$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/236e1f34-a86b-4928-aaad-0acf3ea60b6e.roa File: 236e1f34-a86b-4928-aaad-0acf3ea60b6e.roa (raw, json) Hash identifier: AkLiG/HlExhI0XudiW1RitAj34GT7E3mIYLLvceKK0c= Subject key identifier: 3B:5B:D5:F0:02:F6:23:CE:C0:E1:46:21:38:DA:BD:06:1E:C5:1A:DE Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 662230EDADBE512A37A83EE2F99D637F6C80DFB0 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/236e1f34-a86b-4928-aaad-0acf3ea60b6e.roa Signing time: Sat 31 May 2025 00:31:17 +0000 ROA not before: Sat 31 May 2025 00:31:17 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:22:30:ed:ad:be:51:2a:37:a8:3e:e2:f9:9d:63:7f:6c:80:df:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:31:17 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=9b1e858b06353d3c07ea252c934d6b3869306bc102c0343acfc0343560ef08b2, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0c:71:a1:1d:90:82:ee:8b:07:c3:05:ed:42: 4b:e7:ec:63:4c:26:63:e2:53:1f:97:fa:6c:61:9c: 2f:b8:ec:fe:ea:4c:60:30:93:ef:66:ab:d2:f5:8a: 43:e8:54:df:34:94:ae:1e:0e:11:d6:4d:77:84:4f: ec:ae:56:f6:38:e0:7a:ee:e5:e7:ed:34:2e:cf:aa: cd:02:c1:53:f9:0b:9b:be:be:0c:99:49:09:be:7e: 44:0c:a2:68:ea:07:39:19:dd:03:0f:6f:29:02:6f: 26:b0:32:d8:73:b7:e5:1d:f0:d4:70:59:13:c8:a3: cc:9e:56:76:c1:cf:5c:46:03:95:1d:61:8f:48:d3: 72:a2:4f:54:6e:ca:f9:4c:41:38:7f:a0:b5:61:93: 13:69:ec:09:1a:07:9d:c7:66:fb:f7:34:67:cc:c2: 26:e4:3e:60:b5:49:a9:7f:d3:1c:3c:d7:a4:a5:19: fb:20:91:ef:5b:fa:da:ea:70:18:13:f2:87:d7:17: 9c:df:c1:29:cf:ef:ed:f3:d3:46:3c:a4:1f:72:48: 8c:1c:4c:75:41:b1:98:4a:f8:51:61:40:8a:f7:65: f2:72:ba:79:b5:11:e8:0d:fd:61:16:ae:70:47:c4: 03:12:d7:2e:24:88:e1:41:1e:5c:a1:dc:03:1a:12: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5B:D5:F0:02:F6:23:CE:C0:E1:46:21:38:DA:BD:06:1E:C5:1A:DE X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/236e1f34-a86b-4928-aaad-0acf3ea60b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c09::/48 Signature Algorithm: sha256WithRSAEncryption a9:e6:4d:4e:b8:b6:13:46:2a:3c:ff:20:0a:c9:5a:c7:34:ad: cc:a5:4e:5f:d0:ce:d6:8b:77:a1:e0:18:14:5d:2d:28:f2:19: 30:fe:62:20:e1:e4:bf:65:51:39:ca:eb:49:74:bd:0c:cc:9d: be:da:18:2a:91:0e:d9:25:98:8f:96:01:c9:88:58:ce:c6:f4: c9:78:5e:cc:e3:58:d4:c1:33:30:af:61:66:b7:bc:bf:60:8b: dd:8c:b4:53:44:d3:f3:2e:7b:a7:f6:2a:cf:4f:31:8a:c8:27: c9:b0:ef:88:71:93:fd:ac:d6:c0:74:6f:f5:c6:9c:5a:34:7d: 7b:d5:36:11:57:9e:c6:2c:89:22:a7:42:c1:39:15:44:90:63: 7e:3c:ad:3f:a9:8e:f3:94:c2:4c:98:99:a9:96:5d:1d:d7:fe: e8:95:0f:1d:de:0e:70:bd:6f:82:fe:48:1d:8f:a5:22:68:2d: bc:5e:3d:b7:4d:e8:63:c7:41:0e:8c:1d:78:8d:26:f0:32:b8: ce:04:e5:6c:b2:0c:c4:27:d0:10:23:bf:b0:8e:23:1e:a8:35: ba:ff:f3:28:c3:6c:42:01:a1:e9:d1:bb:a0:0d:b2:77:04:ba: 8c:e2:58:09:97:e4:b9:44:6f:3b:10:c3:7e:1a:03:8e:ea:79: d2:80:4c:b8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZiIw7a2+USo3qD7i+Z1jf2yA37AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAzMTE3WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjFlODU4YjA2MzUzZDNjMDdlYTI1MmM5MzRkNmIzODY5 MzA2YmMxMDJjMDM0M2FjZmMwMzQzNTYwZWYwOGIyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYDHGhHZCC7osHwwXtQkvn7GNMJmPiUx+X+mxhnC+47P7q TGAwk+9mq9L1ikPoVN80lK4eDhHWTXeET+yuVvY44Hru5eftNC7Pqs0CwVP5C5u+ vgyZSQm+fkQMomjqBzkZ3QMPbykCbyawMthzt+Ud8NRwWRPIo8yeVnbBz1xGA5Ud YY9I03KiT1RuyvlMQTh/oLVhkxNp7AkaB53HZvv3NGfMwibkPmC1Sal/0xw816Sl Gfsgke9b+trqcBgT8ofXF5zfwSnP7+3z00Y8pB9ySIwcTHVBsZhK+FFhQIr3ZfJy unm1EegN/WEWrnBHxAMS1y4kiOFBHlyh3AMaEordAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUO1vV8AL2I87A4UYhONq9Bh7FGt4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzIzNmUxZjM0LWE4NmItNDkyOC1hYWFkLTBhY2YzZWE2MGI2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAkwDQYJKoZIhvcNAQELBQADggEBAKnmTU64thNGKjz/IArJWsc0 rcylTl/QztaLd6HgGBRdLSjyGTD+YiDh5L9lUTnK60l0vQzMnb7aGCqRDtklmI+W AcmIWM7G9Ml4XszjWNTBMzCvYWa3vL9gi92MtFNE0/Mue6f2Ks9PMYrIJ8mw74hx k/2s1sB0b/XGnFo0fXvVNhFXnsYsiSKnQsE5FUSQY348rT+pjvOUwkyYmamWXR3X /uiVDx3eDnC9b4L+SB2PpSJoLbxePbdN6GPHQQ6MHXiNJvAyuM4E5WyyDMQn0BAj v7COIx6oNbr/8yjDbEIBoenRu6ANsncEuoziWAmX5LlEbzsQw34aA47qedKATLg= -----END CERTIFICATE-----Generated at Sat Jun 14 05:54:58 2025 by rpki-client