$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa File: 89848d84-ccf0-40c8-b12a-ac4d8910d997.roa (raw, json) Hash identifier: Nx+cHiIALUFno0h65wbE/+RXTA4fynFpD+gRXJhqbik= Subject key identifier: 5A:1F:01:CA:7A:60:BE:C8:0E:22:3E:F2:39:62:27:7F:9B:08:9A:90 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0A2B62D57C61DA9579AE3A18B4BCD74221A45AE0 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa Signing time: Mon 16 Jun 2025 19:01:19 +0000 ROA not before: Mon 16 Jun 2025 19:01:19 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2b:62:d5:7c:61:da:95:79:ae:3a:18:b4:bc:d7:42:21:a4:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:01:19 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=d4783c524502429d7080b51738f0a90d3b6c1d958913f9e9242f35f9c6274607, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:ab:d9:fb:1e:ff:3a:c2:84:53:84:3f:31: f7:53:7d:70:0f:38:0a:ab:82:84:61:e4:52:c2:6a: e6:ee:cf:34:ed:81:d9:08:70:5f:8c:66:2b:b3:1e: e4:68:52:14:c5:da:98:d5:4e:f4:dc:6c:6a:32:76: 60:66:0f:37:e8:f9:b7:33:f2:ee:4e:cb:34:bd:3d: 97:fe:91:31:43:80:3f:9a:df:fb:bb:a5:9b:9f:a9: 9e:32:15:9d:6e:30:68:c0:53:6b:7b:44:b7:a9:e2: 33:a0:8e:fa:c8:be:eb:56:0e:e7:d5:25:ef:7f:11: c9:04:9f:ee:22:53:5b:7f:e4:0f:cd:e7:f9:db:93: 32:0b:3b:94:d4:ea:eb:c2:e4:db:37:30:a7:e6:db: 5b:2a:8c:c0:69:31:28:99:d4:22:10:2a:c0:fd:2a: 68:39:c5:fc:6e:47:23:ca:49:20:44:21:42:b8:28: e5:17:02:fd:9e:a4:65:04:b0:b5:7d:8b:cc:88:07: 71:4d:8b:94:d0:f7:6d:e9:a6:22:94:af:cd:39:d3: d9:31:6c:f4:46:3a:eb:5a:ab:f2:34:e0:99:df:74: 28:0d:f3:10:f7:73:53:c4:14:fd:19:db:d4:2e:5a: e6:03:fa:12:8e:43:dc:6c:cf:0a:9c:9e:6e:1a:7e: 16:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1F:01:CA:7A:60:BE:C8:0E:22:3E:F2:39:62:27:7F:9B:08:9A:90 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3a7::/48 Signature Algorithm: sha256WithRSAEncryption 4f:44:21:17:02:f4:51:e9:e8:31:e2:8b:29:d8:69:0a:1e:e3: 00:7e:2f:7f:e2:51:4e:e8:34:da:ce:1a:cb:29:49:48:fe:5f: ab:0c:89:c6:d4:b5:da:11:56:71:b0:1d:05:04:1e:76:2c:65: e3:e1:eb:02:6c:fd:3b:5a:d3:e1:cc:80:52:62:41:a0:f9:42: 79:b4:7c:a6:dc:a4:27:f3:f4:f4:37:cf:2e:5a:8e:ac:59:fc: de:c5:d6:15:2c:78:20:0c:f0:59:8f:4e:5d:33:12:d3:b7:aa: be:53:40:e4:15:42:57:3d:b0:ad:37:90:17:47:f0:93:e6:55: 68:76:3e:5c:1c:fd:dc:cd:91:3f:d8:09:3a:df:3d:44:e7:d8: 38:ec:ec:fa:40:7d:de:c9:0a:ec:ea:e0:a7:c5:42:a5:a3:57: a1:5d:ce:18:f3:5d:ab:df:82:5b:91:0b:58:bf:6f:e3:c5:ba: 3d:ac:9c:45:cb:40:e3:c4:03:3c:85:fc:aa:d6:2b:6f:a7:15: 64:56:a5:02:fb:de:99:6e:41:10:b8:7e:06:4e:61:26:e7:f1: d8:fb:eb:2c:4f:a3:9e:db:23:76:d7:90:5b:25:4c:40:30:1a: 23:0d:f1:1d:5c:e8:b8:a2:93:95:96:b9:25:66:be:f0:b9:c9: 0e:37:66:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCiti1Xxh2pV5rjoYtLzXQiGkWuAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkwMTE5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDc4M2M1MjQ1MDI0MjlkNzA4MGI1MTczOGYwYTkwZDNi NmMxZDk1ODkxM2Y5ZTkyNDJmMzVmOWM2Mjc0NjA3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+favZ+x7/OsKEU4Q/MfdTfXAPOAqrgoRh5FLCaubuzzTt gdkIcF+MZiuzHuRoUhTF2pjVTvTcbGoydmBmDzfo+bcz8u5OyzS9PZf+kTFDgD+a 3/u7pZufqZ4yFZ1uMGjAU2t7RLep4jOgjvrIvutWDufVJe9/EckEn+4iU1t/5A/N 5/nbkzILO5TU6uvC5Ns3MKfm21sqjMBpMSiZ1CIQKsD9Kmg5xfxuRyPKSSBEIUK4 KOUXAv2epGUEsLV9i8yIB3FNi5TQ923ppiKUr80509kxbPRGOutaq/I04JnfdCgN 8xD3c1PEFP0Z29QuWuYD+hKOQ9xszwqcnm4afhbjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWh8BynpgvsgOIj7yOWInf5sImpAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg5ODQ4ZDg0LWNjZjAtNDBjOC1iMTJhLWFjNGQ4OTEwZDk5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA6cwDQYJKoZIhvcNAQELBQADggEBAE9EIRcC9FHp6DHiiynYaQoe 4wB+L3/iUU7oNNrOGsspSUj+X6sMicbUtdoRVnGwHQUEHnYsZePh6wJs/Tta0+HM gFJiQaD5Qnm0fKbcpCfz9PQ3zy5ajqxZ/N7F1hUseCAM8FmPTl0zEtO3qr5TQOQV Qlc9sK03kBdH8JPmVWh2Plwc/dzNkT/YCTrfPUTn2Djs7PpAfd7JCuzq4KfFQqWj V6FdzhjzXavfgluRC1i/b+PFuj2snEXLQOPEAzyF/KrWK2+nFWRWpQL73pluQRC4 fgZOYSbn8dj76yxPo57bI3bXkFslTEAwGiMN8R1c6Liik5WWuSVmvvC5yQ43ZgY= -----END CERTIFICATE-----Generated at Sun Jun 29 16:35:52 2025 by rpki-client