$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa File: bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa (raw, json) Hash identifier: dKYe1fTOFwHh2g56eY+Y0aa5tRkaBYQRpFCETjKAOek= Subject key identifier: 25:91:95:70:5E:08:85:B0:A0:85:0B:D4:B6:F5:7A:BE:E0:BE:D0:F8 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5181DB06C0C0A85C727F50AE6D363E82AE8C5A72 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa Signing time: Sat 05 Apr 2025 00:10:13 +0000 ROA not before: Sat 05 Apr 2025 00:10:13 +0000 ROA not after: Sat 10 May 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:3b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:81:db:06:c0:c0:a8:5c:72:7f:50:ae:6d:36:3e:82:ae:8c:5a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 5 00:10:13 2025 GMT Not After : May 10 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:9c:ca:4a:12:c9:60:51:95:46:84:96:f1: c6:fc:b4:e1:5e:0f:46:1a:ef:e4:d6:52:29:1d:6f: 52:e2:97:68:71:ca:ce:73:8a:66:04:55:65:b9:ca: f9:98:80:3d:c4:37:39:19:11:bb:71:96:64:1d:7c: ba:3d:39:71:15:3a:cd:f0:5d:ce:b9:9c:37:79:26: 6a:7e:ef:9e:c6:17:82:04:4a:de:39:f4:2d:86:d5: ba:8c:0a:0d:85:6e:70:86:aa:65:6b:35:4c:75:50: 3b:48:fd:f2:ca:e3:72:83:7c:f2:80:53:96:c4:48: 69:dc:27:0a:5a:8f:60:a4:1a:70:28:d1:6a:6b:9e: cd:16:4e:00:e2:52:6e:1a:bf:81:7b:b1:cd:d7:ff: 44:68:e3:3c:06:45:8f:d7:95:f0:b3:19:1b:17:d2: 1b:e1:35:31:af:03:f5:99:1e:89:2b:9d:12:a0:8a: 48:91:ba:67:1b:a7:c1:cf:a1:dc:01:23:88:af:18: ce:36:6b:52:a2:30:ee:be:1b:00:6c:64:f7:d5:f4: d2:03:21:8f:50:c2:55:ae:1e:2f:a9:11:76:39:5e: 57:0e:62:9a:24:57:af:51:37:74:45:f3:83:53:93: 56:28:e2:16:6b:42:79:e0:ae:aa:06:3c:69:11:f3: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:91:95:70:5E:08:85:B0:A0:85:0B:D4:B6:F5:7A:BE:E0:BE:D0:F8 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3b3::/48 Signature Algorithm: sha256WithRSAEncryption 5f:c8:94:8c:80:12:73:23:d7:37:f6:6b:15:29:94:4c:11:14: 9f:7a:f6:44:b6:78:6f:19:12:e7:6b:eb:b4:15:f2:24:1a:03: de:29:ce:83:f4:51:5d:1d:07:23:2e:6e:00:ac:df:8a:71:4f: bb:ac:bd:70:db:53:f5:84:b5:6a:53:ee:d0:19:27:4a:c8:f4: c6:69:11:7f:79:84:a7:ce:3a:69:fe:4c:b8:8c:cf:c6:90:de: 40:47:cb:b2:dc:b3:30:d2:dd:44:c9:b0:3f:d6:8a:ed:d5:57: 43:2a:13:f3:fb:6e:4f:2b:6e:bd:6a:00:b1:bf:e8:6b:17:19: d1:40:2b:7b:5a:64:bd:11:77:20:3e:00:04:1b:c2:de:10:81: 30:c7:06:0e:b0:43:e8:17:56:9a:3c:a6:87:ae:b5:15:9f:fb: 9b:21:80:c3:db:23:cd:44:b3:ed:47:64:40:cf:f5:8e:9f:d6: 86:f1:ef:a7:9e:bb:69:88:a0:06:a4:d8:d5:f2:7a:c9:9c:7d: d1:10:f0:b1:99:8a:8a:16:c7:a6:0d:34:03:af:b7:a1:b6:5c: b6:cd:72:38:1d:a1:66:9c:ba:47:b4:51:f1:8f:30:7e:58:f3: 16:fa:bc:14:ae:53:a4:b3:2b:be:78:c9:26:b8:20:9b:ad:b6: fe:44:50:32 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUYHbBsDAqFxyf1CubTY+gq6MWnIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDA1MDAxMDEzWhcNMjUwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YWVjMjA4ZDRjYmI4YjQ0NDBlZmQ2M2Y4MGY5YzI2OWU1 NDMwMGM4NDM0NjAzN2I1NzU3MzEzMGRlNWNmMDRiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrhJzKShLJYFGVRoSW8cb8tOFeD0Ya7+TWUikdb1Lil2hx ys5zimYEVWW5yvmYgD3ENzkZEbtxlmQdfLo9OXEVOs3wXc65nDd5Jmp+757GF4IE St459C2G1bqMCg2FbnCGqmVrNUx1UDtI/fLK43KDfPKAU5bESGncJwpaj2CkGnAo 0Wprns0WTgDiUm4av4F7sc3X/0Ro4zwGRY/XlfCzGRsX0hvhNTGvA/WZHokrnRKg ikiRumcbp8HPodwBI4ivGM42a1KiMO6+GwBsZPfV9NIDIY9QwlWuHi+pEXY5XlcO YpokV69RN3RF84NTk1Yo4hZrQnngrqoGPGkR86X/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJZGVcF4IhbCghQvUtvV6vuC+0PgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JmNzZlZWUxLTgxYzYtNDAxOC05MjY0LWY3ZWRkYzllOGMyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA7MwDQYJKoZIhvcNAQELBQADggEBAF/IlIyAEnMj1zf2axUplEwR FJ969kS2eG8ZEudr67QV8iQaA94pzoP0UV0dByMubgCs34pxT7usvXDbU/WEtWpT 7tAZJ0rI9MZpEX95hKfOOmn+TLiMz8aQ3kBHy7LcszDS3UTJsD/Wiu3VV0MqE/P7 bk8rbr1qALG/6GsXGdFAK3taZL0RdyA+AAQbwt4QgTDHBg6wQ+gXVpo8poeutRWf +5shgMPbI81Es+1HZEDP9Y6f1obx76eeu2mIoAak2NXyesmcfdEQ8LGZiooWx6YN NAOvt6G2XLbNcjgdoWacuke0UfGPMH5Y8xb6vBSuU6SzK754ySa4IJuttv5EUDI= -----END CERTIFICATE-----Generated at Sat Apr 5 22:28:19 2025 by rpki-client