$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a5fcb3b-8689-4338-9c45-f707b48f641a.roa File: 7a5fcb3b-8689-4338-9c45-f707b48f641a.roa (raw, json) Hash identifier: 2ThBGntUKyw5M+crdErzFhCUoKde3hsAnFHTJc9JD1k= Subject key identifier: CF:54:0F:20:82:83:48:38:15:A2:89:43:4F:81:6A:63:E0:B1:51:19 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0105BD4D9A8FC348872E95264D956CD0EB11C9D3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a5fcb3b-8689-4338-9c45-f707b48f641a.roa Signing time: Sat 31 May 2025 00:30:21 +0000 ROA not before: Sat 31 May 2025 00:30:21 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:05:bd:4d:9a:8f:c3:48:87:2e:95:26:4d:95:6c:d0:eb:11:c9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:30:21 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=42e93f33058496723f13f90f11e09ee26ded0879746f9c1182139167c65e22a2, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:89:7b:84:90:64:d5:1e:11:7f:3e:fd:0c:e7: a3:3e:a4:6b:e9:49:d9:1e:57:f4:61:58:d7:1f:5a: 20:86:1f:43:32:cd:25:05:1c:7d:e8:50:ea:4d:8d: 0a:1d:f5:80:a5:1e:12:ab:04:b3:d4:06:83:0b:28: 9c:36:30:54:cf:5a:9c:21:3b:3d:41:7e:4e:69:40: 7b:bb:67:3a:80:1a:8c:44:d6:e1:1f:87:2d:12:36: b7:89:59:e9:be:89:21:74:f0:f0:54:6f:e9:75:81: 5a:ee:96:0e:4d:25:c9:15:ce:3b:8b:be:ad:65:39: 3d:68:9d:5e:c8:98:c6:7b:4c:79:1a:6b:7e:da:1c: 48:80:c4:42:9b:87:e7:08:f8:4a:12:c6:de:76:0c: 28:3e:87:ee:26:ee:11:16:4d:ae:db:70:48:e4:0b: d5:fc:6e:89:d7:36:fa:7a:47:9e:8a:57:c8:8d:26: 6d:90:c8:db:c5:a6:85:0d:0a:3a:22:45:3e:5d:0a: ea:e9:91:4d:db:8c:fc:86:98:2f:99:fd:9c:fc:2f: e1:57:bb:a0:7a:cc:37:b4:d1:4d:ab:c3:a2:0e:1b: 4d:8c:dc:46:b8:90:e8:a2:19:99:ad:c6:2e:52:1a: 27:fe:52:aa:47:a8:12:58:23:e7:0e:b8:f0:ea:11: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:54:0F:20:82:83:48:38:15:A2:89:43:4F:81:6A:63:E0:B1:51:19 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a5fcb3b-8689-4338-9c45-f707b48f641a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c12::/48 Signature Algorithm: sha256WithRSAEncryption 6b:dc:c1:4b:f6:91:35:2f:c9:88:a6:3d:b3:1a:6e:47:70:47: 25:8d:fa:b7:de:61:d8:1b:b4:da:f3:2b:04:67:b4:a4:71:ca: 2e:22:2a:e2:b2:7b:20:f1:74:f5:70:48:0f:a2:1a:92:30:92: 97:11:d6:20:fe:2b:21:01:95:c7:cc:80:c1:e9:f5:21:f4:5d: 50:ed:5a:2f:69:6f:1b:8b:c4:97:b1:07:45:9f:c5:85:5c:32: 89:f6:ab:e9:c2:1e:f4:3a:a0:31:69:da:c9:75:51:60:6e:62: e9:e7:91:53:47:23:82:e3:f1:5a:75:3d:aa:a1:6f:d0:be:d1: b4:e3:a0:87:76:08:07:ef:bb:77:f5:87:86:11:45:8c:11:f6: bc:b8:0f:0e:14:90:89:3e:6e:f3:46:4f:80:e3:9e:4a:bc:26: f8:1c:a6:a8:c2:77:9e:49:7f:c1:27:08:0d:61:d0:2c:16:d1: 32:80:6f:00:4f:e5:16:5d:6e:57:cd:25:1b:c7:ea:d2:38:71: f4:98:47:f5:76:f8:b4:a2:9e:1c:5e:67:b0:36:f2:1c:dd:ca: 49:7e:c5:cd:5f:03:3a:93:f9:24:0c:30:55:64:ef:83:f5:0a: 76:13:dc:2f:c5:6e:4a:f6:d0:2d:51:c3:90:d6:f1:f3:18:4a: 66:4a:a7:1e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAQW9TZqPw0iHLpUmTZVs0OsRydMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAzMDIxWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmU5M2YzMzA1ODQ5NjcyM2YxM2Y5MGYxMWUwOWVlMjZk ZWQwODc5NzQ2ZjljMTE4MjEzOTE2N2M2NWUyMmEyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxiXuEkGTVHhF/Pv0M56M+pGvpSdkeV/RhWNcfWiCGH0My zSUFHH3oUOpNjQod9YClHhKrBLPUBoMLKJw2MFTPWpwhOz1Bfk5pQHu7ZzqAGoxE 1uEfhy0SNreJWem+iSF08PBUb+l1gVrulg5NJckVzjuLvq1lOT1onV7ImMZ7THka a37aHEiAxEKbh+cI+EoSxt52DCg+h+4m7hEWTa7bcEjkC9X8bonXNvp6R56KV8iN Jm2QyNvFpoUNCjoiRT5dCurpkU3bjPyGmC+Z/Zz8L+FXu6B6zDe00U2rw6IOG02M 3Ea4kOiiGZmtxi5SGif+UqpHqBJYI+cOuPDqES5HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUz1QPIIKDSDgVoolDT4FqY+CxURkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzdhNWZjYjNiLTg2ODktNDMzOC05YzQ1LWY3MDdiNDhmNjQxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBIwDQYJKoZIhvcNAQELBQADggEBAGvcwUv2kTUvyYimPbMabkdw RyWN+rfeYdgbtNrzKwRntKRxyi4iKuKyeyDxdPVwSA+iGpIwkpcR1iD+KyEBlcfM gMHp9SH0XVDtWi9pbxuLxJexB0WfxYVcMon2q+nCHvQ6oDFp2sl1UWBuYunnkVNH I4Lj8Vp1Paqhb9C+0bTjoId2CAfvu3f1h4YRRYwR9ry4Dw4UkIk+bvNGT4Djnkq8 JvgcpqjCd55Jf8EnCA1h0CwW0TKAbwBP5RZdblfNJRvH6tI4cfSYR/V2+LSinhxe Z7A28hzdykl+xc1fAzqT+SQMMFVk74P1CnYT3C/Fbkr20C1Rw5DW8fMYSmZKpx4= -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:31 2025 by rpki-client