$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a99bb631-adbf-4d7f-98df-c2f2c0ce7ebe.roa File: a99bb631-adbf-4d7f-98df-c2f2c0ce7ebe.roa (raw, json) Hash identifier: imWy1OlwitJvM0bCM3GiyXVGRTQ6PMjZsRteq7VaZSg= Subject key identifier: 6B:41:7F:FE:3F:A5:88:8C:6B:4D:BD:71:0D:94:B3:B8:29:54:CE:87 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5EEB912701558BCC3DC320453976E75F053415F2 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a99bb631-adbf-4d7f-98df-c2f2c0ce7ebe.roa Signing time: Sat 26 Apr 2025 00:51:08 +0000 ROA not before: Sat 26 Apr 2025 00:51:08 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:396::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:eb:91:27:01:55:8b:cc:3d:c3:20:45:39:76:e7:5f:05:34:15:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:51:08 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=8b95155fbb066ad45002cdd8da4650c9a730682133d95eb64c56f92aa5028a66, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:ba:e7:e3:ae:aa:e3:b2:cb:b3:82:bb:b8: b0:69:5c:6b:24:c2:f7:5f:e9:9c:15:7b:ad:6c:05: a4:a2:76:dc:c1:bf:6c:a8:19:95:13:9d:5b:7c:83: 56:6b:a7:80:d8:f7:7b:75:83:dd:85:51:17:b4:dc: ba:52:23:e6:63:dc:b9:4c:37:1d:6b:7e:02:67:2f: f2:62:f5:bf:1c:60:3d:24:b1:c5:c0:24:01:28:54: ec:c8:ec:6b:61:72:20:ca:09:da:4e:bb:48:10:11: 47:ee:2e:6c:f5:97:67:7d:18:18:46:22:66:9b:b4: f2:6a:71:4b:20:c2:35:8f:64:fb:f2:ae:3c:ae:da: 72:2c:51:b9:f5:57:b1:89:31:42:20:77:a9:b7:38: f0:bf:5e:6b:25:14:2d:39:6a:ce:8b:b6:cd:d2:51: 7e:1a:30:11:0b:4c:4f:4c:23:ba:48:7e:df:88:d0: 35:18:8e:f5:2b:85:0c:23:e9:f5:1c:58:5e:0b:c9: 0a:f3:32:70:d9:56:2c:8f:a7:a6:9c:39:99:c8:df: ce:6d:a8:80:9f:eb:14:74:13:47:fb:38:6e:6b:7c: bd:8f:7f:ab:2a:24:1c:4b:f9:2d:f6:82:85:8f:45: 1e:12:21:a4:a4:b6:3e:77:b8:6c:61:05:2d:8b:8b: be:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:41:7F:FE:3F:A5:88:8C:6B:4D:BD:71:0D:94:B3:B8:29:54:CE:87 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a99bb631-adbf-4d7f-98df-c2f2c0ce7ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:396::/48 Signature Algorithm: sha256WithRSAEncryption 3b:de:c9:bf:33:d7:4a:b4:6d:56:e2:54:53:d2:77:15:f1:ea: 01:2e:11:80:54:81:fa:79:af:d7:63:87:96:e8:26:fe:3e:1a: 36:fe:6b:f8:47:71:56:37:b4:47:2e:83:f5:2e:76:f4:e8:5f: 84:2e:c1:68:47:ab:e8:d3:12:bf:31:ff:ae:b4:fb:c3:23:64: ad:60:1d:a7:30:d5:bc:02:1e:ed:99:e7:6a:cb:d4:bc:0a:fb: 3f:a2:7a:21:07:56:c7:4c:67:0b:32:19:34:b7:ca:b0:cf:ab: b0:3b:cd:fd:db:87:be:e5:d4:84:f6:ac:b0:cb:cb:78:6e:49: 47:0d:e9:e6:28:ed:f7:58:c2:80:2b:f0:89:3c:71:84:e7:16: d8:5d:3c:90:1d:b9:a9:c2:fb:a7:43:56:8b:21:1e:69:cc:e9: 0b:5c:f0:f4:68:89:fb:7e:ea:e9:ec:4f:4f:f2:0a:04:8e:d2: ca:38:59:80:a0:e7:96:08:b5:c3:1d:c2:74:69:e1:63:39:d3: 6a:fa:23:24:60:4b:20:69:3b:64:72:e2:95:a1:e0:76:9c:15: 56:42:1f:4b:de:b9:64:e4:f1:9d:f7:5e:1f:11:ab:0d:52:4f: 86:31:53:55:16:cf:61:a1:9e:fc:9b:db:44:86:00:0b:28:26: d6:fb:4f:29 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXuuRJwFVi8w9wyBFOXbnXwU0FfIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MTA4WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Yjk1MTU1ZmJiMDY2YWQ0NTAwMmNkZDhkYTQ2NTBjOWE3 MzA2ODIxMzNkOTVlYjY0YzU2ZjkyYWE1MDI4YTY2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsnLrn466q47LLs4K7uLBpXGskwvdf6ZwVe61sBaSidtzB v2yoGZUTnVt8g1Zrp4DY93t1g92FURe03LpSI+Zj3LlMNx1rfgJnL/Ji9b8cYD0k scXAJAEoVOzI7GthciDKCdpOu0gQEUfuLmz1l2d9GBhGImabtPJqcUsgwjWPZPvy rjyu2nIsUbn1V7GJMUIgd6m3OPC/XmslFC05as6Lts3SUX4aMBELTE9MI7pIft+I 0DUYjvUrhQwj6fUcWF4LyQrzMnDZViyPp6acOZnI385tqICf6xR0E0f7OG5rfL2P f6sqJBxL+S32goWPRR4SIaSktj53uGxhBS2Li77rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUa0F//j+liIxrTb1xDZSzuClUzocwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E5OWJiNjMxLWFkYmYtNGQ3Zi05OGRmLWMyZjJjMGNlN2ViZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5YwDQYJKoZIhvcNAQELBQADggEBADveyb8z10q0bVbiVFPSdxXx 6gEuEYBUgfp5r9djh5boJv4+Gjb+a/hHcVY3tEcug/UudvToX4QuwWhHq+jTEr8x /660+8MjZK1gHacw1bwCHu2Z52rL1LwK+z+ieiEHVsdMZwsyGTS3yrDPq7A7zf3b h77l1IT2rLDLy3huSUcN6eYo7fdYwoAr8Ik8cYTnFthdPJAduanC+6dDVoshHmnM 6Qtc8PRoift+6unsT0/yCgSO0so4WYCg55YItcMdwnRp4WM502r6IyRgSyBpO2Ry 4pWh4HacFVZCH0veuWTk8Z33Xh8Rqw1ST4YxU1UWz2Ghnvyb20SGAAsoJtb7Tyk= -----END CERTIFICATE-----Generated at Mon May 5 22:22:41 2025 by rpki-client