$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa File: bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa (raw, json) Hash identifier: If/99Fw9Im9JMzMiZgS7hFmPR/wiqF6afkXUG0Y8VgE= Subject key identifier: A5:A8:3D:19:14:69:14:2A:44:61:97:87:B4:00:7B:17:27:E4:03:6B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3CF309FAC70139A640085E8276852F9BCDB4DAA8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa Signing time: Mon 16 Jun 2025 19:01:18 +0000 ROA not before: Mon 16 Jun 2025 19:01:18 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f3:09:fa:c7:01:39:a6:40:08:5e:82:76:85:2f:9b:cd:b4:da:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:01:18 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=68deea6484d7758bf7c63850cea80de763108319bd5bf1ed628e250fd856c100, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:6b:64:d4:92:9c:28:a7:ce:57:51:11:6b: 5f:f0:c2:c6:a8:f4:9a:b6:55:7f:5d:b4:fa:dd:ba: 40:83:c4:95:5e:16:88:ba:a0:bf:be:34:83:74:7d: cc:ff:10:c7:02:4d:ad:2d:b9:53:44:77:c6:7c:ba: ed:93:70:bc:be:72:c8:21:b8:33:7d:02:96:44:e4: e3:e1:d0:8c:7b:d5:d2:5b:0e:80:7d:67:aa:b1:0a: bf:2d:c8:75:4a:1d:e7:11:65:f5:bd:e1:c9:35:41: fe:5f:9d:f5:3f:ac:40:93:ea:fe:e0:04:0f:4d:27: 8a:fc:61:c8:f9:51:fb:89:e4:94:a4:79:c9:a1:5e: 33:4c:30:10:08:1f:a2:6f:c2:ad:6a:d8:43:73:e7: d7:e7:82:b1:78:6f:99:7d:0a:7d:c8:98:7a:9a:ee: 3c:f1:af:08:f3:bc:ed:72:9f:c1:17:b2:c5:a1:26: db:d7:f6:6a:9b:52:ed:7a:fa:6b:85:75:7c:a9:a9: 96:93:e6:45:d2:99:86:48:99:3b:c8:00:be:22:45: f6:b0:c6:31:ac:dc:37:1a:4c:d8:44:77:91:c2:14: a0:4b:31:06:8f:ff:f7:2d:57:a3:b5:d7:af:d8:a3: 4b:97:c7:b1:0a:8f:bf:50:c5:5c:72:71:d4:bc:fc: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A8:3D:19:14:69:14:2A:44:61:97:87:B4:00:7B:17:27:E4:03:6B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3a7::/48 Signature Algorithm: sha256WithRSAEncryption 1b:20:3d:59:8f:51:a6:b7:9d:bd:97:6f:7d:4b:8f:09:48:bd: d1:c9:74:f6:f1:2f:4e:fd:1b:a8:fc:af:51:e7:29:ff:95:6a: 9c:ff:7c:08:6e:55:31:b3:48:ea:7c:00:c8:4e:42:2d:65:2b: dc:97:12:72:33:93:4f:64:a8:db:8d:ba:76:dc:8c:ac:36:75: b7:8a:c2:ea:08:61:24:c0:be:31:3d:dd:5a:80:55:04:c5:1f: 26:bb:72:f0:92:58:12:5d:43:0a:d6:7d:9d:5f:8b:d3:46:8d: e1:fe:5d:e6:d9:63:27:10:2c:d5:37:60:4c:bf:ba:b8:5b:41: ea:47:f9:54:46:af:4e:20:d3:b4:2b:ec:45:b4:d5:d2:8f:f9: a9:c9:3b:ee:69:80:3d:bb:2e:a4:f5:c8:bb:57:cb:00:d0:b7: 0d:6d:34:e0:54:d5:5a:e9:54:c2:4e:65:3d:87:66:88:6b:16: 8d:90:c2:7d:b6:0a:4a:6b:09:97:34:fd:56:53:f3:54:02:d7: 15:c4:54:27:aa:fe:0a:d9:a3:47:2a:b4:fa:de:44:f0:ef:14: 0a:62:22:cb:bc:c2:36:3d:a0:dd:63:4c:5a:37:4a:47:ad:dd: 44:c6:5a:7d:87:e5:6d:42:8a:31:7a:48:19:ee:73:c8:57:f7: 7c:de:e1:c0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPPMJ+scBOaZACF6CdoUvm8202qgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkwMTE4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGRlZWE2NDg0ZDc3NThiZjdjNjM4NTBjZWE4MGRlNzYz MTA4MzE5YmQ1YmYxZWQ2MjhlMjUwZmQ4NTZjMTAwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYBGtk1JKcKKfOV1ERa1/wwsao9Jq2VX9dtPrdukCDxJVe Foi6oL++NIN0fcz/EMcCTa0tuVNEd8Z8uu2TcLy+csghuDN9ApZE5OPh0Ix71dJb DoB9Z6qxCr8tyHVKHecRZfW94ck1Qf5fnfU/rECT6v7gBA9NJ4r8Ycj5UfuJ5JSk ecmhXjNMMBAIH6Jvwq1q2ENz59fngrF4b5l9Cn3ImHqa7jzxrwjzvO1yn8EXssWh JtvX9mqbUu16+muFdXypqZaT5kXSmYZImTvIAL4iRfawxjGs3DcaTNhEd5HCFKBL MQaP//ctV6O116/Yo0uXx7EKj79QxVxycdS8/ItNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpag9GRRpFCpEYZeHtAB7FyfkA2swHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JlYmIxMTdhLTQ0ZGQtNGIzZi04N2YwLTI0ZmYzZWY2NTMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA6cwDQYJKoZIhvcNAQELBQADggEBABsgPVmPUaa3nb2Xb31LjwlI vdHJdPbxL079G6j8r1HnKf+Vapz/fAhuVTGzSOp8AMhOQi1lK9yXEnIzk09kqNuN unbcjKw2dbeKwuoIYSTAvjE93VqAVQTFHya7cvCSWBJdQwrWfZ1fi9NGjeH+XebZ YycQLNU3YEy/urhbQepH+VRGr04g07Qr7EW01dKP+anJO+5pgD27LqT1yLtXywDQ tw1tNOBU1VrpVMJOZT2HZohrFo2Qwn22CkprCZc0/VZT81QC1xXEVCeq/grZo0cq tPreRPDvFApiIsu8wjY9oN1jTFo3Sket3UTGWn2H5W1CijF6SBnuc8hX93ze4cA= -----END CERTIFICATE-----Generated at Sun Jun 29 04:40:23 2025 by rpki-client