$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa File: 2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa (raw, json) Hash identifier: YpXPPhJAVke/aRXKpRVRuPwSrlHMZw4/sSUg7ZXKSuA= Subject key identifier: 93:3C:32:64:17:EA:E8:2C:3F:D3:E7:51:AD:5F:1E:26:47:23:37:0A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0E1087AB0D8E2EDE6285DDFB70068DF49EBE9229 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa Signing time: Sat 31 May 2025 00:30:58 +0000 ROA not before: Sat 31 May 2025 00:30:58 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:10:87:ab:0d:8e:2e:de:62:85:dd:fb:70:06:8d:f4:9e:be:92:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:30:58 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=5cf298d32d64900ba4bc26d2d1eccc670e4ead03879e8015214a82b115373344, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:e8:25:1f:63:43:15:47:d8:6f:ea:4b:c6: 2d:59:bc:a2:0b:19:94:aa:cc:36:1a:6f:97:77:54: 38:ec:bb:d6:90:f7:46:02:0b:bc:31:cf:e9:ea:df: c6:bb:9d:87:a1:93:58:3e:87:d0:2b:11:9e:05:9b: d7:0d:93:35:0a:94:c0:e2:0d:77:35:95:49:cc:ab: 09:aa:e0:84:f7:94:bd:c7:0c:73:f8:cf:46:33:e0: 78:f0:03:2b:08:60:af:60:88:1c:db:88:15:65:30: b5:f5:45:e9:6c:65:b5:cb:d5:f9:3b:36:03:f0:96: 27:90:74:ad:63:86:2a:f1:a7:b5:0d:6b:0a:d8:26: 5c:c1:b2:5d:f5:c4:85:6f:2b:b4:f7:4f:fc:c0:08: 7d:6d:89:da:16:06:8c:47:0d:15:34:13:c2:fe:0b: 61:05:b1:b2:f7:ab:db:a0:ba:b6:fb:97:9c:86:73: 94:c6:72:df:3a:ae:a5:95:3d:5c:6e:88:71:a9:ff: ee:99:99:cc:6b:fe:65:a7:6d:67:f8:3e:4c:74:2c: 7b:c2:b0:38:3e:b9:e2:6f:38:4d:27:bf:43:fd:80: 42:c1:2e:02:d8:55:99:7f:c6:cd:2e:a3:60:e0:e6: e8:a9:c9:e9:b9:e4:d8:ad:fa:e8:6b:fe:b7:9c:7c: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3C:32:64:17:EA:E8:2C:3F:D3:E7:51:AD:5F:1E:26:47:23:37:0A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c05::/48 Signature Algorithm: sha256WithRSAEncryption 73:d4:b8:9c:75:74:83:c6:36:fb:fc:24:cf:f0:1e:52:c6:d7: 0b:47:80:b2:05:f3:49:bf:b7:df:47:f1:15:db:58:30:ea:8b: 0c:68:8c:f2:d8:41:69:d2:7d:b5:ad:8b:8f:0e:6f:a4:ae:ce: 05:0a:86:3e:4f:df:92:c6:34:ff:1e:b9:7b:19:b4:90:c5:44: 60:9b:85:ea:1c:9e:cd:d3:b2:9a:a0:e8:64:f6:92:fb:d6:f4: 7c:06:d4:17:7f:21:20:2a:6e:1e:31:55:ab:05:a8:3e:90:35: c8:65:ca:71:da:11:a7:34:e1:d7:35:1c:90:14:13:2f:08:f3: b3:00:c5:89:22:8e:a5:ac:36:1f:46:16:52:4c:fb:92:24:82: 3d:e3:44:93:b2:78:c1:af:a5:9f:39:97:91:87:08:38:ca:43: 46:0d:68:4a:54:1c:86:12:ba:5c:32:3e:be:54:33:a2:5c:73: 39:fb:13:6a:99:ab:62:7a:2b:ba:cd:83:9b:40:1b:73:e4:04: 8d:7e:0a:c1:71:89:94:9a:f6:c0:04:ef:94:60:23:98:54:c1: 17:ee:d5:6d:ba:08:a1:b9:03:ff:67:57:2c:54:f3:14:f2:85: ba:51:26:1c:21:3b:a9:02:3a:13:14:16:0a:60:46:0d:6e:04: bc:88:89:93 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDhCHqw2OLt5ihd37cAaN9J6+kikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAzMDU4WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2YyOThkMzJkNjQ5MDBiYTRiYzI2ZDJkMWVjY2M2NzBl NGVhZDAzODc5ZTgwMTUyMTRhODJiMTE1MzczMzQ0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvw+glH2NDFUfYb+pLxi1ZvKILGZSqzDYab5d3VDjsu9aQ 90YCC7wxz+nq38a7nYehk1g+h9ArEZ4Fm9cNkzUKlMDiDXc1lUnMqwmq4IT3lL3H DHP4z0Yz4HjwAysIYK9giBzbiBVlMLX1RelsZbXL1fk7NgPwlieQdK1jhirxp7UN awrYJlzBsl31xIVvK7T3T/zACH1tidoWBoxHDRU0E8L+C2EFsbL3q9ugurb7l5yG c5TGct86rqWVPVxuiHGp/+6Zmcxr/mWnbWf4Pkx0LHvCsDg+ueJvOE0nv0P9gELB LgLYVZl/xs0uo2Dg5uipyem55Nit+uhr/recfC/zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkzwyZBfq6Cw/0+dRrV8eJkcjNwowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI2NzBiNGFkLWQ1ZmEtNGZmMS05OTZmLTNjMGFkNDA0NmI4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAUwDQYJKoZIhvcNAQELBQADggEBAHPUuJx1dIPGNvv8JM/wHlLG 1wtHgLIF80m/t99H8RXbWDDqiwxojPLYQWnSfbWti48Ob6SuzgUKhj5P35LGNP8e uXsZtJDFRGCbheocns3Tspqg6GT2kvvW9HwG1Bd/ISAqbh4xVasFqD6QNchlynHa Eac04dc1HJAUEy8I87MAxYkijqWsNh9GFlJM+5Ikgj3jRJOyeMGvpZ85l5GHCDjK Q0YNaEpUHIYSulwyPr5UM6Jcczn7E2qZq2J6K7rNg5tAG3PkBI1+CsFxiZSa9sAE 75RgI5hUwRfu1W26CKG5A/9nVyxU8xTyhbpRJhwhO6kCOhMUFgpgRg1uBLyIiZM= -----END CERTIFICATE-----Generated at Fri Jun 6 03:51:29 2025 by rpki-client