$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07e4ba08-91d6-4f01-ad0c-e05554df5126.roa File: 07e4ba08-91d6-4f01-ad0c-e05554df5126.roa (raw, json) Hash identifier: XA7R1civT4uo1yHRwqdvUgkq/VFM144Dh/AMEnA/Cqk= Subject key identifier: 11:37:A4:9C:98:19:25:C1:D7:D4:32:75:1E:88:9F:36:A2:CF:9F:8A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7A4BF056010B72AA6B2834158866A3C70EABB54C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07e4ba08-91d6-4f01-ad0c-e05554df5126.roa Signing time: Tue 06 May 2025 00:30:08 +0000 ROA not before: Tue 06 May 2025 00:30:08 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4b:f0:56:01:0b:72:aa:6b:28:34:15:88:66:a3:c7:0e:ab:b5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 6 00:30:08 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=aa3ad6304ba050cb2f532513cf37d645b618c130d1d206a1986523c33ffd0b7d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e4:be:34:be:a0:f5:c3:2b:63:b5:b5:91:86: 57:e2:48:94:d9:84:ba:a4:96:f4:31:0a:00:ac:d8: 22:66:6a:c2:30:a0:97:2a:03:dd:9d:3e:c6:03:51: 59:76:e6:bf:0c:41:d3:2d:69:d4:62:d6:7d:37:aa: fc:7a:35:8e:56:41:dd:c0:c4:4d:10:be:b3:4c:f1: 9b:e1:31:54:33:8c:b0:1f:63:78:d9:c9:46:71:7d: 04:96:5e:47:81:ef:65:3b:70:af:fa:45:02:d9:24: ca:c1:a5:d7:68:db:49:77:86:4d:46:9f:26:aa:42: 6a:78:a5:99:07:03:b4:a4:7b:5e:52:a9:a7:d0:8b: e8:46:d5:53:db:98:0a:68:af:62:ce:f3:55:d5:12: 38:79:9a:e0:ae:c6:12:a6:58:61:73:5d:64:4b:0e: 08:72:6d:a8:b2:74:cc:3c:51:f5:62:0b:e2:07:e5: 25:0a:c3:45:6b:bb:6b:28:76:ba:a7:42:b4:38:a1: 19:b0:9a:91:61:a5:7a:9b:a2:9e:31:39:cb:e2:ed: 46:1b:54:ce:70:cc:db:24:e3:35:c8:ae:84:fe:03: 5f:d8:48:8d:23:2d:21:7c:cd:9a:f0:87:8a:47:3b: 12:bd:0c:df:80:20:6f:2a:3f:9f:1d:fb:76:af:da: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:37:A4:9C:98:19:25:C1:D7:D4:32:75:1E:88:9F:36:A2:CF:9F:8A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07e4ba08-91d6-4f01-ad0c-e05554df5126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c02::/48 Signature Algorithm: sha256WithRSAEncryption 89:34:f4:d2:03:87:98:ef:57:c4:58:56:f6:57:30:a8:60:dd: a7:17:ec:5d:96:41:d5:dc:dc:de:7a:0d:41:20:00:ab:0c:88: 93:71:40:62:75:10:59:d0:fa:41:b3:58:c8:62:c0:88:ab:e8: 94:bb:ac:4b:33:34:f6:e9:4c:fd:fc:ca:2b:8c:5f:6a:97:32: b4:25:f9:39:95:b4:a5:2c:4d:e7:95:d7:a5:8b:7a:6d:ab:ee: 31:c9:14:d2:7b:91:e3:9b:63:88:26:09:11:d6:36:fd:0c:0c: fe:ab:f6:03:23:f1:95:e3:a0:30:6c:50:f8:3c:1a:79:4f:48: f9:bb:bd:b9:37:52:0e:79:80:e8:95:56:3d:a1:7c:e0:3f:e6: 0d:f3:f0:32:f7:25:4d:59:16:15:a4:e1:d3:08:21:d3:42:75: e6:7c:f7:49:2b:3c:2c:e4:d0:61:79:e5:75:44:f3:b1:9b:1b: f0:83:12:81:5b:14:40:bd:8e:2c:95:13:91:5b:e4:68:1c:d9: 9a:6c:dc:55:99:c9:6c:8c:be:4e:b9:33:9e:39:50:f9:6f:a0: 1f:d6:92:00:13:12:02:db:fc:6b:02:02:a7:e6:46:ee:43:42: 33:01:6f:f5:67:dd:ff:fc:be:9f:aa:08:d2:01:36:91:2f:45: bb:20:7c:41 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUekvwVgELcqprKDQViGajxw6rtUwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTA2MDAzMDA4WhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTNhZDYzMDRiYTA1MGNiMmY1MzI1MTNjZjM3ZDY0NWI2 MThjMTMwZDFkMjA2YTE5ODY1MjNjMzNmZmQwYjdkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc5L40vqD1wytjtbWRhlfiSJTZhLqklvQxCgCs2CJmasIw oJcqA92dPsYDUVl25r8MQdMtadRi1n03qvx6NY5WQd3AxE0QvrNM8ZvhMVQzjLAf Y3jZyUZxfQSWXkeB72U7cK/6RQLZJMrBpddo20l3hk1GnyaqQmp4pZkHA7Ske15S qafQi+hG1VPbmApor2LO81XVEjh5muCuxhKmWGFzXWRLDghybaiydMw8UfViC+IH 5SUKw0Vru2sodrqnQrQ4oRmwmpFhpXqbop4xOcvi7UYbVM5wzNsk4zXIroT+A1/Y SI0jLSF8zZrwh4pHOxK9DN+AIG8qP58d+3av2mOdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUETeknJgZJcHX1DJ1HoifNqLPn4owHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA3ZTRiYTA4LTkxZDYtNGYwMS1hZDBjLWUwNTU1NGRmNTEyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAIwDQYJKoZIhvcNAQELBQADggEBAIk09NIDh5jvV8RYVvZXMKhg 3acX7F2WQdXc3N56DUEgAKsMiJNxQGJ1EFnQ+kGzWMhiwIir6JS7rEszNPbpTP38 yiuMX2qXMrQl+TmVtKUsTeeV16WLem2r7jHJFNJ7keObY4gmCRHWNv0MDP6r9gMj 8ZXjoDBsUPg8GnlPSPm7vbk3Ug55gOiVVj2hfOA/5g3z8DL3JU1ZFhWk4dMIIdNC deZ890krPCzk0GF55XVE87GbG/CDEoFbFEC9jiyVE5Fb5Ggc2Zps3FWZyWyMvk65 M545UPlvoB/WkgATEgLb/GsCAqfmRu5DQjMBb/Vn3f/8vp+qCNIBNpEvRbsgfEE= -----END CERTIFICATE-----Generated at Fri May 9 04:48:52 2025 by rpki-client