$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa File: a625c009-eed5-4024-b5c0-469960c8e95e.roa (raw, json) Hash identifier: GPouq3pL7auyats58OdWJzpNrWkgFkNKljQECgaSIV4= Subject key identifier: 00:4E:0C:E2:19:EF:BD:01:7A:A2:0D:EB:4A:C6:DB:C4:40:CA:D0:29 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3147B1E919D4509E68256A771870F169ED00747B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa Signing time: Mon 16 Jun 2025 19:00:44 +0000 ROA not before: Mon 16 Jun 2025 19:00:44 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:30b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:47:b1:e9:19:d4:50:9e:68:25:6a:77:18:70:f1:69:ed:00:74:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:00:44 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=d406daefc41361fbd13e2ed10200818ba43842e66aaae308f71036223f635f84, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:ff:1a:ed:ea:6b:0c:3f:70:5c:ef:fc:10: 72:2a:e7:cb:d7:33:0f:31:b4:48:53:bb:f1:9f:dd: 9f:e0:27:d4:b0:14:f6:85:7f:dc:9c:7a:52:06:68: 50:37:24:c9:25:8c:5f:eb:6b:4e:0b:cb:f1:1b:ef: cb:c5:21:ba:3c:79:e1:66:f2:64:05:9a:99:bb:3a: 8b:43:c9:7e:5d:26:0e:32:ab:d3:c1:20:f6:29:f4: 73:a2:7a:15:48:a8:ac:ba:70:c9:79:d1:da:4a:f2: 2e:bc:80:d3:08:a4:5d:a0:c0:2f:e4:c6:eb:0d:80: c2:2d:b0:a2:26:6e:9f:54:b1:05:6e:0a:16:82:8e: 5f:c1:fb:a2:ab:fe:f2:81:d6:4b:5b:67:1b:ac:63: 65:bc:4e:91:46:7c:63:c7:5d:1e:02:64:20:92:af: 76:12:55:86:4e:e2:f2:cb:49:17:88:3a:45:1d:d9: 14:31:51:3b:27:8d:ab:77:79:51:6b:45:62:b3:f9: 9d:04:32:82:8d:97:76:64:7c:87:1f:ea:34:58:6e: a8:29:92:5b:10:4c:7e:8b:9e:a6:6c:aa:74:c7:44: 91:c8:74:b6:d4:08:df:a0:be:46:68:bc:39:99:0f: 2a:7a:e6:09:eb:b2:d5:a1:6d:e0:f7:c4:58:dd:06: 81:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4E:0C:E2:19:EF:BD:01:7A:A2:0D:EB:4A:C6:DB:C4:40:CA:D0:29 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30b::/48 Signature Algorithm: sha256WithRSAEncryption 43:d2:ee:b3:c2:fd:e1:29:3a:50:c1:c0:8c:67:37:15:d4:8c: 2c:c3:13:a2:ed:a1:3a:c5:ea:b3:8c:ff:7c:f1:70:5a:4b:73: 23:6d:1f:3c:60:9f:2d:28:77:d0:ff:ae:c2:0a:62:5d:69:f6: 91:e9:0d:0d:da:84:26:9d:4e:f6:d2:29:0b:09:d0:0c:20:bb: d0:f3:64:25:89:7e:83:56:ce:5d:17:78:b4:4a:6d:63:b6:fe: c2:7a:59:0d:ca:4f:de:80:53:fa:9c:41:a8:6a:30:c4:89:e7: 45:05:e7:9b:3c:7f:2f:62:ba:21:74:38:13:b7:16:61:8e:52: a5:fc:4e:f9:d9:b0:fd:80:8b:1f:b6:c4:3a:db:56:d4:9a:e6: 8e:8c:ac:3f:78:1c:b0:ef:b4:1e:73:e8:92:fd:92:9f:e7:58: 6d:cd:c5:65:09:33:7b:70:6a:2b:2c:6a:d5:42:2f:57:8c:5f: b1:13:1a:78:77:6c:12:f8:aa:8c:75:35:0e:82:b9:06:88:1d: 83:12:50:37:c3:f1:05:ed:1c:9d:59:6b:9b:72:7b:e4:b1:e8: 55:ca:2d:34:24:d6:15:79:5f:bc:1f:cf:51:00:d9:6f:aa:b9: 40:46:63:96:98:10:1c:90:9a:6c:b9:bd:90:a7:f7:bc:f3:ed: 71:46:d2:c0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMUex6RnUUJ5oJWp3GHDxae0AdHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkwMDQ0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDA2ZGFlZmM0MTM2MWZiZDEzZTJlZDEwMjAwODE4YmE0 Mzg0MmU2NmFhYWUzMDhmNzEwMzYyMjNmNjM1Zjg0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm2f8a7eprDD9wXO/8EHIq58vXMw8xtEhTu/Gf3Z/gJ9Sw FPaFf9ycelIGaFA3JMkljF/ra04Ly/Eb78vFIbo8eeFm8mQFmpm7OotDyX5dJg4y q9PBIPYp9HOiehVIqKy6cMl50dpK8i68gNMIpF2gwC/kxusNgMItsKImbp9UsQVu ChaCjl/B+6Kr/vKB1ktbZxusY2W8TpFGfGPHXR4CZCCSr3YSVYZO4vLLSReIOkUd 2RQxUTsnjat3eVFrRWKz+Z0EMoKNl3ZkfIcf6jRYbqgpklsQTH6LnqZsqnTHRJHI dLbUCN+gvkZovDmZDyp65gnrstWhbeD3xFjdBoGLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAE4M4hnvvQF6og3rSsbbxEDK0CkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E2MjVjMDA5LWVlZDUtNDAyNC1iNWMwLTQ2OTk2MGM4ZTk1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwswDQYJKoZIhvcNAQELBQADggEBAEPS7rPC/eEpOlDBwIxnNxXU jCzDE6LtoTrF6rOM/3zxcFpLcyNtHzxgny0od9D/rsIKYl1p9pHpDQ3ahCadTvbS KQsJ0Awgu9DzZCWJfoNWzl0XeLRKbWO2/sJ6WQ3KT96AU/qcQahqMMSJ50UF55s8 fy9iuiF0OBO3FmGOUqX8TvnZsP2Aix+2xDrbVtSa5o6MrD94HLDvtB5z6JL9kp/n WG3NxWUJM3twaissatVCL1eMX7ETGnh3bBL4qox1NQ6CuQaIHYMSUDfD8QXtHJ1Z a5tye+Sx6FXKLTQk1hV5X7wfz1EA2W+quUBGY5aYEByQmmy5vZCn97zz7XFG0sA= -----END CERTIFICATE-----Generated at Sun Jun 29 01:57:25 2025 by rpki-client