$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa File: 3191e88d-746d-41d2-84db-9fc65334e5a8.roa (raw, json) Hash identifier: ZAb/ln5/dNKj1jjlKVGNsI/2DHHGUMtJhq1web/h7S8= Subject key identifier: CC:EC:81:54:29:F6:C5:17:4C:9F:C1:32:35:79:2E:E9:DD:81:EC:E7 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3FC52A9147496C0EB8FA51229404C773ABF6A367 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa Signing time: Mon 16 Jun 2025 18:50:56 +0000 ROA not before: Mon 16 Jun 2025 18:50:56 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:100::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c5:2a:91:47:49:6c:0e:b8:fa:51:22:94:04:c7:73:ab:f6:a3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 18:50:56 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=1d1d318d0baa93e038461c58cf3611e534e81c34fa931e02a5eaf67fc3229664, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:13:d7:75:5d:44:13:ad:f2:9d:06:c9:1f:be: 47:89:35:c3:36:fc:74:11:96:46:ee:ce:95:dd:57: 62:6e:5c:fa:58:9e:95:97:99:fb:a8:58:05:08:39: 76:64:46:7d:3d:18:ae:dc:be:ec:65:ac:f4:e1:ab: c6:a7:e7:4a:e9:64:f1:4b:d7:7c:0c:61:5b:74:23: 39:e7:bd:25:36:be:6a:84:8d:c8:c6:0b:84:23:81: 28:c0:7f:88:ce:1c:51:d1:1f:8f:63:8c:9d:f2:40: fe:2f:ff:6c:86:59:57:b3:18:af:9e:2a:13:fd:a8: 00:40:0d:cf:2d:1f:83:ca:76:63:49:a3:63:82:77: 2d:76:07:57:30:08:a7:01:21:28:32:02:5a:80:42: 9b:22:98:01:fb:7f:56:0f:d2:37:c4:9d:62:37:b1: 40:95:12:79:9c:0b:a1:e1:e8:a9:1d:c3:2f:d3:0a: db:84:ec:bd:de:49:17:f0:5c:cd:4d:da:85:ec:db: 20:1a:f3:a2:d4:d2:67:68:9e:26:9a:7e:da:95:be: 21:28:0d:71:15:9f:e3:4f:f5:e0:65:5f:19:9a:61: 69:d8:cc:1b:c1:2e:ee:29:3b:e0:a4:a2:a0:b5:e4: 19:1c:32:70:c0:4f:d7:9a:aa:0e:12:ca:65:f7:d7: 39:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EC:81:54:29:F6:C5:17:4C:9F:C1:32:35:79:2E:E9:DD:81:EC:E7 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:100::/42 Signature Algorithm: sha256WithRSAEncryption 1f:19:6a:f9:7e:4e:b4:51:1b:90:f5:78:22:23:ab:b7:25:03: a0:f2:35:93:2e:09:7f:ad:ba:6c:60:56:65:b6:c6:1a:34:9d: d3:5c:2f:c9:12:08:c8:13:92:32:90:c7:ef:1b:de:46:38:0c: bd:4c:94:f9:be:59:66:64:cf:9e:76:57:89:72:71:44:cc:18: 3b:58:dd:0a:06:49:89:37:b9:a3:d2:10:22:88:15:60:23:7f: 96:23:f1:73:fd:54:dd:32:0d:77:32:28:fa:97:04:e6:14:88: 8e:ba:75:e7:32:d9:d6:ba:48:b3:19:5b:24:3f:44:51:cd:7d: 87:19:92:6b:1a:b1:0d:a8:51:6a:68:df:97:e7:3a:11:a7:1f: aa:7a:5c:2c:0f:0b:95:ff:d3:9b:72:c9:65:db:0c:2d:49:ea: 87:14:63:d2:07:ee:56:a4:60:e5:ea:e6:3e:46:c0:9b:ce:20: 58:89:b1:ca:08:4c:45:c6:79:79:40:ff:85:80:ca:d8:f2:40: 4c:ca:65:d5:1a:eb:96:e9:7c:d7:9c:20:60:aa:0c:38:90:46: cd:81:cc:4a:e3:86:77:a4:fa:fa:94:28:aa:2f:71:d3:4e:c6: df:03:3a:f4:55:57:9a:d4:5d:13:45:2a:fa:f1:6f:c1:12:0b: 8f:4e:64:00 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP8UqkUdJbA64+lEilATHc6v2o2cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTg1MDU2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDFkMzE4ZDBiYWE5M2UwMzg0NjFjNThjZjM2MTFlNTM0 ZTgxYzM0ZmE5MzFlMDJhNWVhZjY3ZmMzMjI5NjY0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiE9d1XUQTrfKdBskfvkeJNcM2/HQRlkbuzpXdV2JuXPpY npWXmfuoWAUIOXZkRn09GK7cvuxlrPThq8an50rpZPFL13wMYVt0IznnvSU2vmqE jcjGC4QjgSjAf4jOHFHRH49jjJ3yQP4v/2yGWVezGK+eKhP9qABADc8tH4PKdmNJ o2OCdy12B1cwCKcBISgyAlqAQpsimAH7f1YP0jfEnWI3sUCVEnmcC6Hh6Kkdwy/T CtuE7L3eSRfwXM1N2oXs2yAa86LU0mdoniaaftqVviEoDXEVn+NP9eBlXxmaYWnY zBvBLu4pO+CkoqC15BkcMnDAT9eaqg4SymX31zkjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzOyBVCn2xRdMn8EyNXku6d2B7OcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzMxOTFlODhkLTc0NmQtNDFkMi04NGRiLTlmYzY1MzM0ZTVhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmBZzAAQAwDQYJKoZIhvcNAQELBQADggEBAB8Zavl+TrRRG5D1eCIjq7cl A6DyNZMuCX+tumxgVmW2xho0ndNcL8kSCMgTkjKQx+8b3kY4DL1MlPm+WWZkz552 V4lycUTMGDtY3QoGSYk3uaPSECKIFWAjf5Yj8XP9VN0yDXcyKPqXBOYUiI66decy 2da6SLMZWyQ/RFHNfYcZkmsasQ2oUWpo35fnOhGnH6p6XCwPC5X/05tyyWXbDC1J 6ocUY9IH7lakYOXq5j5GwJvOIFiJscoITEXGeXlA/4WAytjyQEzKZdUa65bpfNec IGCqDDiQRs2BzErjhnek+vqUKKovcdNOxt8DOvRVV5rUXRNFKvrxb8ESC49OZAA= -----END CERTIFICATE-----Generated at Sun Jun 29 15:35:21 2025 by rpki-client