$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa File: bc9bb346-4bd0-43e3-9369-a842e8d67346.roa (raw, json) Hash identifier: hPtZ47ouPZEPQ9zcqZrbXu2iCiy1KT0sP0/bHx5UzOs= Subject key identifier: 60:5E:83:FE:84:C2:48:4A:FB:85:DB:97:12:56:55:29:5A:56:C2:F0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 510D5E123772DF7CDF66D7DB181405CCBDD9C7D9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa Signing time: Tue 01 Apr 2025 00:51:15 +0000 ROA not before: Tue 01 Apr 2025 00:51:15 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:610::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:0d:5e:12:37:72:df:7c:df:66:d7:db:18:14:05:cc:bd:d9:c7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:51:15 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:aa:94:db:fd:72:bf:50:ab:b7:55:6b:d0: 52:f7:38:3e:de:ef:82:e7:d2:a9:38:37:a1:11:f2: 25:44:55:93:16:36:63:c5:a4:3c:06:29:f1:9a:85: 67:6e:f3:a6:3b:69:c9:53:f8:13:3f:92:b4:2d:63: b5:05:38:c1:0b:2a:77:4f:fa:5b:6f:15:de:30:87: 6d:d0:6a:4c:b9:62:97:07:b2:3d:ca:ab:1e:25:94: e0:70:81:93:4b:8c:53:74:e4:73:ff:c9:4f:fc:e4: 64:16:7b:c7:c8:18:37:a9:f4:d4:bc:23:25:92:ac: ab:44:8d:9e:60:9f:98:26:71:9c:fe:eb:ef:25:48: c5:28:f0:71:3e:bd:cc:de:95:b5:28:f7:16:f3:89: 93:fd:7e:09:8c:22:bb:c0:35:19:d3:e2:2c:97:a0: 23:28:43:93:40:73:f3:1e:73:c2:f6:97:bd:87:df: 3d:18:66:16:92:07:6a:ed:2f:c6:2c:db:33:1f:49: 17:3b:13:77:fb:2c:87:f6:5f:0b:a3:22:ec:eb:3e: 0d:e7:47:ac:77:43:99:9c:52:24:b4:0d:60:1e:c9: 8e:29:71:f6:45:2a:b5:fe:18:6c:10:0d:9c:54:63: e5:8c:c8:d3:0e:c1:ca:0a:a8:87:32:70:99:b9:9a: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5E:83:FE:84:C2:48:4A:FB:85:DB:97:12:56:55:29:5A:56:C2:F0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:610::/48 Signature Algorithm: sha256WithRSAEncryption 49:ef:83:e7:e7:f4:51:04:88:0a:c8:9e:af:02:25:eb:ab:5f: 54:24:00:49:a0:15:68:23:fe:6b:22:fa:bb:7c:1a:dc:d0:c5: 7b:df:6c:54:f5:c5:42:24:58:39:5a:fd:62:a7:79:85:05:6f: 69:63:ba:65:0c:8f:22:0f:bd:20:f4:d6:6a:97:9a:89:9b:f6: 6d:76:90:3a:de:ae:2c:0f:b5:ad:46:26:06:e0:fc:1c:34:81: 6a:8f:0f:ac:00:40:82:67:9f:b5:c5:ed:d0:34:bf:e4:f5:57: 87:da:17:b2:a6:3a:61:ec:53:fd:b5:2b:9a:37:c8:8b:37:ab: 5e:c7:dd:56:0b:17:36:84:a3:b7:3e:09:83:58:5a:1b:a3:c8: 74:47:de:09:9a:f1:1d:31:b9:ee:76:d5:15:8b:9f:0b:2a:ad: f7:b0:12:5e:e2:d4:6b:48:4e:0c:9f:34:c9:2e:6b:b6:b0:4d: 0d:04:88:01:e5:b8:4f:e9:92:25:c2:d0:31:39:af:e0:6c:dc: 86:cc:db:51:f5:ad:44:db:63:c6:e1:cf:f6:01:ac:c9:1c:05: ff:93:a5:57:a0:61:a0:cf:66:06:63:5f:c8:42:f0:6e:f2:cb: 76:26:b0:db:60:9d:04:fe:0e:88:a5:ea:3e:d7:78:c4:d7:79: c7:d5:f9:f0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUQ1eEjdy33zfZtfbGBQFzL3Zx9kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA1MTE1WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzA5MzJlNTU5NWZhMTQ3ZDI0NGY4MGU1ZmI2NjA3M2U2 NDc1ZWNlMWMzZTllN2I0YjJhMjM5MWI2MjgyNzk4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkYqqU2/1yv1Crt1Vr0FL3OD7e74Ln0qk4N6ER8iVEVZMW NmPFpDwGKfGahWdu86Y7aclT+BM/krQtY7UFOMELKndP+ltvFd4wh23Qaky5YpcH sj3Kqx4llOBwgZNLjFN05HP/yU/85GQWe8fIGDep9NS8IyWSrKtEjZ5gn5gmcZz+ 6+8lSMUo8HE+vczelbUo9xbziZP9fgmMIrvANRnT4iyXoCMoQ5NAc/Mec8L2l72H 3z0YZhaSB2rtL8Ys2zMfSRc7E3f7LIf2XwujIuzrPg3nR6x3Q5mcUiS0DWAeyY4p cfZFKrX+GGwQDZxUY+WMyNMOwcoKqIcycJm5mn4zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYF6D/oTCSEr7hduXElZVKVpWwvAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JjOWJiMzQ2LTRiZDAtNDNlMy05MzY5LWE4NDJlOGQ2NzM0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhAwDQYJKoZIhvcNAQELBQADggEBAEnvg+fn9FEEiArInq8CJeur X1QkAEmgFWgj/msi+rt8GtzQxXvfbFT1xUIkWDla/WKneYUFb2ljumUMjyIPvSD0 1mqXmomb9m12kDreriwPta1GJgbg/Bw0gWqPD6wAQIJnn7XF7dA0v+T1V4faF7Km OmHsU/21K5o3yIs3q17H3VYLFzaEo7c+CYNYWhujyHRH3gma8R0xue521RWLnwsq rfewEl7i1GtITgyfNMkua7awTQ0EiAHluE/pkiXC0DE5r+Bs3IbM21H1rUTbY8bh z/YBrMkcBf+TpVegYaDPZgZjX8hC8G7yy3YmsNtgnQT+Doil6j7XeMTXecfV+fA= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:08 2025 by rpki-client