$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/58ae88e3-1626-4e66-a775-9d30fa3396fa.roa File: 58ae88e3-1626-4e66-a775-9d30fa3396fa.roa (raw, json) Hash identifier: /09bNxm6NnJpQWmhg5gCcX3zgUo1ifwrEEGLGxIhV98= Subject key identifier: 84:18:F4:93:9A:98:AF:25:CA:7F:2B:A8:DE:D0:47:AE:5A:D0:62:89 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 577CE1BFE1F0CAAA08C8AC3C2132EAC96872D419 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/58ae88e3-1626-4e66-a775-9d30fa3396fa.roa Signing time: Mon 16 Jun 2025 19:10:44 +0000 ROA not before: Mon 16 Jun 2025 19:10:44 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7c:e1:bf:e1:f0:ca:aa:08:c8:ac:3c:21:32:ea:c9:68:72:d4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:10:44 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=19283d298fa7f24a17c9c95d9140e1950da8568d004eaa86a86574f680fad8dc, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:2f:92:c2:6e:3c:ed:e6:f5:ee:ec:8b:88: 2b:f4:48:4b:8d:2d:84:e9:d9:19:28:71:ee:dd:24: cc:71:aa:fa:b0:52:b9:89:a5:e4:d5:e8:d3:9d:7e: c0:f7:e3:4c:89:cc:9a:7b:cf:7e:69:22:51:67:fe: 88:77:30:0e:b8:e9:84:b7:08:e3:e1:e4:62:e5:b4: ad:35:c3:f0:50:d1:b1:54:1d:19:56:c9:f0:83:e7: ca:f2:a3:79:76:ee:35:11:87:a6:44:98:f3:e8:31: 87:9f:f2:79:56:32:a0:91:82:5a:2d:96:82:83:23: 64:2c:3c:55:f1:4f:d0:59:97:b3:6a:bc:d3:30:36: ff:bf:4c:07:38:f8:7b:35:31:90:dd:fd:88:35:f0: 31:30:f9:1e:0d:ed:f4:b3:90:b3:87:20:2d:7e:51: df:75:85:60:33:6e:8d:b6:44:cf:9c:4e:4b:db:96: 3a:f6:09:ae:10:d8:f2:c1:b5:5c:de:af:65:ef:cd: 65:21:2b:47:f4:c5:f0:89:e1:28:76:46:49:53:34: b3:77:be:77:ec:a9:f7:6d:16:4e:05:a6:2d:13:8e: 84:45:6c:32:c7:c2:a3:f8:55:22:4d:f0:f4:6c:76: 42:72:89:42:66:21:3e:e9:6a:8e:d7:4b:01:ac:57: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:18:F4:93:9A:98:AF:25:CA:7F:2B:A8:DE:D0:47:AE:5A:D0:62:89 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/58ae88e3-1626-4e66-a775-9d30fa3396fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:b00::/40 Signature Algorithm: sha256WithRSAEncryption 7c:4d:91:2a:b0:0a:e5:86:6f:91:ed:42:8d:11:21:35:5c:a4: 51:2c:f5:66:8a:34:a9:21:d9:85:c7:be:95:65:d7:65:c7:d3: d7:4a:30:4f:3e:ef:4a:34:b0:f7:e2:55:a4:e0:73:2b:1b:94: 8d:74:d5:06:92:c5:d7:24:91:2a:f8:0f:3c:15:50:88:af:57: 15:d6:87:cc:09:37:c5:e1:92:f1:a8:cb:7e:6b:6a:32:f0:47: b3:e2:40:0f:57:ad:f0:e8:74:22:67:e3:d5:aa:02:1f:38:49: 1c:af:2c:59:51:d6:cd:96:50:01:63:32:4e:a6:33:db:9f:d8: 24:96:8a:af:f4:cd:38:c6:68:d6:b4:76:4f:63:bd:b4:ea:17: b8:97:bf:24:28:79:99:94:bd:68:57:7d:0d:15:7f:fb:b9:24: cd:f9:c5:f3:76:c2:57:8e:4f:7d:97:fb:be:3b:ee:54:42:fc: f7:15:e9:82:9f:29:b4:f7:88:e1:7c:94:05:f0:46:30:55:bd: 34:df:05:b7:c2:ef:44:fc:23:99:41:3e:19:f8:bc:25:2d:56: f2:1f:53:da:ae:6f:e1:27:16:bd:9c:48:db:d4:68:b9:92:ff: 0f:b5:ae:56:1d:82:55:c0:14:eb:41:c9:67:9c:b8:c0:91:1a: 48:08:fc:cd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUV3zhv+HwyqoIyKw8ITLqyWhy1BkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkxMDQ0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTI4M2QyOThmYTdmMjRhMTdjOWM5NWQ5MTQwZTE5NTBk YTg1NjhkMDA0ZWFhODZhODY1NzRmNjgwZmFkOGRjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdty+Swm487eb17uyLiCv0SEuNLYTp2Rkoce7dJMxxqvqw UrmJpeTV6NOdfsD340yJzJp7z35pIlFn/oh3MA646YS3COPh5GLltK01w/BQ0bFU HRlWyfCD58ryo3l27jURh6ZEmPPoMYef8nlWMqCRglotloKDI2QsPFXxT9BZl7Nq vNMwNv+/TAc4+Hs1MZDd/Yg18DEw+R4N7fSzkLOHIC1+Ud91hWAzbo22RM+cTkvb ljr2Ca4Q2PLBtVzer2XvzWUhK0f0xfCJ4Sh2RklTNLN3vnfsqfdtFk4Fpi0TjoRF bDLHwqP4VSJN8PRsdkJyiUJmIT7pao7XSwGsV+4jAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhBj0k5qYryXKfyuo3tBHrlrQYokwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU4YWU4OGUzLTE2MjYtNGU2Ni1hNzc1LTlkMzBmYTMzOTZmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBZzACzANBgkqhkiG9w0BAQsFAAOCAQEAfE2RKrAK5YZvke1CjREhNVyk USz1Zoo0qSHZhce+lWXXZcfT10owTz7vSjSw9+JVpOBzKxuUjXTVBpLF1ySRKvgP PBVQiK9XFdaHzAk3xeGS8ajLfmtqMvBHs+JAD1et8Oh0Imfj1aoCHzhJHK8sWVHW zZZQAWMyTqYz25/YJJaKr/TNOMZo1rR2T2O9tOoXuJe/JCh5mZS9aFd9DRV/+7kk zfnF83bCV45PfZf7vjvuVEL89xXpgp8ptPeI4XyUBfBGMFW9NN8Ft8LvRPwjmUE+ Gfi8JS1W8h9T2q5v4ScWvZxI29RouZL/D7WuVh2CVcAU60HJZ5y4wJEaSAj8zQ== -----END CERTIFICATE-----Generated at Sun Jun 29 01:25:40 2025 by rpki-client