$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3d9044a-c6b2-44b1-b812-a2d260b87f4f.roa File: b3d9044a-c6b2-44b1-b812-a2d260b87f4f.roa (raw, json) Hash identifier: 4ZTeldUHpVJTUwcVPMdiCy6k6QmshkbIkr5J4jJT7xA= Subject key identifier: C2:AD:14:DD:43:5C:93:27:BB:34:AA:D2:D2:2A:70:38:30:30:9A:BF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1BF8D44DFC3B5C68949E51D8941198E36A92D66E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3d9044a-c6b2-44b1-b812-a2d260b87f4f.roa Signing time: Tue 01 Apr 2025 00:50:24 +0000 ROA not before: Tue 01 Apr 2025 00:50:24 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:548::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f8:d4:4d:fc:3b:5c:68:94:9e:51:d8:94:11:98:e3:6a:92:d6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:50:24 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:fb:5d:aa:7e:29:6e:97:e9:f0:0a:06:97: f9:82:c8:f6:98:fd:b9:a0:11:91:01:a4:2f:7b:f7: 49:75:f9:8d:91:77:f9:24:d6:b4:dd:a2:36:e2:b3: 64:a0:9c:c0:87:21:00:99:ff:3f:dc:94:19:48:45: 5a:45:b2:ec:6d:a6:a5:8c:48:6d:7f:a5:99:50:0f: 35:b5:3f:0e:7c:f2:59:69:56:0a:95:32:97:a1:0d: 7d:fc:a8:3d:1c:7a:b4:38:50:51:5e:d2:0f:a9:51: 11:a7:cd:cb:10:71:1c:9b:4d:57:e4:e8:c3:73:fd: b6:04:b4:a2:59:c9:f4:b6:ae:f5:95:fb:ab:05:5a: cf:db:54:26:3d:03:61:10:ee:fe:11:f8:01:41:14: 2b:f4:14:bf:b6:52:41:a1:50:13:b6:40:04:ed:05: 75:0f:63:b1:ac:af:ae:e0:4b:5b:df:10:4d:6c:bd: e1:11:cf:e1:96:c3:b3:82:ed:1d:36:cd:3f:e1:8b: ef:82:aa:aa:4f:b5:08:4b:4e:55:94:ee:7d:3f:49: d0:45:81:71:ef:71:2a:f4:81:ec:bb:40:33:99:45: 51:0c:85:f4:cc:85:af:41:c2:90:75:de:a2:3a:2c: 6a:7a:75:ff:da:bc:87:2f:41:86:bd:26:8c:a4:41: 12:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AD:14:DD:43:5C:93:27:BB:34:AA:D2:D2:2A:70:38:30:30:9A:BF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3d9044a-c6b2-44b1-b812-a2d260b87f4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:548::/48 Signature Algorithm: sha256WithRSAEncryption 11:75:bf:e7:f4:34:6e:54:91:38:4a:5d:4a:e7:b9:83:07:6a: 01:b5:2d:d6:23:72:83:af:83:dd:87:f8:82:a8:a3:02:88:3b: 07:b7:67:42:b8:fa:8d:5d:78:02:81:ef:07:18:bc:95:77:3e: 19:05:c6:20:b9:ed:cb:2e:d2:54:2d:7f:08:c9:67:16:1a:c3: 0d:8f:f4:03:f7:90:5e:18:d6:3b:28:4e:03:1f:75:78:7b:d9: 16:03:6f:76:06:e6:85:0b:4b:29:11:43:3c:2b:e1:91:f7:5b: 32:36:c6:66:51:bc:69:b9:0f:35:a6:a5:63:85:ce:e7:3c:4f: d6:82:26:be:c3:ea:a1:54:e5:4b:46:a2:8f:84:5d:3b:5a:78: 2c:02:f2:d8:94:56:46:a0:1c:96:6d:c2:a0:23:29:a5:3f:78: 81:d5:7e:a5:4a:52:e6:6a:24:f4:24:fe:ed:df:ef:84:8c:e6: 08:e6:68:6b:8d:e5:33:31:d5:9c:7a:af:7d:c8:6a:bb:5b:c4: 41:a6:28:3b:11:80:1a:fd:15:1b:c9:69:d1:84:c7:4a:08:74: 55:62:ea:50:31:d9:7b:79:7b:53:c6:22:d3:ed:43:30:85:3e: 53:d1:04:d5:68:17:38:27:03:a9:6e:0a:1b:ea:0e:98:f2:a1: 5b:1c:9c:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG/jUTfw7XGiUnlHYlBGY42qS1m4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA1MDI0WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjRkOGMzNmVmYmZjYTE0OGM2M2Y2MGYzMmE0MzdiNWEz M2QzZWUwMWRlZGYzMmQ4ZGYwOTM0YTc4OThiMjU0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdKftdqn4pbpfp8AoGl/mCyPaY/bmgEZEBpC9790l1+Y2R d/kk1rTdojbis2SgnMCHIQCZ/z/clBlIRVpFsuxtpqWMSG1/pZlQDzW1Pw588llp VgqVMpehDX38qD0cerQ4UFFe0g+pURGnzcsQcRybTVfk6MNz/bYEtKJZyfS2rvWV +6sFWs/bVCY9A2EQ7v4R+AFBFCv0FL+2UkGhUBO2QATtBXUPY7Gsr67gS1vfEE1s veERz+GWw7OC7R02zT/hi++CqqpPtQhLTlWU7n0/SdBFgXHvcSr0gey7QDOZRVEM hfTMha9BwpB13qI6LGp6df/avIcvQYa9JoykQRLdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwq0U3UNckye7NKrS0ipwODAwmr8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IzZDkwNDRhLWM2YjItNDRiMS1iODEyLWEyZDI2MGI4N2Y0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUgwDQYJKoZIhvcNAQELBQADggEBABF1v+f0NG5UkThKXUrnuYMH agG1LdYjcoOvg92H+IKoowKIOwe3Z0K4+o1deAKB7wcYvJV3PhkFxiC57csu0lQt fwjJZxYaww2P9AP3kF4Y1jsoTgMfdXh72RYDb3YG5oULSykRQzwr4ZH3WzI2xmZR vGm5DzWmpWOFzuc8T9aCJr7D6qFU5UtGoo+EXTtaeCwC8tiUVkagHJZtwqAjKaU/ eIHVfqVKUuZqJPQk/u3f74SM5gjmaGuN5TMx1Zx6r33IartbxEGmKDsRgBr9FRvJ adGEx0oIdFVi6lAx2Xt5e1PGItPtQzCFPlPRBNVoFzgnA6luChvqDpjyoVscnMo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:04 2025 by rpki-client