$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa File: 5ab304f6-e1e5-467a-88a2-103320530506.roa (raw, json) Hash identifier: bJ3JOp1gWHb1fGypNwHTmIN8/wBE3C13XkahWJPaUQg= Subject key identifier: CA:92:8A:55:F3:FD:DC:92:CA:75:9D:95:80:32:F7:40:47:A0:AB:E2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 15DE5C3D4B08C2BF5FE838680BCA0D4318E3F9A6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa Signing time: Fri 07 Mar 2025 15:01:08 +0000 ROA not before: Fri 07 Mar 2025 15:01:08 +0000 ROA not after: Fri 11 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:627::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:de:5c:3d:4b:08:c2:bf:5f:e8:38:68:0b:ca:0d:43:18:e3:f9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 7 15:01:08 2025 GMT Not After : Apr 11 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bd:1c:67:03:3e:f9:0b:63:74:77:be:95:c9: 59:d1:a4:33:38:ad:c7:17:42:d7:5c:d6:d6:94:85: 9b:f6:18:dc:f4:4b:d8:79:9b:1b:60:d1:fd:fc:1b: f6:27:b6:60:4f:ca:40:5a:a7:de:d0:ea:19:0a:ff: b6:6e:7c:af:71:bc:18:1c:db:8d:95:f6:60:2a:1b: 6e:1b:13:e6:5d:aa:95:78:05:a2:84:a7:f9:26:08: 5f:9b:6e:97:3a:fd:8f:78:e4:a2:eb:1a:ae:6d:4a: 33:7d:5e:cd:68:0b:54:6d:00:36:0f:0f:23:9d:1d: 7e:43:ad:bd:f2:06:c2:28:77:94:54:d1:12:ae:17: b9:f8:f7:70:9f:2a:d2:43:73:62:15:3b:3a:61:2c: 90:b1:ff:07:b9:71:be:08:49:41:c3:5a:21:e2:42: 78:19:d2:fc:bf:1b:54:67:e6:a3:1f:f3:8d:47:1a: 26:11:81:a3:43:fa:08:d6:84:4e:7b:56:d8:ae:7b: 95:c1:c3:d7:33:65:f2:cb:65:cc:1a:52:e3:db:ce: dc:85:a2:e4:f3:d1:05:98:22:67:e3:ec:e2:2d:aa: bf:a7:51:96:a1:db:22:c5:2a:94:3d:84:73:17:85: 85:57:e6:00:c2:90:cf:2c:e9:00:25:99:2e:79:8a: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:92:8A:55:F3:FD:DC:92:CA:75:9D:95:80:32:F7:40:47:A0:AB:E2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:627::/48 Signature Algorithm: sha256WithRSAEncryption 9f:c0:5a:be:03:14:1e:49:9c:21:9c:2d:3d:b1:46:29:b2:5d: 89:fc:fa:18:0f:ad:f1:74:10:35:75:7c:28:b1:64:76:84:ac: d9:42:06:22:d9:26:7f:5e:99:9b:b8:1a:12:b3:f8:83:c5:7d: 23:87:74:ba:b9:91:78:ea:95:1e:4a:f8:69:ea:65:c1:5d:eb: ca:bd:82:c4:33:f7:16:80:3c:ef:64:66:a6:e3:7b:e3:79:4a: 65:10:e8:8e:65:30:b2:c2:bb:2c:3d:55:10:d1:05:c3:e2:a6: 42:2f:0a:d3:f1:53:55:26:76:de:d1:65:42:df:3c:13:86:b3: de:eb:90:91:46:60:ec:74:71:8c:bb:18:78:58:f0:48:68:0c: f6:b4:c0:2d:1f:52:43:93:96:a6:07:1b:1e:79:69:ab:b2:cb: 42:78:8d:cb:6e:06:9e:bb:0e:4b:8f:1f:e9:89:c2:7b:64:a8: 14:ae:8b:d9:31:b9:4a:cd:29:88:ce:90:68:67:26:b4:65:94: ed:b5:5a:53:81:35:d7:ff:ee:cf:08:99:ed:1c:51:0a:6d:52: bb:c2:15:ac:7c:15:21:8a:71:5e:ac:6c:ed:09:a1:26:aa:65: 0c:ac:c1:c3:30:e2:c1:e6:67:e4:60:7e:a4:b5:19:6e:0f:8c: 4a:a5:2f:c7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFd5cPUsIwr9f6DhoC8oNQxjj+aYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzA3MTUwMTA4WhcNMjUwNDExMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTUzMjk0ZWVkZjhmYWIyY2IxNGI1OTgwN2EyNjgyM2Q5 ZjgwZjAzOTJkNDg3MDEyMGJjYmVjZjk3ZDRmYjc4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdvRxnAz75C2N0d76VyVnRpDM4rccXQtdc1taUhZv2GNz0 S9h5mxtg0f38G/YntmBPykBap97Q6hkK/7ZufK9xvBgc242V9mAqG24bE+ZdqpV4 BaKEp/kmCF+bbpc6/Y945KLrGq5tSjN9Xs1oC1RtADYPDyOdHX5Drb3yBsIod5RU 0RKuF7n493CfKtJDc2IVOzphLJCx/we5cb4ISUHDWiHiQngZ0vy/G1Rn5qMf841H GiYRgaND+gjWhE57Vtiue5XBw9czZfLLZcwaUuPbztyFouTz0QWYImfj7OItqr+n UZah2yLFKpQ9hHMXhYVX5gDCkM8s6QAlmS55iiE3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUypKKVfP93JLKdZ2VgDL3QEegq+IwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVhYjMwNGY2LWUxZTUtNDY3YS04OGEyLTEwMzMyMDUzMDUwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABicwDQYJKoZIhvcNAQELBQADggEBAJ/AWr4DFB5JnCGcLT2xRimy XYn8+hgPrfF0EDV1fCixZHaErNlCBiLZJn9emZu4GhKz+IPFfSOHdLq5kXjqlR5K +GnqZcFd68q9gsQz9xaAPO9kZqbje+N5SmUQ6I5lMLLCuyw9VRDRBcPipkIvCtPx U1Umdt7RZULfPBOGs97rkJFGYOx0cYy7GHhY8EhoDPa0wC0fUkOTlqYHGx55aauy y0J4jctuBp67DkuPH+mJwntkqBSui9kxuUrNKYjOkGhnJrRllO21WlOBNdf/7s8I me0cUQptUrvCFax8FSGKcV6sbO0JoSaqZQyswcMw4sHmZ+RgfqS1GW4PjEqlL8c= -----END CERTIFICATE-----Generated at Thu Mar 13 23:27:02 2025 by rpki-client