$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa File: ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa (raw, json) Hash identifier: gvoq8DBfbU8SD12QIAMzBU9keRHVck+yrdt7ySqqwxQ= Subject key identifier: 29:88:60:38:65:50:69:46:F6:F8:9B:16:C3:95:35:46:61:DA:E3:3B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 71D7957D74070EF700B3B3DBCFBA2A25F19C1A64 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa Signing time: Wed 25 Jun 2025 00:31:10 +0000 ROA not before: Wed 25 Jun 2025 00:31:10 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d7:95:7d:74:07:0e:f7:00:b3:b3:db:cf:ba:2a:25:f1:9c:1a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:31:10 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=03f8d9e82d65e3d113e2e0295cc95451d318894ddaf3ca4d664539026ef5ae97, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:62:39:83:b4:e1:84:d5:25:ad:70:37:a1: 02:42:0e:36:58:ab:62:24:f2:c7:cc:18:e8:b7:20: 06:2d:3f:d8:7d:fa:b4:58:1b:df:62:87:15:cb:53: 38:ae:08:71:4a:88:4a:ff:ae:91:88:95:89:1a:3f: f0:d6:9b:97:bc:72:a0:73:4e:2c:20:dc:bc:a9:ed: 3b:3b:7a:a0:cf:9c:c3:f9:8e:36:c3:c5:10:39:9e: 75:81:ce:1c:5a:a3:a6:74:b7:ee:17:a7:0e:40:a2: 9f:03:18:34:de:6d:6c:9e:ab:86:b2:b8:a6:ec:2e: 6a:5e:65:f0:25:1c:09:1f:58:87:bd:a4:4a:2f:9e: 0a:fd:1a:2d:ec:19:fb:ae:a7:38:6d:b8:fb:fb:aa: a9:d2:37:80:f4:f0:0f:4d:db:07:a6:37:61:79:44: 0e:60:67:13:78:c5:bb:a6:89:cf:c4:d0:6f:b4:2e: 76:55:d7:0b:17:bc:4a:d9:ce:5f:03:a2:88:c3:48: 56:90:85:72:fd:32:2d:8a:f6:2d:c8:5d:5e:54:65: d7:4c:3d:02:52:8c:ab:fc:28:2d:9e:5a:f7:32:d7: 85:39:67:87:4b:e2:3c:c4:03:3c:0b:c7:03:d2:28: 43:a8:2c:19:b3:f6:92:fd:db:aa:6c:bc:3f:ed:20: 19:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:88:60:38:65:50:69:46:F6:F8:9B:16:C3:95:35:46:61:DA:E3:3B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0f::/48 Signature Algorithm: sha256WithRSAEncryption 1d:c9:ca:10:a6:23:56:25:87:03:0e:58:2f:c8:9c:9f:d0:25: 96:81:47:f9:2d:01:d2:6b:14:04:f2:f9:4e:37:fa:13:bb:ff: f8:fc:b9:39:44:7d:d3:c2:e4:2e:57:45:d8:52:5d:05:36:90: 28:bd:95:bd:21:5c:53:a1:f0:3c:22:ea:85:13:23:c1:fd:2b: 47:1e:c9:03:e6:97:b2:63:61:20:4c:3e:8c:c1:f3:62:ac:88: 54:1c:52:ea:35:86:96:85:70:96:81:cc:8e:52:1d:4d:b4:15: c3:6e:5a:c7:a6:fe:b6:f4:ca:c8:64:95:ce:27:e9:ae:8f:55: 9b:86:c7:5e:0f:36:91:e1:a4:13:be:eb:f2:d8:3e:e2:a5:5a: 1f:cf:40:1d:b5:ef:f6:b9:af:e2:e5:fb:4a:7a:3d:ad:da:a7: 5d:a4:36:39:df:c6:41:a6:87:37:e9:10:67:28:26:32:ff:bb: f5:43:ec:e8:6c:87:b7:15:06:a9:34:00:ec:d7:4f:ef:7d:d8: aa:71:69:b9:82:1c:7a:b6:8f:3e:d2:6f:1a:2e:25:3d:e8:ac: 9e:a3:13:26:3e:25:67:50:22:b9:70:c7:62:da:ac:41:2a:b4: 37:66:06:03:3a:ea:dd:70:fd:41:ba:6f:4c:01:52:27:c8:c7: c9:df:08:df -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcdeVfXQHDvcAs7Pbz7oqJfGcGmQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDAzMTEwWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2Y4ZDllODJkNjVlM2QxMTNlMmUwMjk1Y2M5NTQ1MWQz MTg4OTRkZGFmM2NhNGQ2NjQ1MzkwMjZlZjVhZTk3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcw2I5g7ThhNUlrXA3oQJCDjZYq2Ik8sfMGOi3IAYtP9h9 +rRYG99ihxXLUziuCHFKiEr/rpGIlYkaP/DWm5e8cqBzTiwg3Lyp7Ts7eqDPnMP5 jjbDxRA5nnWBzhxao6Z0t+4Xpw5Aop8DGDTebWyeq4ayuKbsLmpeZfAlHAkfWIe9 pEovngr9Gi3sGfuupzhtuPv7qqnSN4D08A9N2wemN2F5RA5gZxN4xbumic/E0G+0 LnZV1wsXvErZzl8DoojDSFaQhXL9Mi2K9i3IXV5UZddMPQJSjKv8KC2eWvcy14U5 Z4dL4jzEAzwLxwPSKEOoLBmz9pL926psvD/tIBkTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKYhgOGVQaUb2+JsWw5U1RmHa4zswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NlMmZkYmEyLWNhNDEtNGQyZi05YzFmLWU0Nzk5MThlOTNmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA8wDQYJKoZIhvcNAQELBQADggEBAB3JyhCmI1YlhwMOWC/InJ/Q JZaBR/ktAdJrFATy+U43+hO7//j8uTlEfdPC5C5XRdhSXQU2kCi9lb0hXFOh8Dwi 6oUTI8H9K0ceyQPml7JjYSBMPozB82KsiFQcUuo1hpaFcJaBzI5SHU20FcNuWsem /rb0yshklc4n6a6PVZuGx14PNpHhpBO+6/LYPuKlWh/PQB217/a5r+Ll+0p6Pa3a p12kNjnfxkGmhzfpEGcoJjL/u/VD7Ohsh7cVBqk0AOzXT+992KpxabmCHHq2jz7S bxouJT3orJ6jEyY+JWdQIrlwx2LarEEqtDdmBgM66t1w/UG6b0wBUifIx8nfCN8= -----END CERTIFICATE-----Generated at Sun Jun 29 18:15:44 2025 by rpki-client