$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ed3d80c5-fe07-46d3-90ed-6c6eaf8d34d3.roa File: ed3d80c5-fe07-46d3-90ed-6c6eaf8d34d3.roa (raw, json) Hash identifier: uJ7juEp9pAcbNt94ZsszWNSC/TqIsSMIT413rc+Z03A= Subject key identifier: 48:7B:49:E4:6D:22:7D:D2:6B:74:F2:24:90:BF:DA:86:88:07:99:8C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 95F3E2E718138EEECD1F70124A1CCD1DCC0772 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ed3d80c5-fe07-46d3-90ed-6c6eaf8d34d3.roa Signing time: Mon 31 Mar 2025 18:31:39 +0000 ROA not before: Mon 31 Mar 2025 18:31:39 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95:f3:e2:e7:18:13:8e:ee:cd:1f:70:12:4a:1c:cd:1d:cc:07:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 31 18:31:39 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:e0:ac:d8:20:74:03:a0:74:6f:e1:0f:d1: b4:2f:fc:ac:74:74:94:bb:ac:85:01:af:c0:9b:49: 2e:c3:c5:41:22:aa:fc:09:17:db:11:0a:6b:8d:f0: f4:1d:5e:47:cf:86:c1:80:ea:54:e0:84:48:00:20: 6b:6d:06:78:c7:d3:3c:a2:25:06:f2:4c:a8:54:27: f7:60:db:87:a3:70:0b:97:39:f0:e0:f5:4c:bb:96: da:78:da:eb:b8:d3:e3:0e:d8:dd:cb:ab:c3:af:a7: f8:66:2b:fa:91:c6:19:96:9f:20:ed:85:43:d9:89: ff:f7:40:62:f2:28:d6:ef:ef:4f:0e:52:7a:2d:a1: 8c:93:c5:14:5e:94:ba:ad:81:b1:01:d3:fb:76:87: 48:93:d2:25:e7:4d:ad:f3:7b:4a:4d:a3:4b:cb:01: 85:6c:47:de:6e:ab:90:2c:bc:5c:a9:c2:ac:8c:32: 49:9f:61:92:d3:e3:e8:e0:1f:76:e3:50:7e:79:e5: 78:a8:6f:e7:5f:cb:4f:37:87:65:3a:66:77:8f:21: e3:71:2b:44:93:2a:b9:f1:68:ed:cf:64:b1:c7:99: d1:ab:4e:cb:d0:0a:48:c5:08:e6:37:0a:40:6f:9d: f6:de:4d:9a:3d:67:3a:14:1e:ff:fc:3b:75:7f:fc: 0a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7B:49:E4:6D:22:7D:D2:6B:74:F2:24:90:BF:DA:86:88:07:99:8C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ed3d80c5-fe07-46d3-90ed-6c6eaf8d34d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:b00::/40 Signature Algorithm: sha256WithRSAEncryption a3:55:44:d7:c6:19:37:11:66:8f:9d:28:22:8e:34:3e:f0:70: a4:ed:d3:0d:15:e7:79:93:6b:a0:68:53:77:ff:1a:c6:d4:71: 11:58:df:28:9d:cc:9e:62:1c:39:34:55:2a:ad:83:78:56:80: 3d:eb:e0:74:3f:64:cf:14:2f:cd:26:9a:c7:73:1e:e3:8a:d1: 16:72:bb:83:39:bd:4c:91:c7:74:1b:bf:52:cb:2b:47:ce:91: 4c:c5:9f:32:a2:c5:2b:36:d0:96:ad:fc:d7:0e:c1:91:ca:d1: 26:15:53:04:e7:94:1c:d7:e6:84:d9:cb:a4:c4:82:76:44:20: a4:c2:e0:59:ed:a9:e9:f4:a3:5e:c6:f5:4a:e7:b2:06:62:c8: e6:6d:a5:85:7c:ad:9f:0f:2b:10:00:d3:da:dd:03:d9:90:2a: 5a:bd:a0:59:72:c7:72:66:d1:e5:5f:5f:e3:1f:22:9c:11:b2: 9b:b6:2a:d5:49:a5:6d:b4:41:b4:b7:cc:70:00:ee:5d:64:0f: 78:77:80:45:d3:f6:58:ef:11:13:32:c1:5b:77:c3:11:dc:a7: 4e:b5:79:76:49:eb:e2:f8:2a:d2:de:ad:49:6d:90:0b:d6:f4: 19:9e:27:ad:13:12:ae:6f:d9:e3:5e:68:b9:f2:97:db:74:84: 54:f7:ed:b5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUAJXz4ucYE47uzR9wEkoczR3MB3IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzMxMTgzMTM5WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTc4ZTAxMGFhYTY0Nzg5NTA5NzZhMjVjYzFhN2EyMWE2 N2M0MzA5MjZkYzFkZDBjN2M5OTU1NDBhNjZjODZlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiO+Cs2CB0A6B0b+EP0bQv/Kx0dJS7rIUBr8CbSS7DxUEi qvwJF9sRCmuN8PQdXkfPhsGA6lTghEgAIGttBnjH0zyiJQbyTKhUJ/dg24ejcAuX OfDg9Uy7ltp42uu40+MO2N3Lq8Ovp/hmK/qRxhmWnyDthUPZif/3QGLyKNbv708O UnotoYyTxRRelLqtgbEB0/t2h0iT0iXnTa3ze0pNo0vLAYVsR95uq5AsvFypwqyM MkmfYZLT4+jgH3bjUH555Xiob+dfy083h2U6ZnePIeNxK0STKrnxaO3PZLHHmdGr TsvQCkjFCOY3CkBvnfbeTZo9ZzoUHv/8O3V//Ar9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSHtJ5G0ifdJrdPIkkL/ahogHmYwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2VkM2Q4MGM1LWZlMDctNDZkMy05MGVkLTZjNmVhZjhkMzRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBZzACzANBgkqhkiG9w0BAQsFAAOCAQEAo1VE18YZNxFmj50oIo40PvBw pO3TDRXneZNroGhTd/8axtRxEVjfKJ3MnmIcOTRVKq2DeFaAPevgdD9kzxQvzSaa x3Me44rRFnK7gzm9TJHHdBu/UssrR86RTMWfMqLFKzbQlq381w7BkcrRJhVTBOeU HNfmhNnLpMSCdkQgpMLgWe2p6fSjXsb1SueyBmLI5m2lhXytnw8rEADT2t0D2ZAq Wr2gWXLHcmbR5V9f4x8inBGym7Yq1UmlbbRBtLfMcADuXWQPeHeARdP2WO8REzLB W3fDEdynTrV5dknr4vgq0t6tSW2QC9b0GZ4nrRMSrm/Z415oufKX23SEVPfttQ== -----END CERTIFICATE-----Generated at Sat Apr 5 07:26:14 2025 by rpki-client