$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa File: ef61cc60-17a6-4a87-9035-322b2907a5e5.roa (raw, json) Hash identifier: /9W1HYxzzIMnqD0H3izF0IQclZjWRhaUbEyAc8pfUzE= Subject key identifier: F1:4F:32:37:60:D4:ED:8B:72:F6:86:12:CF:13:29:BD:50:D2:A4:15 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: D5F617A94AE177D42CC8EAAAD8F06CD773DC37 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa Signing time: Wed 25 Jun 2025 00:40:05 +0000 ROA not before: Wed 25 Jun 2025 00:40:05 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d5:f6:17:a9:4a:e1:77:d4:2c:c8:ea:aa:d8:f0:6c:d7:73:dc:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:40:05 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=44c89a470afe07b833a0e816c8cdd616971f08dd6c78b2fe5612371c8aecf73b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:38:56:dc:73:83:e1:6f:80:da:da:a5:80: 44:31:4f:e6:10:7b:a4:b0:5d:75:77:39:df:cb:45: 6f:a8:ab:5f:80:35:83:6a:2e:82:6b:69:47:a5:e3: 79:bb:d9:3b:df:e7:b3:bb:f0:7e:c9:43:9e:b0:ff: 65:f4:57:5f:89:99:d4:76:6d:97:07:a4:3b:d4:c7: 5e:9b:31:85:59:b2:de:0f:db:36:84:d9:87:16:f7: 50:1c:b8:3b:0e:ee:81:51:2e:ff:6d:e2:88:de:c2: 53:8b:43:d9:3e:ff:1a:22:4f:18:cf:22:17:25:36: f8:15:18:c2:9e:d3:9a:09:0d:d8:be:b4:f4:4b:bc: 32:18:38:91:88:20:87:d5:78:d8:b6:02:8a:ca:9f: c4:7d:88:e0:bf:f1:5f:9c:fb:4f:02:40:fd:aa:66: 9b:f9:34:69:c4:cf:a3:13:4b:c7:ad:83:63:9e:91: 90:de:1e:99:a3:2d:c7:e6:77:94:d1:a7:ff:98:cf: c5:1a:17:62:1a:78:a1:a5:f5:a4:2b:bd:91:7a:41: 17:dc:92:c2:38:de:47:90:4c:48:e8:9b:4c:78:22: 46:77:25:af:5b:b3:81:fc:d6:e4:0e:8a:29:f0:5f: 29:a4:ad:18:fd:22:11:05:83:c8:82:03:bc:85:84: cc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4F:32:37:60:D4:ED:8B:72:F6:86:12:CF:13:29:BD:50:D2:A4:15 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1c::/48 Signature Algorithm: sha256WithRSAEncryption 3f:6f:78:20:9e:93:4c:c9:7a:93:92:dc:40:a7:5a:f4:17:c0: 28:ff:7f:76:b3:5e:e9:b0:c2:b4:d7:af:82:01:0e:c1:63:fb: 7e:38:33:c2:57:a2:ea:16:e0:20:f8:c8:49:23:a6:06:b8:cb: 28:9d:e9:1a:e9:08:d5:c5:71:c2:44:16:24:56:89:d4:73:24: 69:06:ce:91:78:73:09:89:c5:38:48:41:97:26:b2:ea:51:d1: dd:a4:d7:fc:c5:93:34:98:b1:5c:f3:4a:f5:c1:15:d6:28:b4: 25:05:bf:71:d2:ca:54:55:42:0f:73:9e:6e:89:b2:72:e2:95: 4a:69:db:ef:30:45:84:65:4c:7d:07:06:2d:37:02:01:ce:e7: dc:8e:f2:8f:6f:1d:9e:5b:1e:58:80:ad:a7:b1:9b:50:e3:f5: 00:85:da:0e:8f:8a:6d:33:fe:90:d4:25:a4:ae:e4:b2:71:0f: 1a:c7:61:d2:33:07:08:29:93:c6:55:92:36:4e:90:66:d8:00: 84:b8:6c:80:5f:cc:5a:52:c6:cc:1f:b3:db:43:15:10:32:57: 62:eb:56:53:8e:7c:1b:77:93:5a:04:15:54:c5:59:68:7f:69: 2c:fd:24:5d:85:35:4b:6d:86:21:c4:04:76:e2:ab:8d:8d:16: 87:b5:ae:f1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUANX2F6lK4XfULMjqqtjwbNdz3DcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDA0MDA1WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGM4OWE0NzBhZmUwN2I4MzNhMGU4MTZjOGNkZDYxNjk3 MWYwOGRkNmM3OGIyZmU1NjEyMzcxYzhhZWNmNzNiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6GDhW3HOD4W+A2tqlgEQxT+YQe6SwXXV3Od/LRW+oq1+A NYNqLoJraUel43m72Tvf57O78H7JQ56w/2X0V1+JmdR2bZcHpDvUx16bMYVZst4P 2zaE2YcW91AcuDsO7oFRLv9t4ojewlOLQ9k+/xoiTxjPIhclNvgVGMKe05oJDdi+ tPRLvDIYOJGIIIfVeNi2AorKn8R9iOC/8V+c+08CQP2qZpv5NGnEz6MTS8etg2Oe kZDeHpmjLcfmd5TRp/+Yz8UaF2IaeKGl9aQrvZF6QRfcksI43keQTEjom0x4IkZ3 Ja9bs4H81uQOiinwXymkrRj9IhEFg8iCA7yFhMy1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8U8yN2DU7Yty9oYSzxMpvVDSpBUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2VmNjFjYzYwLTE3YTYtNGE4Ny05MDM1LTMyMmIyOTA3YTVlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBwwDQYJKoZIhvcNAQELBQADggEBAD9veCCek0zJepOS3ECnWvQX wCj/f3azXumwwrTXr4IBDsFj+344M8JXouoW4CD4yEkjpga4yyid6RrpCNXFccJE FiRWidRzJGkGzpF4cwmJxThIQZcmsupR0d2k1/zFkzSYsVzzSvXBFdYotCUFv3HS ylRVQg9znm6JsnLilUpp2+8wRYRlTH0HBi03AgHO59yO8o9vHZ5bHliAraexm1Dj 9QCF2g6Pim0z/pDUJaSu5LJxDxrHYdIzBwgpk8ZVkjZOkGbYAIS4bIBfzFpSxswf s9tDFRAyV2LrVlOOfBt3k1oEFVTFWWh/aSz9JF2FNUtthiHEBHbiq42NFoe1rvE= -----END CERTIFICATE-----Generated at Mon Jun 30 18:12:27 2025 by rpki-client