$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/90fb78db-2abf-4a4f-8217-d0c64f258f70.roa File: 90fb78db-2abf-4a4f-8217-d0c64f258f70.roa (raw, json) Hash identifier: 3KW4mYUIhVhgU/x6GDz2lS8xpfw57cdcWQWEFga0tCs= Subject key identifier: EA:64:E0:42:65:73:D0:3E:02:9C:27:2F:C5:CD:D6:29:18:82:6D:45 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2C6E3DF93DB3549B4959C6646A27F71C60CC45DC Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/90fb78db-2abf-4a4f-8217-d0c64f258f70.roa Signing time: Mon 17 Mar 2025 15:20:48 +0000 ROA not before: Mon 17 Mar 2025 15:20:48 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6e:3d:f9:3d:b3:54:9b:49:59:c6:64:6a:27:f7:1c:60:cc:45:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 17 15:20:48 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:0a:75:62:2a:8d:23:c7:81:6c:eb:96:8e: f3:df:d7:e8:c6:27:46:11:61:0f:aa:7e:0d:a5:8b: 9e:ce:1c:04:9c:bf:ae:7b:cb:35:b0:ba:63:a2:d1: 10:30:fe:5f:9f:7e:3c:f5:ed:a6:8f:52:4c:b8:12: 17:d3:37:f8:a7:d2:88:14:6d:15:9a:9e:64:a2:9b: 9e:37:20:0e:21:a5:23:56:b1:04:2b:82:85:32:ca: aa:02:1a:44:d9:4c:5d:83:00:ba:31:b1:c1:4b:71: 33:15:ef:eb:e2:48:03:4f:20:a9:e4:1a:8f:e3:13: f1:3c:12:0d:bf:b8:bb:0d:56:e8:2a:d1:54:16:e9: ce:91:33:f4:85:13:8d:c7:9d:92:99:d6:2d:ca:5a: 71:43:67:6c:82:b6:d3:b4:40:a3:70:b9:da:ca:72: 22:97:8f:36:ab:fe:89:36:83:cb:c5:75:05:dc:f4: e7:4e:f0:9e:6a:e2:a9:9d:e2:e0:3e:6c:05:9f:26: cf:1e:bd:b9:48:d6:25:f7:24:69:2f:42:c0:36:16: f0:2f:6f:47:c7:57:7d:a8:60:d8:3f:43:43:2e:50: fb:69:42:e9:b1:2a:56:4b:55:8a:c6:f8:ca:25:a1: 95:6c:4e:75:f0:74:cb:0c:b9:d9:02:cf:bf:73:3e: cc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:64:E0:42:65:73:D0:3E:02:9C:27:2F:C5:CD:D6:29:18:82:6D:45 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/90fb78db-2abf-4a4f-8217-d0c64f258f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c01::/48 Signature Algorithm: sha256WithRSAEncryption 5f:a5:1f:5e:f6:33:d4:ef:4f:55:6a:44:bb:f3:f8:b1:72:ac: d3:8b:a7:61:52:68:e4:93:ac:88:7d:c2:e7:05:fe:49:5d:23: f8:2b:af:e1:ea:d3:ba:96:39:20:2b:cb:5e:e7:85:47:6c:bc: c0:d8:f7:d6:2c:e7:c8:93:bc:c3:2c:e2:36:23:66:94:dc:64: d6:e2:ba:0b:d0:ca:a6:2b:d9:fe:bb:33:58:14:a0:1f:0b:d3: 5a:d5:1b:00:07:cb:87:73:9c:3d:db:5d:1b:7a:fb:88:d2:30: 9e:24:e7:7e:8c:8b:c1:84:3e:5b:a3:c7:bb:f5:1f:c2:ea:b2: ae:95:67:37:63:fb:46:91:48:4f:a2:07:08:e9:bf:5d:2b:5a: 75:ee:63:a4:a5:7c:9c:2c:e8:59:63:2b:97:76:28:76:a1:0d: 49:d2:77:e2:7e:88:16:30:ee:a4:6b:26:71:dc:5b:f8:a6:94: 72:5d:d3:b6:3c:be:a7:13:32:de:8b:a9:a0:36:0d:5c:46:c3: 15:6a:68:30:e9:14:7d:b3:f9:7e:d4:c5:01:05:9b:90:a5:49: f8:4b:a7:45:c4:42:8a:26:f8:f5:ca:f8:d7:22:1b:b9:6b:0e: b0:84:d1:89:46:ae:7a:d8:de:ea:62:37:81:2f:d8:b7:54:91: 1a:1b:a0:58 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULG49+T2zVJtJWcZkaif3HGDMRdwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzE3MTUyMDQ4WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTRkNzg2YzUwZmQwNjQ3NGFhODEzYTI1Y2RmZjk2ZDk2 ZGFhZTdiY2I0M2UyMmQ2NTZjMDViYTYyMDdhMTZlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz6wp1YiqNI8eBbOuWjvPf1+jGJ0YRYQ+qfg2li57OHASc v657yzWwumOi0RAw/l+ffjz17aaPUky4EhfTN/in0ogUbRWanmSim543IA4hpSNW sQQrgoUyyqoCGkTZTF2DALoxscFLcTMV7+viSANPIKnkGo/jE/E8Eg2/uLsNVugq 0VQW6c6RM/SFE43HnZKZ1i3KWnFDZ2yCttO0QKNwudrKciKXjzar/ok2g8vFdQXc 9OdO8J5q4qmd4uA+bAWfJs8evblI1iX3JGkvQsA2FvAvb0fHV32oYNg/Q0MuUPtp QumxKlZLVYrG+MoloZVsTnXwdMsMudkCz79zPszhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6mTgQmVz0D4CnCcvxc3WKRiCbUUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzkwZmI3OGRiLTJhYmYtNGE0Zi04MjE3LWQwYzY0ZjI1OGY3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAEwDQYJKoZIhvcNAQELBQADggEBAF+lH172M9TvT1VqRLvz+LFy rNOLp2FSaOSTrIh9wucF/kldI/grr+Hq07qWOSAry17nhUdsvMDY99Ys58iTvMMs 4jYjZpTcZNbiugvQyqYr2f67M1gUoB8L01rVGwAHy4dznD3bXRt6+4jSMJ4k536M i8GEPlujx7v1H8Lqsq6VZzdj+0aRSE+iBwjpv10rWnXuY6SlfJws6FljK5d2KHah DUnSd+J+iBYw7qRrJnHcW/imlHJd07Y8vqcTMt6LqaA2DVxGwxVqaDDpFH2z+X7U xQEFm5ClSfhLp0XEQoom+PXK+NciG7lrDrCE0YlGrnrY3upiN4Ev2LdUkRoboFg= -----END CERTIFICATE-----Generated at Sat Apr 5 12:08:49 2025 by rpki-client