$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa File: 54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa (raw, json) Hash identifier: A6m4cbLQ1jiUks15W7peTA0qMYpqZnO1U8ks00bx0wE= Subject key identifier: 7E:2B:21:5E:8C:3F:34:81:8C:15:7C:4F:50:66:DE:A4:03:0F:9C:B2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 766C87D911C2454F11B3ADE9694F571F2646B6DD Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa Signing time: Tue 01 Apr 2025 00:51:17 +0000 ROA not before: Tue 01 Apr 2025 00:51:17 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:611::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6c:87:d9:11:c2:45:4f:11:b3:ad:e9:69:4f:57:1f:26:46:b6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:51:17 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:79:38:c1:6a:80:5c:9e:b9:8c:88:93:a6: 19:d2:48:2b:93:88:1e:71:fa:3a:54:61:e8:54:a2: cb:b8:3b:7e:00:c0:ab:fc:da:24:70:b6:e4:48:76: b6:59:05:73:50:19:86:fe:29:5d:ed:64:60:11:21: d9:c8:28:f6:0b:5a:a1:20:64:c6:79:aa:7c:ab:e6: f3:f7:38:c4:5f:b9:1e:5b:63:b0:42:91:8e:70:65: 99:18:96:ca:5a:37:89:c2:e8:f6:7b:71:e6:ad:2d: f4:04:32:c0:46:3b:50:c6:cd:0e:55:9b:a5:dc:4d: 43:51:0f:42:54:ce:f8:3b:61:a0:3c:62:61:32:78: 60:81:53:3a:41:0b:a7:91:90:65:36:b5:bd:0a:65: 16:9f:26:d8:2d:94:2c:af:52:67:f1:fe:0c:72:29: fe:a3:82:41:df:bf:fa:ff:bf:da:e7:43:cf:81:c4: 9e:9f:51:ed:74:24:33:c6:d5:2a:ac:23:82:10:57: 40:fc:cb:5d:17:9d:b3:80:21:b1:e5:44:4b:f5:b6: 3f:7c:26:70:f3:ad:ad:0f:36:59:46:bb:69:e1:10: 57:95:7e:d8:48:23:ca:14:16:61:40:1f:04:73:db: e9:a3:30:ee:e6:06:96:4c:dc:d6:b8:0b:bc:2c:43: 5d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2B:21:5E:8C:3F:34:81:8C:15:7C:4F:50:66:DE:A4:03:0F:9C:B2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:611::/48 Signature Algorithm: sha256WithRSAEncryption 69:26:f5:8f:5e:c2:b5:b1:17:cf:70:8f:3f:b7:25:b4:8a:c8: 6c:01:3f:47:44:3a:a3:3e:60:9b:63:67:1a:76:ea:c7:e1:ee: 47:4a:86:ce:03:3e:02:ae:17:8e:78:93:8e:11:80:6f:ea:e4: 47:4d:82:9c:0d:61:b2:e7:3e:22:b9:62:c1:f0:41:24:72:0a: ba:f8:5b:c1:91:c1:f5:a3:1d:0c:17:8a:ad:e7:07:e9:0d:a7: 0b:96:14:2c:34:fd:88:2f:2d:28:a8:ab:6a:b9:d6:bc:5c:e7: fe:e4:3e:27:eb:7d:2e:88:a6:ea:dd:f4:ce:29:39:04:ed:22: 85:bf:1d:dc:0a:43:43:0e:0f:6a:1e:fc:dc:03:91:6c:87:fe: 8a:29:cb:47:fe:1c:16:6e:9b:3e:b9:c0:4d:1f:cd:38:59:b5: 54:16:d5:14:31:59:97:7d:df:51:6a:e0:54:58:81:27:eb:e7: 72:13:01:87:cb:23:48:6f:e2:c1:36:2f:f2:a4:9e:65:7b:91: f6:e0:c5:51:6e:70:a3:ba:96:c7:a0:8d:d0:d1:45:22:f4:fb: 02:e1:e4:11:f4:22:5d:a1:d5:b9:1f:e7:f7:b6:57:a9:34:80: 86:31:35:f3:b5:17:cc:a5:6d:d1:81:cc:2d:ea:17:8c:70:89: 9b:09:f8:7c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdmyH2RHCRU8Rs63paU9XHyZGtt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA1MTE3WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzc2ZjRhZTNmM2NhZWI3MmM5MmFjODgzYmQ2MmNjOTA2 NDQ0NmIwOTkwNjU0NDdjNmZkNWIwYmQxMDIxMDJmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPwnk4wWqAXJ65jIiTphnSSCuTiB5x+jpUYehUosu4O34A wKv82iRwtuRIdrZZBXNQGYb+KV3tZGARIdnIKPYLWqEgZMZ5qnyr5vP3OMRfuR5b Y7BCkY5wZZkYlspaN4nC6PZ7ceatLfQEMsBGO1DGzQ5Vm6XcTUNRD0JUzvg7YaA8 YmEyeGCBUzpBC6eRkGU2tb0KZRafJtgtlCyvUmfx/gxyKf6jgkHfv/r/v9rnQ8+B xJ6fUe10JDPG1SqsI4IQV0D8y10XnbOAIbHlREv1tj98JnDzra0PNllGu2nhEFeV fthII8oUFmFAHwRz2+mjMO7mBpZM3Na4C7wsQ12zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfishXow/NIGMFXxPUGbepAMPnLIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU0YmNiZDUwLTU5MTYtNDY3Ny1hNmIxLTY0NzdiOGIxNGFhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhEwDQYJKoZIhvcNAQELBQADggEBAGkm9Y9ewrWxF89wjz+3JbSK yGwBP0dEOqM+YJtjZxp26sfh7kdKhs4DPgKuF454k44RgG/q5EdNgpwNYbLnPiK5 YsHwQSRyCrr4W8GRwfWjHQwXiq3nB+kNpwuWFCw0/YgvLSioq2q51rxc5/7kPifr fS6Ipurd9M4pOQTtIoW/HdwKQ0MOD2oe/NwDkWyH/oopy0f+HBZumz65wE0fzThZ tVQW1RQxWZd931Fq4FRYgSfr53ITAYfLI0hv4sE2L/KknmV7kfbgxVFucKO6lseg jdDRRSL0+wLh5BH0Il2h1bkf5/e2V6k0gIYxNfO1F8ylbdGBzC3qF4xwiZsJ+Hw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:35 2025 by rpki-client