$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa File: 43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa (raw, json) Hash identifier: 1o5oqF2jBouaWrYP30Jh/f/8o5OM1pCEESK7px7KFdw= Subject key identifier: 6A:68:26:19:CC:D8:42:70:F3:0F:E6:A5:FC:C6:4C:84:7E:35:29:38 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1E8B5A5E5F82B206263D33EC2282B0D1C964CE44 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa Signing time: Sat 31 May 2025 00:40:15 +0000 ROA not before: Sat 31 May 2025 00:40:15 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8b:5a:5e:5f:82:b2:06:26:3d:33:ec:22:82:b0:d1:c9:64:ce:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 31 00:40:15 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=0c99ca623c44717c5c22082e750661eb2315515ed399931ec48bee301f15bb0b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e4:5c:8d:19:b7:1a:23:b0:6a:b9:a3:ab:c4: 9c:18:54:a6:be:55:f1:fc:11:ec:76:f0:b4:44:a0: 8e:3a:b4:ca:70:ad:6e:f8:2f:43:da:19:51:0e:ad: e4:a1:fd:0d:e7:73:31:f6:bf:d9:74:85:f6:90:19: 13:aa:dd:c6:fa:0b:3b:a5:32:9e:c0:cc:a1:dc:37: 16:57:dd:d7:3e:38:11:f4:50:a2:50:20:38:70:81: e6:4b:08:d4:cc:be:6c:05:f9:c7:e7:0e:4a:42:fc: 03:62:b8:ab:22:76:e6:5c:37:ac:bf:cc:65:29:bf: 43:c7:69:37:80:4d:89:df:bf:a1:bc:5e:0c:27:56: 53:f9:da:b7:7f:b6:b3:f2:db:53:2d:7d:ac:e5:ad: 66:0a:2a:9a:40:79:8c:34:78:f9:ee:12:f8:dc:da: 2f:2f:41:96:ce:17:83:a4:3c:a8:02:4c:60:f9:c1: a5:4a:f7:9e:41:7b:31:c4:bf:a6:5b:fc:d0:52:a1: 48:19:64:8a:35:d1:05:0a:56:82:b6:d7:30:26:a2: c9:f8:b6:e0:db:53:2b:b9:25:0a:d1:09:45:77:f3: e5:d4:1d:31:f5:6b:ba:99:d9:01:07:9e:a8:a0:51: 2c:4a:89:0e:aa:e5:8d:8d:4f:f9:6b:ea:ed:36:16: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:68:26:19:CC:D8:42:70:F3:0F:E6:A5:FC:C6:4C:84:7E:35:29:38 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1a::/48 Signature Algorithm: sha256WithRSAEncryption 87:d8:29:32:2a:43:99:70:53:9d:81:68:11:7d:c3:87:b8:1c: 50:99:85:a2:27:d7:1e:2a:d5:c0:5a:2e:1b:b0:6e:9e:54:38: dc:42:ef:8b:c4:fa:c7:9d:01:07:d7:0c:fb:b8:e7:12:1d:19: 03:ff:9d:c8:e6:2e:26:fa:f6:64:9e:3d:31:9f:ab:08:72:9e: 79:3c:ef:d8:f7:0a:0d:c6:95:9c:99:01:43:b5:23:a4:d9:b8: af:e7:31:d2:22:9f:73:fc:2f:59:0f:8e:24:d9:18:1e:30:ae: 31:e6:93:5d:a9:4b:81:ee:0d:f3:1f:73:cf:c1:8b:34:5e:c6: 2d:b2:91:8c:74:33:54:27:b0:a4:54:3b:02:3d:98:ef:59:9f: 4c:e2:e8:4c:1c:74:5c:3c:66:1a:d0:f1:85:f4:78:2b:65:31: 44:7a:42:65:50:a3:1b:59:29:d3:3d:a0:da:19:f2:24:6d:aa: 12:03:55:45:33:d3:ab:a3:a7:91:34:8f:a9:8d:17:50:23:12: db:e0:e5:e7:cc:ee:d7:37:78:bb:66:33:de:bc:46:7a:3e:0d: 55:dc:c4:ea:57:6a:1a:b6:01:2c:a7:76:c3:41:11:6a:80:94: fe:9d:44:6f:db:4a:cb:6c:a2:16:fe:23:74:dc:b1:b4:6e:46: 83:d4:50:04 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHotaXl+CsgYmPTPsIoKw0clkzkQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTMxMDA0MDE1WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzk5Y2E2MjNjNDQ3MTdjNWMyMjA4MmU3NTA2NjFlYjIz MTU1MTVlZDM5OTkzMWVjNDhiZWUzMDFmMTViYjBiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV5FyNGbcaI7BquaOrxJwYVKa+VfH8Eex28LREoI46tMpw rW74L0PaGVEOreSh/Q3nczH2v9l0hfaQGROq3cb6CzulMp7AzKHcNxZX3dc+OBH0 UKJQIDhwgeZLCNTMvmwF+cfnDkpC/ANiuKsiduZcN6y/zGUpv0PHaTeATYnfv6G8 XgwnVlP52rd/trPy21MtfazlrWYKKppAeYw0ePnuEvjc2i8vQZbOF4OkPKgCTGD5 waVK955BezHEv6Zb/NBSoUgZZIo10QUKVoK21zAmosn4tuDbUyu5JQrRCUV38+XU HTH1a7qZ2QEHnqigUSxKiQ6q5Y2NT/lr6u02FmVHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUamgmGczYQnDzD+al/MZMhH41KTgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQzZjM4YTkwLTk0MWMtNGU2MS04YWE1LWVhZDk1N2JmNmFlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBowDQYJKoZIhvcNAQELBQADggEBAIfYKTIqQ5lwU52BaBF9w4e4 HFCZhaIn1x4q1cBaLhuwbp5UONxC74vE+sedAQfXDPu45xIdGQP/ncjmLib69mSe PTGfqwhynnk879j3Cg3GlZyZAUO1I6TZuK/nMdIin3P8L1kPjiTZGB4wrjHmk12p S4HuDfMfc8/BizRexi2ykYx0M1QnsKRUOwI9mO9Zn0zi6EwcdFw8ZhrQ8YX0eCtl MUR6QmVQoxtZKdM9oNoZ8iRtqhIDVUUz06ujp5E0j6mNF1AjEtvg5efM7tc3eLtm M968Rno+DVXcxOpXahq2ASyndsNBEWqAlP6dRG/bSstsohb+I3TcsbRuRoPUUAQ= -----END CERTIFICATE-----Generated at Sat Jun 14 05:49:33 2025 by rpki-client