$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/42b1cfd9-f613-4e68-b4c6-468e5d50b9c6.roa File: 42b1cfd9-f613-4e68-b4c6-468e5d50b9c6.roa (raw, json) Hash identifier: O3ck0xVWMpqB1YMppqRt9YJFpXzsyH7vdsz4xgQvxZo= Subject key identifier: 87:B3:13:4A:93:29:45:16:8E:AF:E2:BB:A6:1F:6A:8E:F9:77:F6:5D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0F6607DA6E58A5D4DB2F3707885E499DB2DE61B1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/42b1cfd9-f613-4e68-b4c6-468e5d50b9c6.roa Signing time: Wed 21 May 2025 00:51:02 +0000 ROA not before: Wed 21 May 2025 00:51:02 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:547::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:66:07:da:6e:58:a5:d4:db:2f:37:07:88:5e:49:9d:b2:de:61:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 21 00:51:02 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=4025afc7eb7a9cc31269907b16837f1a81093fe3390fadf94220ba16188062a9, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:05:34:a2:2e:e1:62:b9:c0:ac:2c:5f:64: e3:2b:88:f5:2e:58:ef:58:4b:89:b3:ef:67:39:db: 4f:a4:5a:e7:ad:fd:04:fd:fd:41:69:10:61:ee:cc: 44:db:9c:7d:41:ed:d2:9c:5f:53:da:01:84:c3:93: 4b:06:9e:1e:13:42:17:c8:95:99:f0:f4:48:56:91: 0a:75:eb:5b:8c:9e:35:9f:17:ad:bb:72:4d:0c:3c: a8:37:ef:82:c2:71:be:9b:80:d2:f4:80:b3:4e:a3: d2:cd:13:17:f3:c7:20:f8:15:38:3a:9d:b0:5f:19: ab:db:0c:90:0c:17:85:e4:e4:3f:d3:fc:cd:45:f0: c3:6f:6e:48:b1:31:7e:e2:65:ca:09:0a:52:f2:30: 23:b1:d6:5d:b3:5e:bd:30:ac:8e:2f:f8:25:5e:ba: 89:d8:7b:a4:22:54:be:43:44:08:d3:33:00:00:97: 60:8a:14:3c:e7:03:2e:77:c6:68:0a:e6:a3:a7:d9: 1f:62:a4:27:04:a4:90:f6:7c:14:9a:5f:91:60:a9: 61:1a:df:38:88:ac:d3:b7:cd:9b:37:c7:75:22:5d: 85:b4:fd:ee:ea:ce:75:03:17:e9:12:57:e5:13:10: 3e:0a:64:6c:2c:11:43:f0:06:9e:40:75:5e:73:f7: 82:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B3:13:4A:93:29:45:16:8E:AF:E2:BB:A6:1F:6A:8E:F9:77:F6:5D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/42b1cfd9-f613-4e68-b4c6-468e5d50b9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:547::/48 Signature Algorithm: sha256WithRSAEncryption 59:20:2c:cc:06:19:f2:07:c5:e3:40:8a:6f:76:10:08:f9:ec: 52:d0:06:71:8b:47:45:8c:4b:9c:6e:5f:a7:c3:a9:34:52:34: d1:26:94:20:34:e4:b6:7f:36:fd:0f:0b:65:3a:6a:ff:4a:bf: 52:a9:20:fa:1a:62:f5:13:2b:2e:b5:7f:ad:cf:65:bc:7c:4b: 0b:95:94:34:4e:9a:26:fa:f6:60:eb:ce:d8:ab:5f:64:b8:9a: 51:38:6b:bd:a7:b7:72:d1:ca:d7:ca:a2:c5:26:41:22:63:66: b3:e1:af:f9:99:e3:d6:55:c9:bc:cb:ed:e6:b2:51:84:ef:fa: b5:ee:d4:33:40:1c:63:37:74:08:b7:fa:72:ad:3f:67:d0:51: 31:e2:60:31:80:6b:34:3d:71:46:81:16:1e:91:37:64:38:50: b8:1f:cf:1c:2b:f2:94:a2:3e:9f:e3:e0:1a:e7:17:48:81:70: 0f:ef:87:df:31:00:ff:b9:49:4e:aa:2b:02:65:5d:6e:b9:c4: 8c:fc:4b:9a:3d:09:5c:d1:5c:21:99:a3:aa:28:a5:05:a6:8f: d4:c3:1e:f5:09:97:11:db:5f:b8:b9:a7:a5:fd:d5:66:c5:b1: 10:3f:dd:b3:c6:0d:28:75:d3:db:9c:8d:dc:63:25:3e:f2:d7: cd:3f:8d:a6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUD2YH2m5YpdTbLzcHiF5JnbLeYbEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIxMDA1MTAyWhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDI1YWZjN2ViN2E5Y2MzMTI2OTkwN2IxNjgzN2YxYTgx MDkzZmUzMzkwZmFkZjk0MjIwYmExNjE4ODA2MmE5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMLQU0oi7hYrnArCxfZOMriPUuWO9YS4mz72c520+kWuet /QT9/UFpEGHuzETbnH1B7dKcX1PaAYTDk0sGnh4TQhfIlZnw9EhWkQp161uMnjWf F627ck0MPKg374LCcb6bgNL0gLNOo9LNExfzxyD4FTg6nbBfGavbDJAMF4Xk5D/T /M1F8MNvbkixMX7iZcoJClLyMCOx1l2zXr0wrI4v+CVeuonYe6QiVL5DRAjTMwAA l2CKFDznAy53xmgK5qOn2R9ipCcEpJD2fBSaX5FgqWEa3ziIrNO3zZs3x3UiXYW0 /e7qznUDF+kSV+UTED4KZGwsEUPwBp5AdV5z94KLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUh7MTSpMpRRaOr+K7ph9qjvl39l0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQyYjFjZmQ5LWY2MTMtNGU2OC1iNGM2LTQ2OGU1ZDUwYjljNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUcwDQYJKoZIhvcNAQELBQADggEBAFkgLMwGGfIHxeNAim92EAj5 7FLQBnGLR0WMS5xuX6fDqTRSNNEmlCA05LZ/Nv0PC2U6av9Kv1KpIPoaYvUTKy61 f63PZbx8SwuVlDROmib69mDrztirX2S4mlE4a72nt3LRytfKosUmQSJjZrPhr/mZ 49ZVybzL7eayUYTv+rXu1DNAHGM3dAi3+nKtP2fQUTHiYDGAazQ9cUaBFh6RN2Q4 ULgfzxwr8pSiPp/j4BrnF0iBcA/vh98xAP+5SU6qKwJlXW65xIz8S5o9CVzRXCGZ o6oopQWmj9TDHvUJlxHbX7i5p6X91WbFsRA/3bPGDSh109ucjdxjJT7y180/jaY= -----END CERTIFICATE-----Generated at Sat Jun 14 05:59:05 2025 by rpki-client