$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/66d2b0d8-08a3-49e3-88b5-e872c3bacc54.roa File: 66d2b0d8-08a3-49e3-88b5-e872c3bacc54.roa (raw, json) Hash identifier: nLYloutKCwgM+dhWQe/0cxvdrE2qk7gEHgC6tQPak5E= Subject key identifier: B5:DA:82:E2:5D:91:2D:B6:55:31:68:92:7E:94:0E:A2:CC:57:29:FB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 227D4C433FAB8D737C8A837168E1C96C749BEE31 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/66d2b0d8-08a3-49e3-88b5-e872c3bacc54.roa Signing time: Mon 17 Mar 2025 15:30:17 +0000 ROA not before: Mon 17 Mar 2025 15:30:17 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7d:4c:43:3f:ab:8d:73:7c:8a:83:71:68:e1:c9:6c:74:9b:ee:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 17 15:30:17 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a3:37:14:e6:34:1a:d9:76:70:ec:da:08:ef: 4c:f4:25:ba:c9:50:ca:1c:27:11:c0:20:dc:94:9f: 09:54:ec:3f:74:c9:db:59:a0:b7:1e:86:6b:cc:8e: 37:99:e9:9d:cf:4c:8c:34:9b:83:66:18:cd:f5:0c: 7b:ef:9e:67:94:95:a0:bb:35:b2:d8:40:80:84:e2: 24:c1:6d:a8:e5:6e:b2:b0:1a:4c:7c:ef:35:36:7d: a5:f9:37:c6:ed:b5:ee:68:3a:1d:4a:da:94:d8:b9: db:0b:43:e8:a1:cc:0e:32:1a:12:96:e7:a1:7a:e4: 4b:5d:ec:5d:59:23:df:e1:53:2a:5d:1a:6f:e9:64: 4a:f1:be:0f:22:04:69:c0:4c:2f:b0:a6:4a:25:79: 23:7e:d9:a9:5c:81:47:8b:3f:55:b3:96:41:d3:07: de:fe:52:65:a0:4e:c1:ae:9b:68:e0:85:20:12:e7: fe:d6:37:bb:43:7e:e5:e8:e6:cb:a3:ca:4e:27:2d: 34:3f:15:d1:f0:0f:b7:ca:ad:80:26:5a:4c:07:e8: ca:5f:d5:83:d2:fc:37:e1:14:1c:a6:60:15:e6:86: b3:17:f4:4e:f0:da:2e:e0:ea:39:be:88:8c:12:26: aa:1b:b0:fe:70:24:37:6f:be:e1:d0:da:e2:20:cc: 15:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DA:82:E2:5D:91:2D:B6:55:31:68:92:7E:94:0E:A2:CC:57:29:FB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/66d2b0d8-08a3-49e3-88b5-e872c3bacc54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c19::/48 Signature Algorithm: sha256WithRSAEncryption 3b:37:de:e3:55:f0:89:73:5c:16:e4:93:f2:f9:26:e7:fe:7c: 9e:db:64:83:d8:4c:74:c6:a1:f1:68:50:86:7c:b3:a6:8b:fd: 21:ec:a8:83:5e:0b:ef:20:c7:70:39:5a:84:9a:b0:16:58:55: 84:32:0e:bd:ef:70:bf:d1:66:e6:4d:88:73:ff:62:60:b8:67: c5:b1:be:7f:09:83:49:fe:31:d1:eb:c7:7a:ed:d5:6f:93:22: 14:8c:ee:c1:b2:21:86:15:11:55:b5:05:ce:21:03:ac:1e:c3: 0a:22:1a:ad:f0:ca:9e:7d:06:d2:5c:92:b5:62:e9:94:13:44: f2:d7:b6:1f:63:c5:2d:3f:10:a2:5e:64:1f:9c:3c:5f:df:db: 25:52:03:dc:c8:a8:e8:8c:cd:26:8e:e1:4a:7d:76:10:2f:30: 4f:eb:66:0c:62:e6:27:4f:ff:5f:be:cb:46:ae:35:be:ce:e4: e8:10:c9:bb:a4:76:7d:72:5e:2e:9c:01:e5:5f:c0:97:e0:0f: 22:f8:5e:4b:94:f4:81:46:38:98:0d:d5:5f:12:7e:04:61:d2: eb:c3:a5:4c:32:89:10:c9:91:f8:3f:8c:e8:ee:c3:e4:1c:21: a7:18:5b:a2:24:6e:0d:fa:42:06:ef:a8:35:92:cb:3d:a9:0c: 77:fd:d1:b9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIn1MQz+rjXN8ioNxaOHJbHSb7jEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzE3MTUzMDE3WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2I3NDI2MGVkMGRhMTg2ZTY0Y2FjNjVlNjk4ODEyNzNh YTY5NDYwMDU5NjJlYjJmZmU2YWUxZGRhZDIwNGNjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaozcU5jQa2XZw7NoI70z0JbrJUMocJxHAINyUnwlU7D90 ydtZoLcehmvMjjeZ6Z3PTIw0m4NmGM31DHvvnmeUlaC7NbLYQICE4iTBbajlbrKw Gkx87zU2faX5N8btte5oOh1K2pTYudsLQ+ihzA4yGhKW56F65Etd7F1ZI9/hUypd Gm/pZErxvg8iBGnATC+wpkoleSN+2alcgUeLP1WzlkHTB97+UmWgTsGum2jghSAS 5/7WN7tDfuXo5sujyk4nLTQ/FdHwD7fKrYAmWkwH6Mpf1YPS/DfhFBymYBXmhrMX 9E7w2i7g6jm+iIwSJqobsP5wJDdvvuHQ2uIgzBVhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtdqC4l2RLbZVMWiSfpQOosxXKfswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzY2ZDJiMGQ4LTA4YTMtNDllMy04OGI1LWU4NzJjM2JhY2M1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBkwDQYJKoZIhvcNAQELBQADggEBADs33uNV8IlzXBbkk/L5Juf+ fJ7bZIPYTHTGofFoUIZ8s6aL/SHsqINeC+8gx3A5WoSasBZYVYQyDr3vcL/RZuZN iHP/YmC4Z8Wxvn8Jg0n+MdHrx3rt1W+TIhSM7sGyIYYVEVW1Bc4hA6wewwoiGq3w yp59BtJckrVi6ZQTRPLXth9jxS0/EKJeZB+cPF/f2yVSA9zIqOiMzSaO4Up9dhAv ME/rZgxi5idP/1++y0auNb7O5OgQybukdn1yXi6cAeVfwJfgDyL4XkuU9IFGOJgN 1V8SfgRh0uvDpUwyiRDJkfg/jOjuw+QcIacYW6Ikbg36QgbvqDWSyz2pDHf90bk= -----END CERTIFICATE-----Generated at Fri Apr 4 23:28:05 2025 by rpki-client