$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/555f0c83-1ce7-45af-b439-b2fab6a08187.roa File: 555f0c83-1ce7-45af-b439-b2fab6a08187.roa (raw, json) Hash identifier: xU6YNspVbhjr9HeWDEuX3Y9+uLSeAQADbS9bCeOLbNA= Subject key identifier: A5:0D:CD:5E:62:C3:9D:DF:60:A5:E6:E7:A1:35:E0:55:7D:2A:53:7A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 653D02D063D3AE51E59D38F4419240CC72F1B629 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/555f0c83-1ce7-45af-b439-b2fab6a08187.roa Signing time: Wed 25 Jun 2025 00:31:07 +0000 ROA not before: Wed 25 Jun 2025 00:31:07 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:c0e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3d:02:d0:63:d3:ae:51:e5:9d:38:f4:41:92:40:cc:72:f1:b6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:31:07 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=30ef3239f56d792222153e21d7db7510ba70bec97a3a9a4c9466cd4be022f9b3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:14:cf:75:e4:86:a4:69:5d:31:09:37:08: cc:9c:c3:b0:a7:c7:2d:58:c5:b8:35:de:c7:fc:16: a1:87:e6:43:85:32:01:4d:fb:61:9b:05:4d:e4:95: 27:60:a5:82:33:b9:fd:72:31:e3:33:ba:5b:f4:6c: 73:c2:d9:a5:95:92:05:67:27:84:bc:e5:12:d6:22: 30:1b:51:ac:91:9b:6d:d8:6d:3c:ad:4e:9f:78:1c: 71:3b:72:72:a6:aa:4c:47:a6:c1:e2:9a:67:ce:36: 4b:38:a2:fc:70:21:86:e4:d7:e7:f7:95:57:13:71: 29:bb:5a:5c:1c:84:66:79:2e:d9:0c:e3:ee:d3:45: e3:77:5f:9f:13:fa:5e:d5:3d:a0:f0:20:0d:63:9b: 92:14:4e:29:ec:df:59:d6:2b:fc:33:72:6f:67:cb: a1:96:14:ce:67:61:13:ba:af:bd:74:d6:cb:1c:b4: 41:22:e0:40:83:bc:32:48:9a:fa:19:7a:4b:ad:82: db:51:00:bc:5a:1e:4f:6d:9e:79:de:53:24:5b:76: d9:d9:5a:e9:92:a6:37:8a:82:1e:03:f5:c9:ad:f8: c1:f3:cd:7d:9b:dc:4a:8a:5f:de:8a:d1:b3:87:1a: d5:d0:b0:25:19:f1:d5:9d:73:e1:69:6b:ef:b1:5c: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0D:CD:5E:62:C3:9D:DF:60:A5:E6:E7:A1:35:E0:55:7D:2A:53:7A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/555f0c83-1ce7-45af-b439-b2fab6a08187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0e::/48 Signature Algorithm: sha256WithRSAEncryption 86:5a:2b:3a:81:26:f2:fb:4b:0e:93:3a:8d:53:83:6a:75:a7: b7:73:01:88:83:d8:8d:0a:a5:bb:cb:f0:eb:fa:16:f8:3f:2d: c6:2b:3a:58:03:25:7a:52:74:8d:c5:51:ff:69:1b:98:de:64: 9f:47:22:31:b0:93:f6:77:5e:d4:f8:de:0c:91:0f:e1:ca:48: ba:6a:18:32:3e:d4:a9:9b:2f:2c:c2:c5:d9:36:1a:b8:0a:75: 6a:22:31:a4:0e:9a:af:cc:c1:d3:de:ce:be:a6:02:88:22:d8: b9:20:55:dd:71:9e:3d:cb:72:06:1a:43:d0:c7:03:e8:f5:f0: c3:cf:87:07:5f:e3:5b:a0:78:13:b0:3c:a2:e2:37:ca:07:3c: 0b:47:80:77:a0:d7:a4:df:c4:92:d9:d0:22:68:5c:1c:f7:9b: 78:4a:ab:a5:98:c7:9b:29:78:88:ed:60:de:2e:c2:79:9d:4e: 52:fa:a6:61:7f:f7:5b:ca:d9:e2:fc:ae:ac:5e:5d:07:cb:4a: aa:5e:46:61:d8:b2:08:67:74:2c:27:33:fa:66:0a:be:a5:d8: 2c:75:bb:7f:bc:9a:24:1d:28:03:7b:3f:c5:55:90:e4:93:7b: 8f:c8:8d:a1:58:21:85:bd:fd:51:cf:e5:0b:6a:b1:2f:47:4c: 01:d3:de:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZT0C0GPTrlHlnTj0QZJAzHLxtikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDAzMTA3WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGVmMzIzOWY1NmQ3OTIyMjIxNTNlMjFkN2RiNzUxMGJh NzBiZWM5N2EzYTlhNGM5NDY2Y2Q0YmUwMjJmOWIzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDBRTPdeSGpGldMQk3CMycw7Cnxy1Yxbg13sf8FqGH5kOF MgFN+2GbBU3klSdgpYIzuf1yMeMzulv0bHPC2aWVkgVnJ4S85RLWIjAbUayRm23Y bTytTp94HHE7cnKmqkxHpsHimmfONks4ovxwIYbk1+f3lVcTcSm7WlwchGZ5LtkM 4+7TReN3X58T+l7VPaDwIA1jm5IUTins31nWK/wzcm9ny6GWFM5nYRO6r7101ssc tEEi4ECDvDJImvoZekutgttRALxaHk9tnnneUyRbdtnZWumSpjeKgh4D9cmt+MHz zX2b3EqKX96K0bOHGtXQsCUZ8dWdc+Fpa++xXFIJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpQ3NXmLDnd9gpebnoTXgVX0qU3owHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU1NWYwYzgzLTFjZTctNDVhZi1iNDM5LWIyZmFiNmEwODE4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA4wDQYJKoZIhvcNAQELBQADggEBAIZaKzqBJvL7Sw6TOo1Tg2p1 p7dzAYiD2I0KpbvL8Ov6Fvg/LcYrOlgDJXpSdI3FUf9pG5jeZJ9HIjGwk/Z3XtT4 3gyRD+HKSLpqGDI+1KmbLyzCxdk2GrgKdWoiMaQOmq/MwdPezr6mAogi2LkgVd1x nj3LcgYaQ9DHA+j18MPPhwdf41ugeBOwPKLiN8oHPAtHgHeg16TfxJLZ0CJoXBz3 m3hKq6WYx5speIjtYN4uwnmdTlL6pmF/91vK2eL8rqxeXQfLSqpeRmHYsghndCwn M/pmCr6l2Cx1u3+8miQdKAN7P8VVkOSTe4/IjaFYIYW9/VHP5QtqsS9HTAHT3oE= -----END CERTIFICATE-----Generated at Sun Jun 29 16:20:56 2025 by rpki-client