$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa File: da512197-d443-4603-b80f-2a87309b0b87.roa (raw, json) Hash identifier: R7UUEHkH3R5+CCuy5eDgv4OgKFZLfTSjc+JnBEag1L4= Subject key identifier: B2:B8:5C:98:D3:6A:92:AE:78:F8:DE:E0:0B:7D:DE:0F:14:40:2D:D6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 36B3D45E58746721839A9B61A2D14ACF3F32A4B0 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa Signing time: Mon 16 Jun 2025 19:10:44 +0000 ROA not before: Mon 16 Jun 2025 19:10:44 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b3:d4:5e:58:74:67:21:83:9a:9b:61:a2:d1:4a:cf:3f:32:a4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:10:44 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=03c1463b20d923fde71ffb160853433b6c9007a47c9906f929f6aed89718a422, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:41:cb:cb:3d:2b:41:f7:38:56:42:f0:12:c7: 10:1e:cc:af:22:eb:f5:0c:2f:99:ec:34:73:97:02: 82:4b:00:b9:21:c0:f6:37:1f:27:03:39:66:2d:20: 01:44:69:75:02:80:00:bb:4f:da:a5:09:13:c8:b2: a5:6c:5c:a3:9e:94:d6:71:93:30:07:d9:02:be:46: d4:be:e4:a4:7b:5c:8f:20:6b:7e:c1:dc:08:a7:df: 13:7d:7e:6f:ea:64:77:2b:53:28:40:38:c8:53:8c: 2c:20:a7:06:99:ab:ce:41:fc:58:36:f5:45:38:c8: e3:27:65:4c:c0:53:e2:83:66:f7:25:13:b4:82:f4: f3:28:84:85:39:3e:10:44:7e:66:c9:73:4c:2e:b5: 31:f6:04:7f:9d:05:72:9a:52:89:9c:37:2c:35:65: 56:b9:eb:df:0f:fc:8f:b6:b7:66:73:e3:3f:59:f8: fd:40:cd:0c:97:13:cb:79:fb:42:9c:47:11:24:97: cd:fe:99:70:be:c8:1c:16:29:11:34:02:77:65:9b: 1c:5a:88:2a:1a:b1:e8:1d:21:66:72:f9:42:6d:e5: 72:48:01:82:32:0d:ca:a4:24:b9:14:fc:6b:52:5b: ea:62:a9:11:95:a2:57:b3:e1:ff:35:32:a6:50:59: 16:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B8:5C:98:D3:6A:92:AE:78:F8:DE:E0:0B:7D:DE:0F:14:40:2D:D6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:b00::/40 Signature Algorithm: sha256WithRSAEncryption 52:dc:d5:da:09:7a:ab:6e:9b:bf:bb:04:7a:5e:30:aa:7f:ae: 54:57:dc:5e:c3:ac:19:ce:63:f4:8a:33:5b:87:03:a1:21:b2: 82:f0:68:e1:5e:c0:71:bd:60:f6:d2:45:9e:2d:82:7a:24:1b: 4b:50:02:2d:9d:d4:55:13:ec:ba:70:02:c7:4c:55:96:fc:64: 44:d2:ec:8f:ec:34:88:14:b0:72:3b:24:1f:4a:3b:ee:83:53: c3:dd:9d:b7:2b:aa:5e:88:39:05:58:c1:d3:ef:7d:94:65:fa: cf:11:a8:5e:48:3f:14:ae:01:ac:2d:6f:77:2b:e0:3c:d1:ac: 28:0a:c1:fe:7a:64:94:62:38:13:fb:9e:17:f7:85:9d:3e:59: 15:06:06:c0:fe:12:7b:31:f9:15:03:19:64:66:71:d1:dc:05: 55:ee:53:bb:3b:f8:23:1e:ec:6b:3b:da:34:70:95:c6:8f:7a: 30:8d:15:36:47:f1:6c:33:a5:7d:a1:26:09:c7:68:5e:ea:cf: 02:e1:f6:53:77:49:40:b2:8a:a5:b7:11:75:42:35:c4:12:5d: a2:23:6c:7d:66:25:3d:c4:56:7f:40:1d:30:2b:f6:dd:a3:b2: 21:cf:6d:23:d8:9e:17:54:fa:e1:dc:0d:1f:4b:89:2d:db:72: b7:ce:93:84 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNrPUXlh0ZyGDmpthotFKzz8ypLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkxMDQ0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2MxNDYzYjIwZDkyM2ZkZTcxZmZiMTYwODUzNDMzYjZj OTAwN2E0N2M5OTA2ZjkyOWY2YWVkODk3MThhNDIyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeQcvLPStB9zhWQvASxxAezK8i6/UML5nsNHOXAoJLALkh wPY3HycDOWYtIAFEaXUCgAC7T9qlCRPIsqVsXKOelNZxkzAH2QK+RtS+5KR7XI8g a37B3Ain3xN9fm/qZHcrUyhAOMhTjCwgpwaZq85B/Fg29UU4yOMnZUzAU+KDZvcl E7SC9PMohIU5PhBEfmbJc0wutTH2BH+dBXKaUomcNyw1ZVa5698P/I+2t2Zz4z9Z +P1AzQyXE8t5+0KcRxEkl83+mXC+yBwWKRE0AndlmxxaiCoasegdIWZy+UJt5XJI AYIyDcqkJLkU/GtSW+piqRGVolez4f81MqZQWRZDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsrhcmNNqkq54+N7gC33eDxRALdYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2RhNTEyMTk3LWQ0NDMtNDYwMy1iODBmLTJhODczMDliMGI4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBZzACzANBgkqhkiG9w0BAQsFAAOCAQEAUtzV2gl6q26bv7sEel4wqn+u VFfcXsOsGc5j9IozW4cDoSGygvBo4V7Acb1g9tJFni2CeiQbS1ACLZ3UVRPsunAC x0xVlvxkRNLsj+w0iBSwcjskH0o77oNTw92dtyuqXog5BVjB0+99lGX6zxGoXkg/ FK4BrC1vdyvgPNGsKArB/npklGI4E/ueF/eFnT5ZFQYGwP4SezH5FQMZZGZx0dwF Ve5Tuzv4Ix7sazvaNHCVxo96MI0VNkfxbDOlfaEmCcdoXurPAuH2U3dJQLKKpbcR dUI1xBJdoiNsfWYlPcRWf0AdMCv23aOyIc9tI9ieF1T64dwNH0uJLdtyt86ThA== -----END CERTIFICATE-----Generated at Sun Jun 29 09:03:36 2025 by rpki-client