$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa File: 2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa (raw, json) Hash identifier: ZQy5KQEy3RH4e0uLVs4+OvHB4lH57VZH8S6tqrpMGlo= Subject key identifier: EC:78:A8:9C:C8:A7:F0:79:E9:F1:1D:70:9C:3E:48:F5:74:FB:F0:7E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 78A10EDE9C5A95734ACE0A6447FA4B20861200C6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa Signing time: Mon 16 Jun 2025 19:01:23 +0000 ROA not before: Mon 16 Jun 2025 19:01:23 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:48f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a1:0e:de:9c:5a:95:73:4a:ce:0a:64:47:fa:4b:20:86:12:00:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:01:23 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=d537f903ed46e663763578d07fcd270d95f8b46bcb9035a3829a3e2d803a4760, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a1:0d:be:83:fd:0a:94:3a:18:e4:7d:c7:fe: 05:c6:c2:9a:d6:ba:58:41:d7:d8:f1:e3:2b:95:93: b5:da:18:75:57:73:a5:16:7d:b4:5b:9b:0d:51:ce: fa:07:5e:6e:bf:44:c0:87:b1:88:25:84:2c:2d:ee: 2f:b4:b5:df:a3:ca:76:90:c9:11:08:8f:2e:dd:2c: da:c1:21:4b:69:0c:3f:0b:59:d6:95:2d:14:8b:58: 5b:a8:3c:d2:b7:ac:96:9b:4a:4d:75:67:15:d5:5f: f0:67:05:ad:dd:d4:bd:44:43:95:04:ef:91:e3:3d: 61:16:e8:13:ed:a6:56:a2:3f:58:2b:7c:75:12:6c: 9c:1d:34:d8:c9:bb:2c:f5:6b:c2:8b:a6:b0:c3:13: 42:d8:a9:08:ff:c6:10:87:c4:05:54:30:ed:89:7a: 48:87:b4:41:df:cc:42:43:0c:bf:47:36:0b:b7:35: 28:57:1b:65:8d:b0:88:f2:03:b0:93:6e:42:4a:62: 06:52:c3:ae:f1:29:ad:35:91:cb:48:12:b1:e7:9c: ea:6f:df:b5:ff:02:50:ea:01:af:d6:72:b3:de:47: 5e:74:84:65:e7:94:49:69:6f:8e:13:d9:e9:3f:6d: 52:b8:cf:74:0e:10:52:39:a7:c1:f8:3a:50:d4:1e: bc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:78:A8:9C:C8:A7:F0:79:E9:F1:1D:70:9C:3E:48:F5:74:FB:F0:7E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:48f::/48 Signature Algorithm: sha256WithRSAEncryption 6d:e1:37:51:02:b0:dc:5d:89:f7:d0:13:69:cc:32:c0:e1:6a: 22:7e:98:49:90:7a:87:7b:c3:74:16:ed:1d:22:49:38:06:4d: fc:84:18:62:0a:a3:22:40:33:0d:1d:cf:c7:9f:68:8f:22:8c: f0:7d:76:0a:f4:88:5d:4f:f4:47:0e:13:a6:19:61:c7:9b:6b: a0:7f:fc:55:40:8f:54:81:78:a0:18:bc:01:c4:5e:cc:1a:08: 75:07:98:1d:61:3e:26:b8:00:c1:bc:26:8a:76:bb:78:9d:ea: 3c:75:ca:1d:3e:ed:4c:ac:9f:64:4f:09:ee:31:4c:e6:47:f8: e8:a2:59:e8:25:0c:af:12:60:bb:57:a8:65:f5:98:17:ce:a5: 03:85:9d:75:5b:f0:41:1a:7c:86:c0:d1:49:bc:c4:31:e2:e6: e7:fe:bd:a7:c9:af:ef:69:9b:12:90:14:af:f0:ec:a6:db:56: 24:ad:15:db:e4:6b:8d:a2:95:ae:00:28:9e:48:f9:54:43:1a: c8:42:ed:32:cc:18:2c:e9:30:49:a7:76:04:78:79:d2:10:ea: 8b:98:c8:41:b4:75:41:a9:85:3c:0c:45:af:e0:e3:2c:8d:df: 37:8a:d3:ce:43:a2:f9:bd:41:93:d4:af:23:c6:79:8f:bd:5a: e5:4b:16:bc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeKEO3pxalXNKzgpkR/pLIIYSAMYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkwMTIzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTM3ZjkwM2VkNDZlNjYzNzYzNTc4ZDA3ZmNkMjcwZDk1 ZjhiNDZiY2I5MDM1YTM4MjlhM2UyZDgwM2E0NzYwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD4oQ2+g/0KlDoY5H3H/gXGwprWulhB19jx4yuVk7XaGHVX c6UWfbRbmw1RzvoHXm6/RMCHsYglhCwt7i+0td+jynaQyREIjy7dLNrBIUtpDD8L WdaVLRSLWFuoPNK3rJabSk11ZxXVX/BnBa3d1L1EQ5UE75HjPWEW6BPtplaiP1gr fHUSbJwdNNjJuyz1a8KLprDDE0LYqQj/xhCHxAVUMO2JekiHtEHfzEJDDL9HNgu3 NShXG2WNsIjyA7CTbkJKYgZSw67xKa01kctIErHnnOpv37X/AlDqAa/WcrPeR150 hGXnlElpb44T2ek/bVK4z3QOEFI5p8H4OlDUHrxXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7HionMin8Hnp8R1wnD5I9XT78H4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJjNWIzNDNlLWViMzUtNGM2Ni04ZWEyLTRiNGEwMjg4MmNkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABI8wDQYJKoZIhvcNAQELBQADggEBAG3hN1ECsNxdiffQE2nMMsDh aiJ+mEmQeod7w3QW7R0iSTgGTfyEGGIKoyJAMw0dz8efaI8ijPB9dgr0iF1P9EcO E6YZYceba6B//FVAj1SBeKAYvAHEXswaCHUHmB1hPia4AMG8Jop2u3id6jx1yh0+ 7Uysn2RPCe4xTOZH+OiiWeglDK8SYLtXqGX1mBfOpQOFnXVb8EEafIbA0Um8xDHi 5uf+vafJr+9pmxKQFK/w7KbbViStFdvka42ila4AKJ5I+VRDGshC7TLMGCzpMEmn dgR4edIQ6ouYyEG0dUGphTwMRa/g4yyN3zeK085Dovm9QZPUryPGeY+9WuVLFrw= -----END CERTIFICATE-----Generated at Sun Jun 29 17:01:15 2025 by rpki-client