$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/793099d2-d8bb-4f78-8e97-4cd87968a269.roa File: 793099d2-d8bb-4f78-8e97-4cd87968a269.roa (raw, json) Hash identifier: A2Z2a/P0KHMUaKYGku6o8VgOc6+cXAhZC3T+SFY3Qlw= Subject key identifier: 5C:FA:92:F0:E0:09:71:D1:5B:BC:A0:52:FE:A2:5B:25:78:3D:BF:46 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1A42610D1033C89173151DDBA1067A5315E4F4A1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/793099d2-d8bb-4f78-8e97-4cd87968a269.roa Signing time: Wed 25 Jun 2025 00:30:24 +0000 ROA not before: Wed 25 Jun 2025 00:30:24 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:42:61:0d:10:33:c8:91:73:15:1d:db:a1:06:7a:53:15:e4:f4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:30:24 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=79a6641a2ea33c5860baccddaee4505b964022c42ea688b136631fa81a5a71bb, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:50:cf:06:81:e4:22:8d:10:c1:16:8b:c8: 9f:d5:ef:f7:06:d0:36:f1:2a:03:b6:23:24:66:db: 09:90:23:35:1c:20:d6:4b:3e:5b:0c:01:10:0f:0c: 37:33:6b:74:98:68:80:04:8b:a0:68:d7:5d:d4:09: 9b:58:5c:06:1e:45:9f:7e:0c:6d:e9:42:16:41:5c: c8:09:ed:ae:7d:ad:20:5f:aa:09:3d:81:a5:3f:8d: d9:a5:12:d1:f1:af:ce:97:3a:8f:88:07:52:4a:18: a9:b0:62:1c:5b:04:8c:99:54:be:5f:2c:7c:88:07: 4a:69:66:7e:3e:f6:c7:04:78:7f:03:a4:39:19:c0: ce:4a:0f:a0:e0:f5:4a:5e:a8:3c:1f:11:ff:53:4c: 64:6e:5d:64:08:d1:24:1b:19:5b:4a:44:1d:34:ea: 30:42:27:2a:ba:03:5f:b8:80:c2:8f:6e:bf:1e:82: b1:0a:5b:2c:cb:ed:2f:9b:06:66:45:1c:b3:06:b3: 0d:70:8f:5a:ec:7f:74:15:44:d9:d2:ea:35:c4:57: e1:f6:21:da:48:0d:4a:16:4d:97:78:6c:93:3f:81: 48:2d:fd:df:d3:af:ad:d9:6b:23:d9:2a:3c:5f:7b: c3:a0:63:3c:d3:04:b0:fb:71:06:d9:e4:5d:ba:b5: 2f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FA:92:F0:E0:09:71:D1:5B:BC:A0:52:FE:A2:5B:25:78:3D:BF:46 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/793099d2-d8bb-4f78-8e97-4cd87968a269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c06::/48 Signature Algorithm: sha256WithRSAEncryption 4d:d8:17:cf:4c:a0:10:4e:2a:fa:c4:49:5f:8e:76:70:d6:cc: de:d6:fa:18:64:56:8a:5f:87:e3:39:a4:b6:c2:08:84:72:d3: f7:58:98:99:c4:69:fc:0f:de:ea:5d:5a:a2:92:de:b7:39:72: 32:92:42:2d:90:09:50:0d:0b:0b:e2:0d:ce:eb:29:6c:2f:e6: 11:85:91:9c:52:48:e5:a8:9d:3a:3e:e6:00:22:17:78:b4:ca: ff:2c:5e:64:f1:88:8f:72:9d:de:ec:ee:d6:93:ca:1c:21:07: 92:13:40:2d:ff:2a:c3:31:00:9a:e9:61:e5:72:4d:0f:ab:be: 91:2a:8f:c4:5d:51:39:ae:d4:2f:eb:42:18:8d:e8:f5:75:b8: e2:45:1b:62:2d:77:f9:d2:28:e8:4c:1b:30:d4:6e:39:a0:03: 42:8f:da:bf:95:be:ae:f2:d6:95:f9:cb:64:24:28:51:46:b7: 8b:98:9b:29:76:0a:ac:5b:5f:d9:07:6a:0a:63:d7:79:53:08: ec:05:73:ce:67:47:24:88:3e:72:2c:e5:53:1c:2c:5b:f0:9b: 30:10:fe:11:04:38:d7:ff:4b:47:7d:13:58:31:ca:94:d1:ba: 06:f6:fb:0e:91:7a:e4:7e:ef:b5:df:9c:4c:d1:a7:27:68:7c: e4:b7:79:be -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGkJhDRAzyJFzFR3boQZ6UxXk9KEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDAzMDI0WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWE2NjQxYTJlYTMzYzU4NjBiYWNjZGRhZWU0NTA1Yjk2 NDAyMmM0MmVhNjg4YjEzNjYzMWZhODFhNWE3MWJiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUCFDPBoHkIo0QwRaLyJ/V7/cG0DbxKgO2IyRm2wmQIzUc INZLPlsMARAPDDcza3SYaIAEi6Bo113UCZtYXAYeRZ9+DG3pQhZBXMgJ7a59rSBf qgk9gaU/jdmlEtHxr86XOo+IB1JKGKmwYhxbBIyZVL5fLHyIB0ppZn4+9scEeH8D pDkZwM5KD6Dg9UpeqDwfEf9TTGRuXWQI0SQbGVtKRB006jBCJyq6A1+4gMKPbr8e grEKWyzL7S+bBmZFHLMGsw1wj1rsf3QVRNnS6jXEV+H2IdpIDUoWTZd4bJM/gUgt /d/Tr63ZayPZKjxfe8OgYzzTBLD7cQbZ5F26tS8xAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXPqS8OAJcdFbvKBS/qJbJXg9v0YwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzc5MzA5OWQyLWQ4YmItNGY3OC04ZTk3LTRjZDg3OTY4YTI2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAYwDQYJKoZIhvcNAQELBQADggEBAE3YF89MoBBOKvrESV+OdnDW zN7W+hhkVopfh+M5pLbCCIRy0/dYmJnEafwP3updWqKS3rc5cjKSQi2QCVANCwvi Dc7rKWwv5hGFkZxSSOWonTo+5gAiF3i0yv8sXmTxiI9ynd7s7taTyhwhB5ITQC3/ KsMxAJrpYeVyTQ+rvpEqj8RdUTmu1C/rQhiN6PV1uOJFG2Itd/nSKOhMGzDUbjmg A0KP2r+Vvq7y1pX5y2QkKFFGt4uYmyl2CqxbX9kHagpj13lTCOwFc85nRySIPnIs 5VMcLFvwmzAQ/hEEONf/S0d9E1gxypTRugb2+w6ReuR+77XfnEzRpydofOS3eb4= -----END CERTIFICATE-----Generated at Sun Jun 29 21:04:59 2025 by rpki-client