$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f3f1b6a3-5a54-4834-be55-4536f3908ca9.roa File: f3f1b6a3-5a54-4834-be55-4536f3908ca9.roa (raw, json) Hash identifier: a4ClN6pBsOKCMK29DzkCLRwR+4uM641S05oih3OCnRc= Subject key identifier: F8:63:D9:BC:45:2C:70:53:20:B9:98:BB:DA:CB:A2:CA:B5:AB:2F:56 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1FE30DCF9D39BEDAB11BC04455EC0507F7B8C539 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f3f1b6a3-5a54-4834-be55-4536f3908ca9.roa Signing time: Wed 25 Jun 2025 00:20:31 +0000 ROA not before: Wed 25 Jun 2025 00:20:31 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:648::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e3:0d:cf:9d:39:be:da:b1:1b:c0:44:55:ec:05:07:f7:b8:c5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:20:31 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=a8fa4bbef5a709a774b265cfe067a4d648d067a37e8503e160cd90ec84d195e8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:34:2c:12:c9:b0:20:e0:00:65:d2:78:6f: 48:3a:44:e8:39:47:79:9c:b8:53:71:62:3c:5c:24: a7:e8:70:08:f4:7a:23:8d:bd:44:09:e7:5d:39:30: e8:c1:cd:38:87:07:49:14:0d:c2:89:04:81:08:c9: 5a:2b:1c:ae:f1:18:24:be:24:34:66:94:a1:e1:22: 17:ff:32:53:b2:12:d3:41:37:35:36:83:a4:79:d5: a8:1f:47:b7:a6:8f:95:ab:1b:57:a9:05:45:0c:5f: 22:f5:98:1c:98:03:6a:24:86:5b:3b:c4:d3:89:5d: 00:fd:e7:5d:1c:af:7f:47:53:87:57:49:e9:1b:12: d0:b8:cd:7e:2d:e9:cd:2e:3c:ca:9d:6f:65:40:e1: 2e:07:b8:4a:91:08:b9:7a:dd:51:4c:7b:54:5f:8e: 64:ab:e3:a2:9a:6f:b1:f1:2f:61:8f:92:e2:a9:a0: aa:2c:3b:f0:b6:c5:fd:6b:1e:de:33:ed:10:b7:39: 61:39:06:44:82:18:e3:e6:38:c3:d5:32:52:8f:77: 85:f2:b8:f0:2f:1c:00:f1:39:34:0d:42:18:f9:e6: 48:6d:df:43:69:0f:d3:ec:fc:b0:8d:9c:46:13:9e: 6a:41:5b:e2:aa:30:e8:94:33:bd:d2:f1:25:b2:04: 3b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:63:D9:BC:45:2C:70:53:20:B9:98:BB:DA:CB:A2:CA:B5:AB:2F:56 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f3f1b6a3-5a54-4834-be55-4536f3908ca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:648::/48 Signature Algorithm: sha256WithRSAEncryption 76:a3:50:4f:b7:1b:a5:20:f6:4b:40:fe:1f:ed:1c:aa:74:d1: c8:c8:4d:66:69:8b:df:f0:b2:f4:3e:1d:d4:93:7d:51:76:52: 0f:57:e4:c3:ff:5b:28:fd:22:6b:44:9d:18:cd:cc:25:ca:95: 58:3e:1b:a1:ef:66:b7:18:f5:86:e3:5a:1c:17:30:ef:dd:21: 4b:f6:e5:e5:99:85:32:a9:0d:0a:04:1c:fc:58:f0:90:08:f8: 5f:79:5e:5b:bb:0d:a7:c9:95:dc:10:d1:bf:c5:06:98:56:ce: fa:c2:91:26:1a:f5:b8:cf:ae:b0:39:35:f6:f1:5c:60:b6:db: 99:4a:08:ba:95:e0:67:b5:60:5f:25:c0:e4:ff:72:3c:55:20: 15:0e:e5:ec:f8:51:e8:1d:57:1d:c6:44:76:c9:81:f1:19:15: b2:29:7b:5e:5b:87:39:82:86:f2:b8:39:42:29:35:af:c1:fa: 98:fd:1b:e7:c6:da:74:88:3d:13:cc:ae:2f:12:e4:09:b2:0b: ff:ef:b2:f0:55:2d:c5:ef:4e:cb:57:ad:da:1e:85:6a:aa:0c: 97:b0:6e:0d:26:61:d0:ff:d1:db:ad:6c:96:de:e2:38:b2:46: 55:ec:93:a9:2a:25:dc:7f:65:6b:86:f9:9b:f4:27:9d:39:92: 42:ea:8e:d7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUH+MNz505vtqxG8BEVewFB/e4xTkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDAyMDMxWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGZhNGJiZWY1YTcwOWE3NzRiMjY1Y2ZlMDY3YTRkNjQ4 ZDA2N2EzN2U4NTAzZTE2MGNkOTBlYzg0ZDE5NWU4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0NTQsEsmwIOAAZdJ4b0g6ROg5R3mcuFNxYjxcJKfocAj0 eiONvUQJ5105MOjBzTiHB0kUDcKJBIEIyVorHK7xGCS+JDRmlKHhIhf/MlOyEtNB NzU2g6R51agfR7emj5WrG1epBUUMXyL1mByYA2okhls7xNOJXQD9510cr39HU4dX SekbEtC4zX4t6c0uPMqdb2VA4S4HuEqRCLl63VFMe1RfjmSr46Kab7HxL2GPkuKp oKosO/C2xf1rHt4z7RC3OWE5BkSCGOPmOMPVMlKPd4XyuPAvHADxOTQNQhj55kht 30NpD9Ps/LCNnEYTnmpBW+KqMOiUM73S8SWyBDsLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+GPZvEUscFMguZi72suiyrWrL1YwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YzZjFiNmEzLTVhNTQtNDgzNC1iZTU1LTQ1MzZmMzkwOGNhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABkgwDQYJKoZIhvcNAQELBQADggEBAHajUE+3G6Ug9ktA/h/tHKp0 0cjITWZpi9/wsvQ+HdSTfVF2Ug9X5MP/Wyj9ImtEnRjNzCXKlVg+G6HvZrcY9Ybj WhwXMO/dIUv25eWZhTKpDQoEHPxY8JAI+F95Xlu7DafJldwQ0b/FBphWzvrCkSYa 9bjPrrA5NfbxXGC225lKCLqV4Ge1YF8lwOT/cjxVIBUO5ez4UegdVx3GRHbJgfEZ FbIpe15bhzmChvK4OUIpNa/B+pj9G+fG2nSIPRPMri8S5AmyC//vsvBVLcXvTstX rdoehWqqDJewbg0mYdD/0dutbJbe4jiyRlXsk6kqJdx/ZWuG+Zv0J505kkLqjtc= -----END CERTIFICATE-----Generated at Sun Jun 29 17:08:21 2025 by rpki-client