$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e52fa04b-f965-4052-87cb-6e539ccd0345.roa File: e52fa04b-f965-4052-87cb-6e539ccd0345.roa (raw, json) Hash identifier: lX1QiF0GYLIXxlmTrF1ndSLKPX+k5ikTAU0maOAB3SM= Subject key identifier: 2A:E7:AF:C9:8D:EB:80:AD:58:27:BD:3F:A4:93:94:A4:E5:CD:06:00 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 66813E7CAC8570D6E06E89500BA4915250C5B8C8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e52fa04b-f965-4052-87cb-6e539ccd0345.roa Signing time: Tue 06 May 2025 00:40:51 +0000 ROA not before: Tue 06 May 2025 00:40:51 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:81:3e:7c:ac:85:70:d6:e0:6e:89:50:0b:a4:91:52:50:c5:b8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 6 00:40:51 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=7b6b6bb25d655fc5ca0365611bf7685bdd10592a74cbb27627c8090e8efa2ae4, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:ac:bd:4f:0d:e4:a8:f4:55:47:12:91:41: 45:25:7e:dc:35:52:1c:16:5f:76:ed:22:fd:28:c9: 4c:3b:95:9f:d7:9d:7b:c1:68:a0:06:e3:ee:0e:42: 18:64:a5:80:02:ab:68:70:be:c9:9b:4b:7a:b4:9a: c3:93:5b:6e:27:9d:e5:2d:a2:66:92:0d:1f:55:d3: ba:bf:48:6e:c6:3e:e3:1f:31:f0:ce:ce:5a:3e:3e: 71:e0:be:78:18:01:31:66:5c:11:a7:c6:89:73:2a: 9b:a6:7e:c6:90:ef:b5:1e:69:7f:79:0c:81:6f:7c: 3f:cb:40:4f:ef:01:be:76:dc:51:d5:09:f7:ab:34: 86:8f:14:80:eb:0c:e4:c7:ee:7f:a6:93:67:2d:54: bb:ab:43:d6:37:87:22:2e:1e:7e:cf:fe:99:93:e8: 26:f1:bf:9c:f6:3f:f8:8f:04:dd:62:49:e3:4a:94: 8e:3c:94:65:8a:75:ee:ea:89:02:9b:b8:9f:54:07: 8e:c7:ec:95:57:c8:58:b2:18:36:20:23:fe:83:90: 99:ba:05:b4:10:b2:de:50:1b:d1:c3:fc:4f:f9:35: e7:d7:a4:fb:68:b0:dc:df:d4:5c:58:fd:88:53:99: b6:14:e2:51:a2:41:fe:cb:04:c9:1e:12:69:af:ca: 81:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E7:AF:C9:8D:EB:80:AD:58:27:BD:3F:A4:93:94:A4:E5:CD:06:00 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e52fa04b-f965-4052-87cb-6e539ccd0345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1b::/48 Signature Algorithm: sha256WithRSAEncryption 80:a0:b0:e3:75:7b:67:67:80:00:62:37:6d:03:37:fe:dd:5d: 4d:58:17:76:63:ff:be:d7:c1:65:f7:da:ce:99:e9:1c:bd:cb: 55:ad:d3:1a:be:35:c7:6c:e5:82:ad:ed:da:fa:f6:d0:67:69: 31:5a:2b:f9:71:9e:88:50:48:1f:42:a3:cf:ff:64:a4:0c:91: fe:f5:a6:7d:47:01:b9:7d:44:e0:b4:a1:93:0c:2e:e3:c2:9a: a8:27:64:6f:68:ef:dd:f7:0f:3c:1f:c4:c2:cc:2c:d2:49:71: a2:13:6b:f1:67:e8:2e:de:8a:23:fd:b3:4e:b4:6f:14:95:04: 0b:bf:0f:97:d2:1f:9f:05:dc:0e:f9:dc:e1:eb:15:75:d1:bf: f5:51:61:35:c6:67:78:a9:46:88:ce:be:aa:9d:2f:02:13:9a: 99:65:19:d4:aa:2c:4e:f9:73:90:8e:93:11:96:b0:05:64:0e: 29:30:47:87:c3:e8:93:c2:c4:5b:05:71:a3:16:f4:8d:13:9f: f8:a8:9b:40:15:a0:e7:bb:37:d4:3f:f3:84:87:32:8e:88:bd: 81:ba:39:4e:7f:16:59:4c:d5:32:c6:71:60:d3:b9:8d:b4:be: 83:b3:05:12:ce:34:b1:f1:1c:20:9e:b3:11:fc:23:a0:9e:90: 07:42:30:56 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZoE+fKyFcNbgbolQC6SRUlDFuMgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTA2MDA0MDUxWhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjZiNmJiMjVkNjU1ZmM1Y2EwMzY1NjExYmY3Njg1YmRk MTA1OTJhNzRjYmIyNzYyN2M4MDkwZThlZmEyYWU0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyZqy9Tw3kqPRVRxKRQUUlftw1UhwWX3btIv0oyUw7lZ/X nXvBaKAG4+4OQhhkpYACq2hwvsmbS3q0msOTW24nneUtomaSDR9V07q/SG7GPuMf MfDOzlo+PnHgvngYATFmXBGnxolzKpumfsaQ77UeaX95DIFvfD/LQE/vAb523FHV CferNIaPFIDrDOTH7n+mk2ctVLurQ9Y3hyIuHn7P/pmT6Cbxv5z2P/iPBN1iSeNK lI48lGWKde7qiQKbuJ9UB47H7JVXyFiyGDYgI/6DkJm6BbQQst5QG9HD/E/5NefX pPtosNzf1FxY/YhTmbYU4lGiQf7LBMkeEmmvyoE/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKuevyY3rgK1YJ70/pJOUpOXNBgAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2U1MmZhMDRiLWY5NjUtNDA1Mi04N2NiLTZlNTM5Y2NkMDM0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBswDQYJKoZIhvcNAQELBQADggEBAICgsON1e2dngABiN20DN/7d XU1YF3Zj/77XwWX32s6Z6Ry9y1Wt0xq+Ncds5YKt7dr69tBnaTFaK/lxnohQSB9C o8//ZKQMkf71pn1HAbl9ROC0oZMMLuPCmqgnZG9o7933DzwfxMLMLNJJcaITa/Fn 6C7eiiP9s060bxSVBAu/D5fSH58F3A753OHrFXXRv/VRYTXGZ3ipRojOvqqdLwIT mpllGdSqLE75c5COkxGWsAVkDikwR4fD6JPCxFsFcaMW9I0Tn/iom0AVoOe7N9Q/ 84SHMo6IvYG6OU5/FllM1TLGcWDTuY20voOzBRLONLHxHCCesxH8I6CekAdCMFY= -----END CERTIFICATE-----Generated at Tue May 6 03:59:50 2025 by rpki-client