$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c70296e2-c595-4a95-bc2e-ae2732ee3188.roa File: c70296e2-c595-4a95-bc2e-ae2732ee3188.roa (raw, json) Hash identifier: wEwWPQm53Vr8lXVzXLyNKt8eot84Z/2yVQCVDvf+ln4= Subject key identifier: 91:A3:F2:14:D0:BE:4E:6F:FA:24:CD:8B:3C:F5:F6:1E:31:5A:A3:92 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 03713E73E919945F27CE53D2F5443EC7E72724E1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c70296e2-c595-4a95-bc2e-ae2732ee3188.roa Signing time: Tue 20 May 2025 17:50:35 +0000 ROA not before: Tue 20 May 2025 17:50:35 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:397::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:71:3e:73:e9:19:94:5f:27:ce:53:d2:f5:44:3e:c7:e7:27:24:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 20 17:50:35 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=03722f4aa71a5b577085208f512af3f8b9e2cacf8bb76c7b52ecd3b76a654d2f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:6a:38:f1:54:d3:26:6d:b8:f7:6f:bf:e9: 3c:1f:63:20:56:c8:c8:6b:aa:4d:0a:c8:43:09:9b: 03:e9:7d:0c:55:63:6b:4e:4b:4c:70:c9:83:6c:3c: 6e:c8:16:fe:7f:9b:41:bb:26:3b:f9:27:6d:4d:7e: 90:4e:97:8a:ec:4a:c2:24:8c:31:e2:d9:9e:27:f2: 74:cd:16:ff:c0:a4:c3:a4:21:32:86:40:f1:31:20: fa:cc:ff:87:1c:2b:45:b5:88:7d:49:dc:a6:eb:75: 87:1a:3e:40:b2:74:11:5e:09:6e:e7:25:99:7f:23: c9:ea:60:fa:e7:e5:b0:5b:ab:59:d5:34:52:6b:93: 1f:20:ca:f1:5c:89:55:15:4d:9a:56:7e:26:a9:2a: 8c:20:7e:d1:2a:08:9e:c9:0f:80:89:b6:ea:5d:57: 51:29:fe:0a:c5:9e:82:05:22:a5:7a:f2:f0:1a:0b: b2:44:b8:1f:6e:95:a3:c4:d4:e9:b3:78:46:50:93: 48:2d:a4:48:23:43:f5:c8:bc:48:12:56:04:83:75: 17:76:ff:9a:1f:fe:47:ee:34:a5:2c:d6:36:a1:e1: 42:0c:84:c1:dc:26:18:6d:33:41:f3:3d:9e:70:f7: bf:2b:12:97:3c:8f:79:00:fc:d3:04:58:52:9c:60: f7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A3:F2:14:D0:BE:4E:6F:FA:24:CD:8B:3C:F5:F6:1E:31:5A:A3:92 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c70296e2-c595-4a95-bc2e-ae2732ee3188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:397::/48 Signature Algorithm: sha256WithRSAEncryption ac:e3:f5:0a:16:d2:49:e7:96:d9:84:ef:1e:8d:94:b8:e1:42: 8e:a3:c0:af:8f:11:08:a1:15:2e:72:ce:7a:03:10:98:80:58: b9:32:e3:f5:ab:be:c9:89:d9:1a:f6:f9:fc:1f:36:5f:80:7c: a0:a5:2e:b8:be:78:2a:d4:64:44:d2:73:05:47:86:55:98:14: 17:cd:00:d9:91:ed:ec:a9:86:7d:c7:4e:ef:83:ba:51:80:0b: 2e:0b:7c:17:27:f4:b1:be:0c:24:28:fd:d8:74:29:6b:ef:f2: 8e:65:b3:80:5c:e3:45:27:6a:84:df:0c:f7:eb:ed:5f:15:01: d5:92:3d:a8:60:51:b7:30:d5:57:46:b3:dd:e0:53:07:13:71: c7:41:d1:8f:b0:82:fa:ea:08:22:bc:a1:1d:a2:06:24:c3:89: 25:d0:24:84:7f:b9:09:af:5a:e6:ff:9e:df:b1:09:dc:6e:4c: ed:35:c9:2b:8d:cf:b3:a8:08:b4:8e:47:7b:ee:d8:8d:be:67: d4:47:c9:9c:8b:4e:eb:ad:54:3f:f3:ad:b5:e0:4e:ca:c4:69: f0:44:4f:71:93:6a:81:15:5b:03:ee:c6:5e:8a:68:4c:e4:d2: 39:18:43:7a:94:56:be:73:68:3e:d8:c5:5d:50:59:f4:7d:2f: 97:3f:16:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA3E+c+kZlF8nzlPS9UQ+x+cnJOEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIwMTc1MDM1WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzcyMmY0YWE3MWE1YjU3NzA4NTIwOGY1MTJhZjNmOGI5 ZTJjYWNmOGJiNzZjN2I1MmVjZDNiNzZhNjU0ZDJmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvQWo48VTTJm2492+/6TwfYyBWyMhrqk0KyEMJmwPpfQxV Y2tOS0xwyYNsPG7IFv5/m0G7Jjv5J21NfpBOl4rsSsIkjDHi2Z4n8nTNFv/ApMOk ITKGQPExIPrM/4ccK0W1iH1J3KbrdYcaPkCydBFeCW7nJZl/I8nqYPrn5bBbq1nV NFJrkx8gyvFciVUVTZpWfiapKowgftEqCJ7JD4CJtupdV1Ep/grFnoIFIqV68vAa C7JEuB9ulaPE1OmzeEZQk0gtpEgjQ/XIvEgSVgSDdRd2/5of/kfuNKUs1jah4UIM hMHcJhhtM0HzPZ5w978rEpc8j3kA/NMEWFKcYPe3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkaPyFNC+Tm/6JM2LPPX2HjFao5IwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2M3MDI5NmUyLWM1OTUtNGE5NS1iYzJlLWFlMjczMmVlMzE4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5cwDQYJKoZIhvcNAQELBQADggEBAKzj9QoW0knnltmE7x6NlLjh Qo6jwK+PEQihFS5yznoDEJiAWLky4/WrvsmJ2Rr2+fwfNl+AfKClLri+eCrUZETS cwVHhlWYFBfNANmR7eyphn3HTu+DulGACy4LfBcn9LG+DCQo/dh0KWvv8o5ls4Bc 40UnaoTfDPfr7V8VAdWSPahgUbcw1VdGs93gUwcTccdB0Y+wgvrqCCK8oR2iBiTD iSXQJIR/uQmvWub/nt+xCdxuTO01ySuNz7OoCLSOR3vu2I2+Z9RHyZyLTuutVD/z rbXgTsrEafBET3GTaoEVWwPuxl6KaEzk0jkYQ3qUVr5zaD7YxV1QWfR9L5c/FlA= -----END CERTIFICATE-----Generated at Fri Jun 6 04:05:50 2025 by rpki-client