$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2526bb0-8744-452b-897e-b0ce9626682b.roa File: b2526bb0-8744-452b-897e-b0ce9626682b.roa (raw, json) Hash identifier: FAyv6B1fQNa9exv2RozHW+fc0gd0bpLOSX6zs2NwCFc= Subject key identifier: D5:A6:AB:EB:E6:CA:0F:15:6A:0A:A9:7F:46:40:AE:7B:B5:B6:D0:9F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3FBFF227DE3A99569E177FA78FDE0FD67413DD5D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2526bb0-8744-452b-897e-b0ce9626682b.roa Signing time: Sat 31 May 2025 00:30:18 +0000 ROA not before: Sat 31 May 2025 00:30:18 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:bf:f2:27:de:3a:99:56:9e:17:7f:a7:8f:de:0f:d6:74:13:dd:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:30:18 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=b72d8d3b1b39c955da2f7b8caa8e591c529c89ec4d58b5b7cfe09919de7a0ead, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8b:9d:ac:4d:e2:25:dc:82:1c:05:b3:a6:87: e3:19:ec:ff:27:05:75:b4:c4:73:22:33:64:b9:99: 59:73:50:96:c9:ca:77:ad:1e:cf:75:ea:32:ac:9c: 96:3f:73:a8:f0:13:5e:87:40:c0:90:69:4c:5d:92: 94:f7:f4:e0:74:46:d7:4b:6a:1e:4c:28:88:34:f0: d5:ca:76:87:44:a5:84:a4:95:dc:8e:65:b5:a7:76: 94:84:7b:33:8d:c8:65:1b:b0:10:d2:8b:32:16:4f: 47:09:e2:06:6a:76:ee:83:27:56:81:85:e9:7f:6f: 1e:94:a9:fb:bf:0a:a1:8e:44:ec:da:ca:2b:a2:e5: d6:b6:9d:28:e5:32:fa:0d:55:db:94:10:93:df:6e: f4:b6:25:15:5f:ff:cf:ec:74:18:55:6e:7e:67:2c: 44:a5:a0:6f:9b:9d:ae:44:e1:94:4e:34:57:01:94: 48:27:94:4f:52:c8:e9:b7:43:83:c2:73:5a:bc:a7: e8:0d:aa:12:9f:fd:49:eb:80:f4:ec:70:eb:df:b9: 50:47:76:59:ee:71:18:e9:a5:37:ad:35:86:da:a2: 4e:d9:d8:83:65:96:d6:cc:9c:96:c5:bb:4c:d2:2e: ca:e0:a8:d1:28:f6:6c:76:14:39:c2:99:85:c5:03: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A6:AB:EB:E6:CA:0F:15:6A:0A:A9:7F:46:40:AE:7B:B5:B6:D0:9F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2526bb0-8744-452b-897e-b0ce9626682b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c11::/48 Signature Algorithm: sha256WithRSAEncryption 37:37:0f:2c:8d:7d:42:e4:dc:d3:fb:69:84:f1:fd:20:05:7b: 76:ec:81:1f:49:54:73:11:ba:e9:f6:6c:36:47:bd:db:cd:20: 7d:b3:81:62:2f:7b:fd:92:6a:08:6b:14:e6:06:55:21:40:e2: b9:36:d8:16:48:80:e2:86:59:e9:0c:8f:a1:f8:2e:5e:3d:9c: 0a:81:6d:4e:f3:7e:b9:d4:79:e0:7c:a0:f5:8b:f3:a8:86:8a: c0:a3:ae:98:6a:ca:6d:c9:3b:c4:8a:dc:24:dd:22:86:dd:fc: dc:f6:45:de:f1:e9:09:2c:30:67:fd:04:41:57:18:0a:0c:cf: 6d:78:11:a6:68:c5:76:14:9b:33:5a:98:d7:7e:e7:25:a6:f2: 9e:b8:6a:b4:65:d6:4a:cb:68:63:2f:73:5d:79:53:6d:fb:10: 7b:da:7d:53:5a:ba:8a:3c:7a:27:3f:3f:f8:3c:3f:ab:94:ef: 98:f0:32:d2:8f:77:cc:6e:da:bf:d5:f9:1c:6a:e2:28:44:0b: cf:9e:71:72:9f:7b:e0:96:2a:d8:b3:c9:dd:c7:27:6c:53:f4: 9b:41:0b:03:f6:35:a1:f3:be:5a:2b:8a:ab:e2:c7:d6:fb:1e: b3:2b:03:16:ef:13:fc:9c:5b:74:ec:d2:fe:c1:f4:f3:c3:fd: b0:7d:ca:6d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP7/yJ946mVaeF3+nj94P1nQT3V0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAzMDE4WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzJkOGQzYjFiMzljOTU1ZGEyZjdiOGNhYThlNTkxYzUy OWM4OWVjNGQ1OGI1YjdjZmUwOTkxOWRlN2EwZWFkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbi52sTeIl3IIcBbOmh+MZ7P8nBXW0xHMiM2S5mVlzUJbJ ynetHs916jKsnJY/c6jwE16HQMCQaUxdkpT39OB0RtdLah5MKIg08NXKdodEpYSk ldyOZbWndpSEezONyGUbsBDSizIWT0cJ4gZqdu6DJ1aBhel/bx6Uqfu/CqGOROza yiui5da2nSjlMvoNVduUEJPfbvS2JRVf/8/sdBhVbn5nLESloG+bna5E4ZRONFcB lEgnlE9SyOm3Q4PCc1q8p+gNqhKf/UnrgPTscOvfuVBHdlnucRjppTetNYbaok7Z 2INlltbMnJbFu0zSLsrgqNEo9mx2FDnCmYXFA+FBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1aar6+bKDxVqCql/RkCue7W20J8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IyNTI2YmIwLTg3NDQtNDUyYi04OTdlLWIwY2U5NjI2NjgyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBEwDQYJKoZIhvcNAQELBQADggEBADc3DyyNfULk3NP7aYTx/SAF e3bsgR9JVHMRuun2bDZHvdvNIH2zgWIve/2SaghrFOYGVSFA4rk22BZIgOKGWekM j6H4Ll49nAqBbU7zfrnUeeB8oPWL86iGisCjrphqym3JO8SK3CTdIobd/Nz2Rd7x 6QksMGf9BEFXGAoMz214EaZoxXYUmzNamNd+5yWm8p64arRl1krLaGMvc115U237 EHvafVNauoo8eic/P/g8P6uU75jwMtKPd8xu2r/V+Rxq4ihEC8+ecXKfe+CWKtiz yd3HJ2xT9JtBCwP2NaHzvloriqvix9b7HrMrAxbvE/ycW3Ts0v7B9PPD/bB9ym0= -----END CERTIFICATE-----Generated at Sun Jun 8 00:34:17 2025 by rpki-client