$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84581667-8425-427e-b2bb-05a7813ade35.roa File: 84581667-8425-427e-b2bb-05a7813ade35.roa (raw, json) Hash identifier: 9cYoHe6m2AdXcrp8/qJK+k4YwxZXZ2/uR5Y3LzrB3tA= Subject key identifier: D5:1C:52:41:AA:47:68:2E:45:18:D1:53:A0:CC:67:65:17:35:76:92 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7076654337CFB47149B3F07A66E72A42E79205A8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84581667-8425-427e-b2bb-05a7813ade35.roa Signing time: Tue 20 May 2025 17:50:11 +0000 ROA not before: Tue 20 May 2025 17:50:11 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:f03e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:76:65:43:37:cf:b4:71:49:b3:f0:7a:66:e7:2a:42:e7:92:05:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 20 17:50:11 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=1a3a816627f8db31fddf935b74b314a465399e425243e20092918b3823772ebc, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:62:82:d2:41:28:70:7a:0b:18:32:94:09: 2e:dd:13:92:f1:3b:76:bc:f8:68:8d:41:fd:71:e3: e1:ac:2b:49:64:cb:9a:28:6c:73:50:c4:12:87:45: f1:3b:29:15:17:34:10:b2:51:d6:f2:5e:7b:d8:96: 76:7d:c0:b4:3a:bd:13:3f:12:1c:67:a6:2d:c7:ad: e5:1d:f1:cf:92:93:ea:d8:45:a7:5e:91:07:98:5c: de:d9:6a:b4:93:48:44:aa:2b:86:e9:94:7d:0f:ee: f7:66:66:22:67:26:08:c5:ef:cd:d2:51:99:8c:f7: 08:5b:0b:b8:c4:0e:96:8c:a0:03:5a:64:17:e9:c0: f6:28:bb:89:cc:0f:4f:cf:50:c1:12:01:b7:e0:48: 7a:7d:a7:fd:71:75:9b:4c:c0:bf:50:02:62:e5:69: d1:60:4c:63:6d:12:d6:51:c6:32:e4:5e:5b:47:7d: 46:2b:1d:b0:66:85:5b:32:a1:25:c2:90:e4:ac:e2: d7:cc:ab:06:25:3c:14:70:d1:61:f9:6a:a8:60:4d: ef:96:df:1c:ec:d0:2a:9d:fe:15:e2:cf:e9:f8:19: 92:0e:36:70:4e:d0:82:a9:14:93:ad:19:17:b8:89: 81:51:99:02:7a:9d:3a:9e:38:e0:0f:60:40:49:84: 00:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1C:52:41:AA:47:68:2E:45:18:D1:53:A0:CC:67:65:17:35:76:92 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84581667-8425-427e-b2bb-05a7813ade35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03e::/48 Signature Algorithm: sha256WithRSAEncryption 8d:31:e9:64:76:44:64:bb:aa:3d:be:4c:3c:96:76:34:34:85: 13:e1:c4:07:11:ac:bc:84:0c:ce:60:11:8b:45:07:45:78:db: f6:09:c9:f6:84:96:f1:ff:39:2d:cf:4f:ee:df:41:b2:9c:56: 36:da:25:88:a3:25:96:8f:42:0e:e7:f4:5b:57:3a:c1:ff:4a: 2e:36:ec:e6:8b:47:32:33:9d:d7:a8:3d:41:8a:10:cf:8e:b5: 8e:fd:a4:a6:bc:ed:fe:50:e1:d7:9f:b8:83:d9:21:65:bf:ee: 22:d1:5b:12:46:e1:5b:3f:57:eb:5d:b1:f1:09:eb:b5:7f:1e: 39:d4:8b:37:6d:c3:91:dc:1d:93:c8:45:42:95:71:2f:dc:85: 36:e5:7e:20:54:97:d1:9c:83:59:a3:04:1a:ad:b3:4f:87:37: 6e:e6:58:73:b3:9a:43:d7:1c:0b:0f:ee:e0:dc:d5:81:35:d2: 12:b3:9c:2e:d2:df:91:10:55:ff:66:d8:68:5b:0b:31:b2:e6: 0b:9a:82:c8:9c:8c:b1:ee:7b:01:a2:03:57:26:4c:78:32:ed: 31:98:9d:b1:e3:de:06:42:bc:fd:5d:aa:ff:80:c3:94:34:2f: eb:63:e2:e9:49:73:40:bf:8c:12:29:9e:a1:c4:50:1d:68:62: 22:45:a9:71 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcHZlQzfPtHFJs/B6ZucqQueSBagwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIwMTc1MDExWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTNhODE2NjI3ZjhkYjMxZmRkZjkzNWI3NGIzMTRhNDY1 Mzk5ZTQyNTI0M2UyMDA5MjkxOGIzODIzNzcyZWJjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0wmKC0kEocHoLGDKUCS7dE5LxO3a8+GiNQf1x4+GsK0lk y5oobHNQxBKHRfE7KRUXNBCyUdbyXnvYlnZ9wLQ6vRM/Ehxnpi3HreUd8c+Sk+rY RadekQeYXN7ZarSTSESqK4bplH0P7vdmZiJnJgjF783SUZmM9whbC7jEDpaMoANa ZBfpwPYou4nMD0/PUMESAbfgSHp9p/1xdZtMwL9QAmLladFgTGNtEtZRxjLkXltH fUYrHbBmhVsyoSXCkOSs4tfMqwYlPBRw0WH5aqhgTe+W3xzs0Cqd/hXiz+n4GZIO NnBO0IKpFJOtGRe4iYFRmQJ6nTqeOOAPYEBJhACbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1RxSQapHaC5FGNFToMxnZRc1dpIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg0NTgxNjY3LTg0MjUtNDI3ZS1iMmJiLTA1YTc4MTNhZGUzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D4wDQYJKoZIhvcNAQELBQADggEBAI0x6WR2RGS7qj2+TDyWdjQ0 hRPhxAcRrLyEDM5gEYtFB0V42/YJyfaElvH/OS3PT+7fQbKcVjbaJYijJZaPQg7n 9FtXOsH/Si427OaLRzIzndeoPUGKEM+OtY79pKa87f5Q4defuIPZIWW/7iLRWxJG 4Vs/V+tdsfEJ67V/HjnUizdtw5HcHZPIRUKVcS/chTblfiBUl9Gcg1mjBBqts0+H N27mWHOzmkPXHAsP7uDc1YE10hKznC7S35EQVf9m2GhbCzGy5guagsicjLHuewGi A1cmTHgy7TGYnbHj3gZCvP1dqv+Aw5Q0L+tj4ulJc0C/jBIpnqHEUB1oYiJFqXE= -----END CERTIFICATE-----Generated at Mon Jun 2 16:52:15 2025 by rpki-client