$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa File: 2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa (raw, json) Hash identifier: nDtVuKk9/p1UMsuS1QNhsIWFXBfZiQyGhsYl0pV4kTU= Subject key identifier: 00:F8:35:21:80:8F:B3:56:FA:1E:79:76:51:FE:87:07:F6:C4:28:95 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6ACAC54F62817A64F5EA48DDBEDB1F04FC56A469 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa Signing time: Wed 25 Jun 2025 00:30:20 +0000 ROA not before: Wed 25 Jun 2025 00:30:20 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ca:c5:4f:62:81:7a:64:f5:ea:48:dd:be:db:1f:04:fc:56:a4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:30:20 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=6ace7b578505a50380f6af12b235e89306aab7b84a18bf308c1374f363a1521b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:eb:d5:ea:59:45:bd:f1:7d:67:c2:9e:dc:63: 1f:bd:13:01:32:e9:aa:88:b4:a2:92:7a:75:51:a9: 7d:cc:a5:0a:e7:2e:27:c5:c1:bf:ab:74:92:42:32: 18:17:8b:76:82:02:ab:b9:02:36:7f:5a:e6:66:eb: 6c:3f:c2:a8:2a:c3:1b:90:f5:2c:8c:fa:4b:72:a7: d5:1a:f6:1d:05:cd:f0:e4:83:a1:08:5f:65:24:7c: bb:d7:29:a8:be:5d:48:dd:de:a4:83:95:88:38:ec: 2b:43:6b:f9:75:50:7f:d0:46:aa:25:e0:67:9b:4b: 86:7a:0e:36:fc:e9:1c:31:56:cd:40:db:fc:a9:58: 38:1c:43:a4:eb:f4:18:ec:49:11:c2:e1:a0:a3:52: a1:0b:de:90:eb:49:66:5b:88:c9:dd:0e:c9:c2:d5: 63:e7:c7:cb:47:a0:1e:e9:40:26:68:8d:5e:9b:a4: 02:a3:c2:8b:66:87:78:62:5a:35:ff:24:fe:1d:21: 0b:95:6c:70:be:0f:c6:f5:32:87:ad:0c:49:5b:4f: 5e:78:1c:df:97:c6:da:8f:6a:7c:d6:d5:64:58:2f: a7:94:4e:70:33:d3:4c:fa:92:79:c5:83:8f:a1:b8: 04:03:8e:00:89:59:1a:00:75:df:dc:01:84:9c:28: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F8:35:21:80:8F:B3:56:FA:1E:79:76:51:FE:87:07:F6:C4:28:95 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c05::/48 Signature Algorithm: sha256WithRSAEncryption 1d:56:71:2f:fc:8d:bf:5d:d8:34:64:37:4b:4c:7f:2e:10:ac: 96:d9:cf:59:fb:54:8a:2e:c9:ed:67:24:21:76:a1:0d:09:5a: 96:f4:7e:4a:6f:a3:64:32:f5:d4:f3:d3:32:9e:f7:7a:c2:4a: 83:e2:0f:f1:55:e9:d4:ac:0d:03:55:4c:d4:c2:2e:d8:7f:1b: 1a:65:d4:c1:68:61:b3:d4:5c:24:a6:28:38:41:3d:80:52:5c: 09:57:08:b2:3c:49:c9:b9:44:80:37:c5:e0:c9:13:c1:12:3b: 55:ce:9e:9e:50:52:ab:40:61:38:7b:c1:ec:6e:ba:e6:03:8f: 89:86:54:f0:61:09:00:eb:28:90:6e:23:8e:66:7c:14:7a:f9: 6c:3f:b9:1a:e4:10:4d:43:9f:61:f3:39:3a:4f:5a:03:37:50: ad:1d:32:23:ae:7e:1b:d6:6c:37:04:1c:41:5d:0c:57:cf:f5: 1b:3b:7f:96:9c:ca:c4:4f:af:5f:ee:1d:f3:62:bd:eb:6c:4a: 89:8e:c0:3d:1c:b3:9e:3a:9f:5a:23:11:12:fd:f0:1b:37:ea: 55:b6:ba:03:3e:f2:e7:0f:e6:84:e6:c9:43:91:91:b6:78:1b: 4d:4b:6d:f8:09:dd:e7:2d:8e:ef:3d:63:b2:ab:cf:51:eb:52: 74:f9:1a:91 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUasrFT2KBemT16kjdvtsfBPxWpGkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDAzMDIwWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YWNlN2I1Nzg1MDVhNTAzODBmNmFmMTJiMjM1ZTg5MzA2 YWFiN2I4NGExOGJmMzA4YzEzNzRmMzYzYTE1MjFiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDz69XqWUW98X1nwp7cYx+9EwEy6aqItKKSenVRqX3MpQrn LifFwb+rdJJCMhgXi3aCAqu5AjZ/WuZm62w/wqgqwxuQ9SyM+ktyp9Ua9h0FzfDk g6EIX2UkfLvXKai+XUjd3qSDlYg47CtDa/l1UH/QRqol4GebS4Z6Djb86RwxVs1A 2/ypWDgcQ6Tr9BjsSRHC4aCjUqEL3pDrSWZbiMndDsnC1WPnx8tHoB7pQCZojV6b pAKjwotmh3hiWjX/JP4dIQuVbHC+D8b1MoetDElbT154HN+XxtqPanzW1WRYL6eU TnAz00z6knnFg4+huAQDjgCJWRoAdd/cAYScKK7VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAPg1IYCPs1b6Hnl2Uf6HB/bEKJUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI2NzBiNGFkLWQ1ZmEtNGZmMS05OTZmLTNjMGFkNDA0NmI4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAUwDQYJKoZIhvcNAQELBQADggEBAB1WcS/8jb9d2DRkN0tMfy4Q rJbZz1n7VIouye1nJCF2oQ0JWpb0fkpvo2Qy9dTz0zKe93rCSoPiD/FV6dSsDQNV TNTCLth/Gxpl1MFoYbPUXCSmKDhBPYBSXAlXCLI8Scm5RIA3xeDJE8ESO1XOnp5Q UqtAYTh7wexuuuYDj4mGVPBhCQDrKJBuI45mfBR6+Ww/uRrkEE1Dn2HzOTpPWgM3 UK0dMiOufhvWbDcEHEFdDFfP9Rs7f5acysRPr1/uHfNivetsSomOwD0cs546n1oj ERL98Bs36lW2ugM+8ucP5oTmyUORkbZ4G01LbfgJ3ectju89Y7Krz1HrUnT5GpE= -----END CERTIFICATE-----Generated at Sun Jun 29 01:06:37 2025 by rpki-client