$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/254b4192-a38e-41eb-a28b-d01a7ee37964.roa File: 254b4192-a38e-41eb-a28b-d01a7ee37964.roa (raw, json) Hash identifier: GE+sUoBmLJpglq6iNgO5kKxtEZNcl0AyIH8YcjiFOP0= Subject key identifier: 51:3C:82:DF:25:03:5B:6A:14:7D:41:D1:FA:64:C5:6C:B4:D4:4F:99 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 0CFE127BD5C9A6730CC25CC1BE269EB879A83894 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/254b4192-a38e-41eb-a28b-d01a7ee37964.roa Signing time: Fri 21 Mar 2025 00:40:31 +0000 ROA not before: Fri 21 Mar 2025 00:40:31 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:108:d000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:fe:12:7b:d5:c9:a6:73:0c:c2:5c:c1:be:26:9e:b8:79:a8:38:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Mar 21 00:40:31 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:c1:9f:10:1d:3d:c2:a3:09:76:7c:05:bb: ee:70:54:7b:23:71:7c:12:24:c9:3a:f6:73:3d:c1: eb:cb:4e:61:27:08:c5:d4:cd:6f:f1:dd:2b:ce:f3: 85:0e:70:8c:db:c3:5d:f1:80:74:49:84:79:00:ee: fe:db:9a:08:5d:41:b0:9a:88:95:f3:4f:30:88:98: 27:b4:70:ee:70:0b:42:62:d2:78:c5:55:9f:37:24: 29:63:af:cf:53:b6:bf:70:fe:5d:3b:eb:0e:c4:60: 26:95:4f:fb:dc:b7:0b:df:e2:a1:e5:3f:6b:37:42: b8:6c:8f:8f:97:8a:bd:8a:dc:cd:9c:c7:ec:6c:ad: 49:3d:a4:6b:e1:2c:28:c9:b3:9c:91:01:d6:d8:2e: b3:64:ac:83:c4:d5:9a:8c:10:b4:ab:66:64:d5:cc: 8d:47:4b:e6:18:3c:75:f0:3d:ee:07:48:25:d0:8b: 50:61:52:82:37:5c:a9:6a:b8:7a:f3:8d:51:72:a4: b5:88:02:00:84:ac:d9:29:c1:b9:f3:30:17:55:3a: cf:f6:bd:6a:bb:a4:75:a8:ff:44:69:4b:25:09:3d: 59:ca:7b:0a:77:91:d6:53:b0:42:97:e7:67:be:e8: fb:8c:49:5a:48:d4:78:d3:38:55:74:f4:d7:f0:da: 8f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3C:82:DF:25:03:5B:6A:14:7D:41:D1:FA:64:C5:6C:B4:D4:4F:99 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/254b4192-a38e-41eb-a28b-d01a7ee37964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:108:d000::/44 Signature Algorithm: sha256WithRSAEncryption 21:9b:47:2d:21:66:d4:12:6c:76:eb:20:5b:d6:5f:04:79:ab: 36:c0:05:a7:67:aa:ea:33:8d:2a:86:e3:2c:b5:ba:e5:7c:cd: 70:1d:59:62:db:25:bb:46:9b:80:4b:18:88:2e:67:90:13:a3: 09:2a:d8:59:07:fa:48:ed:cd:d5:32:4f:d6:b4:16:9d:f5:24: 10:df:a3:b5:1e:c6:4e:c8:0c:1e:68:61:d4:f3:c2:84:d6:0a: 38:c4:3c:51:73:99:26:c9:01:3f:2e:c3:cb:48:c0:82:91:49: a6:bf:0c:84:81:f7:68:73:10:df:58:fb:57:94:48:d3:7e:74: c6:61:61:ce:06:15:ce:d7:3a:a0:00:6c:38:71:5e:78:25:cd: 11:8f:2f:e5:05:62:f8:3c:86:05:d3:90:ea:cc:27:4f:fd:93: 82:c1:11:10:63:f6:e9:dc:b2:b7:b7:f9:73:a1:b7:1c:0c:59: 5d:05:ca:5c:89:25:36:59:fa:eb:26:be:03:8c:d0:6c:ac:ff: 18:f3:be:94:02:45:36:d4:65:ec:72:6b:4a:0b:6c:41:bb:ce: ff:e1:e1:f7:37:39:6d:1e:d1:58:49:58:dd:b3:89:08:fa:a0: 40:1b:83:c7:44:ce:a0:59:3a:f5:a7:f7:df:04:7b:a1:fb:57: db:cf:96:cb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDP4Se9XJpnMMwlzBviaeuHmoOJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwMzIxMDA0MDMxWhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjEwNDA0M2I1NTU2MjdlNDlhNjdjZjA1MzY1OWQ1NzE4 NjM2NzlhYmU5M2Q5OTZhNmZmYzQ3ODBkMjNjMTAxMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7bMGfEB09wqMJdnwFu+5wVHsjcXwSJMk69nM9wevLTmEn CMXUzW/x3SvO84UOcIzbw13xgHRJhHkA7v7bmghdQbCaiJXzTzCImCe0cO5wC0Ji 0njFVZ83JCljr89Ttr9w/l076w7EYCaVT/vctwvf4qHlP2s3Qrhsj4+Xir2K3M2c x+xsrUk9pGvhLCjJs5yRAdbYLrNkrIPE1ZqMELSrZmTVzI1HS+YYPHXwPe4HSCXQ i1BhUoI3XKlquHrzjVFypLWIAgCErNkpwbnzMBdVOs/2vWq7pHWo/0RpSyUJPVnK ewp3kdZTsEKX52e+6PuMSVpI1HjTOFV09Nfw2o/ZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUTyC3yUDW2oUfUHR+mTFbLTUT5kwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzI1NGI0MTkyLWEzOGUtNDFlYi1hMjhiLWQwMWE3ZWUzNzk2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEI0AAwDQYJKoZIhvcNAQELBQADggEBACGbRy0hZtQSbHbrIFvWXwR5 qzbABadnquozjSqG4yy1uuV8zXAdWWLbJbtGm4BLGIguZ5ATowkq2FkH+kjtzdUy T9a0Fp31JBDfo7Uexk7IDB5oYdTzwoTWCjjEPFFzmSbJAT8uw8tIwIKRSaa/DISB 92hzEN9Y+1eUSNN+dMZhYc4GFc7XOqAAbDhxXnglzRGPL+UFYvg8hgXTkOrMJ0/9 k4LBERBj9uncsre3+XOhtxwMWV0FylyJJTZZ+usmvgOM0Gys/xjzvpQCRTbUZexy a0oLbEG7zv/h4fc3OW0e0VhJWN2ziQj6oEAbg8dEzqBZOvWn998Ee6H7V9vPlss= -----END CERTIFICATE-----Generated at Sat Apr 5 12:15:00 2025 by rpki-client