$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e4e3185e-d76a-45ac-80d6-07cef6598d41.roa File: e4e3185e-d76a-45ac-80d6-07cef6598d41.roa (raw, json) Hash identifier: svE+mLa23BOLLHhBxpJHcI7C2Ftlob5zx7GFOIYQ0Vw= Subject key identifier: 0E:F6:37:9C:BC:E3:1C:02:74:5C:A9:7F:02:A6:EC:AA:65:45:3E:40 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 73A9D7F6DD1DF2061349B0D846939E1CD53209EA Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e4e3185e-d76a-45ac-80d6-07cef6598d41.roa Signing time: Mon 17 Mar 2025 15:30:15 +0000 ROA not before: Mon 17 Mar 2025 15:30:15 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a9:d7:f6:dd:1d:f2:06:13:49:b0:d8:46:93:9e:1c:d5:32:09:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 17 15:30:15 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2a:9e:b4:e3:8f:79:b5:f9:c5:4e:b2:0e:53: c3:3d:40:64:0f:b7:bb:60:ba:12:e0:81:60:c6:fb: ca:01:56:55:62:c0:59:7d:4d:9e:85:c4:6f:6e:87: 76:6a:aa:d0:79:b2:11:8e:71:62:2d:85:9e:79:21: 3e:cd:91:05:33:b9:ed:76:81:8f:3e:9d:a1:5c:1f: 16:87:58:2d:48:23:06:20:78:ae:ec:bf:d8:0d:dc: cb:15:b6:81:4a:a5:f4:69:08:f1:49:1e:a2:a6:c3: 20:d5:b2:f5:d7:0c:60:90:d5:3f:0d:6f:f0:ed:aa: 40:0d:06:71:fe:0b:b4:13:2e:3e:eb:3c:56:87:46: cc:65:83:13:75:a9:67:7d:b1:2a:cf:33:4d:a5:41: 2a:b9:60:5e:2d:37:a6:80:af:f8:14:37:d5:83:bd: d2:b6:70:a2:cc:62:6b:0a:98:97:a3:7a:ef:e5:82: 2a:f8:9c:7e:e8:f5:e2:7b:fd:4d:97:ef:87:f8:a9: 4f:e4:22:44:e3:24:15:7b:69:07:cc:05:ff:36:ac: a1:44:a5:ac:1a:d7:69:b3:f5:56:47:e0:8a:c2:6f: 09:2c:6d:47:69:ac:8f:e8:c2:dd:da:a3:38:0b:e2: 3b:6c:14:3f:09:4e:b7:c8:0c:b4:67:26:7a:58:53: eb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F6:37:9C:BC:E3:1C:02:74:5C:A9:7F:02:A6:EC:AA:65:45:3E:40 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e4e3185e-d76a-45ac-80d6-07cef6598d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c18::/48 Signature Algorithm: sha256WithRSAEncryption 31:7b:df:65:10:85:36:41:72:f3:0e:5d:df:8d:54:42:b1:68: 1b:29:08:a0:96:80:ac:a5:e7:e8:c2:7e:73:7c:da:0e:bb:a2: 0b:c7:e5:38:ea:bb:a0:19:e5:03:9f:9f:ec:bd:fb:26:24:ab: 37:51:07:ea:67:8b:e3:68:6b:8d:40:a1:0b:34:92:55:b2:af: a7:44:bd:b8:27:91:3c:c6:63:78:92:2a:ed:81:62:50:f0:97: 3d:ad:f8:23:10:e1:7f:48:5f:96:7b:2d:b8:1a:6b:fd:f6:0c: d3:3b:7c:28:eb:a3:51:6a:77:71:18:44:84:51:e0:21:28:00: 8e:6d:3c:01:04:39:75:b4:bc:4e:42:91:bb:2f:f2:07:f9:f3: 4d:bd:b0:d6:4a:ca:08:69:3a:d1:63:87:05:4a:87:e8:c9:5f: 98:57:1f:11:fc:11:a5:17:35:ce:e1:cc:1f:4c:1f:d4:cc:01: 85:48:fd:43:c5:34:4c:5a:fe:16:c4:97:85:d0:a1:17:73:63: fe:06:2a:bb:ce:f8:3f:8c:8c:a8:f2:8a:6e:38:41:d8:4a:08: 08:52:1b:b9:8c:89:94:7f:1a:c8:1e:ee:fd:a5:25:78:e2:0c: 1d:14:73:37:80:4c:cd:ec:68:90:7a:0e:9c:d5:19:de:d9:e7: 4f:aa:bb:f3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUc6nX9t0d8gYTSbDYRpOeHNUyCeowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzE3MTUzMDE1WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGY4YWJhOWQyNTRmMDMzNjgyNjJmZTkzNzQ4NzM1YmYw YjVmNDZhYjU5MjAwZDZlYzc3MTcxNmZhY2EwODIyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVKp604495tfnFTrIOU8M9QGQPt7tguhLggWDG+8oBVlVi wFl9TZ6FxG9uh3ZqqtB5shGOcWIthZ55IT7NkQUzue12gY8+naFcHxaHWC1IIwYg eK7sv9gN3MsVtoFKpfRpCPFJHqKmwyDVsvXXDGCQ1T8Nb/DtqkANBnH+C7QTLj7r PFaHRsxlgxN1qWd9sSrPM02lQSq5YF4tN6aAr/gUN9WDvdK2cKLMYmsKmJejeu/l gir4nH7o9eJ7/U2X74f4qU/kIkTjJBV7aQfMBf82rKFEpawa12mz9VZH4IrCbwks bUdprI/owt3aozgL4jtsFD8JTrfIDLRnJnpYU+tLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDvY3nLzjHAJ0XKl/AqbsqmVFPkAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2U0ZTMxODVlLWQ3NmEtNDVhYy04MGQ2LTA3Y2VmNjU5OGQ0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBgwDQYJKoZIhvcNAQELBQADggEBADF732UQhTZBcvMOXd+NVEKx aBspCKCWgKyl5+jCfnN82g67ogvH5Tjqu6AZ5QOfn+y9+yYkqzdRB+pni+Noa41A oQs0klWyr6dEvbgnkTzGY3iSKu2BYlDwlz2t+CMQ4X9IX5Z7Lbgaa/32DNM7fCjr o1Fqd3EYRIRR4CEoAI5tPAEEOXW0vE5Ckbsv8gf58029sNZKyghpOtFjhwVKh+jJ X5hXHxH8EaUXNc7hzB9MH9TMAYVI/UPFNExa/hbEl4XQoRdzY/4GKrvO+D+MjKjy im44QdhKCAhSG7mMiZR/Gsge7v2lJXjiDB0UczeATM3saJB6DpzVGd7Z50+qu/M= -----END CERTIFICATE-----Generated at Fri Apr 4 23:30:12 2025 by rpki-client