$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b8dbfa2-ffce-4d94-9f75-535c98ebccdd.roa File: 5b8dbfa2-ffce-4d94-9f75-535c98ebccdd.roa (raw, json) Hash identifier: qeg3v57x6/T7D5XsUYgacV3CG9bQnA5cOBuEgQ6gfUc= Subject key identifier: 85:1B:69:95:F8:3D:40:74:12:B2:E5:76:64:6E:39:D4:6C:1D:8A:46 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4CEF915E3DA61F921050737CE79125CFF189E951 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b8dbfa2-ffce-4d94-9f75-535c98ebccdd.roa Signing time: Sat 31 May 2025 00:20:40 +0000 ROA not before: Sat 31 May 2025 00:20:40 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:647::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ef:91:5e:3d:a6:1f:92:10:50:73:7c:e7:91:25:cf:f1:89:e9:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:20:40 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=d52e9b91c58a928bd3648e1db90eaa464436c539e0e6d17030db952520d3559d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:45:bb:5a:c8:30:89:2a:40:94:37:21:74: 9a:89:3c:80:cf:90:ab:25:07:e5:ec:f3:fb:82:36: e5:b4:ce:44:64:16:71:68:5b:c0:b5:d7:46:65:dd: de:23:d7:ea:3a:b2:9a:6e:cb:9e:40:2a:1c:3c:c2: 69:8b:d7:24:7d:63:ed:f5:d4:fd:02:c2:7a:4c:8e: b3:d4:f9:6c:7b:35:f3:ec:bb:2a:40:aa:7d:1e:b7: 92:4a:93:9f:eb:c4:33:28:16:db:41:3a:0a:28:91: 87:20:82:58:a5:27:4e:c8:a3:74:5a:19:90:1d:dd: c6:94:7e:f9:9f:b1:4e:15:cb:12:18:8d:f1:27:9d: 22:7d:77:e4:c8:a8:8b:fa:0f:60:d7:d6:2e:79:6e: 28:8d:7c:fb:34:90:0f:77:3a:9f:d4:15:1b:8c:9b: f3:2d:3a:03:c1:fb:f1:00:c7:ec:46:34:cd:c3:8c: 72:1b:34:21:33:19:d1:ee:a5:0b:cf:08:11:72:72: 77:a9:cf:4a:74:d2:36:94:a7:48:5b:da:08:fc:37: ee:07:b8:71:42:1e:ec:a2:d8:cd:9e:09:ed:8a:ab: b9:97:f8:81:37:41:1b:d7:7c:86:3e:19:e4:d3:89: 6a:36:98:fc:5b:a9:37:d2:97:e5:24:e9:38:f5:5c: 52:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1B:69:95:F8:3D:40:74:12:B2:E5:76:64:6E:39:D4:6C:1D:8A:46 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b8dbfa2-ffce-4d94-9f75-535c98ebccdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:647::/48 Signature Algorithm: sha256WithRSAEncryption 8f:91:eb:c8:45:69:f3:b0:4e:a0:1d:70:c2:7e:c9:de:49:e1: 12:69:85:7b:f9:73:22:c5:ba:fb:14:f2:54:67:a1:cb:f4:b2: b1:da:11:49:78:45:b8:65:96:39:2c:cf:51:4d:8e:07:7c:ec: ee:de:3b:7e:2b:0d:4f:d1:79:c8:a0:2f:b4:25:71:86:5c:49: 38:37:b3:6b:db:c9:6f:f1:a4:aa:20:6d:4b:ce:ff:86:8c:a0: 96:51:81:46:d3:d5:e7:6a:c7:31:0f:46:47:4d:e9:5f:13:65: 07:80:a2:e4:95:cf:3a:31:d1:45:da:17:9a:3b:92:8d:12:10: 2d:cd:b1:d6:d2:87:3d:7f:75:73:a2:f6:ad:0e:e8:90:67:9f: 4e:1a:18:13:ec:6d:77:83:f0:46:02:f0:2c:f9:9d:f7:cd:8d: 89:07:af:cc:18:64:13:e4:23:64:92:f1:82:75:61:10:2b:f8: fc:e3:e6:e9:42:06:83:0c:d2:2e:40:a2:a3:cd:4e:a2:bf:f0: 81:38:1d:0c:09:a0:66:c5:6d:22:df:df:7a:00:be:1c:39:7b: af:55:b2:2d:c3:9b:a5:0c:93:91:b9:a6:a9:83:40:bc:9a:36: e4:8c:27:29:79:43:11:d6:37:00:d6:18:0c:de:93:1c:24:db: 3f:30:0d:e4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTO+RXj2mH5IQUHN855Elz/GJ6VEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAyMDQwWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTJlOWI5MWM1OGE5MjhiZDM2NDhlMWRiOTBlYWE0NjQ0 MzZjNTM5ZTBlNmQxNzAzMGRiOTUyNTIwZDM1NTlkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmmEW7WsgwiSpAlDchdJqJPIDPkKslB+Xs8/uCNuW0zkRk FnFoW8C110Zl3d4j1+o6sppuy55AKhw8wmmL1yR9Y+311P0CwnpMjrPU+Wx7NfPs uypAqn0et5JKk5/rxDMoFttBOgookYcgglilJ07Io3RaGZAd3caUfvmfsU4VyxIY jfEnnSJ9d+TIqIv6D2DX1i55biiNfPs0kA93Op/UFRuMm/MtOgPB+/EAx+xGNM3D jHIbNCEzGdHupQvPCBFycnepz0p00jaUp0hb2gj8N+4HuHFCHuyi2M2eCe2Kq7mX +IE3QRvXfIY+GeTTiWo2mPxbqTfSl+Uk6Tj1XFKpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhRtplfg9QHQSsuV2ZG451GwdikYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzViOGRiZmEyLWZmY2UtNGQ5NC05Zjc1LTUzNWM5OGViY2NkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABkcwDQYJKoZIhvcNAQELBQADggEBAI+R68hFafOwTqAdcMJ+yd5J 4RJphXv5cyLFuvsU8lRnocv0srHaEUl4Rbhlljksz1FNjgd87O7eO34rDU/Recig L7QlcYZcSTg3s2vbyW/xpKogbUvO/4aMoJZRgUbT1edqxzEPRkdN6V8TZQeAouSV zzox0UXaF5o7ko0SEC3NsdbShz1/dXOi9q0O6JBnn04aGBPsbXeD8EYC8Cz5nffN jYkHr8wYZBPkI2SS8YJ1YRAr+Pzj5ulCBoMM0i5AoqPNTqK/8IE4HQwJoGbFbSLf 33oAvhw5e69Vsi3Dm6UMk5G5pqmDQLyaNuSMJyl5QxHWNwDWGAzekxwk2z8wDeQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:24:22 2025 by rpki-client