$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa File: 941f79ce-715f-49f4-a576-333c065d82c6.roa (raw, json) Hash identifier: dtIeoL73FOzD4sGa8Pn9r41tqyfXHQqMwpv95XACr4M= Subject key identifier: 43:14:C3:7E:0E:B6:0C:EF:2E:67:6E:91:63:BE:81:6A:57:E3:20:66 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 544479D3A321E709F6EBB8025B92662FED08B6D5 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa Signing time: Wed 21 May 2025 00:50:49 +0000 ROA not before: Wed 21 May 2025 00:50:49 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:48f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:44:79:d3:a3:21:e7:09:f6:eb:b8:02:5b:92:66:2f:ed:08:b6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 21 00:50:49 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=282fe4bfb2199e7309952e3770921f2fc5ce2a159e8d089b9d7e6f549a4ec78c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:ad:98:80:85:41:ed:52:0c:89:08:3f:d0: 9d:a5:d2:5c:f6:0b:39:c7:9e:88:3b:de:bb:0b:02: 2f:b5:52:f4:8b:33:ea:e4:ce:9a:af:54:3f:e1:09: af:23:50:1c:97:33:bd:63:b9:be:d7:cd:1a:10:a5: 36:14:0e:13:ff:49:69:11:c6:f0:4d:b8:44:63:2b: a7:c8:ca:6f:84:43:ad:bf:2c:51:7f:17:4b:89:29: 06:80:3f:09:cb:35:1a:27:11:ba:fa:44:ed:ac:76: a7:bd:e1:07:50:1b:7a:71:f5:cd:2f:4b:ed:a1:3b: b9:cb:69:74:03:e2:41:28:be:52:f6:34:c2:a8:25: 8b:f1:d0:51:e7:c9:b3:c1:b6:05:78:c8:86:25:72: 2f:f1:54:cd:5f:ff:2f:fa:58:d0:08:eb:59:81:29: 33:aa:82:d5:56:49:55:f6:15:0d:33:50:46:2f:35: f1:13:54:ca:a2:35:ab:58:fb:df:42:5c:e6:f9:2f: 97:64:47:58:66:ee:f2:d0:29:b8:79:cd:b5:03:bc: b2:a3:f6:9c:11:6c:e3:67:a5:55:ae:e7:ad:f9:04: 96:43:e4:d2:eb:c3:c4:02:e7:2e:d9:22:a9:5f:11: 9f:4d:e9:d6:f2:e1:21:e2:74:7d:15:b0:e8:92:18: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:14:C3:7E:0E:B6:0C:EF:2E:67:6E:91:63:BE:81:6A:57:E3:20:66 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:48f::/48 Signature Algorithm: sha256WithRSAEncryption 59:64:e6:22:16:0d:22:22:9f:4f:4e:a5:0d:08:8e:82:48:69: 8b:3f:91:d3:f4:f9:00:82:99:f0:c6:a2:46:01:d5:d0:82:c7: 33:16:d9:14:a7:70:cd:21:32:ad:d5:09:f1:19:cb:c5:19:f5: ef:28:86:6f:3f:a5:3f:49:4d:07:0e:51:80:08:86:62:30:3f: db:ee:2c:2c:bc:a2:66:fe:67:4a:e1:5b:de:80:01:f9:95:3f: cf:47:d6:94:ce:d2:f7:e5:df:56:22:91:e9:99:c3:e8:3e:95: 04:4b:18:78:3f:a0:d5:04:67:bd:b6:0d:8a:b2:28:70:48:23: b5:3a:6e:4d:1e:8a:2f:64:71:03:d8:5e:3e:c7:ae:56:fe:4a: 6d:29:e5:3a:83:5b:9a:14:a4:cd:1d:57:1f:8f:2d:1b:23:bd: c0:13:64:48:62:46:2c:4c:a5:78:58:a7:5b:f6:c4:b2:20:68: e7:60:78:82:d3:19:c2:c8:08:dc:d8:e8:57:63:10:d0:67:c2: 54:7d:28:63:9c:00:69:c0:f1:a0:b8:76:4e:55:b6:2f:cd:01: 8f:c5:4d:41:2b:3b:58:e1:94:15:29:31:e2:92:d4:9d:89:23: 02:8d:4e:0f:91:3a:46:08:13:d1:34:fe:a0:2d:fc:62:44:28: 6e:f1:62:b4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVER506Mh5wn267gCW5JmL+0IttUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIxMDA1MDQ5WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyODJmZTRiZmIyMTk5ZTczMDk5NTJlMzc3MDkyMWYyZmM1 Y2UyYTE1OWU4ZDA4OWI5ZDdlNmY1NDlhNGVjNzhjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgV62YgIVB7VIMiQg/0J2l0lz2CznHnog73rsLAi+1UvSL M+rkzpqvVD/hCa8jUByXM71jub7XzRoQpTYUDhP/SWkRxvBNuERjK6fIym+EQ62/ LFF/F0uJKQaAPwnLNRonEbr6RO2sdqe94QdQG3px9c0vS+2hO7nLaXQD4kEovlL2 NMKoJYvx0FHnybPBtgV4yIYlci/xVM1f/y/6WNAI61mBKTOqgtVWSVX2FQ0zUEYv NfETVMqiNatY+99CXOb5L5dkR1hm7vLQKbh5zbUDvLKj9pwRbONnpVWu5635BJZD 5NLrw8QC5y7ZIqlfEZ9N6dby4SHidH0VsOiSGPJ9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQxTDfg62DO8uZ26RY76BalfjIGYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk0MWY3OWNlLTcxNWYtNDlmNC1hNTc2LTMzM2MwNjVkODJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABI8wDQYJKoZIhvcNAQELBQADggEBAFlk5iIWDSIin09OpQ0IjoJI aYs/kdP0+QCCmfDGokYB1dCCxzMW2RSncM0hMq3VCfEZy8UZ9e8ohm8/pT9JTQcO UYAIhmIwP9vuLCy8omb+Z0rhW96AAfmVP89H1pTO0vfl31YikemZw+g+lQRLGHg/ oNUEZ722DYqyKHBII7U6bk0eii9kcQPYXj7Hrlb+Sm0p5TqDW5oUpM0dVx+PLRsj vcATZEhiRixMpXhYp1v2xLIgaOdgeILTGcLICNzY6FdjENBnwlR9KGOcAGnA8aC4 dk5Vti/NAY/FTUErO1jhlBUpMeKS1J2JIwKNTg+ROkYIE9E0/qAt/GJEKG7xYrQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:14:11 2025 by rpki-client