$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa File: 519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa (raw, json) Hash identifier: MyXKjYqcmfp3XcLr6q3Z4m2DJ4OQ1CMMXGhuTNu8uT0= Subject key identifier: 86:AF:A6:22:42:75:97:0A:78:0F:70:E8:A1:C2:37:B0:D4:EA:AF:C5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 09247CAB392E808A5CCA6FC611C7027A5E78A027 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa Signing time: Wed 25 Jun 2025 00:40:13 +0000 ROA not before: Wed 25 Jun 2025 00:40:13 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:24:7c:ab:39:2e:80:8a:5c:ca:6f:c6:11:c7:02:7a:5e:78:a0:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:40:13 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=300ccc44fa146914e9981e60d2e2053877a7a9d9df218cc3a7d2ccfaac6da819, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6a:0d:20:08:63:10:0b:62:bb:ee:b8:f1:44: aa:bf:35:85:1a:34:56:bc:99:49:76:24:e9:ec:56: 6c:96:cb:e1:f0:f9:66:4c:71:60:4c:3a:b0:89:67: 95:5b:1a:18:df:76:3c:c3:82:36:19:09:8e:86:68: 79:0c:72:ee:34:2c:62:9a:8f:20:b4:75:6c:b2:70: 52:76:b8:e7:71:dc:ff:cc:62:80:fd:b2:d1:a0:c7: 17:33:63:d8:13:19:fe:fa:cc:05:bd:ba:c5:70:cc: 7b:8b:a6:78:5f:82:58:8d:47:2c:62:d3:e4:ce:39: dd:6e:c8:22:7c:f3:e1:75:48:8d:e0:5b:e2:38:10: aa:6f:ee:12:73:e7:bf:8f:8b:df:3a:62:f7:db:06: ca:c1:01:13:63:18:4a:e3:ec:96:35:4d:fd:8b:87: 80:5d:26:50:c0:30:39:f9:82:61:8a:0f:79:e1:c6: b5:1d:b2:f1:90:13:7f:c4:be:85:29:a2:4b:ad:97: b9:8c:98:ea:bc:67:b5:5f:49:0b:40:9d:4c:d3:11: 51:db:b2:fe:d8:04:61:c2:f2:57:9a:6a:9b:25:9d: f2:3d:9e:9a:ef:aa:9f:a8:89:a9:d6:21:3a:ae:1c: 72:f4:75:73:00:97:01:30:eb:a0:10:0f:b6:d7:34: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AF:A6:22:42:75:97:0A:78:0F:70:E8:A1:C2:37:B0:D4:EA:AF:C5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c20::/48 Signature Algorithm: sha256WithRSAEncryption 70:e0:92:98:19:bc:f1:f8:05:c4:33:a5:05:f6:f9:d5:c9:b8: c8:4e:2a:bd:07:bb:be:60:63:a3:d2:56:f1:b6:e7:84:4f:ce: 2d:30:cf:33:c7:8f:41:57:b6:f2:69:e1:a6:40:d5:ea:cf:91: bc:5b:7f:f5:a9:5a:52:0f:57:26:be:9a:31:81:b0:3a:82:72: e4:b1:66:93:f0:55:a2:a6:6a:b3:8c:cb:79:6b:33:12:6a:8a: 56:f1:07:e2:f8:78:c8:e5:87:03:f2:22:32:6f:3f:7b:80:7c: 5c:b1:46:91:f9:97:e2:8c:3d:68:94:0c:57:53:1b:1c:7e:9e: 22:35:ad:7b:f1:c4:e9:82:56:ae:8c:f8:97:00:91:e9:28:e0: 45:95:f0:80:d4:67:29:69:66:81:0e:f3:21:3e:41:56:c0:5b: 7a:75:72:0d:39:60:70:05:c5:b0:e8:6d:06:48:df:4b:c7:fd: 41:41:18:97:0a:3a:da:a5:59:99:97:dd:fb:49:c9:31:54:fd: 3d:c1:5a:38:d6:ee:66:51:a5:1e:81:ca:c8:64:dc:52:9b:4e: a5:d0:93:a9:3d:98:8a:c1:ed:16:ef:1a:7c:85:56:11:e9:02: c0:a5:55:c2:cf:c3:a5:9b:ac:14:eb:90:8d:86:c5:ed:71:67: 8e:26:7a:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCSR8qzkugIpcym/GEccCel54oCcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDA0MDEzWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDBjY2M0NGZhMTQ2OTE0ZTk5ODFlNjBkMmUyMDUzODc3 YTdhOWQ5ZGYyMThjYzNhN2QyY2NmYWFjNmRhODE5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkag0gCGMQC2K77rjxRKq/NYUaNFa8mUl2JOnsVmyWy+Hw +WZMcWBMOrCJZ5VbGhjfdjzDgjYZCY6GaHkMcu40LGKajyC0dWyycFJ2uOdx3P/M YoD9stGgxxczY9gTGf76zAW9usVwzHuLpnhfgliNRyxi0+TOOd1uyCJ88+F1SI3g W+I4EKpv7hJz57+Pi986YvfbBsrBARNjGErj7JY1Tf2Lh4BdJlDAMDn5gmGKD3nh xrUdsvGQE3/EvoUpokutl7mMmOq8Z7VfSQtAnUzTEVHbsv7YBGHC8leaapslnfI9 nprvqp+oianWITquHHL0dXMAlwEw66AQD7bXNGKlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhq+mIkJ1lwp4D3DoocI3sNTqr8UwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzUxOWNiOWRhLWJiNmMtNGVhNS1hNmFhLWU2YjY5ODQwYTg2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADCAwDQYJKoZIhvcNAQELBQADggEBAHDgkpgZvPH4BcQzpQX2+dXJ uMhOKr0Hu75gY6PSVvG254RPzi0wzzPHj0FXtvJp4aZA1erPkbxbf/WpWlIPVya+ mjGBsDqCcuSxZpPwVaKmarOMy3lrMxJqilbxB+L4eMjlhwPyIjJvP3uAfFyxRpH5 l+KMPWiUDFdTGxx+niI1rXvxxOmCVq6M+JcAkeko4EWV8IDUZylpZoEO8yE+QVbA W3p1cg05YHAFxbDobQZI30vH/UFBGJcKOtqlWZmX3ftJyTFU/T3BWjjW7mZRpR6B yshk3FKbTqXQk6k9mIrB7RbvGnyFVhHpAsClVcLPw6WbrBTrkI2Gxe1xZ44menk= -----END CERTIFICATE-----Generated at Sun Jun 29 10:29:44 2025 by rpki-client