$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa File: bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa (raw, json) Hash identifier: pWZd2J0RYPnS+efv65xFOjdqihaPXeAMOSahznFn1a8= Subject key identifier: E3:78:80:43:68:DF:29:50:42:25:03:2C:6A:94:3D:92:E8:70:47:50 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 31BCAB898EEE4B23681B445B0E00F0492159881C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa Signing time: Wed 21 May 2025 00:50:46 +0000 ROA not before: Wed 21 May 2025 00:50:46 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:398::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:bc:ab:89:8e:ee:4b:23:68:1b:44:5b:0e:00:f0:49:21:59:88:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 21 00:50:46 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=af87c7aac6b8dfea70c305b20a1f7de454b98bdb8ef0fd5506293fc7be39de9f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:e5:df:76:4c:68:eb:b3:b2:29:50:42:87: bd:4a:7e:d1:c5:42:4a:d2:d1:d8:f5:1d:86:42:ab: 05:0d:cc:68:a2:4b:a5:e0:ae:62:03:74:70:50:02: 77:94:33:e8:e0:ad:5a:52:4b:76:a5:64:50:28:16: 3e:a6:5b:7e:b4:4c:21:33:f6:5d:e1:58:a6:ce:65: e0:2d:48:53:fd:ac:3c:62:6c:31:d3:33:5c:a4:19: e6:ce:76:45:89:c7:c6:b2:c5:ce:b4:87:31:5a:57: e6:c5:7a:fc:4b:b1:92:01:68:86:bb:11:c3:f5:52: af:50:19:cc:83:7e:c1:2a:14:74:e9:c4:98:2d:ce: eb:76:6c:3a:f4:d2:59:b4:9d:3d:03:0f:e2:0b:c9: 7f:4a:13:10:b7:69:2a:3a:75:ca:98:f5:7d:22:ef: 97:ae:ae:37:d0:43:d0:6c:6f:fe:2c:6c:26:53:ea: f3:01:0f:54:5d:7c:39:a6:5f:a8:86:95:1e:06:72: c4:74:07:02:36:14:c4:7c:b6:c8:96:c4:30:25:99: a8:85:cb:24:10:7c:c8:34:73:22:60:eb:db:77:56: 8e:e3:4c:24:1a:6a:bd:13:a6:f3:38:95:92:15:1a: f5:ff:b7:7c:67:93:14:7f:d4:1a:e3:4e:aa:e0:15: 4c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:78:80:43:68:DF:29:50:42:25:03:2C:6A:94:3D:92:E8:70:47:50 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:398::/48 Signature Algorithm: sha256WithRSAEncryption 7e:9e:8e:38:56:b7:aa:20:32:14:34:ac:c1:94:eb:8c:d5:d4: 51:75:86:dc:7d:1a:93:36:ea:2f:25:f6:6c:e9:9d:c8:eb:1d: 4a:f5:0b:43:d8:d1:40:aa:3e:be:9d:51:e1:d5:c1:31:d4:42: 16:d2:a3:42:e8:25:88:f2:e0:b8:4e:36:12:ef:d6:d8:75:ea: 7f:0c:2f:0a:70:7b:6e:44:51:b8:d6:10:41:c9:92:56:fa:65: 9f:6c:4d:0d:74:fa:fd:ac:80:76:ca:e7:0b:5f:f7:36:b1:8b: 36:57:a7:fd:45:fa:28:3d:11:ec:2b:0b:57:46:b2:4c:28:a1: dc:84:0d:3e:a6:82:50:46:e6:65:e5:4b:92:c7:dc:71:f4:0e: 6c:c6:7a:99:d9:e2:d9:dc:38:12:8d:fd:f4:fa:db:fc:ca:bf: 56:3f:83:c6:cc:35:4c:69:ca:8f:79:39:f5:9f:32:15:3b:51: 1e:bf:8d:ad:8e:97:14:f2:72:ef:13:e2:f2:59:f5:8e:26:fa: d5:80:8c:01:17:e0:99:51:34:66:25:d6:d9:9b:fb:6e:f3:1c: 93:c3:15:95:dc:c8:bb:a5:c4:a9:52:12:e3:06:37:2e:c2:ea: b6:99:89:d6:5c:bd:ae:67:5e:e3:f6:e3:c3:59:69:0c:c4:c3: 9d:cc:15:ff -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMbyriY7uSyNoG0RbDgDwSSFZiBwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIxMDA1MDQ2WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjg3YzdhYWM2YjhkZmVhNzBjMzA1YjIwYTFmN2RlNDU0 Yjk4YmRiOGVmMGZkNTUwNjI5M2ZjN2JlMzlkZTlmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLH+Xfdkxo67OyKVBCh71KftHFQkrS0dj1HYZCqwUNzGii S6XgrmIDdHBQAneUM+jgrVpSS3alZFAoFj6mW360TCEz9l3hWKbOZeAtSFP9rDxi bDHTM1ykGebOdkWJx8ayxc60hzFaV+bFevxLsZIBaIa7EcP1Uq9QGcyDfsEqFHTp xJgtzut2bDr00lm0nT0DD+ILyX9KExC3aSo6dcqY9X0i75eurjfQQ9Bsb/4sbCZT 6vMBD1RdfDmmX6iGlR4GcsR0BwI2FMR8tsiWxDAlmaiFyyQQfMg0cyJg69t3Vo7j TCQaar0TpvM4lZIVGvX/t3xnkxR/1BrjTqrgFUw5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU43iAQ2jfKVBCJQMsapQ9kuhwR1AwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JjOWMxZDBiLWQ5ZWMtNDQ1NS05N2JkLTBkNmE0MDYyYTkyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5gwDQYJKoZIhvcNAQELBQADggEBAH6ejjhWt6ogMhQ0rMGU64zV 1FF1htx9GpM26i8l9mzpncjrHUr1C0PY0UCqPr6dUeHVwTHUQhbSo0LoJYjy4LhO NhLv1th16n8MLwpwe25EUbjWEEHJklb6ZZ9sTQ10+v2sgHbK5wtf9zaxizZXp/1F +ig9EewrC1dGskwoodyEDT6mglBG5mXlS5LH3HH0DmzGepnZ4tncOBKN/fT62/zK v1Y/g8bMNUxpyo95OfWfMhU7UR6/ja2OlxTycu8T4vJZ9Y4m+tWAjAEX4JlRNGYl 1tmb+27zHJPDFZXcyLulxKlSEuMGNy7C6raZidZcva5nXuP248NZaQzEw53MFf8= -----END CERTIFICATE-----Generated at Fri Jun 6 03:51:29 2025 by rpki-client