$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa File: 2f789924-a980-48eb-b42e-463688379f41.roa (raw, json) Hash identifier: VSEvGL/RsLQVhu0y/4uBa90LaAF9m+jOdktRzJ3kpzw= Subject key identifier: 06:9B:B0:3D:23:E5:DD:87:C8:7C:40:BC:96:09:03:BA:7A:64:C3:B9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2F45507E18DA9D1E0A239A9B5DEA6619F7E398EC Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa Signing time: Sat 31 May 2025 00:20:47 +0000 ROA not before: Sat 31 May 2025 00:20:47 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:64c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:45:50:7e:18:da:9d:1e:0a:23:9a:9b:5d:ea:66:19:f7:e3:98:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:20:47 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=63d2ed4a01a5143b095eac60b432f4875132497f0685c22c7d587cf83431138d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:17:43:22:a6:27:0d:62:fe:81:6e:1a:c4: 4f:4e:07:e3:9d:38:31:d6:7f:24:8b:a8:39:94:e9: 55:78:13:57:10:e3:2d:7d:6c:9c:62:1a:ab:dd:76: c0:d2:75:c4:99:2a:33:f3:6f:a1:64:07:6f:59:ba: d5:14:b7:45:b7:62:89:07:74:b6:10:9e:d2:45:51: 73:72:5f:ef:00:2b:01:9a:15:0d:91:6f:12:3e:c6: 31:38:59:09:d3:8c:a3:58:8a:d7:64:c1:88:42:88: 8e:35:f1:7e:74:da:a8:df:bf:39:73:fc:6a:c9:24: 52:a5:14:11:22:27:2d:36:e1:79:0d:35:c3:9a:53: 71:a6:2c:2b:75:e3:a5:cb:8b:8b:f3:de:37:24:81: d6:15:1f:0c:38:f9:11:74:a8:ec:8f:2b:6e:a1:6b: d2:48:79:c4:ea:79:4c:c4:12:bc:5b:ef:44:55:f2: b8:3e:f6:a2:33:39:4f:e0:59:e7:f0:f3:3d:f2:2b: dd:c6:60:b6:34:05:95:93:18:0f:62:f9:53:08:ec: 75:60:53:e3:32:59:a6:ce:a7:27:ed:ba:02:2e:fa: 08:90:59:5b:3e:14:1e:fa:7c:46:6f:eb:82:f9:81: 3c:81:a2:d6:38:b5:d3:b4:21:81:44:dc:f3:1a:69: 63:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9B:B0:3D:23:E5:DD:87:C8:7C:40:BC:96:09:03:BA:7A:64:C3:B9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:64c::/48 Signature Algorithm: sha256WithRSAEncryption 51:af:6c:c5:ea:2b:08:51:19:43:46:31:9d:00:42:68:b8:9f: 56:e0:30:eb:14:06:c5:67:fd:96:c6:2a:31:b2:09:e2:fd:bc: 66:72:d4:d3:dc:d9:66:96:f9:0e:f1:98:c2:32:7f:60:db:63: 32:7f:d2:ed:5f:25:66:c2:64:e7:be:f6:1f:7c:a5:4e:2f:9b: 68:7d:50:a5:fb:2f:a1:62:c3:2e:9e:d7:50:82:18:5a:f2:d1: be:2c:81:f8:a3:09:ec:3e:09:2c:44:de:a2:c6:4a:d3:9d:72: e9:fe:5a:1c:ca:54:78:b9:23:9a:f6:63:da:8f:ff:26:92:41: 42:fa:45:9e:1e:3a:6e:e9:c6:27:42:6e:2c:d3:9d:08:ab:31: 5d:89:ad:e6:47:f8:6b:9b:87:41:73:be:21:47:e6:29:fa:d4: 2a:2d:96:f4:e7:be:c1:f5:98:f1:30:35:f5:ae:f6:47:69:22: cc:b2:a5:a8:d5:b2:ac:c1:ee:8b:dc:ac:dc:25:ef:e1:29:6a: 82:f1:e8:75:74:b8:fb:08:f1:6f:80:3b:2e:b3:0a:4a:17:3d: d3:e1:c7:e3:e2:1c:3c:d9:d0:68:ef:e9:d5:ac:72:cb:a7:8f: cc:36:d0:02:35:d4:57:c7:0f:40:fa:8c:e5:9e:f3:08:06:09: 38:66:e6:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUL0VQfhjanR4KI5qbXepmGffjmOwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAyMDQ3WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2M2QyZWQ0YTAxYTUxNDNiMDk1ZWFjNjBiNDMyZjQ4NzUx MzI0OTdmMDY4NWMyMmM3ZDU4N2NmODM0MzExMzhkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoExdDIqYnDWL+gW4axE9OB+OdODHWfySLqDmU6VV4E1cQ 4y19bJxiGqvddsDSdcSZKjPzb6FkB29ZutUUt0W3YokHdLYQntJFUXNyX+8AKwGa FQ2RbxI+xjE4WQnTjKNYitdkwYhCiI418X502qjfvzlz/GrJJFKlFBEiJy024XkN NcOaU3GmLCt146XLi4vz3jckgdYVHww4+RF0qOyPK26ha9JIecTqeUzEErxb70RV 8rg+9qIzOU/gWefw8z3yK93GYLY0BZWTGA9i+VMI7HVgU+MyWabOpyftugIu+giQ WVs+FB76fEZv64L5gTyBotY4tdO0IYFE3PMaaWN7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBpuwPSPl3YfIfEC8lgkDunpkw7kwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJmNzg5OTI0LWE5ODAtNDhlYi1iNDJlLTQ2MzY4ODM3OWY0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABkwwDQYJKoZIhvcNAQELBQADggEBAFGvbMXqKwhRGUNGMZ0AQmi4 n1bgMOsUBsVn/ZbGKjGyCeL9vGZy1NPc2WaW+Q7xmMIyf2DbYzJ/0u1fJWbCZOe+ 9h98pU4vm2h9UKX7L6Fiwy6e11CCGFry0b4sgfijCew+CSxE3qLGStOdcun+WhzK VHi5I5r2Y9qP/yaSQUL6RZ4eOm7pxidCbizTnQirMV2JreZH+Gubh0FzviFH5in6 1CotlvTnvsH1mPEwNfWu9kdpIsyypajVsqzB7ovcrNwl7+EpaoLx6HV0uPsI8W+A Oy6zCkoXPdPhx+PiHDzZ0Gjv6dWscsunj8w20AI11FfHD0D6jOWe8wgGCThm5rU= -----END CERTIFICATE-----Generated at Sat Jun 7 15:37:10 2025 by rpki-client