$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa File: bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa (raw, json) Hash identifier: SD7CMkEwlT8FcLsUCI/dC+drHYXpOepAu+yn4BParoo= Subject key identifier: 61:3F:84:BC:06:B8:FE:E5:9A:CF:98:BD:A4:DB:03:72:30:2B:2D:A6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6C3668D670B55071F0A04BCE68A20FB0DFA041BA Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa Signing time: Mon 31 Mar 2025 18:31:35 +0000 ROA not before: Mon 31 Mar 2025 18:31:35 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:36:68:d6:70:b5:50:71:f0:a0:4b:ce:68:a2:0f:b0:df:a0:41:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 31 18:31:35 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e9:10:1b:cb:fb:ee:cd:57:e5:ba:f4:1a:8b: 5d:2c:13:be:3b:40:3c:93:34:69:fa:2c:cf:17:3a: 38:cd:ba:de:c9:ac:d6:d1:3b:47:62:a4:9d:6a:b4: c4:0f:d0:1c:a1:3f:1f:9f:67:96:44:07:4d:7f:c9: f7:66:76:06:9f:c4:c5:e4:ef:4e:c0:49:71:41:b0: d9:1f:1d:c9:73:8a:df:90:04:67:53:d3:1e:ae:a2: 2e:e0:cc:05:2d:25:8c:37:a0:52:1b:65:9f:99:b8: 90:8c:18:fe:cd:24:ee:af:b8:6c:92:06:9b:79:ba: 1c:31:ab:c5:77:1a:48:5b:af:b0:6b:22:fa:d8:62: 47:80:b9:16:98:8a:fb:fd:86:3f:12:6d:16:bf:a9: 75:56:14:08:8b:73:50:79:40:2b:7a:71:49:63:b1: f6:6c:0d:f1:e3:5b:e3:76:d8:bf:fa:ab:a6:77:7a: ae:3d:9b:a3:3a:98:55:c0:ce:2b:d0:ac:dd:dc:3e: a0:38:b0:72:93:92:37:b2:f2:50:bb:29:1e:2c:a3: e0:cd:90:64:c3:61:60:1d:11:ee:46:4c:5d:66:d9: 48:70:f8:f6:5d:78:72:43:3e:a2:4d:9c:73:c3:3b: 36:da:48:65:ed:0a:89:ab:f0:77:7e:e6:0b:ac:75: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3F:84:BC:06:B8:FE:E5:9A:CF:98:BD:A4:DB:03:72:30:2B:2D:A6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3a7::/48 Signature Algorithm: sha256WithRSAEncryption 51:2c:64:78:1b:c5:6b:c2:f5:e5:d5:4b:ff:72:8c:e5:08:b2: 13:a5:16:b5:2c:f3:9a:64:85:25:26:12:93:d7:09:46:c6:c4: ee:88:d9:d9:71:f9:26:2f:61:bf:b5:34:98:ef:e1:cc:c4:74: 1a:f3:c9:39:46:b5:5a:c0:61:47:9f:80:6f:ce:28:94:d6:89: 41:e0:13:af:4d:b1:22:58:d6:24:cb:36:52:b2:0f:4f:8a:9a: cf:00:0d:bd:5a:3d:67:95:46:36:37:20:f5:74:e9:4d:b5:00: 97:af:5f:92:e9:62:c6:b3:1a:14:d5:ff:dc:bc:97:cc:c6:ae: 5b:ff:70:ff:20:60:27:fc:c5:e0:91:f1:58:fd:18:90:82:10: bf:e8:22:3d:87:14:b7:7c:85:e1:de:02:a6:3d:64:4a:51:ff: 62:aa:4a:f5:5f:c3:ac:67:aa:2a:bf:b2:9c:30:4c:39:06:83: 94:f4:04:a5:93:82:35:40:72:64:9f:64:e6:60:4e:85:38:14: 23:6c:8d:dc:06:8a:35:3e:fb:d8:92:c3:20:39:f7:e2:40:88: 8c:3d:3d:c4:93:f0:c9:bc:6f:61:1b:07:dd:cd:2f:0a:c7:9f: ce:cb:de:81:22:a0:7c:a8:45:1e:f1:2f:84:28:73:25:25:ed: 71:cb:a5:f2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbDZo1nC1UHHwoEvOaKIPsN+gQbowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzMxMTgzMTM1WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmExYmUyMjNhNDhjN2EyMTdlY2E2YjVmNTNhYTNjMWEw ZjNiZGQyOTM0YzBlZjRjMTI3ODIxZGU0OWNkMGUwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQ6RAby/vuzVfluvQai10sE747QDyTNGn6LM8XOjjNut7J rNbRO0dipJ1qtMQP0ByhPx+fZ5ZEB01/yfdmdgafxMXk707ASXFBsNkfHclzit+Q BGdT0x6uoi7gzAUtJYw3oFIbZZ+ZuJCMGP7NJO6vuGySBpt5uhwxq8V3Gkhbr7Br IvrYYkeAuRaYivv9hj8SbRa/qXVWFAiLc1B5QCt6cUljsfZsDfHjW+N22L/6q6Z3 eq49m6M6mFXAzivQrN3cPqA4sHKTkjey8lC7KR4so+DNkGTDYWAdEe5GTF1m2Uhw +PZdeHJDPqJNnHPDOzbaSGXtComr8Hd+5gusdR4/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYT+EvAa4/uWaz5i9pNsDcjArLaYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JlYmIxMTdhLTQ0ZGQtNGIzZi04N2YwLTI0ZmYzZWY2NTMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA6cwDQYJKoZIhvcNAQELBQADggEBAFEsZHgbxWvC9eXVS/9yjOUI shOlFrUs85pkhSUmEpPXCUbGxO6I2dlx+SYvYb+1NJjv4czEdBrzyTlGtVrAYUef gG/OKJTWiUHgE69NsSJY1iTLNlKyD0+Kms8ADb1aPWeVRjY3IPV06U21AJevX5Lp YsazGhTV/9y8l8zGrlv/cP8gYCf8xeCR8Vj9GJCCEL/oIj2HFLd8heHeAqY9ZEpR /2KqSvVfw6xnqiq/spwwTDkGg5T0BKWTgjVAcmSfZOZgToU4FCNsjdwGijU++9iS wyA59+JAiIw9PcST8Mm8b2EbB93NLwrHn87L3oEioHyoRR7xL4QocyUl7XHLpfI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:28 2025 by rpki-client