$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa File: 0934543e-90db-4ba0-9848-455452e0c367.roa (raw, json) Hash identifier: B4aK9hLFKJfZ2XGl5QCeShrCK5ai+4bOM2fUGTZ9bqE= Subject key identifier: 2F:00:6B:B6:1B:D3:C1:35:B1:F6:24:DA:42:C7:2C:CE:80:C6:17:32 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 41E903F896FC9C078F7F6BDC768E796B7C076385 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa Signing time: Sat 31 May 2025 00:30:51 +0000 ROA not before: Sat 31 May 2025 00:30:51 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e9:03:f8:96:fc:9c:07:8f:7f:6b:dc:76:8e:79:6b:7c:07:63:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:30:51 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=b79e7744fffa157a5ba45de4adc9f14616b0e8bc8bccbaee3f36e0a8b7de7ba5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:fc:16:04:00:44:71:68:d9:af:2c:e0:9c: 38:3a:82:e6:66:c6:55:03:0b:77:3f:4e:80:26:1b: e1:f0:74:15:05:fa:6f:4e:9f:b2:44:99:02:84:61: 65:1d:38:ab:78:09:3a:5e:26:38:e7:a3:a7:c6:a4: 16:2b:4a:e6:43:5f:45:74:b0:82:50:45:4c:2b:df: 99:ea:67:6d:42:0a:3c:d9:01:ed:e6:36:6c:8e:b9: 04:de:ec:e2:9e:89:eb:52:ea:74:33:51:d2:79:fd: e2:52:f1:20:ec:c4:f2:41:49:84:1f:85:7a:c9:22: 87:03:51:58:a8:6e:e6:b3:9f:67:70:67:84:43:37: c3:ba:c7:1d:53:ca:81:17:0d:1d:51:66:4c:10:42: 26:7b:dd:7f:36:51:cc:bc:35:41:87:ae:96:b4:d1: a7:54:f2:5d:78:8f:ce:48:e4:94:75:61:6d:bd:9d: af:bb:3d:83:22:cc:35:9b:13:6a:9e:c4:98:c1:b6: 5a:ee:2e:20:8b:fa:63:2d:ce:35:9a:a8:23:65:43: 9f:4e:49:24:6a:c7:f0:67:0b:df:49:86:87:9e:6c: 9b:78:18:6c:c8:e7:a2:30:69:9b:ec:3c:2f:8a:7e: e3:a0:ff:6d:a2:52:df:9a:e3:79:87:d6:9f:2e:dc: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:00:6B:B6:1B:D3:C1:35:B1:F6:24:DA:42:C7:2C:CE:80:C6:17:32 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c02::/48 Signature Algorithm: sha256WithRSAEncryption 96:4b:a5:ef:4d:6d:9d:2a:52:8a:04:4f:8d:1b:08:b0:27:65: 54:c1:e4:62:c8:3d:cd:95:97:d5:59:81:28:a0:f7:ee:63:4a: dd:65:f3:93:57:3f:f8:1d:68:e9:20:87:ac:c0:d1:e4:3f:f5: f7:b8:28:88:92:ec:26:a0:e0:d8:4c:17:75:80:f5:9d:08:d3: e5:a4:06:2d:b8:f4:56:34:85:9e:76:30:b9:41:ca:f3:9a:ed: 8e:43:91:67:b9:e2:02:1e:89:f6:fb:14:78:cf:1f:c5:7b:eb: e4:3f:0f:31:2e:64:9a:b4:bf:ab:95:52:ac:5e:e2:63:3e:6e: b7:c0:c4:1e:c6:8b:cf:c6:a3:2d:25:a3:8d:0a:1c:69:53:96: 50:a3:69:c3:1a:42:15:70:ae:3a:fb:85:e9:91:e8:89:8a:34: 61:f9:46:e6:70:6c:43:b3:1a:34:cf:0c:6c:49:ec:29:7a:da: 50:62:2a:eb:75:32:fa:4a:c8:61:c7:cd:1c:82:e2:17:00:f7: 4c:98:75:ac:a9:4f:bf:7f:34:68:1c:96:73:be:58:d5:3a:6b: af:24:c5:c4:1d:08:05:6c:22:50:fb:97:bb:5f:0e:e4:96:59: 9a:91:5b:64:27:3b:7b:15:47:b0:9c:28:11:8d:a2:3a:4d:b9: 09:00:ef:94 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQekD+Jb8nAePf2vcdo55a3wHY4UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAzMDUxWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzllNzc0NGZmZmExNTdhNWJhNDVkZTRhZGM5ZjE0NjE2 YjBlOGJjOGJjY2JhZWUzZjM2ZTBhOGI3ZGU3YmE1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsgvwWBABEcWjZryzgnDg6guZmxlUDC3c/ToAmG+HwdBUF +m9On7JEmQKEYWUdOKt4CTpeJjjno6fGpBYrSuZDX0V0sIJQRUwr35nqZ21CCjzZ Ae3mNmyOuQTe7OKeietS6nQzUdJ5/eJS8SDsxPJBSYQfhXrJIocDUViobuazn2dw Z4RDN8O6xx1TyoEXDR1RZkwQQiZ73X82Ucy8NUGHrpa00adU8l14j85I5JR1YW29 na+7PYMizDWbE2qexJjBtlruLiCL+mMtzjWaqCNlQ59OSSRqx/BnC99JhoeebJt4 GGzI56IwaZvsPC+KfuOg/22iUt+a43mH1p8u3Nl1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULwBrthvTwTWx9iTaQscszoDGFzIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA5MzQ1NDNlLTkwZGItNGJhMC05ODQ4LTQ1NTQ1MmUwYzM2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAIwDQYJKoZIhvcNAQELBQADggEBAJZLpe9NbZ0qUooET40bCLAn ZVTB5GLIPc2Vl9VZgSig9+5jSt1l85NXP/gdaOkgh6zA0eQ/9fe4KIiS7Cag4NhM F3WA9Z0I0+WkBi249FY0hZ52MLlByvOa7Y5DkWe54gIeifb7FHjPH8V76+Q/DzEu ZJq0v6uVUqxe4mM+brfAxB7Gi8/Goy0lo40KHGlTllCjacMaQhVwrjr7hemR6ImK NGH5RuZwbEOzGjTPDGxJ7Cl62lBiKut1MvpKyGHHzRyC4hcA90yYdaypT79/NGgc lnO+WNU6a68kxcQdCAVsIlD7l7tfDuSWWZqRW2QnO3sVR7CcKBGNojpNuQkA75Q= -----END CERTIFICATE-----Generated at Sat Jun 7 22:37:41 2025 by rpki-client