$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa File: 3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa (raw, json) Hash identifier: 5cgTmsg+5IO+inY0hMpueKQfOBhIFZr+WNsL5Fvsciw= Subject key identifier: 29:F3:37:EF:66:C3:98:2F:33:6D:76:D5:00:A4:F3:B3:DA:E8:46:BF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6F9B82FB27D806D168AA860C5E7C65FA3D7CEB25 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa Signing time: Mon 16 Jun 2025 19:10:49 +0000 ROA not before: Mon 16 Jun 2025 19:10:49 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c24::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9b:82:fb:27:d8:06:d1:68:aa:86:0c:5e:7c:65:fa:3d:7c:eb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:10:49 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=fd7326702a74b754e40773e6f171f80aed7ea2a6ad55bda4dc3e14180e36ec7e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c5:cf:76:43:87:2f:3d:b8:69:7c:51:3b:b9: 67:aa:b5:a7:06:c3:42:0f:ff:d6:68:57:ec:33:b1: c8:3a:4f:8a:1a:24:a7:ce:c3:41:5a:7d:97:6c:50: 8b:db:e8:a7:c3:76:2f:ba:a8:71:89:37:21:f3:01: df:66:c0:2e:19:e7:1d:b7:8e:2a:84:54:a9:7d:e8: 96:52:1b:9c:21:91:61:86:42:d1:f1:f5:d0:48:a7: 38:ca:c4:df:24:bd:4e:6d:a6:d4:7f:cb:5f:64:fa: 6c:76:c5:ef:f8:40:fd:79:23:ae:08:15:a7:02:80: 34:2d:1d:d6:be:d6:5e:28:60:0a:e1:37:7d:89:9b: 50:e3:56:b2:91:89:45:c2:9a:a4:8e:72:53:89:76: 72:76:e3:88:29:d3:c0:58:65:90:81:89:70:22:7e: 89:2c:f4:f3:55:20:2f:21:52:86:9d:95:3c:2e:ec: 33:ad:8b:dc:8e:5c:af:82:54:a9:e4:3e:7a:8a:2f: ec:46:5d:82:fb:c7:a5:48:d0:f8:b6:68:b6:31:2e: 80:43:ae:19:e3:ef:98:f5:2f:58:99:aa:a9:84:f4: a8:dc:5c:ca:60:50:ba:7e:eb:7a:02:e9:26:40:84: f6:e8:66:95:d2:37:2f:68:bb:f2:44:f5:e2:6a:51: cc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F3:37:EF:66:C3:98:2F:33:6D:76:D5:00:A4:F3:B3:DA:E8:46:BF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c24::/46 Signature Algorithm: sha256WithRSAEncryption a1:0d:9f:c2:36:cb:96:c3:a1:e3:1b:88:b8:1d:48:db:25:39: cc:63:5f:5f:7d:c5:a8:97:5f:0b:18:60:12:4a:bf:d0:f1:35: 0f:6c:fd:c8:b8:43:b4:ce:81:21:66:0a:2e:6f:5d:a1:fc:71: 51:18:58:09:7f:05:41:23:f1:43:c9:44:e1:ae:0c:39:a6:58: 33:5b:6e:52:1b:70:02:6b:b4:a1:ef:ac:11:c6:0a:58:90:f0: d3:51:fe:35:ec:b1:ef:d3:5d:4c:31:1d:34:03:eb:e1:d9:0d: 8a:54:32:94:4d:37:7b:ee:71:78:ba:99:ac:2b:ec:eb:fa:e9: 6c:a0:47:14:86:a1:5f:90:ad:f1:4d:2a:7a:73:a4:e6:dc:91: 54:ca:40:43:e3:b4:0c:96:4a:e8:4b:2f:31:a9:2a:8c:81:cd: 90:d5:af:1c:0c:50:60:f9:23:70:8d:00:4f:d4:76:39:42:87: b5:a0:b7:fc:e0:61:f0:d4:fd:fa:8d:30:69:66:ae:15:7e:9c: 3c:a8:ad:3d:1e:87:9e:ae:bc:a2:ea:d3:a8:55:21:b1:f8:0b: bd:a3:35:d8:e4:1a:cd:ba:6d:9a:6c:8b:ca:26:f7:84:21:04: 32:c5:94:d8:9e:4c:e8:f2:df:48:5a:f0:8c:9d:2d:8f:53:ce: c5:80:f6:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUb5uC+yfYBtFoqoYMXnxl+j186yUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkxMDQ5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDczMjY3MDJhNzRiNzU0ZTQwNzczZTZmMTcxZjgwYWVk N2VhMmE2YWQ1NWJkYTRkYzNlMTQxODBlMzZlYzdlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaxc92Q4cvPbhpfFE7uWeqtacGw0IP/9ZoV+wzscg6T4oa JKfOw0FafZdsUIvb6KfDdi+6qHGJNyHzAd9mwC4Z5x23jiqEVKl96JZSG5whkWGG QtHx9dBIpzjKxN8kvU5tptR/y19k+mx2xe/4QP15I64IFacCgDQtHda+1l4oYArh N32Jm1DjVrKRiUXCmqSOclOJdnJ244gp08BYZZCBiXAifoks9PNVIC8hUoadlTwu 7DOti9yOXK+CVKnkPnqKL+xGXYL7x6VI0Pi2aLYxLoBDrhnj75j1L1iZqqmE9Kjc XMpgULp+63oC6SZAhPboZpXSNy9ou/JE9eJqUcxLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKfM372bDmC8zbXbVAKTzs9roRr8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzNkOTFmZDk1LTE5OWQtNDFkZC05YjY3LWRiNzQ5NWNlM2QxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImBZzADCQwDQYJKoZIhvcNAQELBQADggEBAKENn8I2y5bDoeMbiLgdSNsl OcxjX199xaiXXwsYYBJKv9DxNQ9s/ci4Q7TOgSFmCi5vXaH8cVEYWAl/BUEj8UPJ ROGuDDmmWDNbblIbcAJrtKHvrBHGCliQ8NNR/jXsse/TXUwxHTQD6+HZDYpUMpRN N3vucXi6mawr7Ov66WygRxSGoV+QrfFNKnpzpObckVTKQEPjtAyWSuhLLzGpKoyB zZDVrxwMUGD5I3CNAE/UdjlCh7Wgt/zgYfDU/fqNMGlmrhV+nDyorT0eh56uvKLq 06hVIbH4C72jNdjkGs26bZpsi8om94QhBDLFlNieTOjy30ha8IydLY9TzsWA9og= -----END CERTIFICATE-----Generated at Sat Jun 28 23:57:54 2025 by rpki-client