$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa File: 96b3f615-0792-4abd-8381-86a2d78ce63d.roa (raw, json) Hash identifier: 8EWjcw0si+U52DmOaT2X3YiTSw78giazSY6S276HpFI= Subject key identifier: 40:0B:E9:E8:32:B7:BD:92:C0:A4:3C:D7:0C:07:F0:E7:CC:A9:72:E4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3A354F98C19C77D8A99A86E23A45B4FEA4734BCC Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa Signing time: Wed 21 May 2025 00:51:00 +0000 ROA not before: Wed 21 May 2025 00:51:00 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:546::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:35:4f:98:c1:9c:77:d8:a9:9a:86:e2:3a:45:b4:fe:a4:73:4b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 21 00:51:00 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=744cbef7c38d6be6ccb4d1e889ba22bb632f81843e179f7e126b2818928ad3d6, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:27:38:51:b6:0c:84:b1:14:de:06:51:40: 1f:4b:81:f1:dc:67:de:8b:13:64:5d:b5:ee:ba:44: a8:cb:29:de:cd:92:06:d9:3b:af:02:23:69:01:90: be:51:49:a9:55:d0:f2:68:d6:4d:00:61:b7:4e:14: 25:e6:cc:dc:14:d4:81:b4:0b:15:ac:54:9e:8e:f3: f5:3d:17:72:28:fe:82:16:f0:ed:08:c8:08:ca:0e: 33:ef:37:d5:04:9a:4a:42:26:19:df:2b:5e:5e:68: ea:fc:e5:75:34:19:d9:0b:8f:15:8f:e4:f9:18:90: 94:06:41:c6:0f:95:f4:a9:01:dc:44:66:3b:cc:49: f4:62:0c:94:5e:b6:60:43:53:5d:e7:43:50:79:27: ff:0e:71:11:84:88:1c:f6:ae:e4:2d:8a:a4:e4:40: 2e:05:7b:4b:97:c7:02:89:a7:91:7a:e7:c9:54:1a: 22:2b:30:26:d0:2f:d5:e0:f1:50:d6:84:82:b2:e0: 38:4f:be:e2:a7:80:23:2c:4f:9e:4e:f6:a5:6b:89: 52:aa:17:00:ba:a7:bc:61:2f:50:61:89:91:45:8d: 73:1e:fb:3d:16:9b:2a:9f:ea:2c:c9:d1:77:9f:fb: 76:0c:30:36:47:8f:09:4d:43:77:82:d1:75:b7:f8: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0B:E9:E8:32:B7:BD:92:C0:A4:3C:D7:0C:07:F0:E7:CC:A9:72:E4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:546::/48 Signature Algorithm: sha256WithRSAEncryption 4d:1d:7c:e2:f5:b7:46:9a:f3:16:01:c5:67:7b:11:ff:7c:12: 85:7b:c3:74:31:3c:3d:fa:62:71:54:fc:26:40:ed:87:d1:82: 22:57:aa:f7:1e:fc:a3:91:38:8a:8d:ca:83:b5:21:28:10:07: 58:cc:01:04:d1:59:ab:55:7e:bf:6f:54:30:b4:4c:b3:c0:76: cf:36:9f:c2:e7:54:44:ad:e5:31:28:44:9a:28:2a:ed:7f:a8: 0c:c3:af:62:85:99:7a:2d:5e:0e:85:d7:28:12:05:c9:e3:24: c7:c4:3f:2b:9f:07:35:c6:69:16:f7:49:11:0f:b7:9d:1c:d5: 2b:b0:eb:34:67:73:12:38:7e:9b:9e:fa:8b:04:8d:4b:37:b1: 2d:bd:21:a8:8f:a9:bd:32:3e:56:33:76:c9:2b:ce:1b:16:e7: e0:0a:5a:27:bb:c8:86:42:0d:53:20:de:cc:fe:68:76:50:a1: ce:20:d5:c8:74:71:6e:5b:58:ee:47:cc:db:25:ff:00:46:50: 1c:c3:23:a3:89:e0:b0:72:2d:3e:eb:e4:c6:ee:51:44:37:9f: f3:cb:94:cf:c7:bc:b1:57:94:62:3d:06:0d:a5:76:41:a1:a1: 7c:6e:3c:ba:ae:47:77:ca:7a:81:14:2e:ee:ca:e3:b9:ec:2f: da:53:54:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOjVPmMGcd9ipmobiOkW0/qRzS8wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIxMDA1MTAwWhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDRjYmVmN2MzOGQ2YmU2Y2NiNGQxZTg4OWJhMjJiYjYz MmY4MTg0M2UxNzlmN2UxMjZiMjgxODkyOGFkM2Q2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxuic4UbYMhLEU3gZRQB9LgfHcZ96LE2Rdte66RKjLKd7N kgbZO68CI2kBkL5RSalV0PJo1k0AYbdOFCXmzNwU1IG0CxWsVJ6O8/U9F3Io/oIW 8O0IyAjKDjPvN9UEmkpCJhnfK15eaOr85XU0GdkLjxWP5PkYkJQGQcYPlfSpAdxE ZjvMSfRiDJRetmBDU13nQ1B5J/8OcRGEiBz2ruQtiqTkQC4Fe0uXxwKJp5F658lU GiIrMCbQL9Xg8VDWhIKy4DhPvuKngCMsT55O9qVriVKqFwC6p7xhL1BhiZFFjXMe +z0Wmyqf6izJ0Xef+3YMMDZHjwlNQ3eC0XW3+PUtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQAvp6DK3vZLApDzXDAfw58ypcuQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk2YjNmNjE1LTA3OTItNGFiZC04MzgxLTg2YTJkNzhjZTYzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUYwDQYJKoZIhvcNAQELBQADggEBAE0dfOL1t0aa8xYBxWd7Ef98 EoV7w3QxPD36YnFU/CZA7YfRgiJXqvce/KOROIqNyoO1ISgQB1jMAQTRWatVfr9v VDC0TLPAds82n8LnVESt5TEoRJooKu1/qAzDr2KFmXotXg6F1ygSBcnjJMfEPyuf BzXGaRb3SREPt50c1Suw6zRncxI4fpue+osEjUs3sS29IaiPqb0yPlYzdskrzhsW 5+AKWie7yIZCDVMg3sz+aHZQoc4g1ch0cW5bWO5HzNsl/wBGUBzDI6OJ4LByLT7r 5MbuUUQ3n/PLlM/HvLFXlGI9Bg2ldkGhoXxuPLquR3fKeoEULu7K47nsL9pTVOI= -----END CERTIFICATE-----Generated at Sun Jun 15 04:53:18 2025 by rpki-client