$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa File: 5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa (raw, json) Hash identifier: al4NROZAWD95FX9+ehKvdHG5N4qcx9so0xzI+QTUJ28= Subject key identifier: 80:21:AB:CB:DA:87:E9:59:90:29:D5:A2:B2:D6:E2:62:23:16:32:C8 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0FB8C43661E8CC52FB265F4419B5C096317408C4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa Signing time: Tue 20 May 2025 17:51:17 +0000 ROA not before: Tue 20 May 2025 17:51:17 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b8:c4:36:61:e8:cc:52:fb:26:5f:44:19:b5:c0:96:31:74:08:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 20 17:51:17 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=4c183678d79f28cbcb00ebbd658d24dd622eb8d7be16ff5e2c845efe5fe1876c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:45:bc:35:88:85:4f:f2:81:2f:56:5f:59:8e: ac:55:46:cb:81:09:21:89:2b:76:44:48:96:cd:57: 63:c7:53:3d:eb:b2:1a:ba:cb:c2:aa:65:c1:9e:52: bc:f0:d0:e7:15:69:8f:0c:e3:8a:9d:a9:af:3f:15: 64:48:03:f7:b4:bd:c5:0b:70:ae:58:f7:95:c3:81: c6:9e:1d:f5:09:8d:1e:1a:4f:db:99:12:12:8a:83: 78:ab:f5:71:d1:2c:ba:10:7a:a5:3a:54:a1:de:a5: f1:ea:36:5e:b8:19:47:43:60:5c:62:c6:29:0a:a9: 77:5d:2d:c5:38:fa:05:88:18:28:8a:18:b5:eb:32: 67:f1:f5:a8:4c:e6:d1:b0:a3:bb:72:69:ed:62:82: e8:16:31:fb:22:2d:84:a5:3d:50:2f:6f:85:2b:ed: bd:b6:d0:6e:39:9d:55:25:db:b5:e4:94:19:f9:0c: 45:0b:cc:dc:5a:e6:c4:dc:91:2f:cd:cc:28:c6:97: 55:55:f8:68:41:cb:22:e9:74:ec:40:c2:0e:50:63: 44:ca:13:f6:0b:89:a8:c1:38:62:72:1a:7e:07:40: 93:2e:d3:80:29:3d:78:a6:f4:37:c5:11:26:84:c7: 5f:d7:ce:74:38:d9:05:8e:2e:a1:50:0c:65:9f:ae: 87:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:21:AB:CB:DA:87:E9:59:90:29:D5:A2:B2:D6:E2:62:23:16:32:C8 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c48::/48 Signature Algorithm: sha256WithRSAEncryption 9c:19:9d:0b:d5:13:bc:34:4c:26:98:b6:6f:a5:0f:5d:fa:c1: d6:4d:8b:2f:e1:ce:14:6d:a8:71:26:fd:eb:6b:5f:ee:a7:fd: aa:d0:6d:f5:1d:48:bb:dc:3f:c4:ec:59:86:7c:1b:60:f2:a4: 8f:1b:81:ef:b8:b4:26:d3:28:8d:4c:28:84:a3:f4:31:00:46: 15:e2:f7:2c:b6:48:84:d3:67:b3:f6:40:f2:e5:62:d9:82:1e: 5c:b1:a3:0f:48:44:69:ed:eb:53:a4:c1:a9:35:5e:8f:c4:7f: 12:18:ad:2b:1a:59:dd:54:63:ee:eb:ca:9f:c7:74:c5:49:cd: 6c:5c:86:ba:7c:ba:30:37:cc:38:dc:9d:9b:32:11:42:9e:cc: 6f:b4:cb:92:83:18:dc:8e:1f:14:87:f0:37:4d:36:4c:64:e6: da:4c:d0:13:f9:a6:6d:bb:85:a3:8f:6a:2a:ab:9d:f6:d2:9f: c8:99:d2:87:7e:0a:71:e3:cd:3f:a0:32:c9:64:a0:89:d5:7a: cd:ed:7a:7b:3b:42:9c:a5:fe:33:29:72:46:a9:13:99:84:0f: 5d:0e:81:47:07:cb:3d:b7:5f:28:4e:eb:51:e4:07:8a:b7:79: ac:31:61:65:3d:b5:78:d1:87:a8:af:22:8d:d8:63:12:da:da: c6:2e:d9:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUD7jENmHozFL7Jl9EGbXAljF0CMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIwMTc1MTE3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzE4MzY3OGQ3OWYyOGNiY2IwMGViYmQ2NThkMjRkZDYy MmViOGQ3YmUxNmZmNWUyYzg0NWVmZTVmZTE4NzZjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeRbw1iIVP8oEvVl9ZjqxVRsuBCSGJK3ZESJbNV2PHUz3r shq6y8KqZcGeUrzw0OcVaY8M44qdqa8/FWRIA/e0vcULcK5Y95XDgcaeHfUJjR4a T9uZEhKKg3ir9XHRLLoQeqU6VKHepfHqNl64GUdDYFxixikKqXddLcU4+gWIGCiK GLXrMmfx9ahM5tGwo7tyae1igugWMfsiLYSlPVAvb4Ur7b220G45nVUl27XklBn5 DEULzNxa5sTckS/NzCjGl1VV+GhByyLpdOxAwg5QY0TKE/YLiajBOGJyGn4HQJMu 04ApPXim9DfFESaEx1/XznQ42QWOLqFQDGWfroctAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgCGry9qH6VmQKdWistbiYiMWMsgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVmMDQ2NTVhLWZkODUtNDVhMC05NmUwLTFmZTdhYzMwOWE2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADEgwDQYJKoZIhvcNAQELBQADggEBAJwZnQvVE7w0TCaYtm+lD136 wdZNiy/hzhRtqHEm/etrX+6n/arQbfUdSLvcP8TsWYZ8G2DypI8bge+4tCbTKI1M KISj9DEARhXi9yy2SITTZ7P2QPLlYtmCHlyxow9IRGnt61Okwak1Xo/EfxIYrSsa Wd1UY+7ryp/HdMVJzWxchrp8ujA3zDjcnZsyEUKezG+0y5KDGNyOHxSH8DdNNkxk 5tpM0BP5pm27haOPaiqrnfbSn8iZ0od+CnHjzT+gMslkoInVes3tens7Qpyl/jMp ckapE5mED10OgUcHyz23XyhO61HkB4q3eawxYWU9tXjRh6ivIo3YYxLa2sYu2Wc= -----END CERTIFICATE-----Generated at Fri Jun 6 03:55:35 2025 by rpki-client