$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa File: b2adff31-40d2-4cca-afbd-993e0bc90554.roa (raw, json) Hash identifier: 9ReZnHZFtmu4rggYA8f1Y7O3e7SzYxZuasQlny0EdNQ= Subject key identifier: 16:EA:5C:DD:D4:BA:BA:05:AE:51:CE:8A:DF:E4:87:AC:75:AB:0B:78 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 11F935D28FDE6B74EABBC6925EE35B620787F7E1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa Signing time: Mon 28 Apr 2025 15:30:26 +0000 ROA not before: Mon 28 Apr 2025 15:30:26 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:54b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f9:35:d2:8f:de:6b:74:ea:bb:c6:92:5e:e3:5b:62:07:87:f7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 28 15:30:26 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=52e085e44a4dded8a894c783afcaf4c5b23a6b28a905acdf146a356b7b2657a4, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:06:33:09:df:32:a4:6e:34:98:8b:44:ed: c7:23:64:b0:ad:0b:29:a5:51:0a:07:de:78:11:1b: 98:06:f4:9b:2f:eb:22:2e:dd:76:d1:9a:6a:23:e9: d9:b7:c7:8d:bf:02:35:3a:2b:d5:11:6a:a6:6d:c8: b7:0f:05:63:df:70:50:13:af:3c:dc:bc:d5:70:4a: a4:97:f0:b3:74:b8:32:14:39:d2:0b:2f:47:8d:24: d5:ba:92:0b:03:b1:d5:08:56:6f:e6:5c:5d:8a:58: c3:3a:eb:ce:b9:0a:f3:1f:cf:2d:5b:21:e3:f4:8c: 9e:a6:de:c9:5d:3b:0f:f1:3a:9f:08:7c:a2:5a:c1: 4f:f4:0e:e2:80:eb:ea:e0:c4:e5:29:51:28:64:86: 1a:ee:c1:7a:bf:08:7b:3d:1d:c2:32:c7:bc:f3:18: 1b:ad:49:51:a4:bd:17:6b:95:71:f1:6e:9e:dd:42: 77:be:6f:1f:bc:b5:ce:ba:df:58:dc:45:99:32:84: d6:9f:37:5e:bd:77:cd:e7:25:74:d2:77:0a:c7:e7: 7a:f3:a9:a6:a5:14:a0:6c:4c:21:55:cc:24:cc:8f: 84:4d:df:0d:ec:e0:ff:89:9c:0e:07:59:c9:84:94: c9:02:a4:e0:ca:d8:25:40:27:b5:ef:8f:91:d1:72: 20:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EA:5C:DD:D4:BA:BA:05:AE:51:CE:8A:DF:E4:87:AC:75:AB:0B:78 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54b::/48 Signature Algorithm: sha256WithRSAEncryption a7:17:64:98:73:30:81:39:7a:f4:43:9e:34:4b:07:37:95:2e: 8c:25:fd:5c:75:99:08:c0:e7:3d:d1:e7:4b:1e:d9:d8:0d:8f: 45:fe:a4:87:4a:c3:7c:b4:17:6f:78:a3:f1:dc:b4:17:38:65: e1:92:d5:cf:a1:74:18:ae:98:09:3e:5e:8a:d1:c1:0e:9a:51: 8f:d8:07:67:44:31:32:36:8e:28:a6:bc:f8:38:f9:d4:27:61: 88:e5:fd:6d:38:42:65:b6:ab:81:e0:d9:57:59:ab:8a:2a:0c: ba:36:dc:d4:12:19:16:07:a0:5d:44:01:ba:45:23:7e:b3:6e: 1d:8b:9f:50:51:32:d2:33:31:4e:be:c1:33:99:8e:26:4c:81: 06:a7:4e:3b:6a:95:95:4e:13:4d:06:dc:4d:a1:1a:ae:b1:3b: 13:35:27:be:56:57:44:42:74:e7:9d:cb:e7:6f:34:cb:76:da: 03:4e:94:8c:1d:12:ce:bd:ac:cd:f8:e5:0b:f9:75:58:92:ca: 97:47:89:88:97:84:cd:99:65:bc:5f:96:af:49:80:41:eb:fe: 3a:cb:48:00:25:30:2a:62:bc:73:d9:34:85:b2:dc:aa:d2:d6: a9:16:4c:7a:8d:24:6a:e5:6b:91:fc:9a:19:f6:29:5f:cb:48: 56:48:a7:f7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEfk10o/ea3Tqu8aSXuNbYgeH9+EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI4MTUzMDI2WhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmUwODVlNDRhNGRkZWQ4YTg5NGM3ODNhZmNhZjRjNWIy M2E2YjI4YTkwNWFjZGYxNDZhMzU2YjdiMjY1N2E0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC72wYzCd8ypG40mItE7ccjZLCtCymlUQoH3ngRG5gG9Jsv 6yIu3XbRmmoj6dm3x42/AjU6K9URaqZtyLcPBWPfcFATrzzcvNVwSqSX8LN0uDIU OdILL0eNJNW6kgsDsdUIVm/mXF2KWMM66865CvMfzy1bIeP0jJ6m3sldOw/xOp8I fKJawU/0DuKA6+rgxOUpUShkhhruwXq/CHs9HcIyx7zzGButSVGkvRdrlXHxbp7d Qne+bx+8tc6631jcRZkyhNafN169d83nJXTSdwrH53rzqaalFKBsTCFVzCTMj4RN 3w3s4P+JnA4HWcmElMkCpODK2CVAJ7Xvj5HRciCNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFupc3dS6ugWuUc6K3+SHrHWrC3gwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IyYWRmZjMxLTQwZDItNGNjYS1hZmJkLTk5M2UwYmM5MDU1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUswDQYJKoZIhvcNAQELBQADggEBAKcXZJhzMIE5evRDnjRLBzeV Lowl/Vx1mQjA5z3R50se2dgNj0X+pIdKw3y0F294o/HctBc4ZeGS1c+hdBiumAk+ XorRwQ6aUY/YB2dEMTI2jiimvPg4+dQnYYjl/W04QmW2q4Hg2VdZq4oqDLo23NQS GRYHoF1EAbpFI36zbh2Ln1BRMtIzMU6+wTOZjiZMgQanTjtqlZVOE00G3E2hGq6x OxM1J75WV0RCdOedy+dvNMt22gNOlIwdEs69rM345Qv5dViSypdHiYiXhM2ZZbxf lq9JgEHr/jrLSAAlMCpivHPZNIWy3KrS1qkWTHqNJGrla5H8mhn2KV/LSFZIp/c= -----END CERTIFICATE-----Generated at Fri May 9 05:29:56 2025 by rpki-client