$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa File: 5ab304f6-e1e5-467a-88a2-103320530506.roa (raw, json) Hash identifier: Lto4Jx/335+U4JCY0rs7uzpN3IA1ujykzJtaQQtta/A= Subject key identifier: E6:8F:C3:0A:B3:D0:B4:B2:5F:1E:0D:40:A0:67:CB:17:25:CF:90:53 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 13B2C6F6A705F314B4A35DEA66D6D42B693AA16A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa Signing time: Fri 23 May 2025 00:31:24 +0000 ROA not before: Fri 23 May 2025 00:31:24 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:627::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b2:c6:f6:a7:05:f3:14:b4:a3:5d:ea:66:d6:d4:2b:69:3a:a1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 23 00:31:24 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=81559b8a562e93f5cd5a7c666950ff4696a1a79aaa833321f3981aad1bc82494, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:26:3b:91:48:6b:3c:8d:33:cb:25:71:db: c3:4c:22:d2:ba:50:55:80:68:86:63:71:42:0e:c2: a2:fa:1b:7d:56:ae:b2:06:bc:24:77:1a:6c:58:c6: 89:49:0b:f0:40:28:66:68:eb:d0:5d:c6:50:eb:3b: dc:78:e5:3d:5f:45:59:a8:9f:89:00:53:c2:23:39: 2d:8a:e5:4c:39:40:5f:1f:2e:0a:a1:78:e3:a4:12: af:ef:fd:1f:7f:94:43:bf:2e:d6:11:4e:92:b5:4d: 03:b2:55:d1:51:46:f6:e9:b8:67:d4:8b:62:74:39: 8a:12:0d:5f:f4:9e:af:28:46:97:c9:fd:07:4f:ef: 69:9e:ce:9a:99:e3:ae:69:93:7b:dd:ef:6d:a5:62: fd:95:0c:42:13:15:48:49:5e:71:16:c2:ce:5c:97: 96:55:29:50:8a:9a:c1:83:11:a3:7b:23:de:f9:b9: 53:89:a7:1e:e3:39:83:2a:e4:89:d3:35:4a:e3:d5: 6a:5f:49:b0:10:4d:3e:de:70:e0:76:bb:ac:ba:3e: 63:55:3c:82:f8:cc:1d:da:62:60:b3:68:3a:72:12: 42:14:ef:c9:12:f0:bf:d5:95:e9:fe:f7:65:4f:d3: 20:c5:13:65:c2:b3:c5:68:2a:2e:15:45:71:dc:ad: c4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8F:C3:0A:B3:D0:B4:B2:5F:1E:0D:40:A0:67:CB:17:25:CF:90:53 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:627::/48 Signature Algorithm: sha256WithRSAEncryption 61:c8:84:33:af:8c:bf:36:d8:77:35:51:3a:70:b9:d7:78:83: 5c:d5:1b:41:36:a4:43:fa:32:61:a0:3d:aa:97:d8:ba:f1:10: 9f:0e:35:46:53:07:cd:7b:96:c3:a0:bf:2d:47:ee:18:17:df: f4:e6:e5:d1:ba:b6:49:cd:d7:96:9f:08:bf:72:da:43:6e:91: 34:da:a6:33:17:7a:b6:64:13:ad:52:13:29:29:fe:34:c9:22: c5:41:da:1e:de:a9:d7:cb:87:c3:ba:30:ff:3f:ae:78:99:e5: f7:75:86:99:b3:7f:a4:bb:ce:22:46:d7:2c:e9:45:14:1a:4b: 6d:41:aa:4b:7d:16:42:cb:9e:67:f4:98:b8:cd:c7:47:8a:43: 6d:5f:c2:e0:8c:c5:5e:77:d7:02:d2:ad:b8:ab:6c:4e:a8:a2: 06:d1:b6:3d:9a:d6:2a:4b:b6:45:93:5d:63:c9:72:d9:95:bd: 44:af:af:4d:37:6b:55:2d:81:8c:42:f2:85:6f:69:af:f2:14: 17:d0:7a:ed:67:86:fa:36:2c:70:94:c9:75:4d:28:01:fc:b7: fe:04:66:97:be:cc:fa:88:3f:9b:91:72:95:7d:4f:8e:ba:32: f7:e4:9d:a4:96:8f:3f:e2:af:25:8d:c1:31:e3:82:74:8a:95: 71:6f:92:fa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE7LG9qcF8xS0o13qZtbUK2k6oWowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIzMDAzMTI0WhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTU1OWI4YTU2MmU5M2Y1Y2Q1YTdjNjY2OTUwZmY0Njk2 YTFhNzlhYWE4MzMzMjFmMzk4MWFhZDFiYzgyNDk0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCypyY7kUhrPI0zyyVx28NMItK6UFWAaIZjcUIOwqL6G31W rrIGvCR3GmxYxolJC/BAKGZo69BdxlDrO9x45T1fRVmon4kAU8IjOS2K5Uw5QF8f LgqheOOkEq/v/R9/lEO/LtYRTpK1TQOyVdFRRvbpuGfUi2J0OYoSDV/0nq8oRpfJ /QdP72mezpqZ465pk3vd722lYv2VDEITFUhJXnEWws5cl5ZVKVCKmsGDEaN7I975 uVOJpx7jOYMq5InTNUrj1WpfSbAQTT7ecOB2u6y6PmNVPIL4zB3aYmCzaDpyEkIU 78kS8L/Vlen+92VP0yDFE2XCs8VoKi4VRXHcrcTbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5o/DCrPQtLJfHg1AoGfLFyXPkFMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVhYjMwNGY2LWUxZTUtNDY3YS04OGEyLTEwMzMyMDUzMDUwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABicwDQYJKoZIhvcNAQELBQADggEBAGHIhDOvjL822Hc1UTpwudd4 g1zVG0E2pEP6MmGgPaqX2LrxEJ8ONUZTB817lsOgvy1H7hgX3/Tm5dG6tknN15af CL9y2kNukTTapjMXerZkE61SEykp/jTJIsVB2h7eqdfLh8O6MP8/rniZ5fd1hpmz f6S7ziJG1yzpRRQaS21Bqkt9FkLLnmf0mLjNx0eKQ21fwuCMxV531wLSrbirbE6o ogbRtj2a1ipLtkWTXWPJctmVvUSvr003a1UtgYxC8oVvaa/yFBfQeu1nhvo2LHCU yXVNKAH8t/4EZpe+zPqIP5uRcpV9T466MvfknaSWjz/iryWNwTHjgnSKlXFvkvo= -----END CERTIFICATE-----Generated at Sat Jun 14 06:38:26 2025 by rpki-client