$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa File: b6c99ca5-333b-4905-96bb-8272aaedfc25.roa (raw, json) Hash identifier: g5Rqn6mXLBA385PVanj8yApvx3x26PjwDgSRU5kFPDw= Subject key identifier: 8A:52:E7:A2:5C:68:97:3B:B0:CE:B9:F1:EF:99:93:3C:80:3C:31:DF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 43CCA029093CD5C3139ED98484EC955510A36A83 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa Signing time: Mon 31 Mar 2025 18:30:51 +0000 ROA not before: Mon 31 Mar 2025 18:30:51 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:397::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cc:a0:29:09:3c:d5:c3:13:9e:d9:84:84:ec:95:55:10:a3:6a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 31 18:30:51 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:9b:8d:2d:0e:4e:75:c6:03:e8:b4:cd:68: 6a:71:6b:ae:27:ea:a1:3e:d2:65:77:13:f0:b8:2b: 1b:dc:2e:8b:ad:ac:19:3d:a2:18:4a:9f:d9:34:b0: d9:44:44:6d:cf:04:c9:85:3a:59:8b:be:94:d4:05: a4:59:73:74:f7:fe:23:79:09:e5:39:42:d9:c2:ab: 1c:23:c5:b5:28:70:91:48:ef:cf:4b:68:5f:cb:63: eb:56:08:e2:f1:dc:9c:d3:e9:91:49:36:54:2b:83: f6:94:9a:21:c7:6b:74:11:8c:c5:5d:2f:43:af:6b: 64:15:e4:86:1e:35:78:4f:22:06:f3:ad:88:f2:cd: b6:ed:79:d1:93:0a:6d:be:83:bd:29:29:b0:0a:19: 63:a5:20:17:67:7b:1f:b5:36:5f:cc:62:cc:ad:de: 4b:9c:de:18:13:15:c0:62:84:10:e6:26:37:26:9d: e4:9a:ec:17:43:dd:2f:f4:6c:89:b6:86:1e:df:27: 89:0f:f7:8d:c9:c1:33:d3:5a:51:8f:55:2e:dd:8e: df:58:ab:55:cd:96:1e:18:cb:60:bc:a1:49:a6:82: 1f:50:01:7f:80:26:72:b5:62:03:ba:46:fe:18:97: 3c:b4:10:ef:65:1b:bb:41:05:0b:2e:8c:0c:fd:a1: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:52:E7:A2:5C:68:97:3B:B0:CE:B9:F1:EF:99:93:3C:80:3C:31:DF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:397::/48 Signature Algorithm: sha256WithRSAEncryption 8a:cb:0f:27:d2:73:6d:66:46:89:5b:19:23:ea:71:26:54:3e: 84:96:cb:68:27:84:d1:af:83:1f:67:a6:97:ff:71:f3:76:26: 10:ce:82:b7:47:c3:cd:e4:f3:92:e3:8b:86:44:c9:a1:5e:19: ae:0f:c6:51:ab:d2:11:bc:24:e4:25:eb:82:dd:c7:1a:64:0b: 8b:a1:76:93:6f:28:85:f7:29:fb:e8:3b:7d:3c:40:e6:64:7a: b1:d0:85:1b:9a:ee:4c:81:ce:3f:2c:b0:eb:de:e4:64:03:bc: 4f:a1:94:7b:de:09:2a:2b:74:21:01:3f:22:db:c4:24:68:91: d8:89:65:c8:62:66:6e:5d:8e:d7:77:20:a1:50:85:8a:0e:cf: ab:7a:70:e1:fe:89:ba:11:7e:f4:0f:62:80:c0:7d:9b:1b:4a: 39:ba:4c:78:d7:ee:fa:85:21:19:1f:f2:4b:32:33:1b:61:60: ae:06:42:e6:f7:db:0e:11:6f:fc:76:a0:07:17:d9:d7:47:77: 1a:6f:79:c1:5d:2f:45:4a:e5:67:59:dc:38:a0:c6:c6:52:4b: 04:3b:a4:53:cd:b7:a0:1b:55:c6:f1:03:7b:b9:82:d6:33:6c: 28:f5:93:09:4f:e5:db:82:be:99:f1:53:ed:3d:4f:a1:e1:06: 59:a7:d5:55 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ8ygKQk81cMTntmEhOyVVRCjaoMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzMxMTgzMDUxWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjA4MjAwNDhkYzMyYzFiZjkzNDA2MTdhNTU2ZjY0MjYy YzI4MGIwODdlMmQxNGIxYWRhY2QxMzhjOThiNmZjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1DpuNLQ5OdcYD6LTNaGpxa64n6qE+0mV3E/C4KxvcLout rBk9ohhKn9k0sNlERG3PBMmFOlmLvpTUBaRZc3T3/iN5CeU5QtnCqxwjxbUocJFI 789LaF/LY+tWCOLx3JzT6ZFJNlQrg/aUmiHHa3QRjMVdL0Ova2QV5IYeNXhPIgbz rYjyzbbtedGTCm2+g70pKbAKGWOlIBdnex+1Nl/MYsyt3kuc3hgTFcBihBDmJjcm neSa7BdD3S/0bIm2hh7fJ4kP943JwTPTWlGPVS7djt9Yq1XNlh4Yy2C8oUmmgh9Q AX+AJnK1YgO6Rv4Ylzy0EO9lG7tBBQsujAz9oZKxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUilLnolxolzuwzrnx75mTPIA8Md8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2I2Yzk5Y2E1LTMzM2ItNDkwNS05NmJiLTgyNzJhYWVkZmMyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5cwDQYJKoZIhvcNAQELBQADggEBAIrLDyfSc21mRolbGSPqcSZU PoSWy2gnhNGvgx9nppf/cfN2JhDOgrdHw83k85Lji4ZEyaFeGa4PxlGr0hG8JOQl 64LdxxpkC4uhdpNvKIX3KfvoO308QOZkerHQhRua7kyBzj8ssOve5GQDvE+hlHve CSordCEBPyLbxCRokdiJZchiZm5djtd3IKFQhYoOz6t6cOH+iboRfvQPYoDAfZsb Sjm6THjX7vqFIRkf8ksyMxthYK4GQub32w4Rb/x2oAcX2ddHdxpvecFdL0VK5WdZ 3DigxsZSSwQ7pFPNt6AbVcbxA3u5gtYzbCj1kwlP5duCvpnxU+09T6HhBlmn1VU= -----END CERTIFICATE-----Generated at Sat Apr 5 12:25:14 2025 by rpki-client