$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b642a109-e9c2-47d6-891e-b07342398a0e.roa File: b642a109-e9c2-47d6-891e-b07342398a0e.roa (raw, json) Hash identifier: e9raBudAqBODy5F7wzzIxUVl5NEQHq964/lsplqAKHM= Subject key identifier: 2D:9B:63:29:8F:05:83:E0:D8:36:87:25:1A:5B:F6:49:38:58:17:11 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5E4B560E69B418658BEEE3FD0BE4E1415B68A544 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b642a109-e9c2-47d6-891e-b07342398a0e.roa Signing time: Mon 17 Mar 2025 15:30:14 +0000 ROA not before: Mon 17 Mar 2025 15:30:14 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4b:56:0e:69:b4:18:65:8b:ee:e3:fd:0b:e4:e1:41:5b:68:a5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 17 15:30:14 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:da:75:22:7c:70:fe:64:37:95:36:1a:41:4d: 88:10:78:a2:21:ad:48:1f:46:3f:86:c2:ef:b7:dc: c1:4c:ef:77:03:5f:cd:fb:e7:a9:17:50:a3:a2:65: f8:9c:fe:bc:d3:5c:87:25:ac:8c:fb:cb:a6:a9:6d: 1c:8d:73:11:1e:42:6d:d4:17:83:55:ec:4d:3f:ad: cb:60:39:e8:68:b0:78:8b:cf:f7:0a:bd:5b:27:e2: 54:13:bd:2a:df:7b:1f:4d:9f:a0:43:2d:10:44:5b: 6e:d9:5a:76:63:18:94:ce:1a:92:d4:18:cd:17:46: 69:7a:09:d4:62:83:11:90:ef:27:e4:f9:4d:2b:87: 69:e8:b0:0c:b9:6d:a9:5b:2a:92:d8:7d:31:9a:0a: 56:a8:9c:ed:b4:4b:19:1f:56:cb:8c:22:0a:ee:b1: 0a:19:3b:30:a4:45:4c:9e:02:e4:6c:b5:cf:c4:d6: 3c:47:f3:b7:06:ac:61:9c:b4:24:62:54:3f:87:3e: 0d:16:62:e4:de:94:3e:ee:83:b5:95:2f:65:48:c6: 14:06:2c:69:23:66:c4:ae:44:e7:19:18:e9:cc:f6: dd:30:59:0f:0e:9e:7d:1f:c7:1a:85:f0:37:a4:a7: dc:b2:13:f9:99:22:9e:9d:97:7a:29:ea:63:64:4a: 44:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9B:63:29:8F:05:83:E0:D8:36:87:25:1A:5B:F6:49:38:58:17:11 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b642a109-e9c2-47d6-891e-b07342398a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c17::/48 Signature Algorithm: sha256WithRSAEncryption 8f:5f:d9:c6:c9:8b:e9:a2:ff:e0:b6:93:38:9f:d8:7e:12:43: 71:00:41:0b:22:ff:7a:0a:4a:f4:d9:2e:6e:02:f8:2f:12:20: 81:51:b5:e9:f6:54:8c:4f:ae:0b:47:49:ba:24:6f:9d:89:9c: ba:9e:94:ff:45:e8:6b:7e:d0:cf:02:a0:09:1f:f0:43:56:f9: f3:c1:19:6e:09:4f:da:2c:93:75:a3:9d:8c:1d:5b:ef:13:70: 54:a0:8b:8c:3c:38:7a:c3:66:b0:9c:07:09:a0:48:c9:1a:78: 47:be:51:90:9d:dc:93:97:29:8a:15:1a:20:94:a9:67:0e:b8: bd:1b:7a:6e:b7:92:94:e4:d5:8c:d4:59:c6:23:9c:bd:fb:a4: 12:94:e9:cb:3a:41:cd:c3:ad:23:6e:2f:37:5e:5a:a5:93:df: a1:4e:42:5e:f9:da:19:89:02:48:ef:91:98:29:90:17:0b:64: b3:7d:ce:fd:83:53:8b:33:01:43:4f:00:f5:c8:86:85:9b:a1: b5:b4:d6:d2:a3:4e:c9:c9:8e:fe:71:47:2b:08:8a:c1:0c:ba: 8d:33:db:06:29:0e:85:fd:6a:8b:9f:85:50:01:5e:ac:00:89: 79:f5:cc:81:e4:f5:50:70:78:54:f9:c3:0d:d2:05:aa:93:07: e2:13:8e:fe -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXktWDmm0GGWL7uP9C+ThQVtopUQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzE3MTUzMDE0WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjQ4YjhkYTM2ZDM2YjBhNzRhM2RjZGM5NWVlMzc1MjRl OTM2YmM5NDhiYzAzODE0ODY1MzFmY2U0NDAzMDQ3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDc2nUifHD+ZDeVNhpBTYgQeKIhrUgfRj+Gwu+33MFM73cD X83756kXUKOiZfic/rzTXIclrIz7y6apbRyNcxEeQm3UF4NV7E0/rctgOehosHiL z/cKvVsn4lQTvSrfex9Nn6BDLRBEW27ZWnZjGJTOGpLUGM0XRml6CdRigxGQ7yfk +U0rh2nosAy5balbKpLYfTGaClaonO20SxkfVsuMIgrusQoZOzCkRUyeAuRstc/E 1jxH87cGrGGctCRiVD+HPg0WYuTelD7ug7WVL2VIxhQGLGkjZsSuROcZGOnM9t0w WQ8Onn0fxxqF8Dekp9yyE/mZIp6dl3op6mNkSkRXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULZtjKY8Fg+DYNoclGlv2SThYFxEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2I2NDJhMTA5LWU5YzItNDdkNi04OTFlLWIwNzM0MjM5OGEwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBcwDQYJKoZIhvcNAQELBQADggEBAI9f2cbJi+mi/+C2kzif2H4S Q3EAQQsi/3oKSvTZLm4C+C8SIIFRten2VIxPrgtHSbokb52JnLqelP9F6Gt+0M8C oAkf8ENW+fPBGW4JT9osk3WjnYwdW+8TcFSgi4w8OHrDZrCcBwmgSMkaeEe+UZCd 3JOXKYoVGiCUqWcOuL0bem63kpTk1YzUWcYjnL37pBKU6cs6Qc3DrSNuLzdeWqWT 36FOQl752hmJAkjvkZgpkBcLZLN9zv2DU4szAUNPAPXIhoWbobW01tKjTsnJjv5x RysIisEMuo0z2wYpDoX9aoufhVABXqwAiXn1zIHk9VBweFT5ww3SBaqTB+ITjv4= -----END CERTIFICATE-----Generated at Sat Apr 5 13:01:09 2025 by rpki-client