$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b55a29f3-9a2f-473b-a187-718a6f737768.roa File: b55a29f3-9a2f-473b-a187-718a6f737768.roa (raw, json) Hash identifier: E1tJ9nTDfXtzgCy9tfieTeMicIlrKGu7m6FC4fYvNmo= Subject key identifier: 61:79:03:1A:94:AF:77:5B:E6:B0:96:BF:E7:94:68:0E:02:E6:12:B3 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1AA4BD4FBF5D1298146187CC65313EA3342887C4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b55a29f3-9a2f-473b-a187-718a6f737768.roa Signing time: Fri 25 Apr 2025 17:40:35 +0000 ROA not before: Fri 25 Apr 2025 17:40:35 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c28::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a4:bd:4f:bf:5d:12:98:14:61:87:cc:65:31:3e:a3:34:28:87:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 25 17:40:35 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=bd223070a26c3113e75dc2ab846c81bdf2a0f41a78dc507697dafbb22c0461f2, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:80:1c:7d:fc:8b:ec:67:b2:1b:5e:cb:bb: a6:81:24:c5:1a:02:8b:46:cb:78:78:28:d5:88:f6: c1:c8:b6:2f:b2:44:0e:90:04:b9:14:88:24:c6:78: ae:ac:9a:be:91:4d:29:de:4b:b8:9a:95:ad:d7:b8: 84:3a:00:80:5b:38:ba:e8:ba:8a:41:0e:ab:74:c4: 27:16:d5:61:ac:65:db:ab:29:8b:7f:29:35:e8:13: fb:f5:b4:ca:1a:4c:de:3e:91:9f:98:87:e9:0e:11: d5:ec:d5:14:5c:4c:f3:92:14:25:69:9d:d5:a2:a7: 4f:d7:0c:ea:e6:42:e4:36:79:df:26:a1:c8:8b:6d: c5:21:af:9c:dc:d0:f1:e7:17:78:aa:be:7c:a2:d8: 21:8c:f1:6e:ae:de:47:f9:55:d8:a8:7d:d9:64:aa: 2e:58:a5:18:d9:d4:03:67:3c:c9:ff:bf:8c:73:44: 8d:48:aa:db:97:d3:74:47:68:9b:9c:91:87:b4:af: 4a:d8:76:1d:ec:a7:4f:f6:c4:9e:e3:9f:dc:2a:22: 8c:39:4d:53:04:d5:d9:dc:73:55:8b:dc:67:50:1c: fc:a8:82:19:92:cd:64:a3:99:3f:c7:21:f3:6d:cb: ef:b0:3f:99:fc:42:7d:b7:cf:9e:0c:75:74:9e:69: 04:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:79:03:1A:94:AF:77:5B:E6:B0:96:BF:E7:94:68:0E:02:E6:12:B3 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b55a29f3-9a2f-473b-a187-718a6f737768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c28::/45 Signature Algorithm: sha256WithRSAEncryption 22:6c:97:ce:d4:db:95:0d:5d:e1:69:33:c3:09:dc:e5:98:ed: 44:78:d6:fc:3d:65:5b:61:c2:e6:59:5c:68:76:94:28:ce:4a: af:2e:ea:2d:cf:16:04:1f:00:7f:54:fe:cf:48:4a:26:50:d9: be:b6:c0:d6:90:50:34:24:db:67:ae:96:bb:5d:1c:cb:4f:7d: 57:d1:49:26:db:89:40:41:1c:44:9b:09:ab:c2:f6:15:6f:65: 01:a8:b3:7e:6f:f6:09:2d:a3:9e:aa:92:a8:8a:16:f6:23:3b: 9d:bb:ea:d0:6d:54:43:5f:50:92:5e:c5:06:ff:98:9c:3d:dc: 49:97:6a:8e:14:69:42:b2:d6:9e:89:77:84:9f:14:2d:8b:ac: de:72:09:1c:3f:e4:e4:6d:59:01:e2:1e:8c:f1:6f:58:e9:3d: 11:27:8b:65:74:82:d3:f6:f9:0b:41:cd:54:11:7d:2f:df:b2: 7e:46:59:54:1f:69:98:63:da:80:8e:d3:1f:b6:bc:f5:0b:31: 16:2d:d7:90:aa:d5:df:45:98:f0:6d:57:e5:be:43:0e:67:32: a5:9a:9a:81:84:34:35:0a:6c:52:42:f9:f4:4e:8c:7b:9b:b3: d8:01:70:75:17:20:b3:3e:87:ac:fc:36:b5:77:a9:e0:9c:21: 1f:e1:3e:d6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGqS9T79dEpgUYYfMZTE+ozQoh8QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI1MTc0MDM1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDIyMzA3MGEyNmMzMTEzZTc1ZGMyYWI4NDZjODFiZGYy YTBmNDFhNzhkYzUwNzY5N2RhZmJiMjJjMDQ2MWYyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5RIAcffyL7GeyG17Lu6aBJMUaAotGy3h4KNWI9sHIti+y RA6QBLkUiCTGeK6smr6RTSneS7iala3XuIQ6AIBbOLrouopBDqt0xCcW1WGsZdur KYt/KTXoE/v1tMoaTN4+kZ+Yh+kOEdXs1RRcTPOSFCVpndWip0/XDOrmQuQ2ed8m ociLbcUhr5zc0PHnF3iqvnyi2CGM8W6u3kf5Vdiofdlkqi5YpRjZ1ANnPMn/v4xz RI1IqtuX03RHaJuckYe0r0rYdh3sp0/2xJ7jn9wqIow5TVME1dncc1WL3GdQHPyo ghmSzWSjmT/HIfNty++wP5n8Qn23z54MdXSeaQRtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYXkDGpSvd1vmsJa/55RoDgLmErMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2I1NWEyOWYzLTlhMmYtNDczYi1hMTg3LTcxOGE2ZjczNzc2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmBZzADCgwDQYJKoZIhvcNAQELBQADggEBACJsl87U25UNXeFpM8MJ3OWY 7UR41vw9ZVthwuZZXGh2lCjOSq8u6i3PFgQfAH9U/s9ISiZQ2b62wNaQUDQk22eu lrtdHMtPfVfRSSbbiUBBHESbCavC9hVvZQGos35v9gkto56qkqiKFvYjO5276tBt VENfUJJexQb/mJw93EmXao4UaUKy1p6Jd4SfFC2LrN5yCRw/5ORtWQHiHozxb1jp PREni2V0gtP2+QtBzVQRfS/fsn5GWVQfaZhj2oCO0x+2vPULMRYt15Cq1d9FmPBt V+W+Qw5nMqWamoGENDUKbFJC+fROjHubs9gBcHUXILM+h6z8NrV3qeCcIR/hPtY= -----END CERTIFICATE-----Generated at Tue May 6 05:49:23 2025 by rpki-client