$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa File: 33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa (raw, json) Hash identifier: qliHSOpYOEM8BQxjt96TCT290EVqu9uHIxoj8n3FzS8= Subject key identifier: DB:F4:B5:34:72:DD:2F:A1:86:19:41:1A:89:D1:05:EB:F9:01:08:69 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7D4DA5F75F3E00FA7F4775C28B1275597019B13B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa Signing time: Tue 01 Apr 2025 00:50:15 +0000 ROA not before: Tue 01 Apr 2025 00:50:15 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:545::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4d:a5:f7:5f:3e:00:fa:7f:47:75:c2:8b:12:75:59:70:19:b1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:50:15 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:0d:8c:33:ee:f8:cb:1c:b8:d9:0c:e9:58: bc:ef:66:7b:ef:99:db:aa:09:ff:b9:60:82:cb:e3: 7e:b8:5a:f4:5f:e8:1e:b7:14:b7:c0:2f:39:a6:06: 93:90:c4:d9:ca:39:76:9a:c0:eb:b5:c7:cb:63:10: b1:41:ea:aa:79:9c:c6:19:dd:e9:af:0a:ff:e6:b1: 2d:ac:45:a7:8a:d4:0b:35:27:f6:61:30:bb:2d:5a: 8d:fd:e5:82:22:cb:d7:39:d2:3a:ec:41:32:e0:90: 4b:33:fc:0d:f3:3c:21:5e:ad:cc:45:b7:82:26:14: 9b:d4:1c:28:c8:9d:c7:5f:61:79:1c:aa:90:4e:36: 97:89:80:02:92:d1:21:e0:ab:93:ea:bd:4d:e6:7c: d8:58:5d:5f:6f:28:ff:d6:5b:32:8b:6b:cd:fb:b7: 7d:61:0b:8c:cc:73:15:1b:ad:dc:6b:8d:ff:80:2c: 7c:63:92:a0:5d:a8:2a:52:3b:0f:09:ec:10:58:59: fe:7b:13:94:39:44:04:88:8a:2a:7b:a9:40:d7:a3: eb:ee:9c:3c:a1:3e:d1:cc:c4:1e:c7:f5:b9:27:81: c2:0a:13:73:c6:b3:bd:ab:76:be:0b:68:7b:2a:2a: 93:66:8f:fd:a7:28:b2:6a:57:40:33:14:9a:0c:fa: c3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F4:B5:34:72:DD:2F:A1:86:19:41:1A:89:D1:05:EB:F9:01:08:69 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:545::/48 Signature Algorithm: sha256WithRSAEncryption 5e:5c:bb:e5:e0:c9:8e:6a:12:be:4a:7e:1c:ed:c4:00:0e:84: 73:a5:9b:6b:6f:d6:14:ab:5e:0e:f7:ab:c1:e8:7e:ce:39:a2: 7b:0a:1e:64:60:64:f7:c1:c6:c5:bd:f9:0f:a0:4f:8f:7f:9e: 68:18:01:ba:99:ca:85:e1:e9:31:b7:9c:8f:0d:e7:43:46:48: 23:78:bb:ca:c3:2a:41:63:9a:86:49:11:c5:4d:1b:df:4b:7c: 27:5f:d7:74:58:19:d9:bc:59:18:38:ed:9f:9c:a6:85:9f:ab: 37:53:19:f5:f4:83:4c:8a:bc:77:aa:7c:68:dd:a0:c7:f8:87: 66:67:e1:3d:2e:96:6f:b8:26:fc:5d:e9:84:92:8d:26:7a:9f: 02:bc:9e:46:2a:32:b1:aa:71:e9:22:bf:9d:11:53:51:81:c9: 11:b3:0a:b5:6c:3b:7b:02:78:38:a2:74:28:d0:3a:d4:b8:bc: b4:f7:fc:e9:ae:56:27:b9:a1:15:6d:2e:9f:16:45:ca:7b:2a: 36:8e:09:fb:b1:b9:eb:f3:4b:40:87:0b:cf:de:68:42:d9:5e: f4:2d:a5:08:7a:0c:d2:99:22:0c:b6:4d:8e:87:16:e7:16:57: 5d:2d:c3:6b:94:18:6c:71:2a:32:ff:62:ec:51:cc:63:eb:b6: 0d:a1:b6:1c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfU2l918+APp/R3XCixJ1WXAZsTswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA1MDE1WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDljOGJjNmJhY2IxYzFiNzM2ZGEzYjVlNWMxMzdmM2I3 MzMxOTI1MWFiOTQ0MGEwNmJiMDE3ODViNWYzMzhiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQkw2MM+74yxy42QzpWLzvZnvvmduqCf+5YILL4364WvRf 6B63FLfALzmmBpOQxNnKOXaawOu1x8tjELFB6qp5nMYZ3emvCv/msS2sRaeK1As1 J/ZhMLstWo395YIiy9c50jrsQTLgkEsz/A3zPCFercxFt4ImFJvUHCjIncdfYXkc qpBONpeJgAKS0SHgq5PqvU3mfNhYXV9vKP/WWzKLa837t31hC4zMcxUbrdxrjf+A LHxjkqBdqCpSOw8J7BBYWf57E5Q5RASIiip7qUDXo+vunDyhPtHMxB7H9bkngcIK E3PGs72rdr4LaHsqKpNmj/2nKLJqV0AzFJoM+sMrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2/S1NHLdL6GGGUEaidEF6/kBCGkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzMzYzZjZWUzLWEyODYtNGU5YS05MmQyLTRiN2JmYjhhYjUwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUUwDQYJKoZIhvcNAQELBQADggEBAF5cu+XgyY5qEr5KfhztxAAO hHOlm2tv1hSrXg73q8Hofs45onsKHmRgZPfBxsW9+Q+gT49/nmgYAbqZyoXh6TG3 nI8N50NGSCN4u8rDKkFjmoZJEcVNG99LfCdf13RYGdm8WRg47Z+cpoWfqzdTGfX0 g0yKvHeqfGjdoMf4h2Zn4T0ulm+4Jvxd6YSSjSZ6nwK8nkYqMrGqcekiv50RU1GB yRGzCrVsO3sCeDiidCjQOtS4vLT3/OmuVie5oRVtLp8WRcp7KjaOCfuxuevzS0CH C8/eaELZXvQtpQh6DNKZIgy2TY6HFucWV10tw2uUGGxxKjL/YuxRzGPrtg2hthw= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:25 2025 by rpki-client