$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9b93eae4-d00c-47ae-8fdb-bc1f1cd1d0c6.roa File: 9b93eae4-d00c-47ae-8fdb-bc1f1cd1d0c6.roa (raw, json) Hash identifier: 5AmEsWFASAW+rxC9eR0qIqB5lT9qC1u+u5/RVjbXE64= Subject key identifier: 37:2A:BA:4B:A9:A2:B9:62:FF:D3:32:51:1A:51:BE:8E:F1:F8:32:CE Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1C35D5DF9E0F98A875BBA6902868B22FD60F374E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9b93eae4-d00c-47ae-8fdb-bc1f1cd1d0c6.roa Signing time: Tue 01 Apr 2025 15:00:22 +0000 ROA not before: Tue 01 Apr 2025 15:00:22 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:639::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:35:d5:df:9e:0f:98:a8:75:bb:a6:90:28:68:b2:2f:d6:0f:37:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 15:00:22 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:7d:75:dd:b8:95:df:7e:35:b5:4b:0f:24: f7:06:24:36:67:5c:8c:3a:ff:b2:03:e5:93:34:94: 89:b9:61:67:26:d3:1f:aa:49:17:be:e0:70:f3:96: bd:30:13:ec:c6:7a:ee:b4:e9:83:7f:fd:9d:75:40: 6e:5c:03:3e:2a:06:96:15:21:27:5d:d4:e6:5c:ca: 5a:7f:47:36:4b:0b:56:b1:f2:13:70:6d:ef:f5:18: 7d:17:bc:af:b9:e2:7d:bc:5f:97:5a:ea:37:85:8a: b9:b3:40:b7:a5:fb:e8:dc:34:f5:1d:3e:29:aa:8e: f5:74:a6:c1:c7:17:99:e0:45:ef:a6:76:4b:44:66: 9a:0b:67:ca:21:c9:ef:2d:fe:56:81:65:ea:58:94: ef:b5:23:c6:87:e3:aa:22:1d:58:3c:40:4a:20:f7: e2:6f:d9:04:16:b2:19:21:11:9e:b9:7b:c3:97:a0: 86:b3:95:04:a5:c1:1b:10:09:3c:a9:3a:f1:59:8c: 5e:15:93:4e:5c:55:87:fa:1e:94:55:81:6f:25:b1: 40:69:b1:e6:23:06:79:07:dc:25:30:e2:e9:1b:22: 06:e2:27:51:85:81:3c:77:48:80:f0:8f:93:3e:ca: eb:ad:c8:c7:a4:a3:50:d9:cf:38:1a:e5:c5:4e:d7: 20:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2A:BA:4B:A9:A2:B9:62:FF:D3:32:51:1A:51:BE:8E:F1:F8:32:CE X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9b93eae4-d00c-47ae-8fdb-bc1f1cd1d0c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:639::/48 Signature Algorithm: sha256WithRSAEncryption 52:da:eb:e4:d9:a7:3d:5a:96:ae:06:a1:39:56:99:a4:47:41: a8:3a:5a:e4:25:de:82:7e:a7:b9:4d:8c:66:86:f0:22:3f:0e: c9:60:7a:87:e0:ef:4d:f1:7d:86:51:aa:15:f7:d6:57:e7:2b: 1a:4b:8c:19:48:72:03:a3:e9:ab:8d:a4:c3:a3:e9:9f:35:f1: b3:c0:a8:24:d9:1b:e9:9c:a4:cd:91:c7:e4:db:fe:24:10:29: e1:fc:77:1f:5c:f0:b3:66:e5:2f:29:ac:ed:99:f6:91:1a:36: 03:fd:95:eb:a9:f5:81:b2:e3:16:1c:b6:39:f1:b9:8e:4c:c3: d3:26:d3:b1:c1:9f:c1:bd:88:96:e8:ce:d6:03:15:24:1c:26: f3:74:9e:a8:6e:37:90:ed:ff:d6:82:f5:eb:32:0f:ad:af:5f: 55:28:e5:db:6b:dd:2a:33:42:45:12:cd:40:e8:c7:ae:6f:8f: 65:8a:f2:b0:f5:3c:ae:32:b1:35:2a:68:14:e9:b2:1d:b2:d2: bb:44:ac:76:9a:38:cd:36:1f:74:8a:e7:91:e9:3b:19:9a:55: 2d:9c:82:dd:ff:c9:dc:17:7f:d5:cd:ee:2d:00:b4:2b:72:0e: 7c:39:73:7c:cb:0b:a9:ca:fc:81:ea:61:ce:26:3d:61:2a:98: 33:1e:18:e5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHDXV354PmKh1u6aQKGiyL9YPN04wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMTUwMDIyWhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzNjZjU4NjYwYjlkMjY1MjU2YWQwZWIxNGQzZWIzN2Vj ODc3NWYwYmM5ZmY4NmZkMDk3YzFmMDM0NTg3ZjI4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvZ3113biV3341tUsPJPcGJDZnXIw6/7ID5ZM0lIm5YWcm 0x+qSRe+4HDzlr0wE+zGeu606YN//Z11QG5cAz4qBpYVISdd1OZcylp/RzZLC1ax 8hNwbe/1GH0XvK+54n28X5da6jeFirmzQLel++jcNPUdPimqjvV0psHHF5ngRe+m dktEZpoLZ8ohye8t/laBZepYlO+1I8aH46oiHVg8QEog9+Jv2QQWshkhEZ65e8OX oIazlQSlwRsQCTypOvFZjF4Vk05cVYf6HpRVgW8lsUBpseYjBnkH3CUw4ukbIgbi J1GFgTx3SIDwj5M+yuutyMeko1DZzzga5cVO1yCdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNyq6S6miuWL/0zJRGlG+jvH4Ms4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzliOTNlYWU0LWQwMGMtNDdhZS04ZmRiLWJjMWYxY2QxZDBjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABjkwDQYJKoZIhvcNAQELBQADggEBAFLa6+TZpz1alq4GoTlWmaRH Qag6WuQl3oJ+p7lNjGaG8CI/Dslgeofg703xfYZRqhX31lfnKxpLjBlIcgOj6auN pMOj6Z818bPAqCTZG+mcpM2Rx+Tb/iQQKeH8dx9c8LNm5S8prO2Z9pEaNgP9leup 9YGy4xYctjnxuY5Mw9Mm07HBn8G9iJboztYDFSQcJvN0nqhuN5Dt/9aC9esyD62v X1Uo5dtr3SozQkUSzUDox65vj2WK8rD1PK4ysTUqaBTpsh2y0rtErHaaOM02H3SK 55HpOxmaVS2cgt3/ydwXf9XN7i0AtCtyDnw5c3zLC6nK/IHqYc4mPWEqmDMeGOU= -----END CERTIFICATE-----Generated at Fri Apr 4 23:22:37 2025 by rpki-client