$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/91d3d8ea-8280-4f13-9d3e-db15c03ae61c.roa File: 91d3d8ea-8280-4f13-9d3e-db15c03ae61c.roa (raw, json) Hash identifier: izqnYVPnYJ8W6ZhVLt5daMSMyH15qgfSba1ce5+Q1Zs= Subject key identifier: A1:10:75:27:92:81:48:DB:65:C3:F7:D9:ED:7F:DE:D0:58:CD:28:B4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 299D8BFAE00BCF1F925525EBD65E09368EA8E519 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/91d3d8ea-8280-4f13-9d3e-db15c03ae61c.roa Signing time: Wed 25 Jun 2025 00:40:11 +0000 ROA not before: Wed 25 Jun 2025 00:40:11 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9d:8b:fa:e0:0b:cf:1f:92:55:25:eb:d6:5e:09:36:8e:a8:e5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:40:11 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=2240d157b09cbe51c9d315fabf4cc79b8d1c2dfb1b2cfb0a1b7f2c2842e50903, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:7a:a8:d7:aa:c0:f6:d4:36:a5:e8:83:94: cf:7a:7b:7c:d7:3f:e3:a8:54:d8:f2:30:84:16:d4: b0:ec:3c:f7:c1:13:64:87:ad:6b:d9:72:12:1c:53: 2e:63:49:da:e8:22:3a:53:ea:d1:e5:5e:b0:81:5a: d4:1e:5b:2e:2f:13:db:fa:35:e0:da:20:3f:06:3b: ad:cd:e4:fc:39:7f:73:8a:81:33:3f:46:22:70:61: f7:af:8b:c9:b8:c3:81:05:71:64:1d:f1:3e:2a:d4: b0:89:1f:b0:5e:a6:cd:af:42:4d:21:94:66:0c:a0: 52:34:59:09:4b:90:f7:b3:66:c8:0f:46:8d:c2:56: 81:c3:41:24:69:11:d0:a3:11:c6:72:21:d4:78:c0: 3b:32:6b:72:c9:d2:3d:d5:73:90:1d:8d:c6:35:ee: cb:e0:fc:44:c4:dd:9b:36:61:87:d1:62:7d:25:b9: 5e:63:e9:65:99:3e:f9:3f:10:1e:85:4f:80:66:b3: da:5a:de:0d:ee:9a:1d:08:00:bd:21:72:99:59:18: fd:42:21:37:c8:ec:55:5c:8f:70:ec:b3:38:43:8e: 65:a9:4c:dc:6a:f2:22:89:c0:0a:59:8f:c1:5c:d7: 65:d7:ed:5a:78:68:98:1c:70:e8:4a:63:56:c3:50: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:10:75:27:92:81:48:DB:65:C3:F7:D9:ED:7F:DE:D0:58:CD:28:B4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/91d3d8ea-8280-4f13-9d3e-db15c03ae61c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1e::/48 Signature Algorithm: sha256WithRSAEncryption 07:a8:62:ae:b0:ad:6f:be:4f:7c:a7:e5:83:d5:9d:4f:56:00: d2:4f:39:49:7c:5b:4b:9f:fa:92:67:ef:78:73:1a:7d:3d:d9: 93:bd:f3:87:4e:1d:54:ca:5f:8e:a8:5e:99:73:34:81:2b:ec: 53:e6:2a:71:cd:c6:d7:62:83:31:a4:65:40:d1:da:28:55:9e: 75:61:0f:8e:b0:eb:84:ea:74:f9:ce:aa:02:8b:67:22:3e:c7: 64:d6:09:88:52:28:97:2d:ad:ac:53:e1:85:47:10:9d:db:40: 55:12:67:5a:b7:cb:13:7a:a1:30:e4:a2:bf:65:49:93:d9:35: 72:3c:bc:6f:d0:e1:7a:78:d6:47:bf:91:d5:36:a7:81:46:9c: 71:2b:ba:7c:40:7a:fe:43:35:02:95:26:92:ae:0a:05:be:bb: d6:f6:25:5d:1c:7f:47:16:69:d6:37:a5:c6:fd:07:70:b8:ae: d9:be:15:18:09:ef:6e:bd:40:e7:83:ce:39:b1:62:99:c5:2b: 8c:ef:2d:a6:51:5c:96:cb:12:6e:e4:4c:da:ed:68:26:38:2e: de:8d:6c:f6:f5:47:01:d5:77:22:78:cc:9a:64:15:8b:52:6c: ba:1a:56:a6:2f:32:74:37:a0:32:a9:82:e5:45:d5:fa:fd:89: 7c:15:79:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKZ2L+uALzx+SVSXr1l4JNo6o5RkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDA0MDExWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjQwZDE1N2IwOWNiZTUxYzlkMzE1ZmFiZjRjYzc5Yjhk MWMyZGZiMWIyY2ZiMGExYjdmMmMyODQyZTUwOTAzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtd3qo16rA9tQ2peiDlM96e3zXP+OoVNjyMIQW1LDsPPfB E2SHrWvZchIcUy5jSdroIjpT6tHlXrCBWtQeWy4vE9v6NeDaID8GO63N5Pw5f3OK gTM/RiJwYfevi8m4w4EFcWQd8T4q1LCJH7Beps2vQk0hlGYMoFI0WQlLkPezZsgP Ro3CVoHDQSRpEdCjEcZyIdR4wDsya3LJ0j3Vc5AdjcY17svg/ETE3Zs2YYfRYn0l uV5j6WWZPvk/EB6FT4Bms9pa3g3umh0IAL0hcplZGP1CITfI7FVcj3DsszhDjmWp TNxq8iKJwApZj8Fc12XX7Vp4aJgccOhKY1bDUJsJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoRB1J5KBSNtlw/fZ7X/e0FjNKLQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzkxZDNkOGVhLTgyODAtNGYxMy05ZDNlLWRiMTVjMDNhZTYxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADB4wDQYJKoZIhvcNAQELBQADggEBAAeoYq6wrW++T3yn5YPVnU9W ANJPOUl8W0uf+pJn73hzGn092ZO984dOHVTKX46oXplzNIEr7FPmKnHNxtdigzGk ZUDR2ihVnnVhD46w64TqdPnOqgKLZyI+x2TWCYhSKJctraxT4YVHEJ3bQFUSZ1q3 yxN6oTDkor9lSZPZNXI8vG/Q4Xp41ke/kdU2p4FGnHErunxAev5DNQKVJpKuCgW+ u9b2JV0cf0cWadY3pcb9B3C4rtm+FRgJ7269QOeDzjmxYpnFK4zvLaZRXJbLEm7k TNrtaCY4Lt6NbPb1RwHVdyJ4zJpkFYtSbLoaVqYvMnQ3oDKpguVF1fr9iXwVeUY= -----END CERTIFICATE-----Generated at Sun Jun 29 00:09:29 2025 by rpki-client