$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b8dbfa2-ffce-4d94-9f75-535c98ebccdd.roa File: 5b8dbfa2-ffce-4d94-9f75-535c98ebccdd.roa (raw, json) Hash identifier: mgADAvdtNslw11VhHeb8qHTSMRy9d5VsCGISOogYveg= Subject key identifier: 9D:99:B9:7F:23:3A:73:41:BB:6B:20:D1:3E:4C:78:1A:63:C2:10:B4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0C00B3A5FB1EAF3A24B0DE6CE704B3A2DF51E48D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b8dbfa2-ffce-4d94-9f75-535c98ebccdd.roa Signing time: Tue 06 May 2025 00:20:18 +0000 ROA not before: Tue 06 May 2025 00:20:18 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:647::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:00:b3:a5:fb:1e:af:3a:24:b0:de:6c:e7:04:b3:a2:df:51:e4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 6 00:20:18 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=0dc5e1a81efade1b1f70413be5c0ecf1f04b1a13b70d53cace6017eff0857451, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:89:6f:1a:e5:5c:fe:ba:a7:e5:5e:08:9c: 71:3c:7b:36:2d:83:9f:4a:c8:4c:eb:96:ad:7f:22: 7c:f0:07:33:58:36:da:b9:6d:b9:a0:85:90:de:73: a4:1d:53:5d:07:04:f7:ca:ee:8a:7d:a4:2e:b2:30: 9d:a2:7d:bd:53:9e:b2:6d:b6:ff:03:e6:a8:88:9e: 06:e7:cd:d6:03:db:62:3a:13:65:b1:06:60:ac:a2: 89:e9:80:7f:a5:90:27:95:c7:f7:cd:8f:5d:ab:1a: 8f:08:e7:36:cc:da:d6:5f:11:c2:7a:c1:1a:91:0f: 9f:70:17:38:00:e1:95:0b:49:a5:39:c1:0c:76:63: 99:22:d9:fe:1c:66:4c:81:80:e6:42:d3:4a:09:db: ed:0e:e0:d8:cc:d0:10:b4:84:74:fd:4f:90:8e:ef: d6:25:c5:2f:37:eb:da:a3:f5:82:13:91:4b:93:24: fa:8c:0f:cb:45:8b:4e:16:00:b2:bf:a1:8b:7b:c9: 36:ce:6b:c2:b8:11:2f:77:b7:3c:c2:4d:ea:26:d7: d6:a0:78:63:11:11:ff:58:84:eb:9e:94:e2:92:1c: 7f:47:d8:c5:12:cb:ca:d0:f3:4e:8b:d1:53:9a:f7: aa:b8:61:87:16:c1:3f:43:da:6b:35:04:81:ab:38: 2a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:99:B9:7F:23:3A:73:41:BB:6B:20:D1:3E:4C:78:1A:63:C2:10:B4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b8dbfa2-ffce-4d94-9f75-535c98ebccdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:647::/48 Signature Algorithm: sha256WithRSAEncryption 81:fa:1e:59:aa:85:a3:7f:29:43:b7:84:97:be:d2:b1:56:df: 65:d1:8c:9b:24:6d:6f:ed:fe:06:a9:9c:70:6f:6d:41:57:95: 25:c8:7a:4e:ba:bb:92:8c:ab:1c:b1:2d:31:76:8f:17:4a:ac: d6:e9:ea:ea:8f:c4:47:70:8d:a4:06:fa:6e:ac:fa:3c:d5:86: 89:7c:16:72:6f:46:f6:1d:62:33:66:f0:ca:78:7f:8b:f4:f1: 9b:93:e3:a1:41:3a:db:cf:0b:f2:9c:a9:c0:f9:73:01:47:eb: 01:f1:34:a7:95:63:2e:32:15:73:39:86:5c:c3:9d:60:c8:8e: c6:f9:e6:bf:b8:9f:b7:d5:cb:32:10:41:ba:03:be:1a:40:9e: a9:4f:57:b1:e8:1e:46:d2:63:bb:7a:e2:40:56:e3:f2:a2:03: 55:57:da:a6:16:ff:8a:d9:87:39:23:c8:e3:da:41:3a:ea:dc: c4:9a:a9:2d:90:f2:41:e5:9c:86:b9:1f:8e:eb:57:85:0c:48: 15:75:c1:9d:27:b0:ae:37:72:97:5c:9d:5b:d4:93:d8:ee:03: 8e:b4:f9:8a:41:84:9a:b3:3e:fe:c7:13:cb:ed:7c:3d:78:34: dd:b4:65:28:3f:2f:eb:03:22:0e:4e:e5:3f:4b:7a:37:fa:4f: 57:3f:3b:7c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDACzpfserzoksN5s5wSzot9R5I0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTA2MDAyMDE4WhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGM1ZTFhODFlZmFkZTFiMWY3MDQxM2JlNWMwZWNmMWYw NGIxYTEzYjcwZDUzY2FjZTYwMTdlZmYwODU3NDUxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyWolvGuVc/rqn5V4InHE8ezYtg59KyEzrlq1/InzwBzNY Ntq5bbmghZDec6QdU10HBPfK7op9pC6yMJ2ifb1TnrJttv8D5qiIngbnzdYD22I6 E2WxBmCsoonpgH+lkCeVx/fNj12rGo8I5zbM2tZfEcJ6wRqRD59wFzgA4ZULSaU5 wQx2Y5ki2f4cZkyBgOZC00oJ2+0O4NjM0BC0hHT9T5CO79YlxS8369qj9YITkUuT JPqMD8tFi04WALK/oYt7yTbOa8K4ES93tzzCTeom19ageGMREf9YhOuelOKSHH9H 2MUSy8rQ806L0VOa96q4YYcWwT9D2ms1BIGrOCr1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnZm5fyM6c0G7ayDRPkx4GmPCELQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzViOGRiZmEyLWZmY2UtNGQ5NC05Zjc1LTUzNWM5OGViY2NkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABkcwDQYJKoZIhvcNAQELBQADggEBAIH6HlmqhaN/KUO3hJe+0rFW 32XRjJskbW/t/gapnHBvbUFXlSXIek66u5KMqxyxLTF2jxdKrNbp6uqPxEdwjaQG +m6s+jzVhol8FnJvRvYdYjNm8Mp4f4v08ZuT46FBOtvPC/KcqcD5cwFH6wHxNKeV Yy4yFXM5hlzDnWDIjsb55r+4n7fVyzIQQboDvhpAnqlPV7HoHkbSY7t64kBW4/Ki A1VX2qYW/4rZhzkjyOPaQTrq3MSaqS2Q8kHlnIa5H47rV4UMSBV1wZ0nsK43cpdc nVvUk9juA460+YpBhJqzPv7HE8vtfD14NN20ZSg/L+sDIg5O5T9Lejf6T1c/O3w= -----END CERTIFICATE-----Generated at Wed May 7 10:58:40 2025 by rpki-client