$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa File: 5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa (raw, json) Hash identifier: WJ88t1U/0MS6bxUU3mytVF6f1189o1RmbT/pdQ4MILE= Subject key identifier: 69:04:FD:74:DA:02:72:DB:B9:51:DD:1A:03:F2:96:BA:31:6C:57:D5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 64493047886C965A6D29EDFD171ED3065AA9813E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa Signing time: Wed 25 Jun 2025 00:31:20 +0000 ROA not before: Wed 25 Jun 2025 00:31:20 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:49:30:47:88:6c:96:5a:6d:29:ed:fd:17:1e:d3:06:5a:a9:81:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:31:20 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=18a7235ad9a8a4825288d7e68bea5936de02ac5b851f923c2b1c6b0a64037e00, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:5d:f5:12:cc:2d:ae:de:34:cd:ac:ab:47: 82:93:c7:ee:7e:02:a6:93:22:a2:b6:fb:7a:ee:51: 7e:69:bb:69:46:c0:74:40:d4:66:54:78:dc:28:42: be:00:7c:02:36:1b:21:ed:24:51:a4:f5:f2:ed:ea: 7e:75:e5:5f:68:fd:da:82:c4:52:90:ab:6d:37:7b: b3:48:35:14:f2:b7:7a:44:6e:96:72:46:d2:2f:f4: d8:61:b3:0a:c7:04:53:53:d3:de:31:6d:47:70:26: b6:ec:ec:90:65:1c:ac:f7:ed:a5:34:fc:7b:18:56: b6:07:97:ad:7a:04:b8:ee:dc:a9:ef:57:b5:7c:94: c2:79:d1:6f:79:8c:f1:01:20:28:50:33:17:58:0c: bc:a5:67:c1:5e:a8:26:f2:d5:6c:7e:fa:32:90:84: bf:33:f2:3b:9f:72:f2:e0:d1:74:89:83:75:23:fe: 31:e4:6d:8c:f4:b2:8b:6c:1d:4e:0e:bc:bc:cb:b3: 37:db:5d:33:3d:20:7f:c0:46:69:84:32:12:e7:b5: 34:65:6e:82:62:96:5d:6d:72:96:9e:83:f3:27:76: 89:e1:ba:45:5e:fe:39:95:33:49:7c:9f:9b:2a:16: 45:4d:50:6b:72:79:ac:9c:43:29:01:d1:3e:ec:68: 93:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:04:FD:74:DA:02:72:DB:B9:51:DD:1A:03:F2:96:BA:31:6C:57:D5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c13::/48 Signature Algorithm: sha256WithRSAEncryption 3c:69:93:db:a7:e3:fb:7c:40:e7:ec:81:78:bf:e3:58:01:f7: ee:8e:30:bb:d6:c2:0c:8c:39:ae:88:ab:45:19:aa:11:3f:dd: 2c:16:55:7e:52:5f:3c:d6:a2:d7:7e:55:bb:25:9d:2a:06:99: b6:22:3d:a4:b3:b6:51:c3:93:d2:48:21:d1:a7:cd:5b:78:8a: 7d:d3:a9:c2:10:e2:ab:2e:a1:fb:70:67:56:8d:a5:78:ed:06: d4:20:90:18:be:79:cb:b1:ff:2e:bc:c6:d1:fa:02:07:64:2b: f3:15:19:8a:a2:cf:6c:2e:0a:97:0b:81:c6:2c:5c:35:a2:e2: f6:5e:f9:94:59:71:94:e8:81:83:c3:e4:8f:7f:cf:12:b4:19: f1:37:68:d5:45:2e:97:0b:30:bc:c6:04:30:ed:ed:05:92:63: ab:ed:bf:aa:ef:d3:b1:4c:b2:ff:25:7f:42:05:8b:55:dc:08: df:92:59:02:62:2e:bb:8c:40:8f:08:0e:57:4c:7e:35:28:89: 01:8e:cd:35:ff:cd:cb:05:0c:b7:44:68:e3:f8:a2:2a:21:45: 4d:6f:7d:b0:79:70:99:d4:a1:6f:8c:a3:df:d3:ca:a8:96:74: 7d:6f:46:7b:3c:d5:e3:14:74:9a:7e:a3:2a:d1:bb:fb:3b:33: ba:15:37:ce -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZEkwR4hsllptKe39Fx7TBlqpgT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDAzMTIwWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOGE3MjM1YWQ5YThhNDgyNTI4OGQ3ZTY4YmVhNTkzNmRl MDJhYzViODUxZjkyM2MyYjFjNmIwYTY0MDM3ZTAwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYWV31Eswtrt40zayrR4KTx+5+AqaTIqK2+3ruUX5pu2lG wHRA1GZUeNwoQr4AfAI2GyHtJFGk9fLt6n515V9o/dqCxFKQq203e7NINRTyt3pE bpZyRtIv9NhhswrHBFNT094xbUdwJrbs7JBlHKz37aU0/HsYVrYHl616BLju3Knv V7V8lMJ50W95jPEBIChQMxdYDLylZ8FeqCby1Wx++jKQhL8z8jufcvLg0XSJg3Uj /jHkbYz0sotsHU4OvLzLszfbXTM9IH/ARmmEMhLntTRlboJill1tcpaeg/Mndonh ukVe/jmVM0l8n5sqFkVNUGtyeaycQykB0T7saJOHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaQT9dNoCctu5Ud0aA/KWujFsV9UwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVmYjNkYzUwLWU4MGUtNDdhYy1iMDlkLWFkMWFlMjI1ZmNlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBMwDQYJKoZIhvcNAQELBQADggEBADxpk9un4/t8QOfsgXi/41gB 9+6OMLvWwgyMOa6Iq0UZqhE/3SwWVX5SXzzWotd+VbslnSoGmbYiPaSztlHDk9JI IdGnzVt4in3TqcIQ4qsuoftwZ1aNpXjtBtQgkBi+ecux/y68xtH6AgdkK/MVGYqi z2wuCpcLgcYsXDWi4vZe+ZRZcZTogYPD5I9/zxK0GfE3aNVFLpcLMLzGBDDt7QWS Y6vtv6rv07FMsv8lf0IFi1XcCN+SWQJiLruMQI8IDldMfjUoiQGOzTX/zcsFDLdE aOP4oiohRU1vfbB5cJnUoW+Mo9/TyqiWdH1vRns81eMUdJp+oyrRu/s7M7oVN84= -----END CERTIFICATE-----Generated at Sun Jun 29 15:52:59 2025 by rpki-client