$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa File: 431a515b-07a5-4778-abb4-267624108e41.roa (raw, json) Hash identifier: e6lRiwKOt/7ahMTVPaTMaqFLzztNKxkBRgCoOGdgv9k= Subject key identifier: BF:20:93:49:FB:E5:78:CB:60:55:AB:AC:E0:40:4E:EE:01:A8:98:70 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5238A60255DAE0141F22987CD06AEFFA13577C75 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa Signing time: Wed 21 May 2025 00:51:15 +0000 ROA not before: Wed 21 May 2025 00:51:15 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:30d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:38:a6:02:55:da:e0:14:1f:22:98:7c:d0:6a:ef:fa:13:57:7c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 21 00:51:15 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=9203004e9651a553379c79bd4bd9de33ff6c936b234129d8ed44eb12912c8a67, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:e5:67:2e:27:9e:1d:cf:a9:9f:05:1f:53: 43:8f:f2:eb:ac:8e:b3:4b:cc:02:dc:e7:9b:e5:93: 23:69:f4:c7:47:d7:a6:37:2f:ae:fc:b8:62:f0:7d: d4:7b:f3:0b:26:64:ab:6e:29:da:3b:93:db:9b:ff: 33:96:92:c1:80:9d:8b:87:06:50:b0:aa:06:26:3c: 00:fa:7b:9c:03:09:a9:03:bd:6f:80:10:92:08:c8: fe:b1:7a:8a:65:0f:da:7b:95:78:7d:14:3e:dc:2a: c0:fa:b7:53:55:39:62:48:6e:a5:b7:02:aa:1a:3e: be:9f:12:cf:c7:ef:64:ef:34:ff:c6:1a:34:33:ba: 53:f4:56:25:22:0a:2d:e8:71:b3:a2:1c:20:d0:79: 1d:54:18:5e:a6:a1:4d:40:4f:1f:1a:b6:62:1b:e1: 38:3e:8b:9e:0c:ea:6f:a2:81:5e:8b:0d:b8:48:e6: fd:69:c8:62:a6:81:00:74:4f:31:91:2a:5e:79:17: 01:1b:af:91:ac:24:84:2c:f9:d7:85:8c:55:84:af: 79:a8:44:59:82:b7:22:32:5e:c2:bd:a2:15:5a:fe: 5d:95:dc:37:ad:be:76:45:ca:0c:ab:4c:98:77:8c: 25:bc:bf:82:2e:3b:e2:19:06:ab:cb:7d:d1:71:ca: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:20:93:49:FB:E5:78:CB:60:55:AB:AC:E0:40:4E:EE:01:A8:98:70 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30d::/48 Signature Algorithm: sha256WithRSAEncryption 9f:73:79:f7:11:cf:ea:48:b2:8c:31:3a:ee:80:14:45:5f:bd: 2f:ec:26:6b:e3:9f:98:26:ea:88:3d:53:e2:71:07:34:2e:ef: 22:06:67:e1:6b:29:8f:29:ea:61:33:0a:41:c6:51:9d:50:01: 6e:60:69:5e:ad:ff:d8:7a:48:3d:22:3c:d0:db:3d:ff:fd:08: 46:9e:16:17:92:7d:ad:a3:01:3f:89:24:eb:5e:c2:04:b7:64: 42:96:60:29:4b:73:7e:ea:fc:be:00:61:1d:82:cb:36:3b:44: ae:02:8f:38:76:4c:84:6d:a3:b3:70:f9:1c:38:08:64:8e:a5: 88:b0:e4:34:90:63:44:b8:f7:48:14:42:37:64:f0:c2:dc:c4: 76:db:67:66:16:8f:95:cc:dc:ea:86:3d:0f:2f:16:01:15:0b: b8:97:f3:40:31:13:ad:cb:21:f7:47:51:47:7d:67:96:29:bb: c0:d1:d7:bc:ca:21:c3:05:46:eb:9c:cc:b8:1e:d5:bd:d9:b8: 89:2d:13:c2:bf:e9:cb:b0:15:c5:b3:f6:83:9e:3b:9c:85:48: 33:02:98:64:6e:59:25:ed:9e:c2:89:50:37:4f:cd:6c:3d:a7: c9:10:2b:19:e5:1c:f5:62:06:9d:69:17:ee:11:77:46:bc:f2: 14:fd:37:c6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUjimAlXa4BQfIph80Grv+hNXfHUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIxMDA1MTE1WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjAzMDA0ZTk2NTFhNTUzMzc5Yzc5YmQ0YmQ5ZGUzM2Zm NmM5MzZiMjM0MTI5ZDhlZDQ0ZWIxMjkxMmM4YTY3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBG+VnLieeHc+pnwUfU0OP8uusjrNLzALc55vlkyNp9MdH 16Y3L678uGLwfdR78wsmZKtuKdo7k9ub/zOWksGAnYuHBlCwqgYmPAD6e5wDCakD vW+AEJIIyP6xeoplD9p7lXh9FD7cKsD6t1NVOWJIbqW3AqoaPr6fEs/H72TvNP/G GjQzulP0ViUiCi3ocbOiHCDQeR1UGF6moU1ATx8atmIb4Tg+i54M6m+igV6LDbhI 5v1pyGKmgQB0TzGRKl55FwEbr5GsJIQs+deFjFWEr3moRFmCtyIyXsK9ohVa/l2V 3DetvnZFygyrTJh3jCW8v4IuO+IZBqvLfdFxynPTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvyCTSfvleMtgVaus4EBO7gGomHAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQzMWE1MTViLTA3YTUtNDc3OC1hYmI0LTI2NzYyNDEwOGU0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAw0wDQYJKoZIhvcNAQELBQADggEBAJ9zefcRz+pIsowxOu6AFEVf vS/sJmvjn5gm6og9U+JxBzQu7yIGZ+FrKY8p6mEzCkHGUZ1QAW5gaV6t/9h6SD0i PNDbPf/9CEaeFheSfa2jAT+JJOtewgS3ZEKWYClLc37q/L4AYR2CyzY7RK4Cjzh2 TIRto7Nw+Rw4CGSOpYiw5DSQY0S490gUQjdk8MLcxHbbZ2YWj5XM3OqGPQ8vFgEV C7iX80AxE63LIfdHUUd9Z5Ypu8DR17zKIcMFRuuczLge1b3ZuIktE8K/6cuwFcWz 9oOeO5yFSDMCmGRuWSXtnsKJUDdPzWw9p8kQKxnlHPViBp1pF+4Rd0a88hT9N8Y= -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:06 2025 by rpki-client