$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa File: 57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa (raw, json) Hash identifier: VZY/Tj40YS2vsgfjfx/oONg+D7xJwWV4Skd/b8nuKh0= Subject key identifier: E2:65:3E:4A:F6:0C:66:9B:F5:57:5B:D1:CD:67:E9:C0:12:88:6D:A2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 44896B45229422D7ABF03B1D0E2C9DEBAA7AA5E9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa Signing time: Mon 17 Mar 2025 15:30:54 +0000 ROA not before: Mon 17 Mar 2025 15:30:54 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:89:6b:45:22:94:22:d7:ab:f0:3b:1d:0e:2c:9d:eb:aa:7a:a5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 17 15:30:54 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:b6:ff:f5:7f:b4:c2:b7:cc:65:37:06:1e: f0:ea:4d:50:07:a3:c4:a8:bb:44:df:22:ae:f5:69: f4:87:06:5f:a2:35:d0:7d:0c:2e:60:c1:f9:05:80: fd:c3:7a:4b:34:2b:5c:0d:f4:04:16:3b:97:81:26: 0f:46:f0:0d:6d:ca:43:e0:b9:7d:c4:d8:ac:85:e2: e3:6f:8f:25:6c:1c:ce:48:f0:34:dc:80:ef:ae:88: 4d:76:dd:c9:6c:15:10:04:8c:4b:fa:ad:5c:7d:f9: 48:81:a3:34:58:56:63:00:94:aa:d1:5b:42:27:61: d2:7f:ca:f8:11:44:ec:f8:2b:2d:ad:5c:75:b1:2c: 62:26:be:42:fe:c1:a6:48:b9:a1:5b:59:13:ec:81: 25:e5:36:d0:75:d2:16:67:0e:1b:b9:87:44:13:fb: dd:e5:17:37:45:84:b0:7b:cb:a0:7a:4a:5c:49:96: c4:1c:c9:02:64:14:73:e4:6a:4b:b8:09:60:8b:76: 3c:f1:34:bd:b8:1c:35:a3:bc:d7:78:ae:55:a4:c5: 99:fe:88:f5:68:27:a8:06:e7:ac:eb:d6:fd:27:4b: 9d:16:23:0c:99:e3:98:5c:5d:c3:e4:73:af:b5:2e: f4:3f:9f:80:04:51:c3:ca:93:e8:f1:b6:6b:ac:b3: f6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:65:3E:4A:F6:0C:66:9B:F5:57:5B:D1:CD:67:E9:C0:12:88:6D:A2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c09::/48 Signature Algorithm: sha256WithRSAEncryption 5d:ec:b8:de:e6:06:96:32:64:fe:2c:f6:b8:0a:35:22:3f:ee: 86:a6:87:0c:ac:18:27:96:ba:23:fa:ac:db:e8:f1:b9:46:9e: aa:60:d1:9e:b6:2a:75:7b:be:69:9c:e3:db:ca:f5:c1:f3:68: 99:ec:3a:04:f6:dc:35:52:22:d6:65:d6:6c:d7:43:d4:85:8a: 72:e1:9d:88:46:9d:ae:96:cf:f0:24:49:1c:b3:af:3c:8e:35: 92:d7:24:2c:97:79:f1:20:64:bd:76:8f:57:ae:33:4c:c2:87: 3d:0b:6e:bc:2b:78:68:59:27:6e:91:1e:14:6f:97:97:df:b9: b5:5f:74:72:80:4a:55:8c:2a:07:3c:d6:62:a1:8e:e0:33:ef: de:59:c2:9a:52:a9:5f:5a:93:ee:28:d2:48:b8:e2:08:66:5c: 05:73:6f:67:dc:95:de:e5:6c:e7:e4:c7:eb:7e:d9:7f:bc:50: f2:89:b9:a0:74:69:b2:b1:64:ad:ad:57:8f:29:94:01:a6:23: e9:2c:bf:fa:8b:7b:f8:e2:fc:9f:a9:5f:84:57:d7:7c:2e:f7: c5:ca:9f:d1:0d:c5:ca:f3:8b:1b:5b:01:16:a7:cb:55:ae:a1: b2:2d:2c:ce:66:28:a0:ae:d4:91:92:c4:35:d7:3c:b0:2c:cf: bf:de:5d:54 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURIlrRSKUIter8DsdDiyd66p6pekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzE3MTUzMDU0WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzU3NGYwZGZjOGM4NjQzN2YzYjNhZWFmYzEwN2VkNTBh MWFhNTAxNzdmOWM3NGY1YjNlM2FlM2Y1YWRhMDMyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe1rb/9X+0wrfMZTcGHvDqTVAHo8Sou0TfIq71afSHBl+i NdB9DC5gwfkFgP3Deks0K1wN9AQWO5eBJg9G8A1tykPguX3E2KyF4uNvjyVsHM5I 8DTcgO+uiE123clsFRAEjEv6rVx9+UiBozRYVmMAlKrRW0InYdJ/yvgRROz4Ky2t XHWxLGImvkL+waZIuaFbWRPsgSXlNtB10hZnDhu5h0QT+93lFzdFhLB7y6B6SlxJ lsQcyQJkFHPkaku4CWCLdjzxNL24HDWjvNd4rlWkxZn+iPVoJ6gG56zr1v0nS50W IwyZ45hcXcPkc6+1LvQ/n4AEUcPKk+jxtmuss/YlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4mU+SvYMZpv1V1vRzWfpwBKIbaIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU3ZTc2ZTM2LTFiMWMtNDdmZS04OWUxLTE3ZmE3YTM5YzBhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAkwDQYJKoZIhvcNAQELBQADggEBAF3suN7mBpYyZP4s9rgKNSI/ 7oamhwysGCeWuiP6rNvo8blGnqpg0Z62KnV7vmmc49vK9cHzaJnsOgT23DVSItZl 1mzXQ9SFinLhnYhGna6Wz/AkSRyzrzyONZLXJCyXefEgZL12j1euM0zChz0Lbrwr eGhZJ26RHhRvl5ffubVfdHKASlWMKgc81mKhjuAz795ZwppSqV9ak+4o0ki44ghm XAVzb2fcld7lbOfkx+t+2X+8UPKJuaB0abKxZK2tV48plAGmI+ksv/qLe/ji/J+p X4RX13wu98XKn9ENxcrzixtbARany1WuobItLM5mKKCu1JGSxDXXPLAsz7/eXVQ= -----END CERTIFICATE-----Generated at Fri Apr 4 23:26:56 2025 by rpki-client