$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa File: b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa (raw, json) Hash identifier: SOid2MbjzLnXR5iADhQtfxnrfXCEk2CjV8481JawUuE= Subject key identifier: 5D:56:5E:30:E9:E6:9F:C3:2F:72:21:F6:6A:6C:42:0C:89:04:0E:9B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 015DE5DE9C0BF2670E63BB4C6F380C0C717E8704 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa Signing time: Mon 16 Jun 2025 19:00:05 +0000 ROA not before: Mon 16 Jun 2025 19:00:05 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:385::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5d:e5:de:9c:0b:f2:67:0e:63:bb:4c:6f:38:0c:0c:71:7e:87:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:00:05 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=d4f6dab5d4e95ace6ecb1a9ee2fcd3bc192e232ffb504316358c30de61969210, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:00:b1:21:ee:9e:d4:04:53:d8:6f:95:34: 59:96:ec:1e:23:de:b7:6a:d8:68:54:dc:42:4f:66: 1d:c1:d6:8c:a9:3b:08:b5:63:9a:ea:61:39:64:08: 4f:4f:6d:45:b0:ff:dd:13:e6:03:5a:1b:c2:04:c1: 49:44:c0:8d:26:b8:20:b4:fb:43:57:2d:a5:17:f2: da:b0:8f:f4:de:70:0c:3c:23:47:23:12:2e:51:82: 3a:16:2b:4e:f0:d8:57:a1:c5:4a:76:4c:f9:f2:21: ea:22:79:c8:91:7a:e8:c6:b8:9d:0f:53:bf:af:b2: fd:c8:95:0c:fb:f3:be:e8:5a:89:e2:21:1e:f2:f4: 4f:10:f1:b7:94:29:90:03:66:b1:47:ac:f6:84:18: ec:24:0c:e4:51:f3:27:85:1e:39:aa:0d:e6:29:0a: a4:d6:e5:95:0f:1d:ef:9a:fe:db:c6:d0:6f:ba:20: b1:5e:34:cf:72:5d:ac:d8:95:6b:38:37:37:23:f6: bc:a1:9c:64:05:3c:33:ed:ae:2e:62:e2:e0:12:8a: 13:eb:4e:81:70:97:f1:bc:a2:d7:e3:00:03:94:95: 30:67:7e:e1:2f:5a:2a:dc:00:ff:cd:2a:b0:4c:ef: fd:c4:2a:29:ca:a5:f6:ed:9f:e7:de:fe:c7:f8:ac: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:56:5E:30:E9:E6:9F:C3:2F:72:21:F6:6A:6C:42:0C:89:04:0E:9B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:385::/48 Signature Algorithm: sha256WithRSAEncryption 4a:4f:6b:b2:b2:6a:c0:98:68:80:c5:2e:e6:b7:71:0f:01:af: 00:df:e1:e3:97:e1:13:50:19:a3:e9:80:b6:77:6d:63:34:5c: 7a:2f:40:22:df:2c:5c:77:e5:27:08:7b:81:c1:69:72:f9:44: 6f:9f:92:64:64:99:b2:f5:06:0f:c1:f7:f3:07:6c:0d:e7:36: c7:68:a8:7c:51:80:1a:22:a3:e8:cb:9d:6e:8e:ca:15:bf:80: 01:8f:d8:b3:e5:86:82:98:fe:73:56:2a:af:c8:d9:5a:2d:c8: 58:3f:79:77:72:34:7a:af:84:db:ae:2d:f6:26:30:2e:13:7b: a2:f6:d8:3b:a6:e3:f0:d1:30:5e:2b:1b:4b:f9:14:25:c3:f8: 8f:b3:63:08:38:02:67:8d:9f:e4:b4:c9:29:b2:9b:3b:d8:d5: de:69:26:b7:a7:23:44:4d:d0:63:6b:bd:b5:bb:59:28:cd:e6: e6:fc:10:3e:c7:eb:66:d3:bd:c4:fb:c2:77:6e:2c:cc:7e:28: 94:83:c8:85:45:e9:5f:4a:a6:da:e6:6b:58:2c:85:19:07:5a: 62:dd:cd:e9:81:d4:36:70:43:a7:ab:c4:6f:f9:54:32:2f:b9: ea:aa:83:78:5a:57:00:13:55:f1:f0:e3:f7:e3:ca:56:bc:55: 87:89:85:ba -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAV3l3pwL8mcOY7tMbzgMDHF+hwQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkwMDA1WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGY2ZGFiNWQ0ZTk1YWNlNmVjYjFhOWVlMmZjZDNiYzE5 MmUyMzJmZmI1MDQzMTYzNThjMzBkZTYxOTY5MjEwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGTQCxIe6e1ART2G+VNFmW7B4j3rdq2GhU3EJPZh3B1oyp Owi1Y5rqYTlkCE9PbUWw/90T5gNaG8IEwUlEwI0muCC0+0NXLaUX8tqwj/TecAw8 I0cjEi5RgjoWK07w2FehxUp2TPnyIeoieciReujGuJ0PU7+vsv3IlQz7877oWoni IR7y9E8Q8beUKZADZrFHrPaEGOwkDORR8yeFHjmqDeYpCqTW5ZUPHe+a/tvG0G+6 ILFeNM9yXazYlWs4Nzcj9ryhnGQFPDPtri5i4uASihPrToFwl/G8otfjAAOUlTBn fuEvWircAP/NKrBM7/3EKinKpfbtn+fe/sf4rCPfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXVZeMOnmn8MvciH2amxCDIkEDpswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IzMTA5ZTk5LWYxZjQtNGMzYi1iNTBkLTJkOWE5MzUzM2ExMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4UwDQYJKoZIhvcNAQELBQADggEBAEpPa7KyasCYaIDFLua3cQ8B rwDf4eOX4RNQGaPpgLZ3bWM0XHovQCLfLFx35ScIe4HBaXL5RG+fkmRkmbL1Bg/B 9/MHbA3nNsdoqHxRgBoio+jLnW6OyhW/gAGP2LPlhoKY/nNWKq/I2VotyFg/eXdy NHqvhNuuLfYmMC4Te6L22Dum4/DRMF4rG0v5FCXD+I+zYwg4AmeNn+S0ySmymzvY 1d5pJrenI0RN0GNrvbW7WSjN5ub8ED7H62bTvcT7wnduLMx+KJSDyIVF6V9Kptrm a1gshRkHWmLdzemB1DZwQ6erxG/5VDIvueqqg3haVwATVfHw4/fjyla8VYeJhbo= -----END CERTIFICATE-----Generated at Sun Jun 29 07:21:12 2025 by rpki-client