$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7024778f-df37-4401-8278-42efb73eb5f9.roa File: 7024778f-df37-4401-8278-42efb73eb5f9.roa (raw, json) Hash identifier: Y/yqkDrCMd/TKZ/pdvlMTtAPO4X0T+ZiRZqp2PqxO/M= Subject key identifier: 4A:98:90:32:A2:08:38:B2:38:7D:85:43:11:89:9D:10:F6:D6:97:A7 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 098D6053A1AA690E4EF9F0768159D9AA05F40C1E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7024778f-df37-4401-8278-42efb73eb5f9.roa Signing time: Mon 17 Mar 2025 15:20:55 +0000 ROA not before: Mon 17 Mar 2025 15:20:55 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8d:60:53:a1:aa:69:0e:4e:f9:f0:76:81:59:d9:aa:05:f4:0c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 17 15:20:55 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:61:45:cb:81:56:43:d3:fd:4d:ec:6c:e3: df:9f:1a:a9:a3:e1:06:5f:72:3d:fd:c1:26:23:0a: 75:a7:56:98:f0:e0:6c:ba:32:f0:cf:94:73:d4:a4: e6:b2:4b:db:1e:19:2f:44:38:04:58:ab:3a:d6:18: fe:9c:30:f2:56:ce:53:45:67:4b:0f:66:c7:2e:91: 86:f8:0a:c5:e5:11:7e:5b:b9:80:0d:70:7a:72:b6: 5d:c3:f9:f1:64:6b:bf:ff:68:30:4f:d5:15:81:b1: a1:ce:4e:2c:b8:96:1f:e2:06:f0:d8:fc:53:2d:a8: 60:8f:57:8e:0a:a0:37:44:ab:98:e4:e3:0b:8e:90: 2d:19:86:ec:b9:05:31:12:cc:08:5f:47:60:ed:41: cc:19:fa:e6:c0:88:53:1a:48:73:ca:e3:8c:78:aa: 0b:45:9e:bd:0b:eb:45:1d:0a:fd:07:be:e8:05:0f: c8:25:63:54:32:ff:78:f3:6d:a8:44:64:31:8a:14: 6c:8c:c8:7e:3b:63:18:e6:7c:45:c5:3c:b6:45:97: aa:0b:6b:fa:44:a6:6e:1b:85:67:64:2b:16:c7:24: d1:f1:6e:27:af:44:fb:1d:69:8a:59:33:68:46:37: 0b:2d:7b:4b:e9:a4:ef:6a:bd:18:bc:0a:37:97:0a: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:98:90:32:A2:08:38:B2:38:7D:85:43:11:89:9D:10:F6:D6:97:A7 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7024778f-df37-4401-8278-42efb73eb5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c03::/48 Signature Algorithm: sha256WithRSAEncryption 67:77:16:d5:b1:d8:c7:7f:11:75:2b:d4:e3:49:e0:31:f7:f8: 15:82:79:c9:46:4d:67:f0:fe:13:b4:6d:1a:9d:30:42:45:f7: c1:44:d7:f0:89:c8:33:7b:a0:aa:af:2c:b9:af:31:90:42:8e: 8a:fd:ce:b2:a0:b4:02:3c:1c:5a:2c:07:d6:a6:e2:0b:29:45: 9e:50:ac:21:4b:dd:51:53:14:31:ac:77:24:87:b8:05:d1:76: 9a:1a:f9:c2:0a:52:7a:bb:76:5f:de:3f:a0:d9:02:ba:bb:b5: df:cf:8b:58:e7:5a:fb:a2:d5:fe:68:97:7f:c8:e8:3d:54:48: 95:2a:35:19:f7:5b:95:7f:77:d9:b1:78:0e:1b:42:28:5a:15: 18:b3:00:ca:bc:ab:ef:4a:0c:9d:92:2c:53:d0:4c:34:d8:f3: e8:f6:82:89:59:5e:74:46:9d:1e:db:ef:59:4f:13:59:bd:a1: 1d:bd:94:e1:ac:89:0e:6b:c4:85:ef:ed:05:55:2e:11:e5:ac: 7e:de:8d:be:45:eb:9b:5f:f7:9a:a8:69:ff:25:51:04:f3:85: 61:d7:66:0c:6e:d9:d1:51:d0:37:5a:0a:20:a4:68:7f:eb:94: 6c:25:37:e7:84:aa:8e:d9:6c:7b:c9:9c:3d:03:c4:8d:61:24: 3d:a1:8d:1c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCY1gU6GqaQ5O+fB2gVnZqgX0DB4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzE3MTUyMDU1WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGI5N2RiZTFiMmQ5YmI4NTdhMDJkMzUyYzI0ZDlmNmI2 Y2IyODRmZjcxZjViOTY4ZDAxYzgzNGE5YzU4OThiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrSmFFy4FWQ9P9Texs49+fGqmj4QZfcj39wSYjCnWnVpjw 4Gy6MvDPlHPUpOayS9seGS9EOARYqzrWGP6cMPJWzlNFZ0sPZscukYb4CsXlEX5b uYANcHpytl3D+fFka7//aDBP1RWBsaHOTiy4lh/iBvDY/FMtqGCPV44KoDdEq5jk 4wuOkC0Zhuy5BTESzAhfR2DtQcwZ+ubAiFMaSHPK44x4qgtFnr0L60UdCv0HvugF D8glY1Qy/3jzbahEZDGKFGyMyH47YxjmfEXFPLZFl6oLa/pEpm4bhWdkKxbHJNHx bievRPsdaYpZM2hGNwste0vppO9qvRi8CjeXCmMfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSpiQMqIIOLI4fYVDEYmdEPbWl6cwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzcwMjQ3NzhmLWRmMzctNDQwMS04Mjc4LTQyZWZiNzNlYjVmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAMwDQYJKoZIhvcNAQELBQADggEBAGd3FtWx2Md/EXUr1ONJ4DH3 +BWCeclGTWfw/hO0bRqdMEJF98FE1/CJyDN7oKqvLLmvMZBCjor9zrKgtAI8HFos B9am4gspRZ5QrCFL3VFTFDGsdySHuAXRdpoa+cIKUnq7dl/eP6DZArq7td/Pi1jn Wvui1f5ol3/I6D1USJUqNRn3W5V/d9mxeA4bQihaFRizAMq8q+9KDJ2SLFPQTDTY 8+j2golZXnRGnR7b71lPE1m9oR29lOGsiQ5rxIXv7QVVLhHlrH7ejb5F65tf95qo af8lUQTzhWHXZgxu2dFR0DdaCiCkaH/rlGwlN+eEqo7ZbHvJnD0DxI1hJD2hjRw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:16 2025 by rpki-client