$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa File: 54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa (raw, json) Hash identifier: K8LcD+6qMYw1PsqFJ/fU98zABoyLa+B4ek4tanPi6l8= Subject key identifier: 33:7E:BD:30:1D:EB:DA:CB:B2:8F:AF:12:C1:F2:04:69:CF:54:89:4E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 51B6658A1F1422BD34145E06C7463EA4F1D188B3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa Signing time: Fri 23 May 2025 00:31:17 +0000 ROA not before: Fri 23 May 2025 00:31:17 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:611::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b6:65:8a:1f:14:22:bd:34:14:5e:06:c7:46:3e:a4:f1:d1:88:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 23 00:31:17 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=6f88ea7b989ddb4e041dda246c2a9b684c26cb6dfebfd9cfd28724e58efda134, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:dc:24:44:27:b4:38:29:a8:f1:f8:bc:ab: 22:ce:da:b1:cb:52:3d:52:96:a2:49:69:18:8d:f8: 9c:cb:c3:e3:c5:8c:f0:89:5c:25:b6:3c:0e:01:31: 66:8b:8f:c1:86:88:a8:24:2d:b4:a0:74:ff:4c:3f: a4:82:c1:7f:e9:30:ee:69:8a:08:20:c5:e3:94:82: da:5c:44:be:73:ce:6e:ed:0c:b1:79:51:4e:2e:f7: 48:15:ce:87:9f:0c:82:41:55:b1:43:9d:3a:a7:45: da:b9:54:6c:50:63:65:72:27:7c:8f:7a:08:b2:cf: 1b:d2:8a:76:8a:2b:78:bb:76:ff:8f:e4:82:79:c4: 1c:2e:25:bf:58:0b:93:3b:f0:aa:28:88:8f:af:7a: 82:a1:26:1d:39:62:6c:ef:f9:d6:81:7b:45:3e:d4: 50:fa:a3:66:b2:b7:4d:0a:45:25:ac:72:3e:30:95: a3:1d:af:b8:82:7c:46:8a:27:55:b3:41:9d:48:e1: 75:fa:46:0c:6e:3f:49:c9:2d:13:5c:b5:6d:96:50: 8b:01:cf:0b:55:56:85:bd:a0:ff:8a:b7:fe:94:0a: 79:07:8c:59:ec:0b:ee:d9:be:e7:b5:48:1c:3d:a2: 41:76:e2:d0:72:6e:13:d8:39:4f:5a:5e:6c:5e:ce: 66:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7E:BD:30:1D:EB:DA:CB:B2:8F:AF:12:C1:F2:04:69:CF:54:89:4E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:611::/48 Signature Algorithm: sha256WithRSAEncryption 32:73:07:7a:5a:7c:0b:a5:58:c4:f2:2a:c5:9a:3c:d8:ea:a8: 28:c1:00:47:59:67:c0:c9:9a:62:00:64:1a:06:26:07:d1:be: 47:56:6c:13:92:e6:2d:30:61:08:df:3e:c5:ea:f3:82:51:0c: b5:49:e9:c8:25:8b:72:8b:76:81:8f:0d:4c:3d:05:4a:b2:6b: 20:ea:fd:04:a0:60:60:81:e6:a1:d3:95:a2:8e:1d:b9:75:20: d1:53:71:1c:a0:2f:34:0b:c3:30:4b:df:e8:51:47:26:ae:f3: 5b:68:5a:bc:e8:31:21:4b:1f:9f:ee:cc:78:6e:bd:72:98:ca: a2:78:7b:0f:b5:66:b0:2b:20:49:4f:28:e6:7b:b3:1f:99:2d: a2:2a:6f:98:a2:9a:ae:05:6a:62:99:72:b6:bc:d2:e1:10:a7: 54:16:69:7a:b4:e9:b9:10:fb:de:69:68:49:da:fa:bc:87:e8: bf:d0:bd:70:84:86:2c:46:1f:c3:a7:de:db:0c:52:fd:3a:19: 93:60:87:f6:36:c7:1f:15:c9:01:e3:20:01:2a:62:57:24:79: 53:2a:19:3f:d7:ec:3b:8c:55:61:3a:fd:54:6a:ab:f0:05:b3: 6a:4d:7c:84:42:90:a5:5e:f0:f4:df:06:27:04:8d:2d:ae:ce: 52:54:cc:c1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUbZlih8UIr00FF4Gx0Y+pPHRiLMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIzMDAzMTE3WhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2Zjg4ZWE3Yjk4OWRkYjRlMDQxZGRhMjQ2YzJhOWI2ODRj MjZjYjZkZmViZmQ5Y2ZkMjg3MjRlNThlZmRhMTM0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnsdwkRCe0OCmo8fi8qyLO2rHLUj1SlqJJaRiN+JzLw+PF jPCJXCW2PA4BMWaLj8GGiKgkLbSgdP9MP6SCwX/pMO5pigggxeOUgtpcRL5zzm7t DLF5UU4u90gVzoefDIJBVbFDnTqnRdq5VGxQY2VyJ3yPegiyzxvSinaKK3i7dv+P 5IJ5xBwuJb9YC5M78KooiI+veoKhJh05Ymzv+daBe0U+1FD6o2ayt00KRSWscj4w laMdr7iCfEaKJ1WzQZ1I4XX6RgxuP0nJLRNctW2WUIsBzwtVVoW9oP+Kt/6UCnkH jFnsC+7Zvue1SBw9okF24tBybhPYOU9aXmxezmbLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUM369MB3r2suyj68SwfIEac9UiU4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU0YmNiZDUwLTU5MTYtNDY3Ny1hNmIxLTY0NzdiOGIxNGFhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhEwDQYJKoZIhvcNAQELBQADggEBADJzB3pafAulWMTyKsWaPNjq qCjBAEdZZ8DJmmIAZBoGJgfRvkdWbBOS5i0wYQjfPsXq84JRDLVJ6cgli3KLdoGP DUw9BUqyayDq/QSgYGCB5qHTlaKOHbl1INFTcRygLzQLwzBL3+hRRyau81toWrzo MSFLH5/uzHhuvXKYyqJ4ew+1ZrArIElPKOZ7sx+ZLaIqb5iimq4FamKZcra80uEQ p1QWaXq06bkQ+95paEna+ryH6L/QvXCEhixGH8On3tsMUv06GZNgh/Y2xx8VyQHj IAEqYlckeVMqGT/X7DuMVWE6/VRqq/AFs2pNfIRCkKVe8PTfBicEjS2uzlJUzME= -----END CERTIFICATE-----Generated at Sat Jun 7 04:17:43 2025 by rpki-client