$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa File: 4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa (raw, json) Hash identifier: TdDSYv2WEserxNyHeBiLoJQJRUM4JAf0NxSbwUaEXCI= Subject key identifier: F9:62:89:57:4F:C9:6B:DF:49:77:21:D1:FF:FA:1E:49:41:C8:0D:A1 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4BE305D053A5F8E4921B66F4D67F7A246C9EF40E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa Signing time: Sat 21 Jun 2025 00:20:35 +0000 ROA not before: Sat 21 Jun 2025 00:20:35 +0000 ROA not after: Sat 26 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c50::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e3:05:d0:53:a5:f8:e4:92:1b:66:f4:d6:7f:7a:24:6c:9e:f4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 21 00:20:35 2025 GMT Not After : Jul 26 23:59:59 2025 GMT Subject: serialNumber=5fb9bcbb8a51d35d2fd63b3571853f7c59618f702b345ce6f549b80d528faf3e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:27:2b:d5:4c:9d:de:63:ae:88:b6:3c:02:a2: 82:c4:44:43:1a:40:9f:be:10:3b:1a:d0:f4:e2:a2: ca:5b:6e:f2:ec:82:bd:04:19:26:a1:3f:31:b7:3f: 6e:5e:58:b8:fe:57:d6:cb:22:80:9c:70:ff:e0:2b: 88:46:de:00:af:81:03:0a:98:fe:d4:69:c4:54:53: 53:b8:e4:1e:f1:24:57:79:5f:b3:63:5a:56:7b:f6: c6:61:c5:c8:06:11:3c:c0:d2:4b:e7:74:83:78:5d: 42:e1:77:9d:f0:bc:93:37:e4:7d:84:4f:dd:1d:23: 35:9a:75:a1:ef:7c:9a:2e:fd:92:41:8d:8f:05:f2: c8:4e:b8:7d:43:ce:79:0b:2a:fb:22:91:21:a4:38: 8f:94:4e:5a:d9:e9:40:85:b8:99:13:38:19:a3:aa: 35:17:04:e8:fb:d4:7c:ab:d9:46:1f:71:d8:ac:13: 95:fd:7f:9e:4f:18:0b:e1:8a:f9:02:cf:c0:7d:97: 5a:57:bf:a7:2a:d2:59:70:a8:7d:3a:cb:01:24:4b: 4f:3f:9d:26:d1:c3:70:a5:64:96:e1:10:94:20:b8: 94:3a:df:23:2c:0d:27:3e:64:ad:6e:f4:e4:7f:19: a1:7e:96:cd:18:ad:b8:28:94:3c:f1:39:ba:66:6e: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:62:89:57:4F:C9:6B:DF:49:77:21:D1:FF:FA:1E:49:41:C8:0D:A1 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c50::/44 Signature Algorithm: sha256WithRSAEncryption 30:11:71:d5:90:ce:df:1f:fb:d5:51:5c:5d:be:81:d3:ec:6b: 0f:6b:96:29:cf:29:8c:8c:7f:6f:0f:8d:f5:ac:f1:a8:b4:a9: 98:14:66:9c:3b:8b:fa:12:ef:3c:86:d5:29:51:5a:81:42:2b: 07:84:c1:52:c8:8c:70:1f:d1:36:84:d6:50:bb:dd:17:1f:29: cf:70:af:e8:3c:d5:c4:f4:1e:98:4a:ea:9b:23:4c:3e:d1:63: 07:b3:44:48:80:7f:cb:b5:ad:e8:71:f6:f7:4b:97:4b:e2:c7: 36:4b:07:3c:c5:0c:37:4b:ba:e3:60:fb:d8:aa:71:e4:41:45: 82:17:6c:c6:6d:90:48:2e:61:f7:7b:16:47:17:05:d6:35:af: c5:9a:9c:67:ae:7d:3b:e2:ee:2b:ba:1e:d6:3b:93:ca:ac:6c: 6a:9d:a1:bc:69:87:0a:e6:3b:fb:80:85:09:fc:28:0e:70:7e: 8e:6b:8b:44:c3:17:26:ca:82:2c:c9:3c:27:22:21:85:3f:ae: f9:b4:4d:fc:f7:ac:bd:5c:a1:1f:66:61:9f:a9:85:e4:a4:3f: 0e:5c:d8:ec:00:7b:5c:19:71:67:e8:1c:7d:ab:f2:bb:3d:0f: 19:4b:a2:b5:75:8d:d4:eb:53:b6:63:91:c4:33:53:23:eb:0a: 8b:60:22:27 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS+MF0FOl+OSSG2b01n96JGye9A4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjIxMDAyMDM1WhcNMjUwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmI5YmNiYjhhNTFkMzVkMmZkNjNiMzU3MTg1M2Y3YzU5 NjE4ZjcwMmIzNDVjZTZmNTQ5YjgwZDUyOGZhZjNlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxJyvVTJ3eY66ItjwCooLEREMaQJ++EDsa0PTiospbbvLs gr0EGSahPzG3P25eWLj+V9bLIoCccP/gK4hG3gCvgQMKmP7UacRUU1O45B7xJFd5 X7NjWlZ79sZhxcgGETzA0kvndIN4XULhd53wvJM35H2ET90dIzWadaHvfJou/ZJB jY8F8shOuH1DznkLKvsikSGkOI+UTlrZ6UCFuJkTOBmjqjUXBOj71Hyr2UYfcdis E5X9f55PGAvhivkCz8B9l1pXv6cq0llwqH06ywEkS08/nSbRw3ClZJbhEJQguJQ6 3yMsDSc+ZK1u9OR/GaF+ls0YrbgolDzxObpmbm1LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+WKJV0/Ja99JdyHR//oeSUHIDaEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRkZTVkOGYwLTIzZmQtNGI4NS1iMGE4LWRiYmYwYzY3ZjI1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADFAwDQYJKoZIhvcNAQELBQADggEBADARcdWQzt8f+9VRXF2+gdPs aw9rlinPKYyMf28PjfWs8ai0qZgUZpw7i/oS7zyG1SlRWoFCKweEwVLIjHAf0TaE 1lC73RcfKc9wr+g81cT0HphK6psjTD7RYwezREiAf8u1rehx9vdLl0vixzZLBzzF DDdLuuNg+9iqceRBRYIXbMZtkEguYfd7FkcXBdY1r8WanGeufTvi7iu6HtY7k8qs bGqdobxphwrmO/uAhQn8KA5wfo5ri0TDFybKgizJPCciIYU/rvm0Tfz3rL1coR9m YZ+pheSkPw5c2OwAe1wZcWfoHH2r8rs9DxlLorV1jdTrU7ZjkcQzUyPrCotgIic= -----END CERTIFICATE-----Generated at Sun Jun 29 00:12:58 2025 by rpki-client