$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/47ce10b2-0644-422a-a48d-a29cb30aeb63.roa File: 47ce10b2-0644-422a-a48d-a29cb30aeb63.roa (raw, json) Hash identifier: jHKcsvkyx3BSsK7JekuFinOdkzsJmSC9dwRsk0kha44= Subject key identifier: F9:A7:01:52:18:CF:14:10:53:C5:2F:B8:12:0E:48:DD:3D:88:F1:61 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 63BC63B4CE2502F4A55BE6C05097EFDA686045BF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/47ce10b2-0644-422a-a48d-a29cb30aeb63.roa Signing time: Mon 17 Mar 2025 15:30:49 +0000 ROA not before: Mon 17 Mar 2025 15:30:49 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bc:63:b4:ce:25:02:f4:a5:5b:e6:c0:50:97:ef:da:68:60:45:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 17 15:30:49 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:3c:77:ce:b1:2a:04:10:43:36:94:35:4f: b2:2c:9d:dd:70:bd:eb:8c:6f:af:86:cb:99:1e:06: 4d:3a:cb:01:04:85:4b:1b:a1:ba:be:36:11:34:5e: 35:65:5f:77:b9:ad:20:73:85:3e:58:19:e8:23:8b: f7:6d:41:cc:d6:0c:5b:e5:93:01:69:38:76:36:ea: eb:0d:d4:26:a8:a8:ec:a2:f8:dd:56:ef:16:44:39: 0b:d9:79:08:75:0c:af:fa:dd:18:a6:13:f1:41:ea: f4:dd:89:28:6c:bc:74:39:e6:da:17:53:14:bb:3f: 5c:cb:7f:24:2d:76:ef:a1:51:f8:44:43:81:34:ff: ab:22:1f:54:85:d7:f0:d7:a8:01:e3:a1:2d:7b:e2: 6b:c5:5e:23:21:04:ef:50:f7:db:be:4e:97:9a:d0: 6c:fa:fe:7b:a6:02:21:a6:01:08:dc:fb:a9:20:64: af:8e:bb:04:7f:45:6b:13:43:35:21:39:6f:50:d0: be:c3:b6:77:61:d5:aa:9a:c1:2e:d5:6d:5a:03:80: 33:20:5b:96:01:7e:59:e5:f9:8d:98:6f:8e:88:fb: 6b:f7:38:c9:7a:0f:fc:a2:d5:27:cd:40:f2:b1:c3: 54:d1:94:ec:18:39:19:8d:2c:7f:1b:da:85:e6:c5: f5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A7:01:52:18:CF:14:10:53:C5:2F:B8:12:0E:48:DD:3D:88:F1:61 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/47ce10b2-0644-422a-a48d-a29cb30aeb63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c07::/48 Signature Algorithm: sha256WithRSAEncryption 4a:70:cc:e0:98:e4:eb:f8:d8:83:1a:40:70:80:0a:6d:d0:48: b8:e1:77:f6:6c:be:45:c7:ed:62:a8:f0:fc:3b:f6:89:1b:00: 3f:cc:08:19:bb:20:2e:0f:d1:11:17:5c:22:02:36:d7:73:27: 1b:95:10:9d:96:38:98:93:c3:f0:05:66:76:5e:d5:d7:31:d6: 8d:d0:90:cb:be:ca:be:43:e2:06:df:2d:eb:4e:5c:45:4b:8e: 87:56:46:65:0e:d3:9c:58:3d:fd:d9:93:8c:0b:34:9f:34:0c: 75:c1:ed:a8:ac:9e:9c:08:b4:18:85:7c:b1:a3:6f:09:2c:25: 25:50:95:0d:bc:a7:86:bd:03:f2:9f:d7:66:7b:7b:47:aa:58: 9e:5c:42:3d:9a:8c:91:20:24:87:95:41:7b:1c:99:6e:e5:9b: 15:e2:b8:6c:26:4d:f1:b6:30:63:1b:2c:2e:7e:6a:51:b0:70: 50:25:dc:f5:1d:65:2a:ef:d0:67:08:77:db:54:b5:9e:02:15: 27:4b:18:ba:28:2d:bf:c0:51:2d:f9:c5:a7:86:fd:9e:f4:43: 74:51:f1:6e:22:72:54:15:54:04:16:1d:6e:b1:70:d1:05:b1: 55:7c:cf:ff:99:4c:4c:e6:96:48:d5:f3:09:0c:0a:03:2e:0c: 3c:b0:7e:57 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY7xjtM4lAvSlW+bAUJfv2mhgRb8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzE3MTUzMDQ5WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YmZkNjY5MmU0NmRiNTM3OTc2OGRhZjg5MTNjNjk4Zjdk MDM3MmIzZTdjNGZiYjRjODBjNDA3MGQyMmE3MGVkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNWzx3zrEqBBBDNpQ1T7Isnd1wveuMb6+Gy5keBk06ywEE hUsbobq+NhE0XjVlX3e5rSBzhT5YGegji/dtQczWDFvlkwFpOHY26usN1CaoqOyi +N1W7xZEOQvZeQh1DK/63RimE/FB6vTdiShsvHQ55toXUxS7P1zLfyQtdu+hUfhE Q4E0/6siH1SF1/DXqAHjoS174mvFXiMhBO9Q99u+Tpea0Gz6/numAiGmAQjc+6kg ZK+OuwR/RWsTQzUhOW9Q0L7Dtndh1aqawS7VbVoDgDMgW5YBflnl+Y2Yb46I+2v3 OMl6D/yi1SfNQPKxw1TRlOwYORmNLH8b2oXmxfXtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+acBUhjPFBBTxS+4Eg5I3T2I8WEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQ3Y2UxMGIyLTA2NDQtNDIyYS1hNDhkLWEyOWNiMzBhZWI2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAcwDQYJKoZIhvcNAQELBQADggEBAEpwzOCY5Ov42IMaQHCACm3Q SLjhd/ZsvkXH7WKo8Pw79okbAD/MCBm7IC4P0REXXCICNtdzJxuVEJ2WOJiTw/AF ZnZe1dcx1o3QkMu+yr5D4gbfLetOXEVLjodWRmUO05xYPf3Zk4wLNJ80DHXB7ais npwItBiFfLGjbwksJSVQlQ28p4a9A/Kf12Z7e0eqWJ5cQj2ajJEgJIeVQXscmW7l mxXiuGwmTfG2MGMbLC5+alGwcFAl3PUdZSrv0GcId9tUtZ4CFSdLGLooLb/AUS35 xaeG/Z70Q3RR8W4iclQVVAQWHW6xcNEFsVV8z/+ZTEzmlkjV8wkMCgMuDDywflc= -----END CERTIFICATE-----Generated at Wed Apr 9 01:07:48 2025 by rpki-client