$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0baebc69-c10a-4df5-b60a-747fa56ff200.roa File: 0baebc69-c10a-4df5-b60a-747fa56ff200.roa (raw, json) Hash identifier: MmvTW4zDSSr7mWU+xiQH/e/faiYqv4D3pO+mBkO5tAY= Subject key identifier: DF:ED:09:5D:33:29:B5:F4:5C:61:49:F6:CF:2F:D3:79:47:16:C9:1E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 688608E1A67E2B1D45D9CFF7B64FA5D1788C7FC6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0baebc69-c10a-4df5-b60a-747fa56ff200.roa Signing time: Mon 16 Jun 2025 19:00:42 +0000 ROA not before: Mon 16 Jun 2025 19:00:42 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:309::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:86:08:e1:a6:7e:2b:1d:45:d9:cf:f7:b6:4f:a5:d1:78:8c:7f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:00:42 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=fcf3cfda379c69da461553965e27fee4b7e44c44158c6b46823ebb9efc211fa5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b5:30:e3:50:fe:67:bf:6f:a9:64:38:f6:51: 9b:2a:dc:47:81:69:6e:07:a8:fe:54:77:31:f0:a6: 70:e9:e4:25:b8:32:82:67:eb:ea:b3:e2:a0:32:d0: 24:75:8a:c5:0a:b1:c0:56:33:88:80:0f:8f:8a:4c: 38:4a:31:ed:54:0a:fc:bd:15:30:6a:08:56:4a:a6: 14:18:c6:14:fc:b9:39:dd:94:4d:3d:b9:7e:3d:36: 13:0f:e8:b2:86:39:1d:5c:32:e4:a1:c9:56:90:15: ca:b2:1d:21:e7:a9:7e:cc:24:c3:88:71:fa:7e:6c: 1d:13:58:24:bf:3c:e6:ea:2f:8e:98:7b:4b:11:66: 08:75:9b:1a:9b:72:25:0d:57:89:d5:33:72:27:2e: 66:01:83:31:56:79:1e:cd:c4:94:74:6f:8f:7c:62: 3a:cd:99:9e:22:93:fd:78:5d:67:94:65:5e:3d:fc: 85:b2:ad:05:03:d8:6d:14:a8:89:b5:01:f7:7c:01: 1e:65:64:ab:6d:57:0f:0b:be:cc:95:8c:ae:15:27: 15:eb:ee:e8:bd:0e:45:c0:18:19:2a:c0:4f:85:54: c0:7a:66:fa:92:e6:fe:82:44:f3:5a:1d:1b:e7:7c: d4:d6:83:0d:cd:48:12:00:16:95:f4:b5:e6:5c:f0: 77:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:ED:09:5D:33:29:B5:F4:5C:61:49:F6:CF:2F:D3:79:47:16:C9:1E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0baebc69-c10a-4df5-b60a-747fa56ff200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:309::/48 Signature Algorithm: sha256WithRSAEncryption 91:e7:00:2b:07:87:22:b5:72:7d:88:a5:83:b4:38:bd:02:a0: a6:6d:b7:8a:80:df:d9:16:2c:3b:71:4d:0e:ce:88:35:58:ee: d5:7e:02:67:18:1c:fa:f7:e6:50:64:79:36:6e:6c:d4:33:fa: 11:e2:73:e5:ea:bd:32:e1:41:b4:40:11:9f:ef:e9:76:c8:c0: ec:55:ba:1f:8e:d8:3b:fa:53:76:c1:d1:33:eb:57:a6:b4:63: fb:d2:1a:df:77:9b:dd:d6:41:93:1b:c1:74:b5:90:37:90:68: b7:43:8d:00:76:10:c7:12:52:65:09:36:0c:91:b0:54:81:43: ba:c2:1a:fe:7a:2d:fe:14:37:6b:ee:8d:14:a5:39:ec:dc:94: 18:17:78:18:d7:12:ef:67:57:ed:13:33:41:57:1b:41:af:e6: 29:75:25:54:45:41:94:ca:b8:44:2e:c3:9e:62:3c:5b:09:0f: 52:51:03:a8:34:cf:40:f2:7b:74:88:91:6e:7c:d4:78:1a:75: 81:38:ed:73:71:12:08:2b:09:de:eb:16:3c:08:f9:8f:47:65: 2f:12:ff:50:5b:d9:0e:1d:4a:83:f0:b8:5d:02:68:05:a4:8d: 41:62:da:96:30:f4:f7:cb:6a:ba:45:d9:60:98:34:c0:6c:87: 16:65:4e:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaIYI4aZ+Kx1F2c/3tk+l0XiMf8YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkwMDQyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2YzY2ZkYTM3OWM2OWRhNDYxNTUzOTY1ZTI3ZmVlNGI3 ZTQ0YzQ0MTU4YzZiNDY4MjNlYmI5ZWZjMjExZmE1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLtTDjUP5nv2+pZDj2UZsq3EeBaW4HqP5UdzHwpnDp5CW4 MoJn6+qz4qAy0CR1isUKscBWM4iAD4+KTDhKMe1UCvy9FTBqCFZKphQYxhT8uTnd lE09uX49NhMP6LKGOR1cMuShyVaQFcqyHSHnqX7MJMOIcfp+bB0TWCS/PObqL46Y e0sRZgh1mxqbciUNV4nVM3InLmYBgzFWeR7NxJR0b498YjrNmZ4ik/14XWeUZV49 /IWyrQUD2G0UqIm1Afd8AR5lZKttVw8LvsyVjK4VJxXr7ui9DkXAGBkqwE+FVMB6 ZvqS5v6CRPNaHRvnfNTWgw3NSBIAFpX0teZc8Hd1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3+0JXTMptfRcYUn2zy/TeUcWyR4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzBiYWViYzY5LWMxMGEtNGRmNS1iNjBhLTc0N2ZhNTZmZjIwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwkwDQYJKoZIhvcNAQELBQADggEBAJHnACsHhyK1cn2IpYO0OL0C oKZtt4qA39kWLDtxTQ7OiDVY7tV+AmcYHPr35lBkeTZubNQz+hHic+XqvTLhQbRA EZ/v6XbIwOxVuh+O2Dv6U3bB0TPrV6a0Y/vSGt93m93WQZMbwXS1kDeQaLdDjQB2 EMcSUmUJNgyRsFSBQ7rCGv56Lf4UN2vujRSlOezclBgXeBjXEu9nV+0TM0FXG0Gv 5il1JVRFQZTKuEQuw55iPFsJD1JRA6g0z0Dye3SIkW581HgadYE47XNxEggrCd7r FjwI+Y9HZS8S/1Bb2Q4dSoPwuF0CaAWkjUFi2pYw9PfLarpF2WCYNMBshxZlTkA= -----END CERTIFICATE-----Generated at Sun Jun 29 03:07:06 2025 by rpki-client