$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0ca2746d-3202-41d0-813a-04560f31627d.roa File: 0ca2746d-3202-41d0-813a-04560f31627d.roa (raw, json) Hash identifier: 37mbmzgv8WwvPaCtcTBGffzGcK1aBKHZUMiSENdZRH0= Subject key identifier: 0F:9E:5F:35:5B:97:B4:AB:52:8B:48:FC:82:81:B7:16:BF:A4:DC:36 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 055C77943D17EF7112D833A64E5345F2E2607724 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0ca2746d-3202-41d0-813a-04560f31627d.roa Signing time: Mon 17 Mar 2025 15:31:36 +0000 ROA not before: Mon 17 Mar 2025 15:31:36 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5c:77:94:3d:17:ef:71:12:d8:33:a6:4e:53:45:f2:e2:60:77:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 17 15:31:36 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bc:6a:0f:f6:ac:fd:13:fb:4a:ff:82:ae:1c: 24:c2:32:65:49:97:02:39:28:ba:83:65:e6:17:0c: 3a:1e:b4:1a:2e:5c:03:c9:f4:8f:d4:9e:52:70:53: 2e:d2:d7:2a:3e:18:65:ac:0e:39:4b:fb:38:96:f3: 4a:3d:08:30:35:98:7b:34:16:22:e5:cf:5c:9d:c6: 96:5a:87:a2:11:79:49:38:7e:9d:00:5b:ae:e3:05: 20:c1:76:38:24:54:ce:dd:94:82:95:4f:2d:a3:53: 87:b8:7d:1f:13:11:78:fe:d8:60:b7:55:17:72:49: ea:88:7c:b4:5f:96:a4:d9:05:13:1c:62:ea:b4:b4: 28:56:b3:de:a7:cf:3a:33:a3:7c:c4:58:06:45:46: 2b:69:10:3a:af:df:f1:1a:20:2c:a4:44:67:10:a3: 77:ac:49:8e:da:4d:b0:30:d4:2d:30:c5:97:3d:8b: da:39:eb:1b:2e:8c:38:9d:ed:b8:0d:91:12:db:17: 00:f1:0d:ce:5c:d3:22:1a:53:fa:09:c1:cd:09:83: 14:e0:d1:2d:59:af:86:d9:31:eb:be:16:8b:5b:da: d5:a4:bb:ef:5f:81:49:82:6f:ad:eb:a4:8b:6b:bd: 1a:e0:84:32:f1:30:4d:11:2e:f2:00:9b:fd:16:23: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9E:5F:35:5B:97:B4:AB:52:8B:48:FC:82:81:B7:16:BF:A4:DC:36 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0ca2746d-3202-41d0-813a-04560f31627d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c10::/48 Signature Algorithm: sha256WithRSAEncryption 28:e4:27:91:80:59:fe:e8:a8:de:8c:a3:dc:d8:7e:2d:1f:67: b2:2d:8c:6b:81:6c:57:b9:48:3b:6f:46:b6:ae:77:3f:5d:3c: 48:93:df:6d:05:a0:42:a5:1d:b7:ec:04:a5:9d:32:ee:ca:bf: 9f:b1:09:83:54:7b:ab:c0:5c:07:1e:a2:51:85:25:89:a1:5b: 9c:ee:d3:17:37:f0:ad:03:a1:35:ee:ca:73:e3:bd:2f:35:c0: ab:bb:ed:20:6a:f7:47:c4:54:ec:d2:89:7c:29:7c:cf:06:c5: 98:cb:e8:78:1e:98:20:3b:00:3a:92:b0:bd:d3:3f:2b:8b:93: af:b7:d2:ea:50:70:0f:b5:22:41:59:c4:bc:f6:51:27:6d:3b: f2:16:12:d5:e4:c7:1c:84:f3:8b:d2:52:c1:b3:8d:93:b0:12: a4:96:c7:e5:fb:00:98:88:9d:dc:f0:67:6d:ee:eb:19:c2:73: ca:c3:da:03:45:97:fc:d2:e1:8c:d4:e6:76:fb:0c:10:98:b3: 98:8c:92:9f:be:27:c7:e6:44:9c:f9:31:6f:36:fe:08:df:66: 75:1d:74:19:c6:3f:99:ef:e6:60:9c:87:94:de:c2:74:97:4d: c5:4c:33:0d:d8:a7:7f:fe:fe:d5:b7:7c:cd:ab:74:18:e3:20: b1:a6:ef:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBVx3lD0X73ES2DOmTlNF8uJgdyQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzE3MTUzMTM2WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjlhZmQ0ZDc4ZTM5YzE2ZjljMjliZWY3NmFkODc3ZDc2 NjdkM2Y1NGZmNWQxZTMwMWNmNWVjYmViOGNkYWJjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWvGoP9qz9E/tK/4KuHCTCMmVJlwI5KLqDZeYXDDoetBou XAPJ9I/UnlJwUy7S1yo+GGWsDjlL+ziW80o9CDA1mHs0FiLlz1ydxpZah6IReUk4 fp0AW67jBSDBdjgkVM7dlIKVTy2jU4e4fR8TEXj+2GC3VRdySeqIfLRflqTZBRMc Yuq0tChWs96nzzozo3zEWAZFRitpEDqv3/EaICykRGcQo3esSY7aTbAw1C0wxZc9 i9o56xsujDid7bgNkRLbFwDxDc5c0yIaU/oJwc0JgxTg0S1Zr4bZMeu+Fotb2tWk u+9fgUmCb63rpItrvRrghDLxME0RLvIAm/0WI+1bAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUD55fNVuXtKtSi0j8goG3Fr+k3DYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzBjYTI3NDZkLTMyMDItNDFkMC04MTNhLTA0NTYwZjMxNjI3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBAwDQYJKoZIhvcNAQELBQADggEBACjkJ5GAWf7oqN6Mo9zYfi0f Z7ItjGuBbFe5SDtvRraudz9dPEiT320FoEKlHbfsBKWdMu7Kv5+xCYNUe6vAXAce olGFJYmhW5zu0xc38K0DoTXuynPjvS81wKu77SBq90fEVOzSiXwpfM8GxZjL6Hge mCA7ADqSsL3TPyuLk6+30upQcA+1IkFZxLz2USdtO/IWEtXkxxyE84vSUsGzjZOw EqSWx+X7AJiIndzwZ23u6xnCc8rD2gNFl/zS4YzU5nb7DBCYs5iMkp++J8fmRJz5 MW82/gjfZnUddBnGP5nv5mCch5TewnSXTcVMMw3Yp3/+/tW3fM2rdBjjILGm7z8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:21 2025 by rpki-client