$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/58ae88e3-1626-4e66-a775-9d30fa3396fa.roa File: 58ae88e3-1626-4e66-a775-9d30fa3396fa.roa (raw, json) Hash identifier: 9TWgeSbxCtDVzgpeMQKNF+y/Jd/X5Ct20wOMQ3EmeyM= Subject key identifier: 8B:C3:BB:FF:25:79:E4:36:83:A1:3C:01:30:57:0A:D2:96:D6:34:9B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1695BE6DCB076FD3733B4B79B349CD3BAC2461CC Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/58ae88e3-1626-4e66-a775-9d30fa3396fa.roa Signing time: Tue 20 May 2025 17:51:04 +0000 ROA not before: Tue 20 May 2025 17:51:04 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:95:be:6d:cb:07:6f:d3:73:3b:4b:79:b3:49:cd:3b:ac:24:61:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 20 17:51:04 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=51f5aebd1595da0d5f1c17d59a63dc326c8a0952cb9e4f64fc99b1be7c781bfa, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:68:ce:29:1c:1d:23:86:36:98:a6:2b:71:9f: cf:fb:43:46:34:4a:0c:7a:a5:ce:d1:ea:c6:2a:0e: ff:2c:4b:95:2e:42:a4:38:e2:9f:4c:c6:b0:2f:0e: 83:8a:a5:2b:c3:74:7f:6f:95:c7:84:fe:ca:44:d4: 24:e6:29:8a:ca:ce:15:a5:22:08:3f:c5:dc:01:f4: 04:a4:7f:17:8d:4e:fe:66:48:bb:ca:8d:1c:49:c3: 97:e8:84:af:bd:80:6b:34:96:53:00:d4:6a:81:f5: c3:10:0e:7c:11:65:87:5e:41:b7:03:a7:31:78:39: 56:94:06:57:7d:25:d0:a3:eb:4f:22:15:88:fd:fa: 1c:8c:52:9b:de:ca:c3:99:71:89:b9:17:38:95:74: 12:ab:a5:99:07:46:49:f2:ae:6f:d5:47:92:12:ef: 87:fd:e9:47:fa:4b:38:f2:16:12:76:45:08:3a:2d: f3:57:fb:f3:71:f3:45:b4:a1:97:7d:c2:a4:4c:ed: af:bd:69:65:68:38:aa:2c:bf:c6:78:bf:2a:bd:db: d0:2e:1e:a6:f2:4e:4e:e8:21:1e:b3:74:81:da:ad: 3a:d1:06:7e:a8:0e:cf:c7:2d:b4:46:d5:c1:ad:19: b4:d1:2d:e7:6c:f5:21:ff:96:5c:47:dd:5b:9a:26: 2b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C3:BB:FF:25:79:E4:36:83:A1:3C:01:30:57:0A:D2:96:D6:34:9B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/58ae88e3-1626-4e66-a775-9d30fa3396fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:b00::/40 Signature Algorithm: sha256WithRSAEncryption 4d:e7:ca:36:f2:31:25:95:8a:39:7c:ab:89:02:14:f0:39:95: cf:cb:4a:60:c2:48:ef:fd:52:11:9b:86:d9:97:07:63:6b:2b: a2:81:1f:ba:52:0c:5e:2f:dd:c7:9d:40:0a:66:81:0d:91:ca: a4:dc:8d:8d:e3:ae:7e:55:8c:76:24:9c:93:c9:f0:89:f0:a1: 1f:f2:33:bb:56:b5:20:56:93:2c:93:b4:58:55:75:7f:9e:97: 22:4d:ea:2b:55:62:5a:f5:b6:72:92:05:e1:d4:53:9b:19:fc: 5c:18:9d:bd:05:19:6c:fe:f0:7f:0d:15:c0:04:2e:cb:53:fa: ae:42:5d:0c:90:31:ca:90:87:25:87:c1:b3:ce:9b:9c:a2:06: 07:cb:b2:bb:f2:03:2f:67:c2:06:c4:8d:08:2c:65:1e:18:54: 92:5e:0a:32:1d:08:d3:98:99:05:9d:b8:96:76:5f:da:f9:8d: 56:48:1a:b2:21:2e:0c:f2:58:29:7b:02:3b:13:02:16:3a:f9: 8e:25:ee:ff:ba:0d:0a:3b:ae:f2:b4:8f:b5:03:01:72:c3:dc: d6:a3:06:f9:cd:fe:5e:a7:f4:23:13:cd:90:0e:ad:6c:e1:ab: ee:fb:fe:8e:e7:5b:10:7c:fe:76:06:51:1c:ca:19:c6:96:8d: 02:d3:2b:d2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFpW+bcsHb9NzO0t5s0nNO6wkYcwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIwMTc1MTA0WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWY1YWViZDE1OTVkYTBkNWYxYzE3ZDU5YTYzZGMzMjZj OGEwOTUyY2I5ZTRmNjRmYzk5YjFiZTdjNzgxYmZhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOaM4pHB0jhjaYpitxn8/7Q0Y0Sgx6pc7R6sYqDv8sS5Uu QqQ44p9MxrAvDoOKpSvDdH9vlceE/spE1CTmKYrKzhWlIgg/xdwB9ASkfxeNTv5m SLvKjRxJw5fohK+9gGs0llMA1GqB9cMQDnwRZYdeQbcDpzF4OVaUBld9JdCj608i FYj9+hyMUpveysOZcYm5FziVdBKrpZkHRknyrm/VR5IS74f96Uf6SzjyFhJ2RQg6 LfNX+/Nx80W0oZd9wqRM7a+9aWVoOKosv8Z4vyq929AuHqbyTk7oIR6zdIHarTrR Bn6oDs/HLbRG1cGtGbTRLeds9SH/llxH3VuaJivjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUi8O7/yV55DaDoTwBMFcK0pbWNJswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU4YWU4OGUzLTE2MjYtNGU2Ni1hNzc1LTlkMzBmYTMzOTZmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBZzACzANBgkqhkiG9w0BAQsFAAOCAQEATefKNvIxJZWKOXyriQIU8DmV z8tKYMJI7/1SEZuG2ZcHY2srooEfulIMXi/dx51ACmaBDZHKpNyNjeOuflWMdiSc k8nwifChH/Izu1a1IFaTLJO0WFV1f56XIk3qK1ViWvW2cpIF4dRTmxn8XBidvQUZ bP7wfw0VwAQuy1P6rkJdDJAxypCHJYfBs86bnKIGB8uyu/IDL2fCBsSNCCxlHhhU kl4KMh0I05iZBZ24lnZf2vmNVkgasiEuDPJYKXsCOxMCFjr5jiXu/7oNCjuu8rSP tQMBcsPc1qMG+c3+Xqf0IxPNkA6tbOGr7vv+judbEHz+dgZRHMoZxpaNAtMr0g== -----END CERTIFICATE-----Generated at Sun Jun 15 09:00:47 2025 by rpki-client