$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa File: b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa (raw, json) Hash identifier: va76jObrAwTAaKH+HkcjCAds29qjtwhjclaGpumaSVg= Subject key identifier: BC:FC:74:B2:49:07:51:76:49:03:AB:02:AA:6A:D6:C4:B2:FE:79:E3 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0FA8E61418ACCBB2B3463666A1A1A71667F6A818 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa Signing time: Wed 25 Jun 2025 00:30:33 +0000 ROA not before: Wed 25 Jun 2025 00:30:33 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a8:e6:14:18:ac:cb:b2:b3:46:36:66:a1:a1:a7:16:67:f6:a8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:30:33 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=20c5b6572e392b47f9f0ec8236e3240e3288bc67fea2d646fee393bb22d33e0b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:32:fc:4a:7c:37:69:af:bb:60:0e:cd:b8: bd:3b:f0:41:a2:93:59:8e:e1:42:2e:b7:08:ce:64: e7:e6:81:90:d2:35:81:16:c8:13:c2:b6:3c:e9:3d: 52:e0:06:22:1d:e2:3b:76:b9:15:a1:4d:7f:6a:7a: 29:b3:84:93:99:df:7e:7c:1a:35:c3:e2:90:c1:aa: 40:4c:43:64:11:19:b9:ad:08:50:88:7c:fd:79:3a: 11:81:13:2c:f8:0c:48:58:e1:99:76:37:54:0e:4b: 09:e9:e2:33:67:9d:5e:fa:3c:8d:54:10:2b:87:3c: fc:98:42:9c:cb:79:78:f2:80:93:bf:13:96:b1:6e: 05:ba:fc:39:52:25:d9:b7:97:aa:41:f1:41:6d:a8: 20:6c:c0:58:f7:76:e4:a1:06:69:c4:70:5d:ea:56: 36:76:9a:90:c8:e7:07:5e:64:55:e3:70:d6:b4:da: 04:38:78:e9:8d:4b:7b:71:17:bd:a8:42:de:fc:04: b2:09:f8:56:75:b5:3d:d7:45:b3:4c:22:8a:8b:78: d7:89:1d:a0:90:61:dd:7b:24:fd:3e:9d:ed:e1:6c: c3:46:55:a7:7c:d9:c7:b6:e3:30:60:35:11:3a:5a: ec:3c:1b:98:f3:c9:4e:a2:0f:d6:49:48:48:e2:45: 9d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FC:74:B2:49:07:51:76:49:03:AB:02:AA:6A:D6:C4:B2:FE:79:E3 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c07::/48 Signature Algorithm: sha256WithRSAEncryption 5e:b8:7d:19:31:38:37:59:91:db:c2:47:99:d0:50:84:63:cc: 23:9e:b7:54:55:ff:3f:9e:0a:96:cd:3f:8f:34:9b:8b:11:44: 79:95:0c:f3:17:45:11:f2:94:8c:40:51:c4:2a:2a:ec:53:de: 1f:c4:9e:23:ad:61:1a:8a:d9:5d:9d:25:82:3d:6c:2c:d6:de: df:40:75:c0:d0:ca:a6:53:9b:ad:28:a4:17:d3:d3:c2:92:91: 42:42:35:78:d7:eb:5a:02:ec:f5:90:2d:f8:78:1b:29:6d:f2: 4c:ea:56:0f:c6:ff:9b:1a:fa:e5:79:d3:a1:e4:ab:d9:9c:a2: b4:a6:3f:f4:fe:89:38:ec:a9:bb:1f:14:ee:c5:ab:f5:78:b3: ec:ab:96:06:ce:26:e3:5c:75:24:c7:3e:82:0f:08:eb:18:15: 96:6e:f7:e5:da:7d:f9:4f:ad:77:c0:a4:59:ef:35:ec:61:d1: 78:48:9b:b2:4c:17:f6:6b:c9:24:71:3d:cb:1b:b4:d3:be:ee: 55:42:51:07:c7:ea:c0:80:de:48:16:73:ea:75:2b:04:b4:1e: d9:d4:89:6a:e8:fb:20:33:bd:92:a7:0f:7c:2f:39:05:f4:51: f1:a8:86:fc:df:8c:41:f4:17:29:40:3a:84:44:bd:54:4d:59: 11:3f:d1:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUD6jmFBisy7KzRjZmoaGnFmf2qBgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDAzMDMzWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGM1YjY1NzJlMzkyYjQ3ZjlmMGVjODIzNmUzMjQwZTMy ODhiYzY3ZmVhMmQ2NDZmZWUzOTNiYjIyZDMzZTBiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbBTL8Snw3aa+7YA7NuL078EGik1mO4UIutwjOZOfmgZDS NYEWyBPCtjzpPVLgBiId4jt2uRWhTX9qeimzhJOZ3358GjXD4pDBqkBMQ2QRGbmt CFCIfP15OhGBEyz4DEhY4Zl2N1QOSwnp4jNnnV76PI1UECuHPPyYQpzLeXjygJO/ E5axbgW6/DlSJdm3l6pB8UFtqCBswFj3duShBmnEcF3qVjZ2mpDI5wdeZFXjcNa0 2gQ4eOmNS3txF72oQt78BLIJ+FZ1tT3XRbNMIoqLeNeJHaCQYd17JP0+ne3hbMNG Vad82ce24zBgNRE6Wuw8G5jzyU6iD9ZJSEjiRZ3hAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvPx0skkHUXZJA6sCqmrWxLL+eeMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2I0MTg4ODczLWY1ZjgtNGFiOS1hOWZhLTdiNjFhNDg2MGYyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAcwDQYJKoZIhvcNAQELBQADggEBAF64fRkxODdZkdvCR5nQUIRj zCOet1RV/z+eCpbNP480m4sRRHmVDPMXRRHylIxAUcQqKuxT3h/EniOtYRqK2V2d JYI9bCzW3t9AdcDQyqZTm60opBfT08KSkUJCNXjX61oC7PWQLfh4Gylt8kzqVg/G /5sa+uV506Hkq9mcorSmP/T+iTjsqbsfFO7Fq/V4s+yrlgbOJuNcdSTHPoIPCOsY FZZu9+XafflPrXfApFnvNexh0XhIm7JMF/ZrySRxPcsbtNO+7lVCUQfH6sCA3kgW c+p1KwS0HtnUiWro+yAzvZKnD3wvOQX0UfGohvzfjEH0FylAOoREvVRNWRE/0R8= -----END CERTIFICATE-----Generated at Sun Jun 29 00:34:19 2025 by rpki-client