$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa File: 5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa (raw, json) Hash identifier: NVFk5SaRN/GrmtFJPx3JrpnMJN+8u6YyC8anoU47VNk= Subject key identifier: C3:2A:64:F1:BF:D0:12:7D:3E:B0:23:1D:0A:B2:25:2E:85:48:8E:F6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 495D972A61E30CDA7F223A05D8D816D0640F308C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa Signing time: Sat 31 May 2025 00:30:26 +0000 ROA not before: Sat 31 May 2025 00:30:26 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5d:97:2a:61:e3:0c:da:7f:22:3a:05:d8:d8:16:d0:64:0f:30:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:30:26 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=bf99483632cd62578c26c3eac1a8bfc2a1f031a96fad4cd8f5e6b57c94f6897d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7c:0c:89:74:7c:b9:44:bc:84:41:2a:b3:bd: 7a:58:ca:87:43:8d:9e:2e:c5:72:7c:fd:ed:b6:84: 2d:ed:95:c7:1c:6d:39:14:e2:b9:94:4e:91:f7:1b: aa:c5:96:89:60:85:58:c9:ae:9a:44:2b:e6:04:b9: 04:46:63:91:53:ab:ae:21:ef:b3:07:04:f2:15:8b: 33:82:f4:2d:1e:b3:a9:d0:83:60:1f:fe:6b:69:3b: f8:ce:71:22:1b:a8:a2:9c:4c:40:2b:82:ac:94:60: 8f:aa:66:63:db:6b:b0:01:eb:aa:9d:05:80:1b:11: 24:74:2d:c7:3c:ec:07:32:75:26:69:35:82:e3:22: 86:b7:50:4b:b4:f1:3b:44:a3:1b:34:12:f1:59:98: f1:c2:5e:59:f9:68:9d:33:95:b6:a7:f9:f2:fe:46: 93:23:3c:ac:c6:e5:58:6e:c8:8e:c2:a7:30:27:60: bb:ad:04:ad:57:19:c6:ac:a0:07:5c:20:28:be:7d: e7:19:88:34:77:37:e2:5a:a4:16:09:35:a9:86:d5: 35:e8:c6:2a:91:e9:ee:4e:79:84:0d:94:1a:6f:b5: 71:14:5a:f9:70:89:27:4c:de:c0:d6:b5:29:b2:81: a5:bf:f9:f1:ba:b5:ab:cf:13:15:f0:13:1c:46:ac: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2A:64:F1:BF:D0:12:7D:3E:B0:23:1D:0A:B2:25:2E:85:48:8E:F6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c13::/48 Signature Algorithm: sha256WithRSAEncryption 60:cd:7d:d8:3c:ba:50:fb:61:bd:51:e1:4e:fd:5b:a9:04:ef: 38:f9:fe:cb:2a:da:0d:0e:f6:a6:8d:64:61:c4:07:9e:4a:f8: 36:4b:b1:bf:1d:38:6c:37:5b:21:3c:27:2a:d1:b8:5f:ef:16: b6:08:ec:91:16:60:09:7b:44:e6:8c:ff:2b:3e:60:41:e3:35: 2a:1b:17:24:6a:79:b9:9e:7a:55:76:92:d5:92:80:76:d8:0e: af:2c:56:5f:40:54:64:48:9f:dc:85:5c:a3:5b:2f:43:f2:85: 3a:5a:7c:b9:87:e6:0d:dd:c0:0b:6f:a6:79:17:fc:5e:9a:cb: 02:6b:a5:f7:eb:3f:a1:43:a1:c3:01:13:25:7b:c6:8a:df:95: 16:7b:f6:5f:d3:1b:f6:63:d6:60:69:52:25:3f:20:34:81:cf: 35:0e:1f:b2:aa:0a:b3:3f:f2:49:c9:9c:51:c9:24:ed:83:5d: d5:57:19:da:d8:0d:a9:3b:60:dc:96:7f:c5:8c:f6:f6:e9:43: 99:d4:51:2b:b4:3c:e7:74:88:ec:03:c1:a6:c5:37:4b:fc:30: ce:9b:b7:1b:43:14:5b:56:e9:eb:f4:05:fa:4b:64:54:32:50: 91:45:1f:a1:92:d5:fe:eb:e2:b5:a7:38:52:85:4b:e7:5f:59: e9:7a:15:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSV2XKmHjDNp/IjoF2NgW0GQPMIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAzMDI2WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjk5NDgzNjMyY2Q2MjU3OGMyNmMzZWFjMWE4YmZjMmEx ZjAzMWE5NmZhZDRjZDhmNWU2YjU3Yzk0ZjY4OTdkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqfAyJdHy5RLyEQSqzvXpYyodDjZ4uxXJ8/e22hC3tlccc bTkU4rmUTpH3G6rFlolghVjJrppEK+YEuQRGY5FTq64h77MHBPIVizOC9C0es6nQ g2Af/mtpO/jOcSIbqKKcTEArgqyUYI+qZmPba7AB66qdBYAbESR0Lcc87AcydSZp NYLjIoa3UEu08TtEoxs0EvFZmPHCXln5aJ0zlban+fL+RpMjPKzG5VhuyI7CpzAn YLutBK1XGcasoAdcICi+fecZiDR3N+JapBYJNamG1TXoxiqR6e5OeYQNlBpvtXEU WvlwiSdM3sDWtSmygaW/+fG6tavPExXwExxGrPa/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwypk8b/QEn0+sCMdCrIlLoVIjvYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVmYjNkYzUwLWU4MGUtNDdhYy1iMDlkLWFkMWFlMjI1ZmNlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBMwDQYJKoZIhvcNAQELBQADggEBAGDNfdg8ulD7Yb1R4U79W6kE 7zj5/ssq2g0O9qaNZGHEB55K+DZLsb8dOGw3WyE8JyrRuF/vFrYI7JEWYAl7ROaM /ys+YEHjNSobFyRqebmeelV2ktWSgHbYDq8sVl9AVGRIn9yFXKNbL0PyhTpafLmH 5g3dwAtvpnkX/F6aywJrpffrP6FDocMBEyV7xorflRZ79l/TG/Zj1mBpUiU/IDSB zzUOH7KqCrM/8knJnFHJJO2DXdVXGdrYDak7YNyWf8WM9vbpQ5nUUSu0POd0iOwD wabFN0v8MM6btxtDFFtW6ev0BfpLZFQyUJFFH6GS1f7r4rWnOFKFS+dfWel6Fa4= -----END CERTIFICATE-----Generated at Sat Jun 7 22:35:16 2025 by rpki-client