$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8e34772-02dc-4583-ad8a-aa3c4a295798.roa File: c8e34772-02dc-4583-ad8a-aa3c4a295798.roa (raw, json) Hash identifier: 5oEgd7ApoKXPkFvcpYiFhXzId2aA9z2cSJznB6Sr+gY= Subject key identifier: 4D:DF:5F:69:29:91:AC:83:C2:45:43:C1:2C:2E:8C:93:D1:BA:DC:08 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3893CA08722BA7F0D10029AF1642E5C85B96146C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8e34772-02dc-4583-ad8a-aa3c4a295798.roa Signing time: Wed 21 May 2025 00:51:13 +0000 ROA not before: Wed 21 May 2025 00:51:13 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:30c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:93:ca:08:72:2b:a7:f0:d1:00:29:af:16:42:e5:c8:5b:96:14:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 21 00:51:13 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=47f0a484c5eb8c5bcdb9490bcac2eead835434712f3ab17b1b18c082be70f8d1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d6:f7:d6:4c:72:23:ba:3c:d7:e0:41:6a:61: 81:2e:22:9d:40:e9:8a:94:49:79:8f:4f:f3:ec:56: 35:80:ea:1f:b8:7f:2b:e2:14:e9:b2:ae:55:28:1b: 71:73:63:56:f4:1b:12:d4:14:97:e7:84:00:71:06: c4:ab:17:89:5c:99:c6:88:d8:59:cc:48:a3:4f:f8: e5:3b:97:9e:07:22:e4:6a:52:f4:4f:65:4e:ac:bb: a8:8f:8c:b6:b6:67:71:72:3d:5f:37:e9:d7:6c:8a: 01:1e:f8:42:df:a8:cf:1b:c8:1d:cb:9d:63:c4:2b: e5:4d:7e:b7:37:d1:48:ce:42:6f:82:48:60:14:4c: e1:1d:c2:87:42:58:30:b1:37:92:55:12:a0:20:3b: 70:d0:27:39:44:34:f8:19:46:e1:33:0b:db:b7:81: b5:17:5a:2f:ca:06:92:d1:44:0a:bd:35:39:ee:2e: b5:c2:7d:fd:f0:e6:0b:26:da:5d:ff:38:02:5d:90: cf:de:f1:14:1b:85:eb:62:50:b1:70:49:33:65:51: 09:32:42:1e:fd:21:c9:33:77:f2:20:18:a9:c3:a1: 11:c4:83:35:b4:73:d7:b5:16:6b:ad:9a:7a:4a:8b: 2e:d2:0b:f9:45:38:9f:f6:6a:d9:21:02:09:5a:15: 71:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DF:5F:69:29:91:AC:83:C2:45:43:C1:2C:2E:8C:93:D1:BA:DC:08 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8e34772-02dc-4583-ad8a-aa3c4a295798.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30c::/48 Signature Algorithm: sha256WithRSAEncryption 55:ab:f5:c3:7d:40:e4:e3:97:41:66:c9:96:63:0d:b0:e6:15: 81:66:71:cd:61:0f:c4:69:ce:b3:10:10:28:22:0d:bb:56:9b: f2:80:3e:93:a6:ec:86:94:01:de:06:50:a2:57:a9:c2:f9:aa: b1:85:15:9b:10:61:10:08:72:8c:85:ff:9a:56:3b:e0:51:7b: 99:eb:44:78:c3:af:36:a8:21:8f:79:f0:dc:8a:68:e1:69:ca: 0d:d0:6d:74:98:be:be:98:e2:3b:f4:a0:36:e1:55:b7:d4:45: fa:4c:30:65:2d:91:81:b1:1e:60:01:c9:44:7e:ef:f2:33:7e: 11:18:ab:e0:f3:ca:a3:c5:d4:6b:0c:e7:6c:4a:95:b5:04:ec: 1b:ce:cc:36:f3:1e:c1:fc:40:01:d7:a7:3e:d8:f7:85:1b:ac: 3b:6b:5a:d7:6e:50:cd:97:86:5e:6e:54:f2:e5:09:6f:53:0b: 71:35:4e:d1:26:98:2a:cd:d3:19:b2:d3:5a:c9:e9:bc:c2:37: aa:0d:e0:37:1d:33:63:5f:77:54:bc:7e:63:9f:1e:4b:9f:5a: ae:d2:63:79:6e:2c:f5:bd:fc:e0:1a:2c:cf:13:c9:82:4b:1d: a8:a6:30:73:ff:2f:f6:18:dc:ec:02:1e:42:69:a3:51:c0:b9: e1:a1:0f:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOJPKCHIrp/DRACmvFkLlyFuWFGwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIxMDA1MTEzWhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2YwYTQ4NGM1ZWI4YzViY2RiOTQ5MGJjYWMyZWVhZDgz NTQzNDcxMmYzYWIxN2IxYjE4YzA4MmJlNzBmOGQxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR1vfWTHIjujzX4EFqYYEuIp1A6YqUSXmPT/PsVjWA6h+4 fyviFOmyrlUoG3FzY1b0GxLUFJfnhABxBsSrF4lcmcaI2FnMSKNP+OU7l54HIuRq UvRPZU6su6iPjLa2Z3FyPV836ddsigEe+ELfqM8byB3LnWPEK+VNfrc30UjOQm+C SGAUTOEdwodCWDCxN5JVEqAgO3DQJzlENPgZRuEzC9u3gbUXWi/KBpLRRAq9NTnu LrXCff3w5gsm2l3/OAJdkM/e8RQbhetiULFwSTNlUQkyQh79Ickzd/IgGKnDoRHE gzW0c9e1FmutmnpKiy7SC/lFOJ/2atkhAglaFXERAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTd9faSmRrIPCRUPBLC6Mk9G63AgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2M4ZTM0NzcyLTAyZGMtNDU4My1hZDhhLWFhM2M0YTI5NTc5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwwwDQYJKoZIhvcNAQELBQADggEBAFWr9cN9QOTjl0FmyZZjDbDm FYFmcc1hD8RpzrMQECgiDbtWm/KAPpOm7IaUAd4GUKJXqcL5qrGFFZsQYRAIcoyF /5pWO+BRe5nrRHjDrzaoIY958NyKaOFpyg3QbXSYvr6Y4jv0oDbhVbfURfpMMGUt kYGxHmAByUR+7/IzfhEYq+DzyqPF1GsM52xKlbUE7BvOzDbzHsH8QAHXpz7Y94Ub rDtrWtduUM2Xhl5uVPLlCW9TC3E1TtEmmCrN0xmy01rJ6bzCN6oN4DcdM2Nfd1S8 fmOfHkufWq7SY3luLPW9/OAaLM8TyYJLHaimMHP/L/YY3OwCHkJpo1HAueGhD9E= -----END CERTIFICATE-----Generated at Fri Jun 6 04:18:16 2025 by rpki-client