1ce7-45af-b439-b2fab6a08187.roa Signing time: Fri 11 Apr 2025 00:30:48 +0000 ROA not before: Fri 11 Apr 2025 00:30:48 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:c0e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ae:e3:ce:1e:f7:de:5f:79:70:dc:64:a3:1e:51:eb:78:3d:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 11 00:30:48 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=632c3d12d9757bba2333bc72d179f1cbd68fc2f0ef27a95da854d4fc707f2e30, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a5:16:1a:36:71:fa:f2:52:9b:02:69:26:45: 26:a4:55:7f:5d:34:d9:af:b7:60:d3:33:2f:35:45: 50:9d:1d:50:63:c1:a7:22:89:4a:2d:11:8e:4f:5e: 11:4c:a2:ff:59:9b:f3:92:59:19:6b:4e:82:7e:c5: 74:b0:1f:63:ea:50:71:bd:1a:49:25:b5:d9:81:33: 5d:ca:85:80:a5:e2:4e:63:f5:a5:02:3d:70:d4:43: 4a:9d:5b:bb:7c:5d:33:e0:29:00:dc:fa:4c:d5:e0: 00:b4:97:e8:8d:4a:de:74:26:18:11:e6:77:fa:5d: 70:c5:e3:2e:2d:92:45:1e:28:9a:94:35:c8:69:eb: 38:b7:d0:e2:4b:69:db:c5:c4:3c:26:d5:32:a2:04: a1:03:92:a6:0f:dc:cc:5b:b1:9e:01:82:27:5a:84: 0e:fd:51:8b:55:09:78:99:d3:44:82:0c:e2:20:d7: 1c:58:9f:10:68:9c:e6:2e:47:9e:28:88:ae:23:f7: 20:0a:c5:5b:f0:c8:df:5e:ab:1d:b2:cb:c4:d7:81: 05:b9:32:37:cb:5e:08:01:b0:7f:42:e9:b2:94:07: 67:4f:4a:fa:09:83:03:23:fa:ee:77:dc:a4:c8:5b: 8a:1e:49:13:2d:59:2a:67:21:05:7b:51:aa:7e:a4: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:16:68:FE:FC:1F:F5:3A:8C:2C:80:B0:50:71:77:D1:21:D8:41:4A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/555f0c83-1ce7-45af-b439-b2fab6a08187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0e::/48 Signature Algorithm: sha256WithRSAEncryption ae:41:15:09:df:59:03:40:7b:c3:54:66:23:29:d1:c7:3d:ad: 68:8a:ea:17:06:ed:25:3d:14:d1:cd:87:96:8c:8a:fd:e5:f0: 0d:23:58:ec:a3:e6:71:38:25:d0:db:99:27:6f:d3:cc:12:3a: d6:00:eb:0c:d5:97:c5:3f:22:83:6d:44:7f:76:72:75:17:f9: 2a:79:f9:27:ca:82:f6:e3:a8:81:9d:41:33:48:f4:92:e7:4d: 6a:82:94:2d:4b:a4:9f:27:af:63:dc:cd:20:48:8a:66:87:73: 8d:08:25:af:95:70:3b:b3:a8:dd:64:11:e7:bb:4e:11:28:39: 67:99:5f:8e:32:aa:66:3b:26:d5:a6:31:7f:81:1d:65:c9:1b: 0e:e2:e5:c1:dd:14:21:e7:3b:46:71:cd:ce:07:3a:b7:af:b5: eb:4f:fc:6a:83:9a:76:cf:88:00:bc:e1:5d:a9:b6:9d:49:c7: 3b:3d:e0:c4:a6:c0:9b:a6:58:ab:fd:30:8f:46:a8:ee:9a:fe: f4:d8:62:2c:bd:c7:ff:0a:8b:71:5b:e4:45:63:0e:16:0c:f5: b0:1e:5b:b6:6e:9b:82:b3:7e:58:79:61:f5:f1:c8:bc:a1:34: 9c:c3:ae:64:93:c3:f3:a2:a2:f0:28:1a:3a:cd:b4:4b:69:85: d9:10:3d:c5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUb67jzh733l95cNxkox5R63g9RQAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDExMDAzMDQ4WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzJjM2QxMmQ5NzU3YmJhMjMzM2JjNzJkMTc5ZjFjYmQ2 OGZjMmYwZWYyN2E5NWRhODU0ZDRmYzcwN2YyZTMwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLpRYaNnH68lKbAmkmRSakVX9dNNmvt2DTMy81RVCdHVBj waciiUotEY5PXhFMov9Zm/OSWRlrToJ+xXSwH2PqUHG9GkkltdmBM13KhYCl4k5j 9aUCPXDUQ0qdW7t8XTPgKQDc+kzV4AC0l+iNSt50JhgR5nf6XXDF4y4tkkUeKJqU Nchp6zi30OJLadvFxDwm1TKiBKEDkqYP3MxbsZ4BgidahA79UYtVCXiZ00SCDOIg 1xxYnxBonOYuR54oiK4j9yAKxVvwyN9eqx2yy8TXgQW5MjfLXggBsH9C6bKUB2dP SvoJgwMj+u533KTIW4oeSRMtWSpnIQV7Uap+pOJnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJRZo/vwf9TqMLICwUHF30SHYQUowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU1NWYwYzgzLTFjZTctNDVhZi1iNDM5LWIyZmFiNmEwODE4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA4wDQYJKoZIhvcNAQELBQADggEBAK5BFQnfWQNAe8NUZiMp0cc9 rWiK6hcG7SU9FNHNh5aMiv3l8A0jWOyj5nE4JdDbmSdv08wSOtYA6wzVl8U/IoNt RH92cnUX+Sp5+SfKgvbjqIGdQTNI9JLnTWqClC1LpJ8nr2PczSBIimaHc40IJa+V cDuzqN1kEee7ThEoOWeZX44yqmY7JtWmMX+BHWXJGw7i5cHdFCHnO0Zxzc4HOrev tetP/GqDmnbPiAC84V2ptp1Jxzs94MSmwJumWKv9MI9GqO6a/vTYYiy9x/8Ki3Fb 5EVjDhYM9bAeW7Zum4Kzflh5YfXxyLyhNJzDrmSTw/OiovAoGjrNtEtphdkQPcU= -----END CERTIFICATE-----Generated at Mon May 5 17:50:20 2025 by rpki-client