$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07f4a85e-de83-42f6-84ff-18bd059accc5.roa File: 07f4a85e-de83-42f6-84ff-18bd059accc5.roa (raw, json) Hash identifier: qQ6ng8Nyqu9D6KAf31WkwXjgaawOP6+EqLgGSvKpqZU= Subject key identifier: 8C:DF:80:B0:9D:5E:52:1A:8C:79:BB:9D:AC:5F:CC:EA:F6:CA:FE:90 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 271329BBABAB6B6F195FF3B17080C177EB515AF9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07f4a85e-de83-42f6-84ff-18bd059accc5.roa Signing time: Tue 01 Apr 2025 00:40:11 +0000 ROA not before: Tue 01 Apr 2025 00:40:11 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:100::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:13:29:bb:ab:ab:6b:6f:19:5f:f3:b1:70:80:c1:77:eb:51:5a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:40:11 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:76:28:4f:57:bb:e8:eb:70:e7:fc:56:0b:02: a2:93:cd:a3:67:5b:ad:a1:2d:87:2d:dd:aa:79:e1: 84:ba:c6:57:84:50:4b:ec:1c:43:58:87:db:b7:27: c6:dd:8f:23:42:93:2a:a3:38:0c:5d:60:1f:6b:2e: 31:5a:e3:bb:84:be:a9:ab:56:25:ee:cd:80:33:9b: f9:45:1b:53:e8:a4:af:c4:68:2b:29:d5:54:5f:71: a1:f1:7b:71:45:14:91:97:e2:53:7f:60:44:66:19: b4:70:98:4e:54:59:d2:87:0f:2c:e7:25:a0:f3:54: 45:38:9a:bb:30:4b:dd:e7:0c:27:ed:31:49:6b:08: 9a:72:0b:d8:56:b6:4f:c0:8b:fd:63:4f:c3:ae:92: 2f:e1:af:d9:53:9a:11:a6:5e:a2:21:c7:1f:c7:0f: 80:23:f4:cb:98:51:e3:75:33:89:50:48:08:e4:d3: 97:e7:4f:3f:41:71:d1:fc:91:a9:67:2b:1b:a7:35: ae:40:17:82:73:c6:87:8a:24:be:77:b4:2d:2b:9c: c4:16:d5:81:4f:b7:f5:22:5d:1b:09:11:74:30:e4: 99:7a:3c:b2:05:fd:c4:9c:d0:a5:60:bc:0d:4b:8f: dc:c2:e6:4f:5e:99:fe:8a:bf:fb:6c:91:ff:92:f2: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DF:80:B0:9D:5E:52:1A:8C:79:BB:9D:AC:5F:CC:EA:F6:CA:FE:90 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07f4a85e-de83-42f6-84ff-18bd059accc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:100::/42 Signature Algorithm: sha256WithRSAEncryption 6a:c8:0e:92:92:0f:3d:22:e8:fe:e0:3f:55:41:f6:16:df:1b: 10:f4:b5:a8:52:d9:fc:c3:9f:4a:65:a7:52:d4:c3:26:e7:90: a7:ea:23:df:42:e7:bd:05:b1:65:c4:e7:0a:7f:d0:55:4f:c9: 72:d0:ef:58:6a:f6:65:67:58:b8:4a:9c:a1:7e:8b:d8:75:8f: d5:ae:a3:7c:04:75:d9:77:5b:95:77:ba:93:7b:85:0f:c8:d0: f2:07:4a:c4:44:51:4b:fb:e2:a5:5e:1a:52:91:9f:e4:4b:9e: af:91:12:e3:b0:97:43:14:b1:38:1b:f6:86:f1:f9:48:90:71: 7f:a5:d7:f8:36:9d:a6:88:81:e5:86:e1:9a:80:b1:49:dc:b3: f1:90:84:72:d5:69:e1:44:0e:db:6b:6e:42:15:0f:02:37:a0: af:47:13:f6:b9:6c:97:65:1f:1f:ad:aa:d5:5e:31:a0:45:17: b0:9c:9c:09:34:e5:83:26:ea:20:ce:66:43:e4:9a:50:db:1e: b2:0a:8a:4c:2f:a3:22:59:1f:10:7e:da:11:c1:96:0f:c7:9f: fc:b9:74:d7:6e:b2:72:e0:1c:8c:86:35:f3:df:33:96:87:67: 68:54:94:e9:85:81:76:3e:7e:1e:51:3d:87:3b:57:9a:98:13: eb:c8:08:ff -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJxMpu6ura28ZX/OxcIDBd+tRWvkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA0MDExWhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTJiNmRlNWNlNzNkMTgzYTA0ZDQzNDFlNjhhY2VmOWQw YzNkYWRiODU5MWE2MGE2OTNiNjUyYjMzM2EyZTNiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfdihPV7vo63Dn/FYLAqKTzaNnW62hLYct3ap54YS6xleE UEvsHENYh9u3J8bdjyNCkyqjOAxdYB9rLjFa47uEvqmrViXuzYAzm/lFG1PopK/E aCsp1VRfcaHxe3FFFJGX4lN/YERmGbRwmE5UWdKHDyznJaDzVEU4mrswS93nDCft MUlrCJpyC9hWtk/Ai/1jT8Ouki/hr9lTmhGmXqIhxx/HD4Aj9MuYUeN1M4lQSAjk 05fnTz9BcdH8kalnKxunNa5AF4JzxoeKJL53tC0rnMQW1YFPt/UiXRsJEXQw5Jl6 PLIF/cSc0KVgvA1Lj9zC5k9emf6Kv/tskf+S8tnfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjN+AsJ1eUhqMebudrF/M6vbK/pAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA3ZjRhODVlLWRlODMtNDJmNi04NGZmLTE4YmQwNTlhY2NjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmBZzAAQAwDQYJKoZIhvcNAQELBQADggEBAGrIDpKSDz0i6P7gP1VB9hbf GxD0tahS2fzDn0plp1LUwybnkKfqI99C570FsWXE5wp/0FVPyXLQ71hq9mVnWLhK nKF+i9h1j9Wuo3wEddl3W5V3upN7hQ/I0PIHSsREUUv74qVeGlKRn+RLnq+REuOw l0MUsTgb9obx+UiQcX+l1/g2naaIgeWG4ZqAsUncs/GQhHLVaeFEDttrbkIVDwI3 oK9HE/a5bJdlHx+tqtVeMaBFF7CcnAk05YMm6iDOZkPkmlDbHrIKikwvoyJZHxB+ 2hHBlg/Hn/y5dNdusnLgHIyGNfPfM5aHZ2hUlOmFgXY+fh5RPYc7V5qYE+vICP8= -----END CERTIFICATE-----Generated at Sat Apr 5 12:21:09 2025 by rpki-client