$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c1d65d19-791f-4c71-bddb-e0812650e853.roa File: c1d65d19-791f-4c71-bddb-e0812650e853.roa (raw, json) Hash identifier: zylYzKvHKPSvZBh+m2u7mCMW6kKX9t3XVfZAb7YkPeg= Subject key identifier: 6D:80:97:0E:95:F5:C7:A3:62:07:F3:01:F1:28:07:CE:87:72:44:4D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4F4DF8EF5F57D2C6454B9F003FAC4B2F67F64AFD Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c1d65d19-791f-4c71-bddb-e0812650e853.roa Signing time: Wed 25 Jun 2025 00:40:15 +0000 ROA not before: Wed 25 Jun 2025 00:40:15 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:4d:f8:ef:5f:57:d2:c6:45:4b:9f:00:3f:ac:4b:2f:67:f6:4a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:40:15 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=6d7762d4fdcb7a35eb2f46ee87557d088a8a8ef9ffff0b53424788194a58bcac, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:94:12:43:0e:6c:66:e6:a8:32:0e:16:58: dd:32:cc:78:08:ef:c2:24:61:7c:32:cb:bd:1a:24: 9c:5d:c5:7d:b4:83:ff:94:15:a5:0f:8e:18:bc:b0: 46:38:82:fb:b2:32:fd:35:22:e6:41:5a:85:18:9a: 50:55:70:3c:e5:ce:a8:fe:f8:4d:95:22:cf:f8:f7: 2b:8c:92:e9:b3:c7:d1:ba:98:e6:7c:c8:03:ec:b3: df:a0:c2:8a:cc:f5:c2:2d:0c:6f:11:a3:f4:3c:8a: 28:b7:45:2f:c1:b1:c4:96:6c:26:98:4a:a8:75:1e: 97:d9:e5:cd:c6:66:8f:52:b3:06:32:cf:d2:2b:d3: 36:ac:cb:bd:0f:1a:09:43:79:3a:55:cb:28:51:a2: 9b:a5:a1:08:e2:aa:63:f3:65:05:29:aa:49:50:9f: ed:a7:89:99:50:a1:64:ef:e5:1e:57:c4:c8:2d:45: 86:ae:67:77:87:74:f2:ad:48:0d:76:88:a4:dd:a6: ea:22:81:c1:11:df:89:77:ae:4e:c4:30:3a:75:23: 28:f7:27:2d:90:5a:22:63:77:56:b6:d8:ef:65:52: 5a:86:ed:72:84:dd:85:f5:1f:ba:64:26:dd:8c:e1: 51:ff:2c:94:03:5c:bf:5a:52:e5:21:5a:0a:0a:26: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:80:97:0E:95:F5:C7:A3:62:07:F3:01:F1:28:07:CE:87:72:44:4D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c1d65d19-791f-4c71-bddb-e0812650e853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c20::/48 Signature Algorithm: sha256WithRSAEncryption a5:98:84:73:8a:8f:0c:88:86:9c:89:55:90:e3:69:10:b2:60: f0:c1:76:78:a4:d3:d7:1c:c8:0f:43:d7:63:aa:b7:58:a8:ae: 0d:41:42:b9:c4:27:a9:cc:7f:40:68:bc:73:e8:70:3c:d1:66: 34:3c:79:2e:44:cb:f0:12:10:8d:22:52:e9:3a:fb:99:bf:26: fb:5c:4c:af:3b:fa:1c:58:e8:31:f0:62:1e:ab:4a:55:a6:99: 82:9a:98:0f:5c:e3:0e:d6:a5:a7:ee:1b:ec:b2:a4:18:b6:8b: d4:a7:92:a2:c2:19:4a:fe:3d:3e:cc:66:39:d7:5e:ad:63:f5: bb:12:37:cb:8e:75:60:c7:d2:f9:ca:74:12:d7:a5:6e:9a:af: 08:fe:ca:ac:3b:e4:1c:c8:53:9e:21:96:11:af:ab:bc:af:8d: 07:e4:b4:6b:4a:32:a5:f6:2e:eb:d6:ff:aa:9e:eb:e7:ad:54: 64:fd:c9:0b:84:29:2b:95:4b:4a:79:45:f5:fd:0c:22:ae:e1: 4c:c8:d6:43:dc:a5:d6:ba:ae:4f:a4:a9:ee:14:94:89:c2:13: 1f:8b:0a:d6:b3:47:30:00:16:c8:94:2e:93:a0:6e:6c:39:e8: cc:54:dc:ca:21:3c:01:79:47:27:ef:8a:8f:bd:23:f9:45:60: 79:a6:3a:4f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT034719X0sZFS58AP6xLL2f2Sv0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDA0MDE1WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDc3NjJkNGZkY2I3YTM1ZWIyZjQ2ZWU4NzU1N2QwODhh OGE4ZWY5ZmZmZjBiNTM0MjQ3ODgxOTRhNThiY2FjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8dJQSQw5sZuaoMg4WWN0yzHgI78IkYXwyy70aJJxdxX20 g/+UFaUPjhi8sEY4gvuyMv01IuZBWoUYmlBVcDzlzqj++E2VIs/49yuMkumzx9G6 mOZ8yAPss9+gworM9cItDG8Ro/Q8iii3RS/BscSWbCaYSqh1HpfZ5c3GZo9SswYy z9Ir0zasy70PGglDeTpVyyhRopuloQjiqmPzZQUpqklQn+2niZlQoWTv5R5XxMgt RYauZ3eHdPKtSA12iKTdpuoigcER34l3rk7EMDp1Iyj3Jy2QWiJjd1a22O9lUlqG 7XKE3YX1H7pkJt2M4VH/LJQDXL9aUuUhWgoKJvhvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbYCXDpX1x6NiB/MB8SgHzodyRE0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2MxZDY1ZDE5LTc5MWYtNGM3MS1iZGRiLWUwODEyNjUwZTg1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADCAwDQYJKoZIhvcNAQELBQADggEBAKWYhHOKjwyIhpyJVZDjaRCy YPDBdnik09ccyA9D12Oqt1iorg1BQrnEJ6nMf0BovHPocDzRZjQ8eS5Ey/ASEI0i Uuk6+5m/JvtcTK87+hxY6DHwYh6rSlWmmYKamA9c4w7WpafuG+yypBi2i9SnkqLC GUr+PT7MZjnXXq1j9bsSN8uOdWDH0vnKdBLXpW6arwj+yqw75BzIU54hlhGvq7yv jQfktGtKMqX2LuvW/6qe6+etVGT9yQuEKSuVS0p5RfX9DCKu4UzI1kPcpda6rk+k qe4UlInCEx+LCtazRzAAFsiULpOgbmw56MxU3MohPAF5Ryfvio+9I/lFYHmmOk8= -----END CERTIFICATE-----Generated at Sun Jun 29 04:07:17 2025 by rpki-client