$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b972e918-8dd0-4057-aaa2-47ee5f32c314.roa File: b972e918-8dd0-4057-aaa2-47ee5f32c314.roa (raw, json) Hash identifier: NB7NFA/1i9LRYjf3yMQnh10rNnkGBUy9mD3naNRO23s= Subject key identifier: C0:00:7C:08:DD:EF:B4:C0:3C:AF:3F:92:E0:0E:43:46:6A:FC:EA:5B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: BC4A42BA7E6E65F7802606FDB60D177C597AAF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b972e918-8dd0-4057-aaa2-47ee5f32c314.roa Signing time: Wed 21 May 2025 00:51:26 +0000 ROA not before: Wed 21 May 2025 00:51:26 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:385::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bc:4a:42:ba:7e:6e:65:f7:80:26:06:fd:b6:0d:17:7c:59:7a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 21 00:51:26 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=47d9094a94c86514adae94c779a9c28a587aad4308a4809a2dedfdd3fbc2f144, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:7f:5a:03:ff:b0:75:38:50:63:24:d3:1d: 30:01:9f:5f:5c:37:d9:8e:ef:28:53:32:9b:79:eb: aa:c4:46:89:54:78:21:85:60:ea:7c:43:89:cc:4f: 6b:a9:a3:fd:89:29:9c:80:ba:a1:ec:fb:81:c6:8e: 6f:01:81:ee:a0:8f:06:be:fe:dd:a8:24:c5:a5:b9: c9:bc:d2:73:36:c8:3b:e4:51:d5:cb:d1:9d:0a:f1: c2:60:b2:70:bc:fd:c3:09:4e:d1:13:78:95:2a:a2: c1:7b:8d:2c:f1:a7:d4:78:26:75:9a:bf:67:f7:07: 93:e9:d4:20:52:b9:11:ef:e4:8c:31:45:43:9e:b3: 07:ae:fd:a8:43:8f:82:b3:bc:41:d3:31:c5:a0:e1: f4:e0:75:5c:97:40:9d:54:1c:48:19:53:11:7b:dc: 5d:da:82:0e:c6:72:41:16:e8:aa:e0:bb:25:eb:46: c4:78:1a:1f:18:32:0f:dc:df:aa:ac:7c:c3:7a:8d: ee:3f:31:cf:41:9b:70:1a:01:ad:1b:bc:21:ca:0c: 4b:de:86:0e:d1:64:d0:0c:7d:a8:67:f1:38:59:3a: 8f:5f:d1:4f:7b:17:76:ea:82:fc:31:c8:f5:e1:cd: c8:ae:78:26:44:1a:59:bb:c8:5b:1f:42:ca:10:04: 97:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:00:7C:08:DD:EF:B4:C0:3C:AF:3F:92:E0:0E:43:46:6A:FC:EA:5B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b972e918-8dd0-4057-aaa2-47ee5f32c314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:385::/48 Signature Algorithm: sha256WithRSAEncryption 6a:97:5b:6a:a0:be:dc:11:7e:68:7c:68:42:47:a5:92:84:9c: 3c:a7:0b:1d:6a:5b:c3:e5:3e:02:1e:f9:63:13:0e:f1:6e:70: 15:ca:d5:a5:07:42:68:21:65:af:e3:09:9b:69:4d:59:e6:e9: ef:6b:d1:fe:4b:aa:d6:2d:0f:f4:92:77:b8:91:6c:ac:07:d6: 14:a4:de:3e:93:20:c6:a6:1b:1f:fa:2c:07:49:ae:d3:68:16: 02:ca:13:02:ba:67:d1:10:ac:41:cd:48:14:26:30:97:98:7f: a5:9f:51:ba:2f:35:1e:a3:91:e7:8d:cb:ad:e3:7a:67:a1:bf: 7b:0c:08:b2:7c:6b:cf:f1:ae:c2:fc:5f:a4:0d:96:e6:bd:22: 44:01:07:c5:fa:99:ad:dc:d2:c6:d6:e6:5d:8c:93:e8:26:14: 64:e9:b2:1e:d8:30:21:e9:f6:64:32:d1:6c:6f:d5:9a:84:a8: 07:e4:f1:21:57:7d:25:5f:af:24:ce:4d:9b:17:ab:ec:d3:f5: c7:0f:c1:d2:a8:d8:7c:e6:ff:a3:8f:95:65:a2:bd:a6:82:99: 82:20:c9:c0:3b:e5:40:d9:8f:11:c6:04:25:2e:29:c5:9e:7d: b0:36:3f:e3:8a:db:82:41:16:de:28:84:73:0d:f8:34:bb:ca: e2:00:c8:43 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUALxKQrp+bmX3gCYG/bYNF3xZeq8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIxMDA1MTI2WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2Q5MDk0YTk0Yzg2NTE0YWRhZTk0Yzc3OWE5YzI4YTU4 N2FhZDQzMDhhNDgwOWEyZGVkZmRkM2ZiYzJmMTQ0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgJX9aA/+wdThQYyTTHTABn19cN9mO7yhTMpt566rERolU eCGFYOp8Q4nMT2upo/2JKZyAuqHs+4HGjm8Bge6gjwa+/t2oJMWlucm80nM2yDvk UdXL0Z0K8cJgsnC8/cMJTtETeJUqosF7jSzxp9R4JnWav2f3B5Pp1CBSuRHv5Iwx RUOesweu/ahDj4KzvEHTMcWg4fTgdVyXQJ1UHEgZUxF73F3agg7GckEW6KrguyXr RsR4Gh8YMg/c36qsfMN6je4/Mc9Bm3AaAa0bvCHKDEvehg7RZNAMfahn8ThZOo9f 0U97F3bqgvwxyPXhzciueCZEGlm7yFsfQsoQBJexAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwAB8CN3vtMA8rz+S4A5DRmr86lswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2I5NzJlOTE4LThkZDAtNDA1Ny1hYWEyLTQ3ZWU1ZjMyYzMxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4UwDQYJKoZIhvcNAQELBQADggEBAGqXW2qgvtwRfmh8aEJHpZKE nDynCx1qW8PlPgIe+WMTDvFucBXK1aUHQmghZa/jCZtpTVnm6e9r0f5LqtYtD/SS d7iRbKwH1hSk3j6TIMamGx/6LAdJrtNoFgLKEwK6Z9EQrEHNSBQmMJeYf6WfUbov NR6jkeeNy63jemehv3sMCLJ8a8/xrsL8X6QNlua9IkQBB8X6ma3c0sbW5l2Mk+gm FGTpsh7YMCHp9mQy0Wxv1ZqEqAfk8SFXfSVfryTOTZsXq+zT9ccPwdKo2Hzm/6OP lWWivaaCmYIgycA75UDZjxHGBCUuKcWefbA2P+OK24JBFt4ohHMN+DS7yuIAyEM= -----END CERTIFICATE-----Generated at Fri Jun 6 04:01:48 2025 by rpki-client