$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7d94148f-ccad-4cfd-b33c-2c3dae0a8716.roa File: 7d94148f-ccad-4cfd-b33c-2c3dae0a8716.roa (raw, json) Hash identifier: /n9TrZ1tI677IyiM839wEEvmIUc726YhmloavktZ9B4= Subject key identifier: C0:04:80:63:1F:05:81:B5:79:80:77:83:31:B4:EF:DC:91:F9:73:7E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 09784C19918480E1F1BB46F1AC9C95DA84C47212 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7d94148f-ccad-4cfd-b33c-2c3dae0a8716.roa Signing time: Tue 01 Apr 2025 15:00:14 +0000 ROA not before: Tue 01 Apr 2025 15:00:14 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:629::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:78:4c:19:91:84:80:e1:f1:bb:46:f1:ac:9c:95:da:84:c4:72:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 15:00:14 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:c7:e7:93:63:bc:59:49:17:ab:08:d1:bf: 7e:e6:9d:82:60:2f:37:e7:1a:86:fc:a2:15:cc:f6: 0e:a4:d4:1b:aa:49:48:7f:7c:a3:84:02:90:28:60: 2b:65:92:61:b9:17:f1:93:21:7e:0e:55:f9:7a:d2: 9c:fa:9d:fa:66:fe:04:56:4c:f6:dd:55:ff:56:ce: 31:f7:c6:54:44:84:05:a6:b0:e7:c0:53:a7:38:3f: b0:00:73:33:e3:14:46:00:68:f1:c6:22:f3:58:68: a1:0f:be:5f:64:e5:25:6b:a9:89:92:38:62:02:9f: 92:56:1c:45:72:bc:ea:a5:76:81:2e:43:e5:d8:41: 9a:a6:e3:b4:e7:71:ce:82:5c:94:83:d4:65:25:c6: 3c:ef:c8:c7:f8:21:86:8a:35:bc:2d:fc:a4:24:21: a9:2d:98:2a:b7:07:8f:41:cf:4c:86:41:b6:5b:76: ad:9f:9c:45:1e:94:23:18:22:cd:9b:00:67:91:85: c6:01:1b:f4:77:d4:66:8f:04:dc:fe:bd:8b:24:12: 9f:03:bb:70:38:74:c6:be:b9:60:c3:16:7e:43:53: 5a:4e:74:58:7f:3d:e1:87:d1:56:49:d9:fe:c3:f6: 15:8f:e5:18:14:86:15:9c:0a:40:38:db:2c:ab:ea: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:04:80:63:1F:05:81:B5:79:80:77:83:31:B4:EF:DC:91:F9:73:7E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7d94148f-ccad-4cfd-b33c-2c3dae0a8716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:629::/48 Signature Algorithm: sha256WithRSAEncryption 9c:22:51:b6:fc:c1:05:6a:55:da:29:15:59:47:64:93:99:e2: ef:fc:74:75:b8:fe:a6:6e:05:50:a1:a0:c6:d3:4e:c0:7e:60: d0:f2:c2:3e:d0:41:aa:92:0d:9a:32:67:24:32:1a:48:86:6d: b1:e2:79:fc:5d:03:3d:13:06:51:70:14:0f:4d:88:08:c9:3b: 0e:56:f3:42:34:97:08:4a:6a:25:a6:e9:2a:81:89:83:1d:d9: de:e6:6f:76:e4:02:46:50:d7:1f:ec:11:d8:43:f3:40:39:8c: e2:1d:e7:3c:64:75:cf:a2:5a:6b:d3:5e:c1:62:9e:e6:ca:59: 4f:a5:0c:8b:ba:19:57:17:34:a8:f8:5c:ed:e5:e6:7a:dd:3b: 9e:2c:5a:cc:c8:d4:66:3e:6a:fa:9d:93:91:75:c0:8a:81:4f: 52:d5:12:ae:09:c5:e4:26:8a:75:60:ff:a3:dd:e7:ee:92:45: 38:c2:4a:66:66:cd:e1:ef:cc:7f:77:c2:2b:fe:2b:bd:49:c5: f3:61:c7:8c:70:17:ac:0c:86:fe:12:34:9c:8b:89:5f:88:6a: c6:a3:d9:40:cf:34:c2:9c:d9:c9:ee:fb:c0:11:55:91:11:1d: d5:67:a3:51:07:be:b9:cd:89:65:f5:ad:76:3a:67:73:12:ad: 3e:e2:63:4b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCXhMGZGEgOHxu0bxrJyV2oTEchIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMTUwMDE0WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGRmMDVmNjMxM2Y3ODhiZTI4YmRiMTU4Mzk4NDZhZDIw MDEyZjQxYWQwZGIwYjE1ZjI1NGE2NjlkM2I0OTA2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwQ8fnk2O8WUkXqwjRv37mnYJgLzfnGob8ohXM9g6k1Buq SUh/fKOEApAoYCtlkmG5F/GTIX4OVfl60pz6nfpm/gRWTPbdVf9WzjH3xlREhAWm sOfAU6c4P7AAczPjFEYAaPHGIvNYaKEPvl9k5SVrqYmSOGICn5JWHEVyvOqldoEu Q+XYQZqm47Tncc6CXJSD1GUlxjzvyMf4IYaKNbwt/KQkIaktmCq3B49Bz0yGQbZb dq2fnEUelCMYIs2bAGeRhcYBG/R31GaPBNz+vYskEp8Du3A4dMa+uWDDFn5DU1pO dFh/PeGH0VZJ2f7D9hWP5RgUhhWcCkA42yyr6vz5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwASAYx8FgbV5gHeDMbTv3JH5c34wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzdkOTQxNDhmLWNjYWQtNGNmZC1iMzNjLTJjM2RhZTBhODcxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABikwDQYJKoZIhvcNAQELBQADggEBAJwiUbb8wQVqVdopFVlHZJOZ 4u/8dHW4/qZuBVChoMbTTsB+YNDywj7QQaqSDZoyZyQyGkiGbbHiefxdAz0TBlFw FA9NiAjJOw5W80I0lwhKaiWm6SqBiYMd2d7mb3bkAkZQ1x/sEdhD80A5jOId5zxk dc+iWmvTXsFinubKWU+lDIu6GVcXNKj4XO3l5nrdO54sWszI1GY+avqdk5F1wIqB T1LVEq4JxeQminVg/6Pd5+6SRTjCSmZmzeHvzH93wiv+K71JxfNhx4xwF6wMhv4S NJyLiV+Iasaj2UDPNMKc2cnu+8ARVZERHdVno1EHvrnNiWX1rXY6Z3MSrT7iY0s= -----END CERTIFICATE-----Generated at Sat Apr 5 07:26:13 2025 by rpki-client