$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa File: 35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa (raw, json) Hash identifier: ec4b39g/G94oCnE7NiDU+yLF+ipuYR4QePY+93wAhqk= Subject key identifier: 41:D4:A5:32:1A:44:B9:2E:47:8F:97:7D:67:B2:1E:0F:C5:09:FC:F7 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 313337DC8AE925D1F8BF4209B2165CE6A8F1D087 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa Signing time: Tue 01 Apr 2025 00:50:07 +0000 ROA not before: Tue 01 Apr 2025 00:50:07 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:398::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:33:37:dc:8a:e9:25:d1:f8:bf:42:09:b2:16:5c:e6:a8:f1:d0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:50:07 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:8d:a7:8d:db:53:a2:10:3c:af:54:fd:4f: 73:fd:e4:a0:88:01:81:f2:c7:8b:8f:78:e2:db:36: 52:9b:f7:66:e3:d6:2e:3f:6b:e4:6a:7f:0d:48:8e: d2:92:14:6a:26:18:99:9c:f5:9e:e0:5e:37:98:2e: 1b:aa:65:ed:91:6a:b8:fc:71:ba:9c:e4:91:18:ab: 2f:a7:fd:d2:61:68:58:72:b1:90:ac:03:95:91:70: 9c:f2:c4:2d:0f:24:71:8a:c8:35:6c:f3:fd:59:dd: b4:0f:30:20:6b:2b:28:0d:56:f2:12:c1:a1:88:27: ff:3d:8b:26:6b:10:a1:a4:99:c1:67:99:05:8e:4f: 1a:d5:0e:c7:96:21:1e:97:1c:db:d8:82:3f:dc:c1: 58:5d:84:ed:b8:07:5c:7d:45:03:98:5a:87:c5:f9: ac:96:99:e7:17:d6:fd:93:2f:48:66:4a:58:48:04: 71:4c:e8:90:2d:17:25:d6:ca:1d:57:56:7a:61:f5: ea:3e:8b:3b:71:45:cc:f1:cc:14:11:cf:92:52:f5: ce:c6:f8:63:80:e9:8d:64:72:04:bb:c7:91:e6:48: 0c:4e:d0:c4:21:1b:3b:0e:c3:29:f8:66:cb:9b:cd: b2:e1:c6:9c:c6:8d:79:26:0a:80:04:cb:9e:3c:c3: 39:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D4:A5:32:1A:44:B9:2E:47:8F:97:7D:67:B2:1E:0F:C5:09:FC:F7 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35ea4cbf-5429-4186-a0fe-cc8c6caa9ffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:398::/48 Signature Algorithm: sha256WithRSAEncryption 5d:00:1a:58:f3:f2:82:c8:b8:f2:dd:bc:2f:04:bb:1b:ce:82: 06:8a:46:86:a2:35:4f:11:f2:0b:57:ac:5d:4a:4a:85:c2:0e: f6:2a:58:fc:84:e7:79:5f:b9:01:56:2f:bb:e4:93:fd:38:3d: 59:fa:c8:9b:fd:2a:e0:c5:d7:fa:fe:e7:4a:2b:e9:25:9d:98: 31:f0:22:1c:3f:5b:7f:4f:a8:92:f4:da:eb:40:f0:4e:66:0d: bd:3f:9b:0d:c7:69:db:e3:2e:0c:6e:97:f5:0c:9d:0b:85:08: 41:08:62:bb:2d:b9:d1:4d:64:e0:cd:b2:93:9c:72:2b:ec:4d: 5a:64:80:c5:4d:0a:53:b7:62:8d:74:29:0b:4c:68:e4:59:31: 92:27:0b:f3:23:2c:81:cc:b3:01:ff:6e:a8:8e:91:0a:15:bd: c3:b0:7b:77:17:0c:e4:e3:19:c1:55:ea:93:31:47:7d:06:75: d8:48:ae:f1:83:df:49:b1:53:9e:0d:8a:3c:0b:04:1a:f3:27: 1d:48:e2:70:9b:40:f0:80:a1:2f:d7:27:98:22:46:f9:48:c6: 10:2c:75:04:cb:b7:6d:89:44:5e:9a:5a:9d:b1:60:41:0c:70: 66:e4:5f:78:d6:8f:e5:06:5d:1a:e3:70:d6:f4:c1:7b:a1:2b: 6a:fc:8e:f1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMTM33IrpJdH4v0IJshZc5qjx0IcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA1MDA3WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzJmZmI0ZWQ4ZjgwNGM3ZmFjNTFlZDU2N2JjMThlZmIz MWU3YjQ0NzBiNzhkODc5ZjE2ZGJhM2NjZDk3ZjFmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBPY2njdtTohA8r1T9T3P95KCIAYHyx4uPeOLbNlKb92bj 1i4/a+Rqfw1IjtKSFGomGJmc9Z7gXjeYLhuqZe2Rarj8cbqc5JEYqy+n/dJhaFhy sZCsA5WRcJzyxC0PJHGKyDVs8/1Z3bQPMCBrKygNVvISwaGIJ/89iyZrEKGkmcFn mQWOTxrVDseWIR6XHNvYgj/cwVhdhO24B1x9RQOYWofF+ayWmecX1v2TL0hmSlhI BHFM6JAtFyXWyh1XVnph9eo+iztxRczxzBQRz5JS9c7G+GOA6Y1kcgS7x5HmSAxO 0MQhGzsOwyn4ZsubzbLhxpzGjXkmCoAEy548wzkzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQdSlMhpEuS5Hj5d9Z7IeD8UJ/PcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM1ZWE0Y2JmLTU0MjktNDE4Ni1hMGZlLWNjOGM2Y2FhOWZmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5gwDQYJKoZIhvcNAQELBQADggEBAF0AGljz8oLIuPLdvC8EuxvO ggaKRoaiNU8R8gtXrF1KSoXCDvYqWPyE53lfuQFWL7vkk/04PVn6yJv9KuDF1/r+ 50or6SWdmDHwIhw/W39PqJL02utA8E5mDb0/mw3HadvjLgxul/UMnQuFCEEIYrst udFNZODNspOccivsTVpkgMVNClO3Yo10KQtMaORZMZInC/MjLIHMswH/bqiOkQoV vcOwe3cXDOTjGcFV6pMxR30GddhIrvGD30mxU54NijwLBBrzJx1I4nCbQPCAoS/X J5giRvlIxhAsdQTLt22JRF6aWp2xYEEMcGbkX3jWj+UGXRrjcNb0wXuhK2r8jvE= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:08 2025 by rpki-client