$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa File: bc9bb346-4bd0-43e3-9369-a842e8d67346.roa (raw, json) Hash identifier: rgUJcWu7E2nAOryq9OOLT/DKyovY2+fU06vaZU4WGos= Subject key identifier: 1B:CA:D8:91:F3:03:E2:71:34:12:FF:75:FA:4A:2D:E4:5D:15:DD:F3 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 083688944FBFA3A47302386FB005AA7CD6AC5004 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa Signing time: Fri 23 May 2025 00:31:16 +0000 ROA not before: Fri 23 May 2025 00:31:16 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:610::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:36:88:94:4f:bf:a3:a4:73:02:38:6f:b0:05:aa:7c:d6:ac:50:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 23 00:31:16 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=098b90ab4a6d05c4d83f96bf9d641a93627a38f7aa7e7e24bacd8aa48b6d4a6f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:f5:aa:05:4b:83:99:dd:dd:98:15:e0:09: a9:ea:5e:7f:48:f8:21:34:1c:cd:66:26:37:b5:d0: e2:f5:16:ce:78:9a:41:6e:e3:01:84:bd:0a:1a:10: e6:fc:ed:48:a6:ab:ee:42:8c:ba:c4:b1:3e:08:eb: 5d:97:ba:43:56:5b:07:d1:ce:fb:cd:4d:ed:db:f8: 95:e2:b8:d1:05:3a:04:48:4c:52:7c:4d:d1:ec:a0: 5e:86:e3:6e:4e:ca:93:0d:c1:ff:58:15:b6:90:cd: c8:57:fe:e0:2b:90:ef:16:7e:01:cf:1a:2f:24:99: cb:2a:d0:e9:44:61:2a:e2:73:d4:cf:d7:85:ed:42: eb:59:65:a7:d8:24:ab:30:9a:65:6c:fd:46:ad:94: e1:74:d4:bd:4e:b5:0b:ac:59:4f:3c:15:9c:ed:30: e8:99:cb:e0:37:70:f3:9f:cd:17:b4:13:bc:fe:09: fd:31:73:c0:fe:16:a5:31:32:d3:1f:42:69:f4:ef: 43:8c:cd:ef:44:a3:05:0d:21:22:d9:e5:40:58:5a: 36:ef:56:52:20:06:e6:16:d1:c3:ee:7c:16:c4:42: dc:1b:f5:e4:76:ff:b6:5e:03:ee:7e:00:19:53:f5: 70:ee:3d:be:c0:1d:26:f6:37:35:dd:77:ca:3d:54: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CA:D8:91:F3:03:E2:71:34:12:FF:75:FA:4A:2D:E4:5D:15:DD:F3 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:610::/48 Signature Algorithm: sha256WithRSAEncryption a7:c7:10:32:6e:de:fa:96:f0:e1:09:1c:30:a2:3a:70:8d:79: 77:73:d6:7e:f9:d5:07:0e:17:06:7b:c8:50:30:b7:70:da:79: b0:8a:11:2a:23:10:ef:d0:80:4c:02:fb:2c:fe:0d:fa:d4:57: da:52:df:2e:f3:29:4f:9b:60:4e:e7:11:5f:9e:1e:1f:42:da: 53:70:d1:23:8f:57:b9:0b:91:9c:14:81:29:c7:a8:18:a6:97: 47:cb:01:b0:2c:25:02:5c:b9:7e:f6:65:55:84:e9:33:64:18: 75:24:47:f1:9e:39:e8:b5:7d:7a:0b:55:32:e4:a5:2c:65:ec: b5:c0:7f:fc:2f:43:fe:b3:48:bb:bf:65:7b:eb:d5:bb:4e:b4: 79:e1:91:6f:69:d7:2f:7e:e1:46:29:78:97:05:45:4f:6f:3f: ad:00:dd:15:9b:50:50:a0:53:18:ed:48:41:be:94:ae:41:60: e1:ef:93:8d:cf:81:77:43:41:f9:9c:cd:2e:75:87:0e:ba:23: 57:99:d0:f0:e3:e5:f9:27:dc:9d:1f:72:f2:f1:74:e1:34:cf: fd:61:70:44:c7:59:14:f8:b3:02:55:71:29:39:54:d8:90:5f: 86:a3:a8:07:0a:56:f5:db:74:42:ca:e7:c5:ce:08:4c:2e:19: e2:e2:bc:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCDaIlE+/o6RzAjhvsAWqfNasUAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIzMDAzMTE2WhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOThiOTBhYjRhNmQwNWM0ZDgzZjk2YmY5ZDY0MWE5MzYy N2EzOGY3YWE3ZTdlMjRiYWNkOGFhNDhiNmQ0YTZmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyz/WqBUuDmd3dmBXgCanqXn9I+CE0HM1mJje10OL1Fs54 mkFu4wGEvQoaEOb87Uimq+5CjLrEsT4I612XukNWWwfRzvvNTe3b+JXiuNEFOgRI TFJ8TdHsoF6G425OypMNwf9YFbaQzchX/uArkO8WfgHPGi8kmcsq0OlEYSric9TP 14XtQutZZafYJKswmmVs/UatlOF01L1OtQusWU88FZztMOiZy+A3cPOfzRe0E7z+ Cf0xc8D+FqUxMtMfQmn070OMze9EowUNISLZ5UBYWjbvVlIgBuYW0cPufBbEQtwb 9eR2/7ZeA+5+ABlT9XDuPb7AHSb2NzXdd8o9VCNPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUG8rYkfMD4nE0Ev91+kot5F0V3fMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JjOWJiMzQ2LTRiZDAtNDNlMy05MzY5LWE4NDJlOGQ2NzM0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhAwDQYJKoZIhvcNAQELBQADggEBAKfHEDJu3vqW8OEJHDCiOnCN eXdz1n751QcOFwZ7yFAwt3DaebCKESojEO/QgEwC+yz+DfrUV9pS3y7zKU+bYE7n EV+eHh9C2lNw0SOPV7kLkZwUgSnHqBiml0fLAbAsJQJcuX72ZVWE6TNkGHUkR/Ge Oei1fXoLVTLkpSxl7LXAf/wvQ/6zSLu/ZXvr1btOtHnhkW9p1y9+4UYpeJcFRU9v P60A3RWbUFCgUxjtSEG+lK5BYOHvk43PgXdDQfmczS51hw66I1eZ0PDj5fkn3J0f cvLxdOE0z/1hcETHWRT4swJVcSk5VNiQX4ajqAcKVvXbdELK58XOCEwuGeLivHs= -----END CERTIFICATE-----Generated at Fri Jun 6 04:14:05 2025 by rpki-client