$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa File: f67723c2-64ad-4374-9b2b-3c1633b90448.roa (raw, json) Hash identifier: 8zXlFploVRWt/Ga5RtCX/0ElhCAMsSGarhMDsCNFlE0= Subject key identifier: DC:38:2E:88:C0:24:30:7A:19:97:89:B7:90:F2:AD:BF:51:AD:3B:A5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 50443227D3D45A2D443EF2C62720490DBB383A62 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa Signing time: Mon 16 Jun 2025 19:00:26 +0000 ROA not before: Mon 16 Jun 2025 19:00:26 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:39c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:44:32:27:d3:d4:5a:2d:44:3e:f2:c6:27:20:49:0d:bb:38:3a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:00:26 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=32165b68d1d61ceedd7da1fd2a271bc2814b100c64e580e56c815353b235462b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:55:5f:cd:78:3f:dd:1f:c6:97:c5:e5:af: 93:11:46:2d:9d:04:f6:95:b1:d6:c1:74:cb:b4:b3: 36:99:89:1e:d8:c5:94:41:26:0c:b7:e0:50:9e:05: 9d:96:5c:6c:a5:d1:64:43:45:96:bb:23:cd:88:1f: a9:80:82:bd:f7:b4:e4:25:95:f6:40:b0:4e:a0:95: 1e:a1:9e:dc:7d:36:22:e2:f6:ea:82:d3:15:b2:b2: 90:00:c4:78:76:52:12:44:63:05:af:ae:60:2d:bf: 53:c1:fe:db:b6:9e:fa:3c:d8:0c:78:02:aa:8d:24: ac:0c:02:a4:19:21:73:e0:e1:ac:97:f2:2e:85:09: 9c:3d:1f:8d:74:d0:b5:11:81:ec:83:73:d8:37:3b: 30:0f:f8:28:73:a3:bf:1b:0a:b5:d9:93:ec:f1:5c: 25:eb:32:ec:a2:1d:1f:bd:d0:33:19:b4:3c:3f:83: c4:0f:39:d3:38:10:54:cc:a1:cd:fe:34:a3:6b:7f: 41:0b:a5:6b:bb:c0:3c:86:43:44:45:44:1f:68:37: 4a:90:dd:3d:41:57:dc:1a:e8:e8:0b:6d:31:5c:90: 2f:64:13:af:e4:89:9c:94:c7:21:c5:f7:76:18:5e: e9:9f:aa:73:22:5d:5d:94:30:ce:46:32:c7:69:e2: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:38:2E:88:C0:24:30:7A:19:97:89:B7:90:F2:AD:BF:51:AD:3B:A5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:39c::/48 Signature Algorithm: sha256WithRSAEncryption 55:f8:41:ee:ab:2a:9f:b4:dc:ea:b1:0f:66:2e:04:ed:3e:bb: fe:07:c9:72:9a:7b:d0:a2:da:1c:dc:45:ea:1c:2b:50:7d:3d: b2:3d:e7:13:11:f4:04:a8:71:f9:08:cc:60:c2:64:cb:8e:4f: de:4e:d6:c1:0e:83:49:3f:3c:f7:56:7d:67:f3:fe:80:64:15: 7e:ce:41:96:47:d2:65:7f:bd:1e:2f:78:b1:92:13:9d:21:e5: c8:50:8d:01:df:fc:42:82:7b:90:ba:8c:a8:e1:02:57:c1:69: 40:5e:1a:08:74:8d:c5:9c:32:5a:ec:7b:b6:f9:8c:ce:49:68: 0a:63:b5:86:d9:09:e0:25:7f:4c:3a:37:45:9c:af:ca:34:c3: 14:48:ab:3a:08:12:7e:79:bf:b8:fb:24:d2:68:4e:ca:16:66: 5a:72:d1:6c:3e:e0:c9:0d:15:65:25:29:50:d6:9b:c9:d3:0d: 8b:88:21:28:68:86:27:e3:06:4c:f9:20:e7:7a:9a:28:fe:6c: a8:4d:fb:ef:41:02:aa:11:84:20:43:c3:d2:9d:47:6f:de:9e: 8e:57:fc:27:83:47:03:43:ba:59:4b:8e:9b:82:0e:b7:6a:2c: 30:f5:bf:82:86:0f:b7:17:d6:01:cc:e1:ea:d1:83:0c:19:39: c5:04:56:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUEQyJ9PUWi1EPvLGJyBJDbs4OmIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkwMDI2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjE2NWI2OGQxZDYxY2VlZGQ3ZGExZmQyYTI3MWJjMjgx NGIxMDBjNjRlNTgwZTU2YzgxNTM1M2IyMzU0NjJiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqt1VfzXg/3R/Gl8Xlr5MRRi2dBPaVsdbBdMu0szaZiR7Y xZRBJgy34FCeBZ2WXGyl0WRDRZa7I82IH6mAgr33tOQllfZAsE6glR6hntx9NiLi 9uqC0xWyspAAxHh2UhJEYwWvrmAtv1PB/tu2nvo82Ax4AqqNJKwMAqQZIXPg4ayX 8i6FCZw9H4100LURgeyDc9g3OzAP+Chzo78bCrXZk+zxXCXrMuyiHR+90DMZtDw/ g8QPOdM4EFTMoc3+NKNrf0ELpWu7wDyGQ0RFRB9oN0qQ3T1BV9wa6OgLbTFckC9k E6/kiZyUxyHF93YYXumfqnMiXV2UMM5GMsdp4qXDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3DguiMAkMHoZl4m3kPKtv1GtO6UwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y2NzcyM2MyLTY0YWQtNDM3NC05YjJiLTNjMTYzM2I5MDQ0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5wwDQYJKoZIhvcNAQELBQADggEBAFX4Qe6rKp+03OqxD2YuBO0+ u/4HyXKae9Ci2hzcReocK1B9PbI95xMR9ASocfkIzGDCZMuOT95O1sEOg0k/PPdW fWfz/oBkFX7OQZZH0mV/vR4veLGSE50h5chQjQHf/EKCe5C6jKjhAlfBaUBeGgh0 jcWcMlrse7b5jM5JaApjtYbZCeAlf0w6N0Wcr8o0wxRIqzoIEn55v7j7JNJoTsoW Zlpy0Ww+4MkNFWUlKVDWm8nTDYuIIShohifjBkz5IOd6mij+bKhN++9BAqoRhCBD w9KdR2/eno5X/CeDRwNDullLjpuCDrdqLDD1v4KGD7cX1gHM4erRgwwZOcUEVvU= -----END CERTIFICATE-----Generated at Sun Jun 29 20:27:49 2025 by rpki-client