$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/803ff471-2975-4fde-a4bd-31c53d5ce004.roa File: 803ff471-2975-4fde-a4bd-31c53d5ce004.roa (raw, json) Hash identifier: 08aCDCklnzrHHxWk0pVe9Blp4Sm5RyMbZXdm/SgNSCg= Subject key identifier: 15:1B:95:FF:86:9B:EC:F6:00:28:69:57:CE:D2:66:C2:44:CC:4D:E8 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 20487D641847895C5A09200CCBFB3D1796BD86DD Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/803ff471-2975-4fde-a4bd-31c53d5ce004.roa Signing time: Sat 31 May 2025 00:20:48 +0000 ROA not before: Sat 31 May 2025 00:20:48 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:64d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:48:7d:64:18:47:89:5c:5a:09:20:0c:cb:fb:3d:17:96:bd:86:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:20:48 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=5d5b068559e716079dc7c8dfb6dd06b3065c8654612bd2eae58a383728b40a25, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:2e:01:7d:8c:05:7e:a7:8f:49:a4:2c:e6: 2f:bb:2a:d6:1b:2a:c2:2e:4e:d8:f8:52:fd:a6:e8: 98:ab:3a:f0:37:25:52:63:05:32:d0:13:c7:5c:80: 22:6a:c4:6c:f2:65:80:eb:d0:48:4a:85:fe:b6:c2: 54:1b:cb:0c:a7:f2:6e:09:fc:00:56:c1:99:8f:65: ac:a2:37:e3:6b:b7:2d:bb:c4:8c:69:5e:a5:e6:2f: fb:b7:6a:5a:4f:28:1a:d6:2d:b6:24:0b:57:55:9e: da:1b:ce:75:96:7b:c2:b4:d0:1d:67:ad:39:30:50: 07:22:37:83:34:d1:3c:0f:c8:5b:d9:30:0d:f8:ae: f9:a3:81:f9:b4:0c:f0:cd:59:f2:fc:3d:92:26:ab: 18:8b:d5:70:19:f4:f1:f9:f2:9a:8e:ab:5d:5e:a0: 81:ea:4f:30:1b:4a:78:51:e5:08:86:c4:51:6c:4c: a3:4d:3e:4d:ea:a7:35:20:fd:ac:86:2c:50:a9:ee: cb:76:3c:cd:72:c1:7c:f0:72:2a:cc:b5:14:0f:4a: 7f:2f:de:44:d5:59:dc:0b:9d:81:ed:01:29:7d:6c: a5:7b:ff:1a:f5:b9:74:b4:3b:21:06:31:fa:1a:8c: 58:c1:63:31:d9:32:d9:f8:8e:45:be:d6:a2:0d:e6: 33:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:95:FF:86:9B:EC:F6:00:28:69:57:CE:D2:66:C2:44:CC:4D:E8 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/803ff471-2975-4fde-a4bd-31c53d5ce004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:64d::/48 Signature Algorithm: sha256WithRSAEncryption 5f:1a:29:3f:66:f1:c9:e7:43:a5:46:23:99:d5:f7:4a:52:2d: 2f:86:3e:b2:9f:06:16:33:7e:b3:cd:1f:7e:75:b1:a0:c6:98: 1d:14:f8:64:cf:33:ca:9e:62:ed:8b:52:fa:95:47:f1:1e:f4: e7:1e:eb:00:8c:9f:54:70:55:92:f8:d9:7e:05:49:64:03:4d: 8a:70:61:e1:90:e7:8c:53:26:83:f2:7a:f1:5b:9b:ce:0d:7b: db:07:a4:d4:35:98:bc:0e:4e:f1:e5:8f:63:3f:55:fa:64:23: bf:0e:65:77:18:5a:7d:28:fc:06:86:03:22:95:25:47:0e:b5: 7d:24:f8:2c:a9:9f:86:70:ba:8c:1e:be:54:08:b3:44:c1:49: 58:58:26:66:b2:99:1d:52:1f:e5:c2:2f:f0:f5:9a:32:56:4a: ce:85:32:ea:46:78:dd:53:ee:dd:2d:61:33:98:be:40:7e:c9: cf:e8:50:d4:fb:89:06:90:b1:2f:2a:54:d6:13:63:72:2d:3a: e3:f9:f8:49:4d:b6:f6:14:97:3e:e9:4d:39:68:42:c2:90:27: e3:4a:44:fb:c5:ae:80:64:ec:e2:28:a6:d7:92:1b:8f:35:41: cc:cf:81:14:ae:27:a0:b1:a8:0d:8e:ed:5e:48:6b:e3:33:3e: 35:3d:dd:3d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIEh9ZBhHiVxaCSAMy/s9F5a9ht0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAyMDQ4WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDViMDY4NTU5ZTcxNjA3OWRjN2M4ZGZiNmRkMDZiMzA2 NWM4NjU0NjEyYmQyZWFlNThhMzgzNzI4YjQwYTI1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8fC4BfYwFfqePSaQs5i+7KtYbKsIuTtj4Uv2m6JirOvA3 JVJjBTLQE8dcgCJqxGzyZYDr0EhKhf62wlQbywyn8m4J/ABWwZmPZayiN+Nrty27 xIxpXqXmL/u3alpPKBrWLbYkC1dVntobznWWe8K00B1nrTkwUAciN4M00TwPyFvZ MA34rvmjgfm0DPDNWfL8PZImqxiL1XAZ9PH58pqOq11eoIHqTzAbSnhR5QiGxFFs TKNNPk3qpzUg/ayGLFCp7st2PM1ywXzwcirMtRQPSn8v3kTVWdwLnYHtASl9bKV7 /xr1uXS0OyEGMfoajFjBYzHZMtn4jkW+1qIN5jNXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFRuV/4ab7PYAKGlXztJmwkTMTegwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzgwM2ZmNDcxLTI5NzUtNGZkZS1hNGJkLTMxYzUzZDVjZTAwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABk0wDQYJKoZIhvcNAQELBQADggEBAF8aKT9m8cnnQ6VGI5nV90pS LS+GPrKfBhYzfrPNH351saDGmB0U+GTPM8qeYu2LUvqVR/Ee9Oce6wCMn1RwVZL4 2X4FSWQDTYpwYeGQ54xTJoPyevFbm84Ne9sHpNQ1mLwOTvHlj2M/VfpkI78OZXcY Wn0o/AaGAyKVJUcOtX0k+Cypn4ZwuowevlQIs0TBSVhYJmaymR1SH+XCL/D1mjJW Ss6FMupGeN1T7t0tYTOYvkB+yc/oUNT7iQaQsS8qVNYTY3ItOuP5+ElNtvYUlz7p TTloQsKQJ+NKRPvFroBk7OIopteSG481QczPgRSuJ6CxqA2O7V5Ia+MzPjU93T0= -----END CERTIFICATE-----Generated at Sat Jun 7 17:28:23 2025 by rpki-client