$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f88a93-015f-458c-bd29-a421ebdf2a4c.roa File: 43f88a93-015f-458c-bd29-a421ebdf2a4c.roa (raw, json) Hash identifier: U9JGG7k2crydVLT44OUQuvaCQTWKCFFd44pRPXzVn98= Subject key identifier: FF:D3:98:02:0C:A5:B7:B7:6F:20:8B:28:46:8A:83:6E:7C:A6:EF:F5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6AA8142B36ED6F2E67DA0C09EB347BE6E9C8763E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f88a93-015f-458c-bd29-a421ebdf2a4c.roa Signing time: Wed 25 Jun 2025 00:40:58 +0000 ROA not before: Wed 25 Jun 2025 00:40:58 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a8:14:2b:36:ed:6f:2e:67:da:0c:09:eb:34:7b:e6:e9:c8:76:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:40:58 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=aba9f1da5ce382007ae600e6ea1b549fd7eff45827e1291fd05fe243cc2ae663, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9c:3e:71:f7:44:3e:71:3c:a7:80:80:d5:da: 7a:ed:a6:2f:f1:0e:b0:c2:51:57:91:2a:8c:ed:3b: 81:67:ab:09:f8:be:84:ea:89:4e:ec:ec:7d:c1:21: d6:2f:38:be:4a:10:91:f1:f4:a2:15:e8:9a:01:b9: bc:7a:c3:98:ff:b4:e4:f5:79:a7:d2:8f:15:d1:05: 2e:fe:1e:13:0a:ba:45:7d:33:df:93:45:dd:b4:5f: bc:29:a4:bf:45:04:2c:09:ca:42:34:ce:0c:2f:af: 4a:66:55:a5:e7:6d:84:2c:66:19:79:56:7e:52:d9: 78:ac:a6:41:a4:b7:3c:c6:8f:93:d7:c1:83:0d:bc: a3:55:59:b4:6a:96:7c:a3:a3:0a:3f:86:d1:da:f7: 73:c5:9a:a7:81:18:4e:a3:e2:a8:1c:89:0c:b1:0e: b1:55:6a:aa:b7:02:33:53:f5:4e:61:3e:56:a9:34: 60:61:25:d2:1a:c8:04:5b:1d:75:22:8f:4b:47:33: df:0b:42:32:8c:d4:d8:7b:1e:5e:ae:93:f0:a7:f3: ab:95:aa:40:46:d7:43:f8:66:da:f7:f9:51:ec:46: bc:28:21:a3:c8:b5:ce:2c:2d:2d:f1:3d:e7:a7:b1: ac:b7:c2:12:57:77:29:60:80:05:3f:65:4b:ff:a8: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D3:98:02:0C:A5:B7:B7:6F:20:8B:28:46:8A:83:6E:7C:A6:EF:F5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f88a93-015f-458c-bd29-a421ebdf2a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1b::/48 Signature Algorithm: sha256WithRSAEncryption 4a:32:ec:84:c2:f4:45:ad:aa:d4:5d:4e:25:36:bb:d6:ba:e8: 9f:d3:65:47:d2:c4:e2:ea:7f:67:7d:00:f5:8a:a6:13:24:6d: 4f:63:b6:52:2f:35:fa:57:96:7e:68:5c:6b:75:b5:34:39:51: d4:1f:18:18:63:a5:e5:2c:0d:d2:2d:7e:0d:6a:b0:41:b5:37: a0:92:e9:86:42:f4:1c:2d:7e:5d:0f:88:c4:c4:fc:7d:6c:b2: fe:19:b0:0f:a5:eb:2b:00:b9:ad:7c:e4:85:24:0e:ff:f7:e9: 62:82:a2:b5:a9:27:47:4c:e5:41:87:e4:6f:ff:e4:7c:1e:f3: 14:ff:d4:bc:9e:99:90:0a:59:03:29:c5:2a:56:ba:07:e8:fb: 4f:d7:be:5a:b7:37:86:47:d8:25:06:1f:4e:a6:34:37:78:70: 36:f2:52:fc:06:6d:12:6f:62:ab:cd:be:62:76:6b:b6:2c:a3: 16:a0:c7:8d:2a:9a:3d:fe:82:a6:6d:c2:f4:fe:ef:4a:19:bb: 2b:e7:72:e3:28:f2:7d:95:7b:73:09:91:33:9f:ef:a2:fe:98: bb:61:05:f4:4e:16:e2:d9:c6:14:2c:ea:11:2f:c9:51:ec:5c: 69:41:50:74:89:c0:55:db:78:8e:60:d7:83:70:ba:4d:e1:e2: ea:45:38:33 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaqgUKzbtby5n2gwJ6zR75unIdj4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDA0MDU4WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmE5ZjFkYTVjZTM4MjAwN2FlNjAwZTZlYTFiNTQ5ZmQ3 ZWZmNDU4MjdlMTI5MWZkMDVmZTI0M2NjMmFlNjYzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbnD5x90Q+cTyngIDV2nrtpi/xDrDCUVeRKoztO4Fnqwn4 voTqiU7s7H3BIdYvOL5KEJHx9KIV6JoBubx6w5j/tOT1eafSjxXRBS7+HhMKukV9 M9+TRd20X7wppL9FBCwJykI0zgwvr0pmVaXnbYQsZhl5Vn5S2XispkGktzzGj5PX wYMNvKNVWbRqlnyjowo/htHa93PFmqeBGE6j4qgciQyxDrFVaqq3AjNT9U5hPlap NGBhJdIayARbHXUij0tHM98LQjKM1Nh7Hl6uk/Cn86uVqkBG10P4Ztr3+VHsRrwo IaPItc4sLS3xPeensay3whJXdylggAU/ZUv/qPLDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/9OYAgylt7dvIIsoRoqDbnym7/UwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQzZjg4YTkzLTAxNWYtNDU4Yy1iZDI5LWE0MjFlYmRmMmE0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBswDQYJKoZIhvcNAQELBQADggEBAEoy7ITC9EWtqtRdTiU2u9a6 6J/TZUfSxOLqf2d9APWKphMkbU9jtlIvNfpXln5oXGt1tTQ5UdQfGBhjpeUsDdIt fg1qsEG1N6CS6YZC9Bwtfl0PiMTE/H1ssv4ZsA+l6ysAua185IUkDv/36WKCorWp J0dM5UGH5G//5Hwe8xT/1LyemZAKWQMpxSpWugfo+0/Xvlq3N4ZH2CUGH06mNDd4 cDbyUvwGbRJvYqvNvmJ2a7Ysoxagx40qmj3+gqZtwvT+70oZuyvncuMo8n2Ve3MJ kTOf76L+mLthBfROFuLZxhQs6hEvyVHsXGlBUHSJwFXbeI5g14Nwuk3h4upFODM= -----END CERTIFICATE-----Generated at Sat Jun 28 23:57:55 2025 by rpki-client