$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa File: d634cf95-850c-46d0-9812-120e229c9e7d.roa (raw, json) Hash identifier: M2jt5XgiEpGJj2JbcuxIRqerNGeDDvIVS2hEMnhf/cw= Subject key identifier: DF:FA:58:16:60:B4:9F:2D:87:1A:8C:C2:19:82:34:CB:4C:5A:4A:27 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 518DF45BA028A471795BC2C91E951015F8731A97 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa Signing time: Tue 06 May 2025 00:30:23 +0000 ROA not before: Tue 06 May 2025 00:30:23 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8d:f4:5b:a0:28:a4:71:79:5b:c2:c9:1e:95:10:15:f8:73:1a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 6 00:30:23 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=2a3650dbd298c29a50950da4c2b2283552723b315e12956aab7cde8848e6276b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:77:7c:8a:ec:ae:32:d4:79:51:10:42:19: 3d:fb:3c:54:0a:60:51:64:74:2b:9d:3c:09:a6:14: db:31:7f:02:55:55:8c:0e:1d:1f:c7:d9:dc:79:d3: 8c:54:aa:87:a8:96:cf:99:75:ea:9a:37:ef:aa:c6: 2d:f9:49:cc:08:83:12:40:f8:f2:c7:65:f3:05:83: a0:a0:37:56:84:65:5b:dd:07:0f:8f:6b:44:00:f8: 99:d2:76:06:44:61:70:f9:f3:3c:7d:de:65:11:1a: 43:bd:2b:5a:52:a9:ff:3e:fa:e7:af:d2:ca:60:25: ca:8c:ae:61:b8:ad:f7:cd:01:fd:fa:0b:59:de:e2: 04:a5:7d:15:86:0b:90:01:c9:c5:16:82:66:14:c1: 00:18:fa:1f:d2:f2:da:ad:95:3d:44:73:31:80:db: 3b:d9:e9:6c:f5:3e:df:ef:7b:73:75:ca:1b:a9:b7: 20:0a:47:7e:56:6e:f1:d0:b6:1a:de:2e:46:65:20: 23:d8:cf:c7:ae:b4:9f:cc:8f:ab:c4:29:de:1b:9f: 38:40:d4:2e:ae:ea:2b:be:18:ec:f5:5c:cc:da:0f: 83:1d:2d:fb:e0:75:ea:54:89:ed:95:15:b6:45:42: c2:f6:49:ca:8b:3c:b9:5c:a1:ba:02:3d:74:82:13: 7e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FA:58:16:60:B4:9F:2D:87:1A:8C:C2:19:82:34:CB:4C:5A:4A:27 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c06::/48 Signature Algorithm: sha256WithRSAEncryption 02:e3:a5:91:8e:af:13:5d:07:68:ed:10:79:7d:18:2b:1c:16: 5f:70:4b:d4:b9:2e:74:74:03:50:62:03:fb:99:85:e3:77:cd: 80:90:36:00:44:3d:64:45:58:29:27:4a:a5:3d:4b:0c:01:ac: 76:d5:93:e1:6b:cb:62:ee:b4:04:9e:64:23:ce:17:d7:65:d7: 8e:70:90:87:28:33:59:60:74:52:6f:33:16:0a:86:5b:6b:d9: 72:53:88:34:48:46:ed:1b:38:f6:80:58:d0:b4:99:5a:84:b5: 26:af:6e:d7:1e:96:34:78:99:47:09:b3:59:46:b0:0a:20:1e: 39:89:03:46:a5:f9:d8:ce:45:94:63:cd:1e:16:02:ba:e6:d6: 64:c4:4d:6b:10:e4:90:ed:23:90:14:a2:04:a7:17:a7:0e:1c: bc:b4:1e:ff:31:7c:36:98:ce:58:ae:53:30:3d:12:ce:83:46: 1d:3b:7a:bd:c0:7c:88:04:f0:ed:fa:56:ad:08:a9:2a:1e:92: 3b:52:19:4b:a0:29:08:06:75:cf:09:1b:12:c6:7a:47:b9:50: ea:8d:b1:45:d6:5e:f9:10:a7:7a:b4:fd:20:65:23:13:cc:c6: ad:59:0c:de:30:3a:a8:c5:e7:b2:c5:26:48:b8:f7:8f:a2:36: b3:db:53:bb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUY30W6AopHF5W8LJHpUQFfhzGpcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTA2MDAzMDIzWhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTM2NTBkYmQyOThjMjlhNTA5NTBkYTRjMmIyMjgzNTUy NzIzYjMxNWUxMjk1NmFhYjdjZGU4ODQ4ZTYyNzZiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCD3d8iuyuMtR5URBCGT37PFQKYFFkdCudPAmmFNsxfwJV VYwOHR/H2dx504xUqoeols+ZdeqaN++qxi35ScwIgxJA+PLHZfMFg6CgN1aEZVvd Bw+Pa0QA+JnSdgZEYXD58zx93mURGkO9K1pSqf8++uev0spgJcqMrmG4rffNAf36 C1ne4gSlfRWGC5ABycUWgmYUwQAY+h/S8tqtlT1EczGA2zvZ6Wz1Pt/ve3N1yhup tyAKR35WbvHQthreLkZlICPYz8eutJ/Mj6vEKd4bnzhA1C6u6iu+GOz1XMzaD4Md LfvgdepUie2VFbZFQsL2ScqLPLlcoboCPXSCE35pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3/pYFmC0ny2HGozCGYI0y0xaSicwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q2MzRjZjk1LTg1MGMtNDZkMC05ODEyLTEyMGUyMjljOWU3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAYwDQYJKoZIhvcNAQELBQADggEBAALjpZGOrxNdB2jtEHl9GCsc Fl9wS9S5LnR0A1BiA/uZheN3zYCQNgBEPWRFWCknSqU9SwwBrHbVk+Fry2LutASe ZCPOF9dl145wkIcoM1lgdFJvMxYKhltr2XJTiDRIRu0bOPaAWNC0mVqEtSavbtce ljR4mUcJs1lGsAogHjmJA0al+djORZRjzR4WArrm1mTETWsQ5JDtI5AUogSnF6cO HLy0Hv8xfDaYzliuUzA9Es6DRh07er3AfIgE8O36Vq0IqSoekjtSGUugKQgGdc8J GxLGeke5UOqNsUXWXvkQp3q0/SBlIxPMxq1ZDN4wOqjF57LFJki494+iNrPbU7s= -----END CERTIFICATE-----Generated at Wed May 7 11:51:35 2025 by rpki-client