$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa File: 5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa (raw, json) Hash identifier: vCGWwtw772iBlnzxtB1u87tGq0nWrewOJl0clmBHd6w= Subject key identifier: EB:43:1A:47:99:F9:AC:04:D6:85:E0:CE:89:27:F4:29:7D:0C:A6:2D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 27C3331F9B780617906F708BE21653EBE5C3E5E8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa Signing time: Mon 16 Jun 2025 19:10:57 +0000 ROA not before: Mon 16 Jun 2025 19:10:57 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c3:33:1f:9b:78:06:17:90:6f:70:8b:e2:16:53:eb:e5:c3:e5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:10:57 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=c9ae44fd9c0ac34b12eed969f7f8f202d17cc14b0b35effb0f1c1a25ec16ebc8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:b4:d0:97:8f:4b:51:d9:c3:32:ae:61:91: 2a:a5:cf:58:b2:b9:e8:2b:2b:32:d5:b6:2a:97:7c: a8:f2:50:1f:50:f0:9b:70:32:25:b8:16:ff:d6:1c: 42:6f:13:94:c7:61:f2:25:a1:5c:73:4b:18:10:d7: 74:e1:6a:8d:bc:82:c7:e2:93:fb:d9:44:0d:b5:dc: 6c:90:e6:c5:25:ff:4d:64:d7:da:bb:a5:dd:37:c6: b7:6a:05:fc:36:b9:1e:cf:79:10:f8:03:95:23:f8: 89:76:9f:49:e6:06:37:78:65:84:be:3a:33:e1:5c: bd:61:e9:18:31:8a:e1:02:5c:5a:7c:bb:aa:37:b0: 1e:6b:f0:08:1b:a5:9b:38:9b:5b:b7:de:60:30:93: b6:9d:8f:92:38:e0:f9:66:27:75:27:ef:9f:08:c8: c1:4d:94:05:a9:6d:88:bf:a9:09:57:33:de:02:68: 2c:f4:fb:e3:e1:f0:98:08:9f:1b:e6:1e:e2:6d:9b: 3b:c0:f7:50:e0:04:b8:2d:bd:bd:4b:59:be:ca:bc: ab:e2:07:20:52:90:77:c8:89:01:94:e4:aa:bc:f1: 70:6f:85:05:69:f0:b0:46:5f:c5:82:98:87:ca:5a: e4:9b:d0:fd:69:db:7c:86:d0:07:86:b1:49:33:df: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:1A:47:99:F9:AC:04:D6:85:E0:CE:89:27:F4:29:7D:0C:A6:2D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c48::/48 Signature Algorithm: sha256WithRSAEncryption 89:fc:f2:cd:95:8e:51:cd:74:b7:0f:dd:02:9f:d9:6c:d4:93: 71:72:3f:39:db:34:18:74:1c:a4:a3:30:af:d7:9b:93:b7:8a: 2c:68:e6:cf:3c:ea:a1:6a:5d:9a:3e:52:df:51:d0:a9:77:98: 39:19:5d:02:bc:f2:8e:90:bd:cc:13:6e:44:b8:e9:32:64:4d: 32:7b:44:bf:f5:aa:5c:33:3e:68:e3:3e:02:b6:62:ec:7a:86: 43:cd:9d:7d:63:a1:5b:79:ea:e1:62:15:cd:46:ef:e6:5e:10: 20:49:8a:14:b4:3a:91:c2:da:92:d3:15:a8:b2:fe:d2:a2:ad: fb:ac:88:8d:d9:2c:b7:c6:b1:ef:77:2e:7d:8a:85:4f:ec:36: 8e:cd:09:f7:63:bb:ad:bc:9d:13:44:5c:af:ea:b9:99:7b:13: fb:d9:95:5a:0e:d2:aa:96:55:c8:50:73:a2:ba:cb:d4:ff:8b: 41:98:5c:34:d6:7d:aa:6b:1e:b9:91:b2:f5:45:14:e3:5e:4e: c6:2a:95:92:cc:8e:54:5e:dd:fd:d5:a4:0e:59:e0:0f:2c:ee: fe:b3:74:44:57:d1:d4:2a:82:ba:c1:98:2e:6e:93:db:ba:d0: ac:ec:e6:7e:e8:3b:02:45:8d:7d:d6:33:e7:ae:9f:22:73:fc: fb:d9:7a:9d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ8MzH5t4BheQb3CL4hZT6+XD5egwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkxMDU3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWFlNDRmZDljMGFjMzRiMTJlZWQ5NjlmN2Y4ZjIwMmQx N2NjMTRiMGIzNWVmZmIwZjFjMWEyNWVjMTZlYmM4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN/LTQl49LUdnDMq5hkSqlz1iyuegrKzLVtiqXfKjyUB9Q 8JtwMiW4Fv/WHEJvE5THYfIloVxzSxgQ13Thao28gsfik/vZRA213GyQ5sUl/01k 19q7pd03xrdqBfw2uR7PeRD4A5Uj+Il2n0nmBjd4ZYS+OjPhXL1h6RgxiuECXFp8 u6o3sB5r8AgbpZs4m1u33mAwk7adj5I44PlmJ3Un758IyMFNlAWpbYi/qQlXM94C aCz0++Ph8JgInxvmHuJtmzvA91DgBLgtvb1LWb7KvKviByBSkHfIiQGU5Kq88XBv hQVp8LBGX8WCmIfKWuSb0P1p23yG0AeGsUkz3xx7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU60MaR5n5rATWheDOiSf0KX0Mpi0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVmMDQ2NTVhLWZkODUtNDVhMC05NmUwLTFmZTdhYzMwOWE2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADEgwDQYJKoZIhvcNAQELBQADggEBAIn88s2VjlHNdLcP3QKf2WzU k3FyPznbNBh0HKSjMK/Xm5O3iixo5s886qFqXZo+Ut9R0Kl3mDkZXQK88o6QvcwT bkS46TJkTTJ7RL/1qlwzPmjjPgK2Yux6hkPNnX1joVt56uFiFc1G7+ZeECBJihS0 OpHC2pLTFaiy/tKirfusiI3ZLLfGse93Ln2KhU/sNo7NCfdju628nRNEXK/quZl7 E/vZlVoO0qqWVchQc6K6y9T/i0GYXDTWfaprHrmRsvVFFONeTsYqlZLMjlRe3f3V pA5Z4A8s7v6zdERX0dQqgrrBmC5uk9u60Kzs5n7oOwJFjX3WM+eunyJz/PvZep0= -----END CERTIFICATE-----Generated at Sun Jun 29 10:29:29 2025 by rpki-client