$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3a0985e-b817-4645-8cab-d98885ddb36e.roa File: c3a0985e-b817-4645-8cab-d98885ddb36e.roa (raw, json) Hash identifier: VN6ft/a3/c6yPV4vvFxBkNYkRBJW8R4q8tMueFsCrzM= Subject key identifier: FF:99:3A:A2:C5:34:58:88:A1:08:91:2A:C7:AC:9B:C4:0A:89:F9:57 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 11BFC8F9DBDB38F96B158438416CF8A2846AF879 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3a0985e-b817-4645-8cab-d98885ddb36e.roa Signing time: Wed 21 May 2025 00:50:58 +0000 ROA not before: Wed 21 May 2025 00:50:58 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:546::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bf:c8:f9:db:db:38:f9:6b:15:84:38:41:6c:f8:a2:84:6a:f8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 21 00:50:58 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=88ab153bf48f5b1c0cf15c447883c76ac28e83e9a2b3ec31b9ecaf97624befdf, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:6b:25:14:85:ca:7c:07:ed:88:ef:45:52: 36:d7:a9:9a:d6:9d:6d:c5:f5:6e:0e:04:5b:76:ec: ef:4f:21:ff:83:8b:0c:ef:de:51:f3:4f:cc:2b:ef: 56:15:be:54:60:c2:f0:57:50:90:cc:72:61:fc:7d: 95:cd:e6:ab:c9:e7:d0:4d:64:10:af:b3:0d:6c:fe: 29:54:ed:3a:d8:a3:39:5a:9f:1a:4a:d4:50:3b:97: dc:f7:10:0f:4d:57:05:db:ce:32:04:8c:82:72:95: 65:e4:11:8e:c5:85:d4:cf:c1:ce:2a:be:da:b1:a3: a8:18:07:8f:11:67:1e:c4:77:48:5d:45:2b:e2:3f: b9:2f:5f:58:0e:83:fd:8b:93:99:c2:2c:30:84:28: a7:f1:7c:e7:ec:79:4d:b3:bf:dc:c8:2c:21:65:a2: b3:51:1f:b2:6f:85:ff:7d:c4:fb:3e:d3:bf:6b:74: a4:41:28:d6:4c:26:47:40:2f:84:ac:b1:14:77:01: 15:d9:cc:66:79:e6:a1:a4:33:e8:73:d4:87:a2:d2: e9:e5:07:84:c4:6a:23:4d:d3:be:2e:89:07:99:1d: f2:15:c7:71:67:cf:ab:29:91:1a:28:eb:c4:dd:83: e6:68:8a:ee:6d:20:04:39:1b:05:df:0d:3b:fc:f7: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:99:3A:A2:C5:34:58:88:A1:08:91:2A:C7:AC:9B:C4:0A:89:F9:57 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3a0985e-b817-4645-8cab-d98885ddb36e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:546::/48 Signature Algorithm: sha256WithRSAEncryption 02:4a:66:3d:6a:a7:ae:ad:2e:55:e9:00:2e:6a:e6:a4:5b:ed: 0b:36:12:d1:62:19:2d:d0:66:bc:97:1e:f3:da:f0:d1:c4:38: a0:7e:28:da:27:09:ed:56:09:b6:51:c6:20:a9:65:d8:cb:27: 8d:96:86:5c:a6:05:e1:02:4f:5e:b9:00:8a:83:bd:c6:d0:fd: c1:4b:bc:9b:7e:73:b1:d0:be:29:fc:91:0f:d0:5e:4a:0e:02: 3f:ed:39:c5:95:99:26:f0:19:47:18:f5:81:30:45:0e:60:f9: 3c:8f:55:ac:2e:95:cc:2e:1e:bd:fc:c2:af:0e:9b:3b:2b:b9: 31:8c:03:23:93:57:ac:fe:ca:cd:2b:d7:25:fa:1c:82:5d:1e: af:6d:bf:04:28:f8:9f:26:15:14:13:d3:fd:00:7a:cc:a6:b9: cf:d3:ca:c7:ac:70:38:d2:ec:c4:f6:d2:ea:95:1d:a7:89:90: 1c:c3:01:03:8e:fa:33:49:38:5f:32:e4:52:5c:05:f0:ad:48: 2e:f4:2f:4c:09:a2:04:eb:d3:51:6a:b8:fe:ca:bc:6e:89:77: 47:32:be:70:4a:ed:91:f7:d0:dc:81:af:60:42:e4:d4:f0:b8: 23:86:44:d7:4c:ee:da:70:a5:6b:16:f6:0d:01:9a:81:76:1f: f3:24:95:fb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEb/I+dvbOPlrFYQ4QWz4ooRq+HkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIxMDA1MDU4WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGFiMTUzYmY0OGY1YjFjMGNmMTVjNDQ3ODgzYzc2YWMy OGU4M2U5YTJiM2VjMzFiOWVjYWY5NzYyNGJlZmRmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC932slFIXKfAftiO9FUjbXqZrWnW3F9W4OBFt27O9PIf+D iwzv3lHzT8wr71YVvlRgwvBXUJDMcmH8fZXN5qvJ59BNZBCvsw1s/ilU7TrYozla nxpK1FA7l9z3EA9NVwXbzjIEjIJylWXkEY7FhdTPwc4qvtqxo6gYB48RZx7Ed0hd RSviP7kvX1gOg/2Lk5nCLDCEKKfxfOfseU2zv9zILCFlorNRH7Jvhf99xPs+079r dKRBKNZMJkdAL4SssRR3ARXZzGZ55qGkM+hz1Iei0unlB4TEaiNN074uiQeZHfIV x3Fnz6spkRoo68Tdg+Zoiu5tIAQ5GwXfDTv8961rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/5k6osU0WIihCJEqx6ybxAqJ+VcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2MzYTA5ODVlLWI4MTctNDY0NS04Y2FiLWQ5ODg4NWRkYjM2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUYwDQYJKoZIhvcNAQELBQADggEBAAJKZj1qp66tLlXpAC5q5qRb 7Qs2EtFiGS3QZryXHvPa8NHEOKB+KNonCe1WCbZRxiCpZdjLJ42WhlymBeECT165 AIqDvcbQ/cFLvJt+c7HQvin8kQ/QXkoOAj/tOcWVmSbwGUcY9YEwRQ5g+TyPVawu lcwuHr38wq8OmzsruTGMAyOTV6z+ys0r1yX6HIJdHq9tvwQo+J8mFRQT0/0Aesym uc/TysescDjS7MT20uqVHaeJkBzDAQOO+jNJOF8y5FJcBfCtSC70L0wJogTr01Fq uP7KvG6Jd0cyvnBK7ZH30NyBr2BC5NTwuCOGRNdM7tpwpWsW9g0BmoF2H/Mklfs= -----END CERTIFICATE-----Generated at Sun Jun 15 09:00:08 2025 by rpki-client