$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa File: f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa (raw, json) Hash identifier: 56zbn1V2WIypK7/8D9+KicyCLsI/Y9q7dLUgsKYdNno= Subject key identifier: 70:54:BC:A8:19:8D:D3:7A:2C:66:BD:29:9E:E9:69:00:E6:58:E2:B9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4F9C279F840FD0C05552529E0446A8EFD356523C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa Signing time: Mon 16 Jun 2025 19:10:47 +0000 ROA not before: Mon 16 Jun 2025 19:10:47 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9c:27:9f:84:0f:d0:c0:55:52:52:9e:04:46:a8:ef:d3:56:52:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:10:47 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=d86f6fe6ebbbe158bae6fc10fa4ee4fddad37f4fd5ff51b65812ce9c1eae37c3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c7:af:54:b0:dd:42:e8:96:f2:27:b3:df:e1: e5:b4:1e:8c:f8:a6:b3:11:66:68:f9:64:1e:cd:0e: 2f:46:b6:b7:11:3f:ec:f4:e9:4c:9c:31:ab:20:5b: d8:2b:92:6d:f9:3d:4a:49:6b:07:88:37:bb:01:bd: aa:25:fc:99:7f:ff:f6:12:2a:42:b2:0f:ad:bf:de: ee:a8:fe:c1:c0:df:5e:ea:03:1d:a8:41:d3:5c:f0: 32:ac:78:b7:3f:43:50:1f:e7:4a:af:e5:3a:c2:c9: 61:ac:4c:3e:36:2a:f6:b8:30:82:f8:e4:d4:ae:a9: 73:a8:08:5a:ca:dd:b3:12:3f:99:3c:8b:90:07:6a: 6a:b4:e9:3a:90:0d:52:69:60:14:51:35:4e:47:e8: 43:cc:20:7e:86:ec:ca:49:10:4a:a0:9f:37:6b:e5: 71:60:7c:e2:39:33:8f:dd:da:96:72:cd:23:75:8d: be:a5:bc:93:ee:e4:2b:bb:55:fa:5d:7d:f7:3a:20: 56:48:42:c6:ed:01:bb:61:57:d8:7e:69:08:55:31: 18:7c:2a:87:47:c1:29:eb:97:eb:03:ef:64:35:87: f6:57:7d:17:1e:fd:2d:81:f8:6a:e1:d4:43:30:71: 3a:81:3a:e9:b7:f6:87:de:89:49:13:8d:90:86:d5: fb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:54:BC:A8:19:8D:D3:7A:2C:66:BD:29:9E:E9:69:00:E6:58:E2:B9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c23::/48 Signature Algorithm: sha256WithRSAEncryption 55:97:48:da:7b:0c:7b:dc:4c:78:c0:97:cd:90:ff:15:2c:96: 0f:7b:ba:17:4a:4b:26:c7:3f:bd:06:9c:cf:37:5f:0f:d6:53: 98:74:5b:d7:10:5c:8a:e2:02:f7:75:5d:e3:50:fe:c8:1a:ab: ef:48:80:84:0f:12:85:03:23:5b:d6:ae:75:c9:29:b3:e5:13: 35:2f:10:a1:8e:5e:60:a4:a3:70:96:8f:90:c1:40:f8:46:a8: a7:30:f8:3b:30:28:84:d1:b5:73:4e:3e:38:f9:62:17:0a:5a: 2b:3e:25:51:9e:fd:a2:85:36:5f:48:de:a1:8c:67:91:51:35: 86:98:68:83:98:fa:6b:14:55:02:8b:65:e4:e2:69:5f:6f:85: d1:63:a9:9a:a0:bf:16:b5:4c:d8:d3:21:f7:35:aa:a1:15:2c: 9d:3d:46:2d:65:83:0f:e5:37:49:84:f9:c2:32:56:10:b7:ca: 7b:4a:13:31:42:b6:11:29:0d:fb:10:8b:b9:bb:a2:ea:c9:8c: 12:63:64:78:10:67:1f:83:65:33:c5:03:10:2c:32:e3:af:8f: d0:e5:4b:53:77:ca:50:87:7b:ef:03:6f:04:cc:c6:e0:e2:5b: 32:e6:db:42:40:95:18:39:3b:6e:55:ed:5e:30:0e:d4:1e:d2: a7:b8:4e:44 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT5wnn4QP0MBVUlKeBEao79NWUjwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkxMDQ3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkODZmNmZlNmViYmJlMTU4YmFlNmZjMTBmYTRlZTRmZGRh ZDM3ZjRmZDVmZjUxYjY1ODEyY2U5YzFlYWUzN2MzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIx69UsN1C6JbyJ7Pf4eW0Hoz4prMRZmj5ZB7NDi9GtrcR P+z06UycMasgW9grkm35PUpJaweIN7sBvaol/Jl///YSKkKyD62/3u6o/sHA317q Ax2oQdNc8DKseLc/Q1Af50qv5TrCyWGsTD42Kva4MIL45NSuqXOoCFrK3bMSP5k8 i5AHamq06TqQDVJpYBRRNU5H6EPMIH6G7MpJEEqgnzdr5XFgfOI5M4/d2pZyzSN1 jb6lvJPu5Cu7Vfpdffc6IFZIQsbtAbthV9h+aQhVMRh8KodHwSnrl+sD72Q1h/ZX fRce/S2B+Grh1EMwcTqBOum39ofeiUkTjZCG1fuhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcFS8qBmN03osZr0pnulpAOZY4rkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y0NWUyZmM0LWUxNzEtNGFhMy04NjJiLTRhZjU3MjA4YzllZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADCMwDQYJKoZIhvcNAQELBQADggEBAFWXSNp7DHvcTHjAl82Q/xUs lg97uhdKSybHP70GnM83Xw/WU5h0W9cQXIriAvd1XeNQ/sgaq+9IgIQPEoUDI1vW rnXJKbPlEzUvEKGOXmCko3CWj5DBQPhGqKcw+DswKITRtXNOPjj5YhcKWis+JVGe /aKFNl9I3qGMZ5FRNYaYaIOY+msUVQKLZeTiaV9vhdFjqZqgvxa1TNjTIfc1qqEV LJ09Ri1lgw/lN0mE+cIyVhC3yntKEzFCthEpDfsQi7m7ourJjBJjZHgQZx+DZTPF AxAsMuOvj9DlS1N3ylCHe+8DbwTMxuDiWzLm20JAlRg5O25V7V4wDtQe0qe4TkQ= -----END CERTIFICATE-----Generated at Sun Jun 29 10:27:26 2025 by rpki-client