$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b8e27068-6668-463b-88a5-db3440db3032.roa File: b8e27068-6668-463b-88a5-db3440db3032.roa (raw, json) Hash identifier: VI3D7JR4kzhkYh5GC81JxmWGeiAlS2Zk9liInZ2VjaE= Subject key identifier: 51:C5:8C:A7:97:EF:B2:9C:0C:89:5B:66:0C:6F:1D:08:D8:0E:8B:0C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2D314B5CD63A6A126A1FE622906F35FC6B6B1C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b8e27068-6668-463b-88a5-db3440db3032.roa Signing time: Mon 16 Jun 2025 19:10:58 +0000 ROA not before: Mon 16 Jun 2025 19:10:58 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:31:4b:5c:d6:3a:6a:12:6a:1f:e6:22:90:6f:35:fc:6b:6b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:10:58 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=c99857e276bfad065662cd231e761daa32a1e8be289e3ae19b0cc1360d396311, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:40:0f:8b:d1:82:ad:3c:43:bb:2d:aa:85: 8c:65:f3:82:44:f1:dd:0a:08:82:d6:25:bf:16:35: 24:27:8b:18:0e:a1:0d:80:00:3f:dd:d1:62:e4:48: 40:0d:b3:59:d9:50:1c:3b:80:1c:a7:30:9a:c0:58: c7:1f:db:79:ef:3f:ad:1a:35:b8:9a:26:42:c2:8d: 65:06:8e:3f:15:8c:bd:16:ef:88:d1:37:5d:8d:89: 5f:94:17:c5:76:ce:9e:c9:d2:2a:c8:aa:5c:15:77: 2a:10:ff:dd:28:19:6f:21:c5:5a:e7:be:7a:3b:2f: 96:41:b0:99:a0:e0:2f:cd:63:9f:12:d9:aa:ec:fd: 0e:36:72:cd:45:13:64:be:20:03:be:8b:77:1d:93: ff:1a:9f:15:fc:6b:63:14:33:16:73:c9:2d:2a:52: 2b:72:4f:8b:da:9f:da:5b:d3:a4:98:cb:ba:25:84: 75:1b:b5:30:e8:8f:b8:32:16:3b:00:04:4d:b9:33: e2:26:23:d8:2b:81:dd:c6:5a:a1:e0:b2:50:a9:50: 03:11:84:f1:1c:46:4b:f2:f4:15:88:31:b7:1d:32: a8:13:68:2b:54:4a:fa:2b:c7:5b:5c:57:e1:78:03: 6c:e9:7f:ea:24:bc:c6:35:a0:55:52:7b:c0:60:9e: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C5:8C:A7:97:EF:B2:9C:0C:89:5B:66:0C:6F:1D:08:D8:0E:8B:0C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b8e27068-6668-463b-88a5-db3440db3032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c48::/48 Signature Algorithm: sha256WithRSAEncryption 2b:f4:b1:e0:58:fa:81:03:69:81:12:32:d3:17:c5:8c:01:f4: 0a:e6:04:df:31:a9:9c:53:7a:ab:f2:66:7d:bc:5e:ba:cc:e2: 2c:ff:5d:0e:c7:cf:1a:80:f2:a3:b1:a9:68:c9:6f:3d:1b:07: 1d:f3:e1:f7:84:a2:37:d7:49:79:75:ab:62:69:b2:a9:e1:ac: 80:b3:4a:6d:64:79:4d:cd:1f:6a:90:e0:16:ef:2d:09:88:93: 8b:37:a3:9e:16:03:8f:94:70:47:66:43:d9:fb:43:ea:2e:35: c6:91:c1:89:8f:30:ec:01:a3:1f:85:0b:90:e0:5f:78:dc:e4: 69:38:06:84:9c:18:cc:05:ec:b6:25:a9:2e:29:fe:7a:a1:bf: d8:f4:8a:d5:1e:99:51:ad:ab:f2:dd:05:b6:41:01:14:0f:ae: be:f6:49:ed:0f:50:37:aa:37:b7:ee:c1:22:a0:93:93:35:1d: c0:14:b0:a6:b4:06:9d:3e:e0:12:2e:97:44:1b:4f:b4:6a:9d: 3c:f7:cb:44:1d:4a:bf:96:23:3d:94:c2:d1:b4:0d:fa:b3:90: 27:01:34:42:b3:ac:18:e4:56:91:6e:cf:e8:f5:44:74:8e:0b: ca:d0:5c:35:c0:03:f6:c2:de:48:58:e8:af:64:17:d1:26:c9: 1f:d6:dc:8b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITLTFLXNY6ahJqH+YikG81/GtrHDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI5N2FjMDAyOGQ2ZWZiZGRhZmI3ZDljNzFlMjllYjcxYzAw NWUzNGZjMTlmMWY3YzQyNDAeFw0yNTA2MTYxOTEwNThaFw0yNTA3MjEyMzU5NTla MHoxSTBHBgNVBAUTQGM5OTg1N2UyNzZiZmFkMDY1NjYyY2QyMzFlNzYxZGFhMzJh MWU4YmUyODllM2FlMTliMGNjMTM2MGQzOTYzMTExLTArBgNVBAMTJGY3MjQzNzg1 LTQ2ZGUtNDE0Yi05YjhmLTdhOTY5OWU5NzllMjCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMrCQA+L0YKtPEO7LaqFjGXzgkTx3QoIgtYlvxY1JCeLGA6h DYAAP93RYuRIQA2zWdlQHDuAHKcwmsBYxx/bee8/rRo1uJomQsKNZQaOPxWMvRbv iNE3XY2JX5QXxXbOnsnSKsiqXBV3KhD/3SgZbyHFWue+ejsvlkGwmaDgL81jnxLZ quz9DjZyzUUTZL4gA76Ldx2T/xqfFfxrYxQzFnPJLSpSK3JPi9qf2lvTpJjLuiWE dRu1MOiPuDIWOwAETbkz4iYj2CuB3cZaoeCyUKlQAxGE8RxGS/L0FYgxtx0yqBNo K1RK+ivHW1xX4XgDbOl/6iS8xjWgVVJ7wGCeif0CAwEAAaOCArQwggKwMB0GA1Ud DgQWBBRRxYynl++ynAyJW2YMbx0I2A6LDDAfBgNVHSMEGDAWgBS6DOF+Iz+8cdQw q9rCwwx5BLag5zAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2QzZWE2ZWFiLWY0 MWYtNGU0Ni1hOGY2LTNkYTRhMTI4ZDc4Yy85N2FjMDAyOGQ2ZWZiZGRhZmI3ZDlj NzFlMjllYjcxYzAwNWUzNGZjMTlmMWY3YzQyNC5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS81NDYwMmZiMC1hOWQ0LTRmOWYtYjBjYS1iZTJh MTM5ZWE5MmIvYjhlMjcwNjgtNjY2OC00NjNiLTg4YTUtZGIzNDQwZGIzMDMyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2Et YmUyYTEzOWVhOTJiLzc3M2EtMzJjY2VLZXR4d0FYalQ4R2ZIM3hDUS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACYFnMAMSDANBgkqhkiG9w0BAQsFAAOCAQEAK/Sx4Fj6gQNpgRIy0xfFjAH0 CuYE3zGpnFN6q/JmfbxeusziLP9dDsfPGoDyo7GpaMlvPRsHHfPh94SiN9dJeXWr YmmyqeGsgLNKbWR5Tc0fapDgFu8tCYiTizejnhYDj5RwR2ZD2ftD6i41xpHBiY8w 7AGjH4ULkOBfeNzkaTgGhJwYzAXstiWpLin+eqG/2PSK1R6ZUa2r8t0FtkEBFA+u vvZJ7Q9QN6o3t+7BIqCTkzUdwBSwprQGnT7gEi6XRBtPtGqdPPfLRB1Kv5YjPZTC 0bQN+rOQJwE0QrOsGORWkW7P6PVEdI4LytBcNcAD9sLeSFjor2QX0SbJH9bciw== -----END CERTIFICATE-----Generated at Sun Jun 29 07:24:00 2025 by rpki-client