$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e449fb2-dbbe-4faa-b83a-72c5be4f2790.roa File: 0e449fb2-dbbe-4faa-b83a-72c5be4f2790.roa (raw, json) Hash identifier: lEhh7sZR9aRZ60dOW2ebiWv4nWMYEPrcfTw02FfIH+A= Subject key identifier: F9:7F:FA:C6:9C:DC:B8:8B:98:2C:70:D9:10:62:C9:42:70:4C:B0:6A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1008FB1A409B83A3A99311C1C67E436BF023D260 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e449fb2-dbbe-4faa-b83a-72c5be4f2790.roa Signing time: Tue 01 Apr 2025 00:50:44 +0000 ROA not before: Tue 01 Apr 2025 00:50:44 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:310::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:08:fb:1a:40:9b:83:a3:a9:93:11:c1:c6:7e:43:6b:f0:23:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:50:44 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:17:fd:72:0f:ae:35:fc:53:b0:f2:ed:6d: 8b:b4:eb:dc:aa:9f:cf:eb:61:6f:b8:2a:d1:34:17: b5:5d:01:69:ee:87:be:c5:be:3e:dd:b5:5f:cd:e5: f9:4a:40:9a:77:27:61:ab:03:fe:ae:0d:ab:40:ba: 4b:e9:44:3f:b2:80:2f:4a:61:49:d9:eb:40:43:b5: 45:d9:20:a1:4e:23:a1:ef:57:8e:90:a7:d4:e3:d2: 52:ed:a7:6e:ed:ff:51:26:ef:2c:5b:4c:0f:68:d3: 8f:b5:c1:e3:28:ff:dd:12:15:56:6e:44:8c:0b:3b: da:fc:cb:c4:e3:08:d3:3c:09:22:de:a9:c6:77:d2: 65:3d:e8:50:b8:df:7e:d8:6a:ca:64:9f:32:05:e7: ed:ca:d2:ff:5f:a9:73:46:42:12:64:49:37:9c:d9: 0b:bc:95:97:1e:2a:5b:b3:f3:4c:8f:16:9e:05:20: de:b1:da:f6:b5:de:9c:e7:ec:e3:48:13:0f:58:24: ef:e0:c8:f8:ec:63:7e:2e:99:04:ce:9d:ea:64:37: da:09:21:46:67:e2:fc:47:0b:e2:50:d8:25:9b:50: 3c:22:5a:d9:2b:15:df:47:e1:39:9f:03:d4:7d:03: 0f:bf:a4:28:61:d3:be:cb:ac:c6:09:18:34:94:76: df:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7F:FA:C6:9C:DC:B8:8B:98:2C:70:D9:10:62:C9:42:70:4C:B0:6A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e449fb2-dbbe-4faa-b83a-72c5be4f2790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:310::/48 Signature Algorithm: sha256WithRSAEncryption 77:52:f7:71:7f:d4:ad:95:6e:d5:0b:c5:12:80:26:a9:a8:94: 4b:4c:35:b9:05:c4:ae:94:cf:cd:16:a6:0d:2f:a8:7b:ae:80: cb:40:89:ea:61:b6:2d:39:5f:02:fa:2b:96:0e:d7:e6:63:db: 20:31:42:a0:5a:64:bc:d2:e5:48:58:60:c3:37:0f:bd:68:0d: 50:2a:5c:aa:29:f5:a3:af:65:f0:a9:60:21:d0:ab:c6:2c:90: db:97:d4:ee:1b:66:af:b7:48:a9:e6:68:b2:da:28:70:51:3c: 1f:7d:51:97:c8:e9:ca:e7:b9:fa:24:37:6c:ac:4b:84:72:ee: 6f:16:52:9c:12:58:80:39:4e:0a:65:28:88:78:c5:3a:b3:6b: 2c:64:07:90:ba:16:63:98:79:e1:37:09:c0:49:20:fd:52:86: 85:94:fc:10:94:18:a6:ad:78:0d:9d:03:9c:af:36:ef:be:03: 25:91:c8:8d:0a:b5:e9:b9:a4:e1:56:1f:9d:ad:36:0f:5d:2d: ff:0c:88:46:7d:e6:a6:c4:3d:d7:08:9f:0e:14:79:93:8a:25: 89:b9:91:77:a9:ff:b6:a5:0d:83:c6:57:2f:ca:b0:0e:3e:05: 0c:13:aa:17:a8:02:fa:3a:ed:62:c9:7d:f9:99:6b:86:52:55: 94:cd:b2:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEAj7GkCbg6OpkxHBxn5Da/Aj0mAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA1MDQ0WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YmFhNGQwYmE0OTRiMmMxZjM3ZDg4ZDk4OTc3Y2FhNzhh ZTIxNWRjNjIzYTQ2NmZiMzY2NDY4NGM5ODI4MWE5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCseRf9cg+uNfxTsPLtbYu069yqn8/rYW+4KtE0F7VdAWnu h77Fvj7dtV/N5flKQJp3J2GrA/6uDatAukvpRD+ygC9KYUnZ60BDtUXZIKFOI6Hv V46Qp9Tj0lLtp27t/1Em7yxbTA9o04+1weMo/90SFVZuRIwLO9r8y8TjCNM8CSLe qcZ30mU96FC4337YaspknzIF5+3K0v9fqXNGQhJkSTec2Qu8lZceKluz80yPFp4F IN6x2va13pzn7ONIEw9YJO/gyPjsY34umQTOnepkN9oJIUZn4vxHC+JQ2CWbUDwi WtkrFd9H4TmfA9R9Aw+/pChh077LrMYJGDSUdt+/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+X/6xpzcuIuYLHDZEGLJQnBMsGowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzBlNDQ5ZmIyLWRiYmUtNGZhYS1iODNhLTcyYzViZTRmMjc5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAxAwDQYJKoZIhvcNAQELBQADggEBAHdS93F/1K2VbtULxRKAJqmo lEtMNbkFxK6Uz80Wpg0vqHuugMtAiephti05XwL6K5YO1+Zj2yAxQqBaZLzS5UhY YMM3D71oDVAqXKop9aOvZfCpYCHQq8YskNuX1O4bZq+3SKnmaLLaKHBRPB99UZfI 6crnufokN2ysS4Ry7m8WUpwSWIA5TgplKIh4xTqzayxkB5C6FmOYeeE3CcBJIP1S hoWU/BCUGKateA2dA5yvNu++AyWRyI0Ktem5pOFWH52tNg9dLf8MiEZ95qbEPdcI nw4UeZOKJYm5kXep/7alDYPGVy/KsA4+BQwTqheoAvo67WLJffmZa4ZSVZTNspw= -----END CERTIFICATE-----Generated at Fri Apr 4 23:24:29 2025 by rpki-client