$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa File: 3983d9b9-cb06-4315-b0e8-52b47d039b39.roa (raw, json) Hash identifier: 2vlZeFph0m082/47zyvTCO8VZ94zc6Gt0nMb4HP/bvE= Subject key identifier: 6A:02:E1:C6:48:6D:AF:2C:AA:1E:9D:F6:8C:1B:EE:B8:04:1E:63:5E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0EF652FF6197547E27E4C5929650D495CFA1B68E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa Signing time: Sat 31 May 2025 00:31:27 +0000 ROA not before: Sat 31 May 2025 00:31:27 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f6:52:ff:61:97:54:7e:27:e4:c5:92:96:50:d4:95:cf:a1:b6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:31:27 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=abf4e0786d19f7ecf84a34b6207eec4791d0186816ce5252e21514e134612b0b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ad:c9:ef:0b:0a:d6:8c:71:38:98:99:5a:3e: 7c:1b:ef:ad:e8:d7:f7:ff:12:43:4d:e9:bb:44:e0: 81:e2:14:c8:41:47:0a:d2:be:78:9d:73:04:b9:d4: 54:dd:cb:b8:c5:08:6a:65:81:52:a3:92:92:fa:e2: 03:ad:10:9f:7f:4c:11:6c:76:87:63:1c:62:e8:57: 6a:f2:75:a8:df:21:3d:4a:f2:c3:b9:4d:01:8f:ca: 9c:ee:fd:1e:dd:6c:f8:68:9b:34:34:f7:8a:59:76: ba:fd:9c:80:c5:0f:08:c7:fa:93:3e:95:be:b0:30: 82:a4:e5:15:93:bd:b0:31:f6:3c:97:a1:b9:b8:5d: 4c:14:10:70:05:fb:3c:78:0d:0a:d0:86:39:4a:0a: c3:fb:20:e9:90:a2:bc:0c:70:6a:1e:e1:54:f8:cb: 25:a6:e4:58:c5:7a:f8:8e:15:95:5b:2b:f0:17:0b: 41:68:ec:eb:51:bb:4e:1a:a8:0b:14:fd:15:0b:dc: 60:f0:eb:95:f8:db:42:75:86:72:5d:01:bf:fe:7c: 00:62:be:97:8f:cd:8f:59:55:90:02:53:d0:86:6b: fe:55:fb:b9:fa:3a:82:4e:00:e2:d6:e2:4e:b1:23: 5b:6c:57:be:4b:f5:86:46:61:25:c7:38:90:d1:81: 71:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:02:E1:C6:48:6D:AF:2C:AA:1E:9D:F6:8C:1B:EE:B8:04:1E:63:5E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0d::/48 Signature Algorithm: sha256WithRSAEncryption 74:6d:5e:c7:0f:ae:7e:ff:03:a8:75:05:53:87:bd:c5:78:93: cf:7c:f1:ed:c5:2c:67:2a:f6:b5:b1:90:d8:dd:7d:01:e3:43: 90:64:23:b0:1e:40:0d:02:94:13:e4:22:ff:88:7c:e4:50:f0: 0d:8d:84:d9:87:f4:8a:a4:9c:eb:52:5a:ea:4b:d5:f5:a4:16: 2b:ff:0d:32:df:8c:68:ac:39:47:30:ff:d2:d0:65:78:18:a9: 47:59:58:a3:8f:44:2d:3b:ca:32:30:13:53:f6:f1:1f:68:45: 4f:b5:62:df:0c:a0:2f:6e:fd:26:cb:79:e4:cf:02:52:4d:19: dc:f9:a8:04:1b:dd:a9:bc:93:57:07:a5:8b:c6:89:2a:4f:8f: 67:63:72:28:1e:6c:5d:e0:58:bb:2e:66:bc:dd:ac:5c:80:61: aa:21:91:a5:4c:6b:96:99:9c:34:eb:62:56:76:4c:d5:27:a6: eb:46:93:64:6e:36:55:34:2d:8b:c6:a7:6a:49:50:13:6f:de: 16:84:67:dd:80:79:52:7b:e8:9e:ae:b0:72:b6:41:98:d0:09: 79:5b:35:46:b4:74:c4:67:fd:e0:da:22:b7:24:25:0f:5e:c3: 3b:1e:0a:2b:83:50:8d:ef:af:70:1c:f1:ca:e1:fa:05:97:34: eb:c2:83:bc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDvZS/2GXVH4n5MWSllDUlc+hto4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDAzMTI3WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmY0ZTA3ODZkMTlmN2VjZjg0YTM0YjYyMDdlZWM0Nzkx ZDAxODY4MTZjZTUyNTJlMjE1MTRlMTM0NjEyYjBiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhrcnvCwrWjHE4mJlaPnwb763o1/f/EkNN6btE4IHiFMhB RwrSvnidcwS51FTdy7jFCGplgVKjkpL64gOtEJ9/TBFsdodjHGLoV2rydajfIT1K 8sO5TQGPypzu/R7dbPhomzQ094pZdrr9nIDFDwjH+pM+lb6wMIKk5RWTvbAx9jyX obm4XUwUEHAF+zx4DQrQhjlKCsP7IOmQorwMcGoe4VT4yyWm5FjFeviOFZVbK/AX C0Fo7OtRu04aqAsU/RUL3GDw65X420J1hnJdAb/+fABivpePzY9ZVZACU9CGa/5V +7n6OoJOAOLW4k6xI1tsV75L9YZGYSXHOJDRgXH5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUagLhxkhtryyqHp32jBvuuAQeY14wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM5ODNkOWI5LWNiMDYtNDMxNS1iMGU4LTUyYjQ3ZDAzOWIzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA0wDQYJKoZIhvcNAQELBQADggEBAHRtXscPrn7/A6h1BVOHvcV4 k8988e3FLGcq9rWxkNjdfQHjQ5BkI7AeQA0ClBPkIv+IfORQ8A2NhNmH9IqknOtS WupL1fWkFiv/DTLfjGisOUcw/9LQZXgYqUdZWKOPRC07yjIwE1P28R9oRU+1Yt8M oC9u/SbLeeTPAlJNGdz5qAQb3am8k1cHpYvGiSpPj2djcigebF3gWLsuZrzdrFyA YaohkaVMa5aZnDTrYlZ2TNUnputGk2RuNlU0LYvGp2pJUBNv3haEZ92AeVJ76J6u sHK2QZjQCXlbNUa0dMRn/eDaIrckJQ9ewzseCiuDUI3vr3Ac8crh+gWXNOvCg7w= -----END CERTIFICATE-----Generated at Sat Jun 14 23:47:46 2025 by rpki-client