$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa File: 96b3f615-0792-4abd-8381-86a2d78ce63d.roa (raw, json) Hash identifier: sW3FeEK07Atn+i8JCqvpGp/KFbaELGkZ6Z3k7tYcqnU= Subject key identifier: AA:09:C0:FC:63:69:96:F4:7E:A1:BB:80:FA:97:5E:B0:35:86:91:4B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1201298D703919D37DF6AEDB21EA9154CBFA3360 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa Signing time: Mon 16 Jun 2025 19:01:30 +0000 ROA not before: Mon 16 Jun 2025 19:01:30 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:546::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:01:29:8d:70:39:19:d3:7d:f6:ae:db:21:ea:91:54:cb:fa:33:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:01:30 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=78865ad673e1c9b1b8e7a32e11184bd1a644fe5ef9d8e5c250c17ed975063efe, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:56:ed:6e:e9:de:59:c9:5c:51:01:a1:d7: b0:b5:0c:60:f3:4d:4b:c7:30:df:ce:a8:f6:ee:5f: 54:f5:92:a9:37:05:90:08:fa:a7:09:f4:8c:1c:3d: 46:c1:30:81:4f:cb:60:e5:7d:ef:0b:2e:25:e7:40: c8:6e:2d:1c:fc:b4:f2:f6:be:73:8e:58:2e:c6:7d: 7a:7e:24:bd:f0:b6:cb:38:70:f7:4d:a5:39:dd:a1: c9:34:6e:ca:30:86:cc:06:2d:89:5d:91:fe:f2:79: aa:28:4f:78:2b:b0:01:ac:4a:c2:8f:50:15:83:16: 0d:03:02:66:35:05:8f:84:01:c0:d7:af:e8:d2:ce: 0a:ce:8a:91:ec:81:2b:b9:2f:11:97:c6:b1:a6:1c: ef:19:d8:57:a9:82:2b:54:42:d1:38:87:3a:ea:77: 73:2b:ec:66:0d:c3:92:72:58:d3:e3:16:54:50:55: 32:a6:c3:9b:17:80:82:24:67:c7:42:d9:98:cc:c9: 43:94:71:80:a8:1f:ae:bb:a7:4b:1f:38:a7:3f:f0: da:1b:db:4f:9f:83:bf:a4:fe:21:ca:f7:f4:37:9e: 8d:30:e1:2e:94:b1:2c:b7:0b:76:f6:3a:44:4f:85: 09:e3:53:49:43:25:6a:e6:cc:83:54:a8:7d:6a:72: b6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:09:C0:FC:63:69:96:F4:7E:A1:BB:80:FA:97:5E:B0:35:86:91:4B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:546::/48 Signature Algorithm: sha256WithRSAEncryption 3b:53:e6:e9:bd:4b:c2:19:cd:ea:1d:51:19:9a:53:a1:ab:d5: 9b:0e:fb:27:f1:90:1b:19:a8:f7:b3:07:b2:1a:1f:c1:63:d4: d1:06:5b:d3:0d:34:41:0b:4a:b3:10:b0:2c:7b:1a:9d:42:7d: 93:7b:01:c8:7e:ec:83:e4:55:4a:1a:f9:58:5e:ee:f8:15:8c: e7:4c:2f:7d:4b:f3:3d:2c:b5:6a:56:28:fb:ad:f3:5a:30:c2: dc:d7:7f:88:39:00:54:71:b7:d7:e0:73:96:54:63:c8:13:87: df:c7:16:b4:1f:f3:84:47:64:e6:67:89:be:37:10:a6:9d:f3: 19:6f:5f:3a:71:95:27:31:dd:48:20:c3:c5:73:26:3f:70:72: c9:74:85:45:37:12:16:95:e4:4a:0c:5e:77:fa:83:3f:01:67: ea:74:68:ef:c0:7b:54:0c:49:b2:28:2b:74:b1:a4:0c:b9:88: 5a:9f:ba:d4:37:1e:66:4e:ff:79:3e:46:c0:8d:a1:c9:a3:3d: 20:b9:98:39:ae:7c:af:f0:44:cc:94:0c:7e:92:f8:52:60:e4: d2:71:18:d5:4e:52:2b:00:08:5e:5f:1a:27:ce:62:dc:71:c1: 3b:96:8d:3b:da:04:39:40:fc:50:06:c4:62:f2:11:e3:02:b1: 5d:c6:f6:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEgEpjXA5GdN99q7bIeqRVMv6M2AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkwMTMwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODg2NWFkNjczZTFjOWIxYjhlN2EzMmUxMTE4NGJkMWE2 NDRmZTVlZjlkOGU1YzI1MGMxN2VkOTc1MDYzZWZlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6clbtbuneWclcUQGh17C1DGDzTUvHMN/OqPbuX1T1kqk3 BZAI+qcJ9IwcPUbBMIFPy2Dlfe8LLiXnQMhuLRz8tPL2vnOOWC7GfXp+JL3wtss4 cPdNpTndock0bsowhswGLYldkf7yeaooT3grsAGsSsKPUBWDFg0DAmY1BY+EAcDX r+jSzgrOipHsgSu5LxGXxrGmHO8Z2FepgitUQtE4hzrqd3Mr7GYNw5JyWNPjFlRQ VTKmw5sXgIIkZ8dC2ZjMyUOUcYCoH667p0sfOKc/8Nob20+fg7+k/iHK9/Q3no0w 4S6UsSy3C3b2OkRPhQnjU0lDJWrmzINUqH1qcraxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqgnA/GNplvR+obuA+pdesDWGkUswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk2YjNmNjE1LTA3OTItNGFiZC04MzgxLTg2YTJkNzhjZTYzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUYwDQYJKoZIhvcNAQELBQADggEBADtT5um9S8IZzeodURmaU6Gr 1ZsO+yfxkBsZqPezB7IaH8Fj1NEGW9MNNEELSrMQsCx7Gp1CfZN7Ach+7IPkVUoa +Vhe7vgVjOdML31L8z0stWpWKPut81owwtzXf4g5AFRxt9fgc5ZUY8gTh9/HFrQf 84RHZOZnib43EKad8xlvXzpxlScx3Uggw8VzJj9wcsl0hUU3EhaV5EoMXnf6gz8B Z+p0aO/Ae1QMSbIoK3SxpAy5iFqfutQ3HmZO/3k+RsCNocmjPSC5mDmufK/wRMyU DH6S+FJg5NJxGNVOUisACF5fGifOYtxxwTuWjTvaBDlA/FAGxGLyEeMCsV3G9oE= -----END CERTIFICATE-----Generated at Sun Jun 29 16:18:26 2025 by rpki-client