$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa File: 198b9983-37de-4318-8190-8930b94cb8e3.roa (raw, json) Hash identifier: bKekQlT//z8Sx+gJGUdhFl3rwudSkDkjKEZ4Iykv76Y= Subject key identifier: DE:60:03:C9:26:AB:7B:0D:92:4D:79:24:2F:28:FF:84:F1:55:9F:18 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3F31CD3A3C0DA8262E7B057299446BBC3E89E58E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa Signing time: Tue 06 May 2025 00:31:02 +0000 ROA not before: Tue 06 May 2025 00:31:02 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:31:cd:3a:3c:0d:a8:26:2e:7b:05:72:99:44:6b:bc:3e:89:e5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 6 00:31:02 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=e9c1d6652803acf5bfc2a8448a232a65d53279d1b84351ff4b5d5772ddfc1509, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:c9:c7:28:d3:62:47:52:74:90:78:0c:02: 7b:e1:83:10:0f:1a:5d:04:9a:34:a4:a9:bd:28:26: c0:b3:ba:cb:bb:69:84:51:67:61:74:d7:6b:8e:47: e8:e3:74:3c:4f:57:cd:71:55:07:fd:5b:21:f9:31: db:07:de:06:45:5b:9b:84:f7:b7:1a:ca:19:8a:89: af:87:7b:7a:db:17:13:b9:56:d9:60:95:ca:7b:72: 85:26:1d:68:4d:02:7f:59:98:57:c9:c2:db:4a:ba: e4:d5:1e:08:af:a8:0d:47:2c:1b:46:40:d3:99:46: c9:1f:63:8a:8b:43:d1:8d:3a:e9:6c:2e:28:b1:6b: ee:44:51:92:43:70:48:a7:c5:59:57:e6:f0:2f:54: b4:bd:b0:c8:ea:6c:1a:b9:50:98:42:6c:d1:71:50: 13:4b:2a:69:f1:8c:5e:42:7d:bc:9f:1f:c4:f2:83: 9a:6a:40:9d:aa:6c:cd:9e:9b:b0:9e:6e:ca:22:e4: 18:d8:b9:a2:c4:a8:66:d4:8f:c8:23:04:5c:67:c4: de:23:a1:3a:90:82:39:e3:cd:1f:7e:88:04:fa:26: 55:65:84:b4:f0:6a:c1:4f:c2:0c:d5:df:68:21:28: 81:cf:b2:8e:a3:3c:12:c7:d3:8d:4a:15:2d:8f:a7: 84:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:60:03:C9:26:AB:7B:0D:92:4D:79:24:2F:28:FF:84:F1:55:9F:18 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0d::/48 Signature Algorithm: sha256WithRSAEncryption 31:dc:24:56:f9:3e:2a:61:2a:0d:4c:6d:8c:80:14:eb:1c:cb: 48:a1:74:1f:88:15:55:04:91:c3:87:26:23:a0:91:7d:b8:14: f5:ba:46:4a:0f:7e:4e:bf:39:a2:41:d3:9b:c7:30:40:81:41: 2d:53:e1:a1:1a:18:5e:81:34:b3:ae:53:d5:d4:83:e1:fc:6d: 10:b4:b2:a0:82:b8:38:16:c5:e6:10:e9:3d:18:da:ce:f2:38: 37:68:e8:27:9e:e5:b2:6f:03:10:c8:99:8c:9e:f7:43:24:c7: 33:82:54:0d:14:b7:d3:a2:26:9a:53:6a:fb:fe:e7:dd:8c:21: 6e:f6:14:85:f4:9e:3a:c2:de:b4:90:ef:83:0a:90:df:f8:80: e9:af:f9:31:1c:c4:83:63:e2:07:72:6e:5c:8c:95:ae:5b:8c: 85:61:7c:6f:72:67:74:09:ac:7c:30:f0:5f:5d:c8:88:20:40: 37:8f:c3:aa:1b:39:1d:ac:ac:a1:ac:5c:35:3a:54:eb:b1:a0: 52:24:3a:54:a3:44:90:aa:83:df:0a:a9:5e:0f:65:6d:ed:30: 43:db:ca:18:36:9e:68:e8:ee:62:29:d5:68:16:23:d2:1b:7c: f4:46:47:71:8d:28:d1:cc:9d:d6:b1:51:af:3e:05:6d:2d:3e: af:9b:7d:4e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPzHNOjwNqCYuewVymURrvD6J5Y4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTA2MDAzMTAyWhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOWMxZDY2NTI4MDNhY2Y1YmZjMmE4NDQ4YTIzMmE2NWQ1 MzI3OWQxYjg0MzUxZmY0YjVkNTc3MmRkZmMxNTA5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsEcnHKNNiR1J0kHgMAnvhgxAPGl0EmjSkqb0oJsCzusu7 aYRRZ2F012uOR+jjdDxPV81xVQf9WyH5MdsH3gZFW5uE97cayhmKia+He3rbFxO5 Vtlglcp7coUmHWhNAn9ZmFfJwttKuuTVHgivqA1HLBtGQNOZRskfY4qLQ9GNOuls Liixa+5EUZJDcEinxVlX5vAvVLS9sMjqbBq5UJhCbNFxUBNLKmnxjF5CfbyfH8Ty g5pqQJ2qbM2em7Cebsoi5BjYuaLEqGbUj8gjBFxnxN4joTqQgjnjzR9+iAT6JlVl hLTwasFPwgzV32ghKIHPso6jPBLH041KFS2Pp4S5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3mADySarew2STXkkLyj/hPFVnxgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE5OGI5OTgzLTM3ZGUtNDMxOC04MTkwLTg5MzBiOTRjYjhlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA0wDQYJKoZIhvcNAQELBQADggEBADHcJFb5PiphKg1MbYyAFOsc y0ihdB+IFVUEkcOHJiOgkX24FPW6RkoPfk6/OaJB05vHMECBQS1T4aEaGF6BNLOu U9XUg+H8bRC0sqCCuDgWxeYQ6T0Y2s7yODdo6Cee5bJvAxDImYye90MkxzOCVA0U t9OiJppTavv+592MIW72FIX0njrC3rSQ74MKkN/4gOmv+TEcxINj4gdyblyMla5b jIVhfG9yZ3QJrHww8F9dyIggQDePw6obOR2srKGsXDU6VOuxoFIkOlSjRJCqg98K qV4PZW3tMEPbyhg2nmjo7mIp1WgWI9IbfPRGR3GNKNHMndaxUa8+BW0tPq+bfU4= -----END CERTIFICATE-----Generated at Fri May 9 06:16:16 2025 by rpki-client