$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa File: fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa (raw, json) Hash identifier: 3EwMczpp3FAvHqU7mLRnwbfeVDmv1/o61l/cJnc6GcU= Subject key identifier: 73:7E:76:DF:0C:E1:F1:DF:FA:70:5A:B1:3A:49:59:B1:88:4C:0C:81 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 257B6C26081C96314B7830D2BFB83ECDBF22F92E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa Signing time: Sat 26 Apr 2025 00:50:52 +0000 ROA not before: Sat 26 Apr 2025 00:50:52 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:30d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7b:6c:26:08:1c:96:31:4b:78:30:d2:bf:b8:3e:cd:bf:22:f9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:50:52 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=b097d6c4f549e8dbb4dbb3a4c7d97d6977bc30d6259365a81ff142e1201b6c77, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:db:a8:a4:2b:2b:8d:09:19:be:9f:36:af: 91:60:69:1f:07:4f:16:cd:d6:9e:43:cf:6f:ac:30: 36:c0:1d:24:16:5a:23:bd:ff:4c:13:cc:a4:df:d6: 8e:a8:4b:49:48:51:0e:92:20:18:c2:f7:b7:76:59: 4a:81:35:02:8f:84:18:fd:0d:1f:05:56:1a:af:6d: 26:30:69:34:a4:35:00:d4:66:ba:bc:4b:5f:e5:ee: 41:cd:74:13:14:18:36:e0:dc:e1:12:6e:81:e3:de: c4:47:dd:1d:25:0a:fe:ee:3b:a1:13:96:78:82:58: ed:a1:a3:b2:77:24:ce:11:f4:f3:8f:13:16:18:1e: fd:e0:81:5a:fd:70:9b:d4:b0:e6:1b:2b:41:6d:51: da:f2:d3:78:47:fc:50:c2:2f:4e:19:41:60:c4:4e: 07:1d:41:f5:81:59:12:14:81:65:38:a5:30:51:cc: c9:37:75:45:19:8e:18:48:d0:10:10:e5:fa:52:90: 30:8a:22:93:24:c5:49:9e:1d:b9:1f:a6:66:00:b6: 64:2a:c5:50:a9:8c:13:ec:27:e3:07:d7:b6:ae:8b: 01:c5:ed:a6:e2:4c:7f:44:b2:b0:e7:0c:b9:3e:27: 9b:86:90:68:00:30:f9:39:49:08:d1:c3:4e:22:50: 01:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7E:76:DF:0C:E1:F1:DF:FA:70:5A:B1:3A:49:59:B1:88:4C:0C:81 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30d::/48 Signature Algorithm: sha256WithRSAEncryption 1e:b0:6f:a7:59:fe:fa:78:9c:11:5c:e0:2d:fe:98:61:41:2c: 99:b5:17:95:a0:4b:2b:50:2a:66:70:57:dc:34:90:55:d3:63: a6:d9:91:e9:01:5c:d3:9c:73:9f:02:63:3e:b9:03:41:eb:6c: 99:f2:70:5a:24:db:b8:22:34:01:ee:6f:80:8e:9f:f0:d7:86: f3:c1:b9:f0:72:e0:2a:18:17:5c:46:5f:f0:f0:7b:58:0e:19: a7:a3:69:da:0c:d6:d3:c6:8c:6e:4d:57:15:f5:32:89:86:2f: ba:4b:0d:91:04:86:cf:30:db:ac:ed:47:f5:1a:5d:a2:69:ae: 8e:0a:3c:91:48:fe:a5:fa:3b:83:60:9d:e8:e8:49:bc:2b:10: 4d:a5:6c:9a:de:3f:71:dd:c5:7b:fa:ca:77:1e:23:9f:06:46: d4:69:e5:f9:da:01:6a:83:e0:f5:99:a5:33:3d:98:43:66:0c: 93:36:f9:8b:dd:05:4e:ea:0b:e1:da:0a:ee:23:f3:16:e2:d4: ef:b4:0c:37:28:b5:53:53:19:46:59:43:fc:bf:69:c4:95:60: 32:8c:e2:97:d0:c7:7d:7b:df:74:ed:df:1c:22:66:2e:3c:3b: 53:8b:1a:68:ae:4d:dc:e9:47:43:8a:00:91:73:7b:67:8a:ab: 1b:3a:55:96 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJXtsJggcljFLeDDSv7g+zb8i+S4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MDUyWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDk3ZDZjNGY1NDllOGRiYjRkYmIzYTRjN2Q5N2Q2OTc3 YmMzMGQ2MjU5MzY1YTgxZmYxNDJlMTIwMWI2Yzc3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvwtuopCsrjQkZvp82r5FgaR8HTxbN1p5Dz2+sMDbAHSQW WiO9/0wTzKTf1o6oS0lIUQ6SIBjC97d2WUqBNQKPhBj9DR8FVhqvbSYwaTSkNQDU Zrq8S1/l7kHNdBMUGDbg3OESboHj3sRH3R0lCv7uO6ETlniCWO2ho7J3JM4R9POP ExYYHv3ggVr9cJvUsOYbK0FtUdry03hH/FDCL04ZQWDETgcdQfWBWRIUgWU4pTBR zMk3dUUZjhhI0BAQ5fpSkDCKIpMkxUmeHbkfpmYAtmQqxVCpjBPsJ+MH17auiwHF 7abiTH9EsrDnDLk+J5uGkGgAMPk5SQjRw04iUAG3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUc3523wzh8d/6cFqxOklZsYhMDIEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2ZlODkyZDJmLTc1YmEtNDA4Ni04YTU2LTVmZTI0ZGU4ZDljNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAw0wDQYJKoZIhvcNAQELBQADggEBAB6wb6dZ/vp4nBFc4C3+mGFB LJm1F5WgSytQKmZwV9w0kFXTY6bZkekBXNOcc58CYz65A0HrbJnycFok27giNAHu b4COn/DXhvPBufBy4CoYF1xGX/Dwe1gOGaejadoM1tPGjG5NVxX1MomGL7pLDZEE hs8w26ztR/UaXaJpro4KPJFI/qX6O4NgnejoSbwrEE2lbJreP3HdxXv6ynceI58G RtRp5fnaAWqD4PWZpTM9mENmDJM2+YvdBU7qC+HaCu4j8xbi1O+0DDcotVNTGUZZ Q/y/acSVYDKM4pfQx31733Tt3xwiZi48O1OLGmiuTdzpR0OKAJFze2eKqxs6VZY= -----END CERTIFICATE-----Generated at Fri May 9 05:12:34 2025 by rpki-client