$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa File: fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa (raw, json) Hash identifier: 52QmZE1S+Bf20Eqhm4ifduXIi9DOs390y5xyctBeg60= Subject key identifier: 62:BB:21:D2:96:21:0D:6F:90:FB:74:47:ED:17:47:C9:B9:CA:F7:3A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5FF33ECD335C51194B92E929B6DFD15E7B4AF417 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa Signing time: Wed 21 May 2025 00:51:16 +0000 ROA not before: Wed 21 May 2025 00:51:16 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:30d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f3:3e:cd:33:5c:51:19:4b:92:e9:29:b6:df:d1:5e:7b:4a:f4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 21 00:51:16 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=f8501e90d4f81b475cb87686d0440f8d83b36d996c5cf4e8e972f1316f4f1e89, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:5c:c1:20:82:3a:ba:3e:51:11:34:b1:17: 7e:eb:e4:84:49:8d:c9:ad:e5:8b:d1:89:92:00:34: e8:26:5b:67:7c:2c:5c:f7:85:e2:bd:a0:93:95:84: a2:46:c8:3d:ad:64:93:f2:06:b9:01:9e:a4:4b:f7: 24:01:a6:bd:4a:ae:fc:d1:0e:02:ba:15:8b:7e:94: e9:9f:44:12:cd:00:7e:bb:64:23:5d:0d:ad:b7:ee: 71:7c:44:9d:df:d4:54:67:e7:0a:47:39:dc:5d:61: b7:fe:f5:68:48:1f:65:c7:24:f7:c7:48:68:2b:24: 8b:27:ed:9d:27:ea:78:e5:32:1a:a3:70:ac:4d:8c: b4:c6:4e:6f:a8:bb:d5:83:a0:94:16:f8:85:01:3f: 98:4b:9c:36:33:29:07:ce:1d:9a:bd:19:89:d6:db: c1:88:d2:5e:a9:23:3c:0f:b0:f8:63:cf:bf:cb:e5: e7:0e:4b:8b:a2:dd:f9:90:14:7a:57:7c:1a:1c:3d: 0d:80:00:66:26:92:c7:da:49:05:0a:50:47:6e:3c: 81:11:24:08:89:71:5e:71:18:f3:d7:9d:79:51:7e: cc:37:9c:04:33:27:9f:5a:c9:97:18:d1:d7:55:aa: 49:36:bd:d4:b0:a1:91:72:dc:a8:bd:81:58:32:0e: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BB:21:D2:96:21:0D:6F:90:FB:74:47:ED:17:47:C9:B9:CA:F7:3A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30d::/48 Signature Algorithm: sha256WithRSAEncryption 44:28:5b:38:40:e5:51:eb:59:7f:42:3e:c2:08:4f:6d:1c:06: 3a:bf:b8:0e:b4:00:ab:c2:1d:d1:a0:51:73:7b:d0:77:5a:6b: eb:b3:19:2b:c0:bc:14:b2:d2:a9:d8:f0:2e:3d:c1:9d:c7:69: a8:da:b3:fa:86:53:0d:ec:f1:23:cd:0a:ef:bb:83:36:4e:c7: 36:25:7a:56:a2:88:9c:9c:21:86:5c:ec:b8:85:60:be:57:06: af:fb:ab:ce:23:8e:7c:b8:67:8a:78:99:67:ec:e8:31:00:a6: 94:b3:da:b9:f7:43:60:c8:06:de:73:86:a4:df:0c:90:e3:95: ed:5d:97:7d:45:ef:a3:75:a5:be:4b:29:ea:1e:dd:f7:12:eb: b3:a4:16:58:51:42:3d:ed:e2:70:76:cb:17:07:8d:f6:96:93: ee:02:8b:e9:04:7c:ca:8d:dd:82:96:56:98:83:43:7d:a5:9b: 51:71:86:54:b7:44:d1:7d:0d:cf:bf:7d:cb:31:c9:d7:b6:68: c1:b1:c2:4f:ad:52:b5:5f:f8:f0:fc:9d:d1:d0:34:b3:22:ef: 1f:f4:a3:01:c1:4b:59:fe:ff:b9:2d:cd:8a:98:10:ec:24:1c: 90:1d:66:c7:e8:33:a5:15:83:c9:b8:ee:10:7a:2e:4f:82:d9: fa:f3:c0:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX/M+zTNcURlLkukptt/RXntK9BcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIxMDA1MTE2WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmODUwMWU5MGQ0ZjgxYjQ3NWNiODc2ODZkMDQ0MGY4ZDgz YjM2ZDk5NmM1Y2Y0ZThlOTcyZjEzMTZmNGYxZTg5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMrlzBIII6uj5RETSxF37r5IRJjcmt5YvRiZIANOgmW2d8 LFz3heK9oJOVhKJGyD2tZJPyBrkBnqRL9yQBpr1KrvzRDgK6FYt+lOmfRBLNAH67 ZCNdDa237nF8RJ3f1FRn5wpHOdxdYbf+9WhIH2XHJPfHSGgrJIsn7Z0n6njlMhqj cKxNjLTGTm+ou9WDoJQW+IUBP5hLnDYzKQfOHZq9GYnW28GI0l6pIzwPsPhjz7/L 5ecOS4ui3fmQFHpXfBocPQ2AAGYmksfaSQUKUEduPIERJAiJcV5xGPPXnXlRfsw3 nAQzJ59ayZcY0ddVqkk2vdSwoZFy3Ki9gVgyDqsLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYrsh0pYhDW+Q+3RH7RdHybnK9zowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2ZlODkyZDJmLTc1YmEtNDA4Ni04YTU2LTVmZTI0ZGU4ZDljNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAw0wDQYJKoZIhvcNAQELBQADggEBAEQoWzhA5VHrWX9CPsIIT20c Bjq/uA60AKvCHdGgUXN70Hdaa+uzGSvAvBSy0qnY8C49wZ3Haajas/qGUw3s8SPN Cu+7gzZOxzYlelaiiJycIYZc7LiFYL5XBq/7q84jjny4Z4p4mWfs6DEAppSz2rn3 Q2DIBt5zhqTfDJDjle1dl31F76N1pb5LKeoe3fcS67OkFlhRQj3t4nB2yxcHjfaW k+4Ci+kEfMqN3YKWVpiDQ32lm1FxhlS3RNF9Dc+/fcsxyde2aMGxwk+tUrVf+PD8 ndHQNLMi7x/0owHBS1n+/7ktzYqYEOwkHJAdZsfoM6UVg8m47hB6Lk+C2frzwIU= -----END CERTIFICATE-----Generated at Sat Jun 14 06:24:17 2025 by rpki-client