$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa File: bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa (raw, json) Hash identifier: xekeKc9o3GmdjHv30cj0WniomVuQ1xxq4si52XU3HAI= Subject key identifier: E2:0D:E6:13:92:76:49:85:E4:4E:28:C3:AC:90:45:02:A0:A9:FF:D0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 477B450AA955A8BC429D2E26D2BD2D41EFAAAC73 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa Signing time: Sat 31 May 2025 00:30:16 +0000 ROA not before: Sat 31 May 2025 00:30:16 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7b:45:0a:a9:55:a8:bc:42:9d:2e:26:d2:bd:2d:41:ef:aa:ac:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:30:16 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=242e45eb1753930600f671f3761f1e72a67ba952861139d9a46b8dcffa4a22cb, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:d7:ca:19:a2:f8:4b:03:57:5c:08:d8:08: 96:8e:d7:ca:db:8a:9f:1f:ac:6a:85:98:31:94:22: 9c:0c:60:da:0d:c6:57:34:b3:0e:a2:cf:ac:8f:1d: 1a:4f:ec:97:13:33:79:c7:56:91:2d:47:d2:06:28: b7:b8:19:be:62:97:f4:d5:6b:c6:58:a9:a4:d7:29: ae:80:a8:ca:3a:08:2a:b7:a9:91:3a:62:69:68:3e: d7:26:29:54:06:64:12:13:b6:78:f9:00:d9:2f:9c: ea:c1:8a:2d:11:e9:28:b2:c7:04:a1:a5:0e:03:3b: 79:c4:9e:b2:2f:67:9a:e0:9e:c9:8f:25:66:50:ef: 04:50:31:4a:b0:60:56:36:19:de:5a:f5:47:36:92: b0:9d:bd:ed:2c:4d:b7:0c:9d:88:f5:89:33:6e:be: a4:5b:2d:e3:69:9e:03:62:a0:f3:63:f1:dd:7a:e5: 98:4c:71:d3:7b:14:d3:1d:c4:44:dd:88:88:32:cf: 20:2b:b4:8f:5d:62:8c:2c:c9:e8:f5:5f:4d:45:c2: a8:a9:8a:54:8b:22:5b:d0:81:e9:88:32:62:75:8b: bc:b1:00:ad:28:21:0e:8a:48:df:93:1b:7b:92:ff: 4e:0d:d8:8c:25:21:9c:d1:63:70:1e:9e:3e:99:0b: 07:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0D:E6:13:92:76:49:85:E4:4E:28:C3:AC:90:45:02:A0:A9:FF:D0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c11::/48 Signature Algorithm: sha256WithRSAEncryption 1a:24:01:29:7c:bc:85:90:f2:83:dc:f6:f2:a6:f5:e5:45:a2: 97:dd:0e:85:f0:8e:8e:63:11:f5:1a:7c:fb:cf:7f:f6:74:ec: 4d:ed:90:ff:07:0f:f5:27:61:fb:31:c0:b1:f4:1f:b2:be:15: 4c:78:5a:1f:f7:1b:c6:ff:14:5e:9a:a3:8b:d1:b6:50:ce:a4: e5:2a:24:5c:48:10:31:70:93:9e:fa:d0:c8:0e:57:e9:55:46: 30:f9:25:30:83:94:d2:cf:b3:d0:4b:0e:ac:a3:4e:a3:c9:e9: 21:27:07:02:e4:be:8e:f9:c8:89:ea:ec:1f:24:3a:b3:a7:b6: 30:9c:10:56:3b:c3:48:5e:4c:b3:26:51:34:e4:11:2d:fd:41: 6e:85:33:3d:17:d6:53:88:fd:80:12:20:38:8c:e6:e7:7b:fa: a3:b5:ae:22:7e:6f:e7:2c:22:e7:cb:56:e6:00:d5:aa:6f:ba: 08:a5:56:56:9f:c8:40:eb:5a:a6:15:a9:3c:b9:18:e4:ac:35: ad:b5:ce:6a:2c:64:28:3e:8f:53:9f:5d:48:b0:7c:aa:06:bc: da:38:55:71:06:41:38:d3:31:a9:6c:ef:7b:72:82:10:2e:67: 98:2f:d7:f3:f1:20:f0:09:5f:6e:eb:19:51:6e:d2:8f:0f:08: e6:06:fb:ed -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR3tFCqlVqLxCnS4m0r0tQe+qrHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAzMDE2WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDJlNDVlYjE3NTM5MzA2MDBmNjcxZjM3NjFmMWU3MmE2 N2JhOTUyODYxMTM5ZDlhNDZiOGRjZmZhNGEyMmNiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5g9fKGaL4SwNXXAjYCJaO18rbip8frGqFmDGUIpwMYNoN xlc0sw6iz6yPHRpP7JcTM3nHVpEtR9IGKLe4Gb5il/TVa8ZYqaTXKa6AqMo6CCq3 qZE6YmloPtcmKVQGZBITtnj5ANkvnOrBii0R6SiyxwShpQ4DO3nEnrIvZ5rgnsmP JWZQ7wRQMUqwYFY2Gd5a9Uc2krCdve0sTbcMnYj1iTNuvqRbLeNpngNioPNj8d16 5ZhMcdN7FNMdxETdiIgyzyArtI9dYowsyej1X01FwqipilSLIlvQgemIMmJ1i7yx AK0oIQ6KSN+TG3uS/04N2IwlIZzRY3Aenj6ZCwfPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4g3mE5J2SYXkTijDrJBFAqCp/9AwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JjM2M1MGZjLTQ5OTMtNGMwZi04NzE4LWY2NmZjOGZjY2NlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBEwDQYJKoZIhvcNAQELBQADggEBABokASl8vIWQ8oPc9vKm9eVF opfdDoXwjo5jEfUafPvPf/Z07E3tkP8HD/UnYfsxwLH0H7K+FUx4Wh/3G8b/FF6a o4vRtlDOpOUqJFxIEDFwk5760MgOV+lVRjD5JTCDlNLPs9BLDqyjTqPJ6SEnBwLk vo75yInq7B8kOrOntjCcEFY7w0heTLMmUTTkES39QW6FMz0X1lOI/YASIDiM5ud7 +qO1riJ+b+csIufLVuYA1apvugilVlafyEDrWqYVqTy5GOSsNa21zmosZCg+j1Of XUiwfKoGvNo4VXEGQTjTMals73tyghAuZ5gv1/PxIPAJX27rGVFu0o8PCOYG++0= -----END CERTIFICATE-----Generated at Fri Jun 6 03:28:33 2025 by rpki-client