$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04a1d081-ae93-459e-88cf-fe92a8d30013.roa File: 04a1d081-ae93-459e-88cf-fe92a8d30013.roa (raw, json) Hash identifier: 0OlQRSH+qsWcC8DF8DvNBaPgD+V2f/hGLjjR53ROIXY= Subject key identifier: B5:9D:91:41:80:63:37:68:47:4B:24:A0:38:3E:AD:8B:CE:5C:20:C5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 38E583B1DC113140174D699D5F1D0BF557A51715 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04a1d081-ae93-459e-88cf-fe92a8d30013.roa Signing time: Tue 01 Apr 2025 00:50:19 +0000 ROA not before: Tue 01 Apr 2025 00:50:19 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:546::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e5:83:b1:dc:11:31:40:17:4d:69:9d:5f:1d:0b:f5:57:a5:17:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:50:19 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:cf:66:42:50:9b:3b:ab:1f:d1:6e:d7:96: 56:bd:34:88:ba:b8:5e:d8:a7:93:ab:8c:53:64:4a: c4:45:2b:c3:d3:b3:d4:62:2e:26:5c:f9:04:f7:01: b7:27:97:e1:0a:aa:c4:2e:90:c8:cf:25:b8:e7:89: 83:2f:25:46:45:4f:48:8b:fd:6c:1d:de:51:b0:f0: e6:02:31:5f:42:30:5b:ed:f1:82:be:a9:7d:55:aa: 1b:df:74:36:89:22:23:b5:8f:a7:2f:b5:51:42:fd: cf:64:f3:d7:9a:3f:da:8b:62:7d:9e:d0:01:7c:90: 77:43:05:f9:88:43:33:6b:70:84:1e:38:7e:54:8a: 1b:b3:44:5c:6c:bc:f0:26:64:e9:6e:b9:ca:93:ac: d7:cf:56:07:f3:e4:03:48:a7:e7:34:20:25:c4:62: f9:c5:61:dd:e4:2e:13:9b:44:dd:71:b8:05:0d:51: 71:fe:1a:9b:e0:59:bb:41:cf:e8:46:27:43:d8:bf: 8a:ba:2f:4d:07:bf:7e:0e:95:1c:d3:5f:74:0f:be: 15:71:1f:bb:76:e9:96:94:28:44:38:c9:cf:4a:e2: 30:c0:97:2c:21:6f:25:8e:41:ad:c3:1c:a5:05:bc: 39:ee:dc:dd:f2:a9:7a:f6:93:18:7d:e8:53:14:87: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9D:91:41:80:63:37:68:47:4B:24:A0:38:3E:AD:8B:CE:5C:20:C5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04a1d081-ae93-459e-88cf-fe92a8d30013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:546::/48 Signature Algorithm: sha256WithRSAEncryption 65:22:a2:c8:09:68:64:4d:24:b8:e8:ed:1c:54:05:37:5a:e8: 2c:1e:75:7b:a7:29:d8:39:d1:3c:56:3b:7e:dd:e0:bf:f4:35: 85:67:09:41:de:92:d8:d6:2a:3c:fe:fc:d6:32:bc:f7:ed:de: e0:fd:8e:1b:2e:72:7a:99:20:64:99:1a:c3:b4:b6:92:99:18: 05:c1:09:19:92:cb:d7:fe:21:20:7d:10:1c:7c:dc:99:7b:e0: 8e:a3:89:ed:2f:6c:78:75:e9:85:54:dd:ad:17:d3:7e:2d:dd: 5d:97:40:8e:26:0b:57:b5:15:a6:4e:e4:18:00:5c:50:59:a1: 77:bd:36:38:c9:00:5f:7f:4e:29:f1:0e:1f:a5:1a:5b:1b:3d: 29:f6:6a:20:ce:fa:98:6a:39:b3:2b:b6:a6:f7:72:59:36:4e: 78:e4:e1:a5:f5:11:05:9d:cc:f9:cb:cd:f3:7b:b5:79:b1:17: 07:f6:fe:96:36:75:af:eb:a3:bd:54:a2:6d:3c:f5:dc:38:81: 00:8a:72:b4:c0:94:45:36:8d:5b:20:87:ad:6b:f4:3e:2a:05: 0b:b4:f2:4b:42:99:57:e7:bb:cb:7d:5c:c9:be:7e:69:e4:d7: 42:2c:3a:9a:65:5b:ab:7b:6c:5e:d2:a0:c6:a2:75:e7:d9:c9: a4:e8:e7:d9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOOWDsdwRMUAXTWmdXx0L9VelFxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA1MDE5WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMThjMTdhODJiODFlZDM3ZWEwYTNkNjJhMzM2NzkwZTQx NzViYzMzNDI0YjA4NmVkM2JiYTE2MzE1ZWFlNmFkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfCc9mQlCbO6sf0W7Xlla9NIi6uF7Yp5OrjFNkSsRFK8PT s9RiLiZc+QT3Abcnl+EKqsQukMjPJbjniYMvJUZFT0iL/Wwd3lGw8OYCMV9CMFvt 8YK+qX1VqhvfdDaJIiO1j6cvtVFC/c9k89eaP9qLYn2e0AF8kHdDBfmIQzNrcIQe OH5UihuzRFxsvPAmZOluucqTrNfPVgfz5ANIp+c0ICXEYvnFYd3kLhObRN1xuAUN UXH+GpvgWbtBz+hGJ0PYv4q6L00Hv34OlRzTX3QPvhVxH7t26ZaUKEQ4yc9K4jDA lywhbyWOQa3DHKUFvDnu3N3yqXr2kxh96FMUh6qPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtZ2RQYBjN2hHSySgOD6ti85cIMUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA0YTFkMDgxLWFlOTMtNDU5ZS04OGNmLWZlOTJhOGQzMDAxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUYwDQYJKoZIhvcNAQELBQADggEBAGUiosgJaGRNJLjo7RxUBTda 6CwedXunKdg50TxWO37d4L/0NYVnCUHektjWKjz+/NYyvPft3uD9jhsucnqZIGSZ GsO0tpKZGAXBCRmSy9f+ISB9EBx83Jl74I6jie0vbHh16YVU3a0X034t3V2XQI4m C1e1FaZO5BgAXFBZoXe9NjjJAF9/TinxDh+lGlsbPSn2aiDO+phqObMrtqb3clk2 Tnjk4aX1EQWdzPnLzfN7tXmxFwf2/pY2da/ro71Uom089dw4gQCKcrTAlEU2jVsg h61r9D4qBQu08ktCmVfnu8t9XMm+fmnk10IsOpplW6t7bF7SoMaidefZyaTo59k= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:30 2025 by rpki-client