$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa File: 0934543e-90db-4ba0-9848-455452e0c367.roa (raw, json) Hash identifier: tdQ2xMJ/fCzOaXgQ79icQD3aRyQeMHthGdA2TrtQDlY= Subject key identifier: DB:2E:23:26:EE:80:50:EF:4F:64:92:64:45:FF:27:65:0E:ED:B9:E4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 26EADF93F88F26F21E772A684A15B2255AD1B894 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa Signing time: Wed 25 Jun 2025 00:30:14 +0000 ROA not before: Wed 25 Jun 2025 00:30:14 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ea:df:93:f8:8f:26:f2:1e:77:2a:68:4a:15:b2:25:5a:d1:b8:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:30:14 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=e1948a2dec653dd9a058bab7c94752a8cf8392b0de582620ef21f1f20aaf0f1d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:cb:02:ce:fa:27:f6:5e:88:83:0e:47:61: c4:e5:11:a7:03:3b:41:b1:91:00:a1:da:37:5d:8a: 32:41:c5:5a:76:3d:4f:3b:0c:a3:b5:4a:1b:23:12: b1:5a:36:b8:2a:8c:3b:72:d6:96:ab:e7:3a:eb:34: d4:56:ef:e1:ea:12:e6:e9:5a:67:9f:60:b1:0a:f4: 28:e6:a2:e3:bc:b3:23:4a:f6:c7:5b:0a:4f:65:0e: 6b:12:13:98:9b:f8:97:d6:33:a0:23:2d:62:3e:0b: 6f:77:5e:3f:39:65:02:8b:f1:d5:2d:3f:7c:16:43: 30:75:2b:16:bb:79:40:80:88:49:00:47:ce:eb:81: d1:11:c3:70:fc:36:ad:6a:08:fa:71:27:fd:55:f8: 5c:f7:52:50:3b:07:da:e9:1f:dc:84:3a:7e:8c:e6: 13:1b:10:6c:76:b7:7a:ed:da:ce:b4:7d:48:ba:dd: 15:3d:48:1a:dd:c6:84:11:50:f6:3f:71:1e:ad:aa: 51:db:9f:f2:66:cc:6e:c0:b4:3a:ab:23:5d:03:17: 34:4d:44:ce:60:6d:47:ec:3a:98:5c:cd:2b:d8:e4: 4d:43:53:95:22:c9:f7:77:3d:17:12:b8:7f:ee:76: 0a:82:90:27:e3:67:eb:7a:cc:10:9e:a9:22:a2:c8: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2E:23:26:EE:80:50:EF:4F:64:92:64:45:FF:27:65:0E:ED:B9:E4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c02::/48 Signature Algorithm: sha256WithRSAEncryption 8b:6f:ea:1e:9a:91:00:c2:00:29:04:15:33:13:fd:26:c0:aa: 6c:af:c8:a3:65:6e:f1:5f:c6:d9:58:22:f2:f7:45:77:81:51: 60:23:7d:42:7c:7f:21:e5:80:6c:ae:94:49:2d:1a:c3:44:c3: 3e:c0:20:b1:f4:c5:1d:de:5b:ed:f8:4f:cf:4b:26:52:a0:f3: 45:f5:64:c7:34:fe:d0:c4:d2:01:e6:39:ec:53:1d:a7:81:04: e3:7c:2f:1e:0a:62:e0:d0:e9:f2:28:79:69:31:d0:a6:ce:33: ce:ae:24:6b:0d:2d:14:e6:c6:b8:15:f5:fa:15:a5:e3:4e:07: e1:bd:2e:82:7a:84:98:c3:3e:1d:c6:63:5f:fc:69:2a:b8:ea: 81:e7:6e:34:eb:8d:e0:11:86:8f:36:50:73:d7:22:b8:9c:b2: ab:f3:32:9f:76:dd:7a:a8:2d:aa:23:1f:71:36:b1:04:03:0b: bd:70:5e:fe:54:69:36:c4:c5:a9:c3:8d:9e:10:1e:e8:d5:00: 24:00:97:3b:c2:de:33:95:f0:fd:38:19:65:b2:ed:0a:31:d0: 88:23:b7:d8:6c:e4:f9:cb:f8:7e:d4:17:29:1b:5e:5d:66:5e: 9d:8d:bd:b4:e7:c0:14:93:6f:c5:41:2c:7a:45:70:42:ef:03: 3b:b2:c9:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJurfk/iPJvIedypoShWyJVrRuJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDAzMDE0WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTk0OGEyZGVjNjUzZGQ5YTA1OGJhYjdjOTQ3NTJhOGNm ODM5MmIwZGU1ODI2MjBlZjIxZjFmMjBhYWYwZjFkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRVssCzvon9l6Igw5HYcTlEacDO0GxkQCh2jddijJBxVp2 PU87DKO1ShsjErFaNrgqjDty1par5zrrNNRW7+HqEubpWmefYLEK9CjmouO8syNK 9sdbCk9lDmsSE5ib+JfWM6AjLWI+C293Xj85ZQKL8dUtP3wWQzB1Kxa7eUCAiEkA R87rgdERw3D8Nq1qCPpxJ/1V+Fz3UlA7B9rpH9yEOn6M5hMbEGx2t3rt2s60fUi6 3RU9SBrdxoQRUPY/cR6tqlHbn/JmzG7AtDqrI10DFzRNRM5gbUfsOphczSvY5E1D U5Uiyfd3PRcSuH/udgqCkCfjZ+t6zBCeqSKiyAXFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2y4jJu6AUO9PZJJkRf8nZQ7tueQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA5MzQ1NDNlLTkwZGItNGJhMC05ODQ4LTQ1NTQ1MmUwYzM2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAIwDQYJKoZIhvcNAQELBQADggEBAItv6h6akQDCACkEFTMT/SbA qmyvyKNlbvFfxtlYIvL3RXeBUWAjfUJ8fyHlgGyulEktGsNEwz7AILH0xR3eW+34 T89LJlKg80X1ZMc0/tDE0gHmOexTHaeBBON8Lx4KYuDQ6fIoeWkx0KbOM86uJGsN LRTmxrgV9foVpeNOB+G9LoJ6hJjDPh3GY1/8aSq46oHnbjTrjeARho82UHPXIric sqvzMp923XqoLaojH3E2sQQDC71wXv5UaTbExanDjZ4QHujVACQAlzvC3jOV8P04 GWWy7Qox0Igjt9hs5PnL+H7UFykbXl1mXp2NvbTnwBSTb8VBLHpFcELvAzuyyak= -----END CERTIFICATE-----Generated at Sun Jun 29 15:52:53 2025 by rpki-client