$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa File: 86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa (raw, json) Hash identifier: pSllsBlPh5Fln0FAgkmZGWSu9oHvXCQrKY60xpAgE6A= Subject key identifier: 32:5B:BF:5C:C2:23:DE:83:21:C6:4A:DC:44:90:1E:01:11:3F:A9:7B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 68F50BB13508C6DB8279A3A756BFD249359480E8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa Signing time: Sat 31 May 2025 00:31:25 +0000 ROA not before: Sat 31 May 2025 00:31:25 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f5:0b:b1:35:08:c6:db:82:79:a3:a7:56:bf:d2:49:35:94:80:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:31:25 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=fa2151e08bb97f4bea467d4bd73949bb8b87997ead9036541e0ee57cb5b6695d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:29:4e:6d:34:1c:20:ea:4d:19:4e:ad:45:bd: de:f4:7e:ee:cf:ff:3d:61:68:e0:13:91:50:82:22: c3:6d:31:95:11:e8:73:3b:98:07:74:c4:f9:a5:4c: 33:0a:10:7f:a1:4f:9d:55:2d:53:18:0b:b0:a1:d9: 0d:5b:9c:99:f6:00:4a:9a:5c:cd:57:ef:a3:d0:04: 65:65:89:cd:f4:70:2c:f6:38:2b:1c:b3:e8:6c:99: 5b:23:bd:27:45:b1:f3:9b:9a:c1:c8:00:1b:b3:03: 50:05:43:5e:4d:84:90:54:bc:78:4c:8c:98:11:0d: 30:d3:09:9c:ae:ce:6c:9d:1d:30:b0:56:ff:34:3c: 10:01:7f:f1:65:16:90:04:d6:75:eb:e5:f4:12:49: 94:30:36:5a:3c:75:9a:6e:4b:c1:90:e2:c9:d5:a2: f1:d5:f1:a8:24:0f:94:ae:94:2e:1a:23:b3:5c:55: fb:a7:21:6f:03:f0:fc:1c:f2:20:29:61:7f:35:27: 4a:7f:3d:c1:f5:06:26:dc:32:8d:cf:64:1f:9b:ec: 5a:e6:b1:9b:8d:24:29:c6:4b:fd:95:4a:47:9c:4e: 34:58:fa:39:5c:37:bd:84:26:ff:1a:5d:e1:44:13: 82:cf:97:67:ec:de:6a:8e:6f:41:2d:90:3f:4c:42: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5B:BF:5C:C2:23:DE:83:21:C6:4A:DC:44:90:1E:01:11:3F:A9:7B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0c::/48 Signature Algorithm: sha256WithRSAEncryption 4d:e1:9e:5b:cc:7a:b1:13:0e:a2:4d:04:73:a6:57:6d:b3:b2: 21:97:79:4e:d4:44:ea:1a:9b:c5:5e:f7:86:d8:e9:24:d5:fc: f3:4c:23:0c:ed:b3:f8:9d:ad:5e:0e:52:03:bf:61:60:1b:e4: a9:43:7b:36:fc:aa:84:34:e5:15:5e:a4:a7:a0:fb:5a:d9:24: 75:2c:e2:5f:9b:9b:77:4e:71:e1:94:03:76:bd:6b:b0:e0:ea: 38:4d:26:7d:4e:fe:70:cf:cd:8f:d1:3d:47:47:ef:7b:bf:93: 3a:18:20:df:d9:ed:b2:1d:1f:f1:6f:ee:d2:8f:00:02:c1:e1: 6f:a1:d5:d5:63:96:51:4c:84:59:b7:b1:ec:ff:ee:9d:33:c3: 0e:70:b9:75:31:63:38:00:e7:b9:84:e5:e4:12:3d:c3:a4:16: a1:57:7a:7d:8d:c3:b3:81:ed:24:c0:85:d5:d1:0c:37:98:da: f3:6c:92:dd:f7:46:27:cb:a5:5f:cb:57:c0:df:36:a1:10:30: cc:6b:a9:9e:2e:5f:e8:73:ad:1b:fc:aa:8d:43:39:ad:60:4a: e5:0a:07:8f:ad:81:39:31:83:3c:89:68:6e:19:ed:67:87:69: 67:f5:25:1f:56:f1:ee:12:cc:09:f9:24:04:91:15:95:49:81: d7:0a:4c:75 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaPULsTUIxtuCeaOnVr/SSTWUgOgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAzMTI1WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTIxNTFlMDhiYjk3ZjRiZWE0NjdkNGJkNzM5NDliYjhi ODc5OTdlYWQ5MDM2NTQxZTBlZTU3Y2I1YjY2OTVkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgKU5tNBwg6k0ZTq1Fvd70fu7P/z1haOATkVCCIsNtMZUR 6HM7mAd0xPmlTDMKEH+hT51VLVMYC7Ch2Q1bnJn2AEqaXM1X76PQBGVlic30cCz2 OCscs+hsmVsjvSdFsfObmsHIABuzA1AFQ15NhJBUvHhMjJgRDTDTCZyuzmydHTCw Vv80PBABf/FlFpAE1nXr5fQSSZQwNlo8dZpuS8GQ4snVovHV8agkD5SulC4aI7Nc VfunIW8D8Pwc8iApYX81J0p/PcH1BibcMo3PZB+b7FrmsZuNJCnGS/2VSkecTjRY +jlcN72EJv8aXeFEE4LPl2fs3mqOb0EtkD9MQnzJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMlu/XMIj3oMhxkrcRJAeARE/qXswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg2YWYwY2M0LWQ5Y2QtNDI1Ny1hNDVhLTg5YzFmOTc1YmY3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAwwDQYJKoZIhvcNAQELBQADggEBAE3hnlvMerETDqJNBHOmV22z siGXeU7UROoam8Ve94bY6STV/PNMIwzts/idrV4OUgO/YWAb5KlDezb8qoQ05RVe pKeg+1rZJHUs4l+bm3dOceGUA3a9a7Dg6jhNJn1O/nDPzY/RPUdH73u/kzoYIN/Z 7bIdH/Fv7tKPAALB4W+h1dVjllFMhFm3sez/7p0zww5wuXUxYzgA57mE5eQSPcOk FqFXen2Nw7OB7STAhdXRDDeY2vNskt33RifLpV/LV8DfNqEQMMxrqZ4uX+hzrRv8 qo1DOa1gSuUKB4+tgTkxgzyJaG4Z7WeHaWf1JR9W8e4SzAn5JASRFZVJgdcKTHU= -----END CERTIFICATE-----Generated at Fri Jun 6 04:03:51 2025 by rpki-client