$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f9cccb07-9082-4819-889a-262af321108b.roa File: f9cccb07-9082-4819-889a-262af321108b.roa (raw, json) Hash identifier: g8odGiymNBXAsgnetPmoQVFjEDlpZfuVW11kuCxVdBs= Subject key identifier: 90:2A:F5:6B:40:78:AB:1A:87:99:C6:C7:68:58:40:F9:45:98:18:7C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1667E91CD9ED4F0E6309050EA0B8218D099FFD5C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f9cccb07-9082-4819-889a-262af321108b.roa Signing time: Tue 17 Jun 2025 00:30:26 +0000 ROA not before: Tue 17 Jun 2025 00:30:26 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:54b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:67:e9:1c:d9:ed:4f:0e:63:09:05:0e:a0:b8:21:8d:09:9f:fd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 17 00:30:26 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=6313925c3f2089cbe12e4e25dde02f292d45a6201f684c2446239c2c20a4ddb0, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7c:8e:7d:ee:e1:55:45:0f:a9:12:6e:93:60: ac:1c:87:76:a5:31:74:8d:b6:5b:4a:31:65:7a:ce: 6e:a9:70:60:f8:14:09:db:d2:58:6a:b0:44:c0:3e: 3d:e7:86:42:c8:28:44:f8:1a:f1:0d:60:e3:16:1d: ad:dc:cc:66:ba:b3:0f:60:90:f8:4e:04:26:2d:40: 07:85:25:a1:27:04:2e:35:3d:d9:88:50:01:e1:e7: c2:f7:37:84:df:25:48:96:dd:2f:3d:1f:53:da:58: 2f:89:1e:bf:b9:9e:da:aa:84:65:73:28:7a:0e:b9: fe:d1:e5:64:91:6a:9a:ec:ed:d1:09:f6:40:ae:89: b1:ce:97:cc:b2:62:29:1c:6f:5c:32:bd:52:a0:42: 02:9e:90:f9:aa:7a:95:13:4b:e5:c3:32:20:f3:97: c5:1d:20:80:06:0a:89:5b:d6:45:a2:d0:fb:8c:8d: e3:bb:55:98:79:05:13:08:bc:76:c3:d5:e0:cf:ff: b2:ea:2d:69:de:5c:e7:de:2a:34:69:95:04:e7:15: 50:63:45:be:50:68:98:01:a1:88:4d:e8:5d:49:00: 61:a9:e7:5e:ae:53:fe:40:46:84:a8:ec:62:f2:ec: fa:a0:6f:36:c4:01:6e:25:79:1c:c5:df:74:5f:e9: 79:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2A:F5:6B:40:78:AB:1A:87:99:C6:C7:68:58:40:F9:45:98:18:7C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f9cccb07-9082-4819-889a-262af321108b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54b::/48 Signature Algorithm: sha256WithRSAEncryption 4b:64:b3:4f:57:c4:aa:8d:40:56:fe:46:d8:53:6e:c0:0c:f0: ea:51:f3:6b:79:5b:73:e4:8a:1a:2c:7f:82:1e:23:59:fa:55: c4:60:bb:e5:c4:86:8d:81:6f:a5:49:0b:d8:a4:81:74:ce:44: bd:42:eb:7a:b1:2a:fc:49:72:fd:44:3d:2b:63:8f:d4:43:60: b2:b3:a2:f8:7a:57:af:ee:d3:30:ce:8b:ff:08:ce:d6:6b:bf: 72:f7:33:33:fa:76:d5:47:47:1f:c2:c4:64:83:63:3e:8e:65: 54:4d:98:95:17:b9:74:b4:15:00:27:1b:1c:fb:b0:87:fc:6f: e6:a4:f8:46:e4:4f:7e:48:76:ce:3a:3d:01:13:87:66:4c:4d: ee:db:16:57:c2:45:5c:a6:41:6b:8f:22:f8:b7:71:8d:40:5d: 2b:a2:37:32:fd:09:ba:2a:47:26:44:91:c7:0f:78:28:9e:22: 4d:20:6e:42:e5:ee:98:5c:75:7d:ae:7c:68:f0:fb:70:e1:66: 48:66:56:bc:d6:d7:d7:e5:85:0f:e0:20:bd:cb:2e:20:57:3d: b8:af:52:fd:8a:de:c0:d9:ec:f3:cd:0a:bc:f2:6c:6f:d6:9c: d3:3d:34:60:0e:ed:cf:b7:36:51:28:3d:09:b3:49:b5:31:52: 1a:5d:69:ee -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFmfpHNntTw5jCQUOoLghjQmf/VwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE3MDAzMDI2WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzEzOTI1YzNmMjA4OWNiZTEyZTRlMjVkZGUwMmYyOTJk NDVhNjIwMWY2ODRjMjQ0NjIzOWMyYzIwYTRkZGIwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbfI597uFVRQ+pEm6TYKwch3alMXSNtltKMWV6zm6pcGD4 FAnb0lhqsETAPj3nhkLIKET4GvENYOMWHa3czGa6sw9gkPhOBCYtQAeFJaEnBC41 PdmIUAHh58L3N4TfJUiW3S89H1PaWC+JHr+5ntqqhGVzKHoOuf7R5WSRaprs7dEJ 9kCuibHOl8yyYikcb1wyvVKgQgKekPmqepUTS+XDMiDzl8UdIIAGColb1kWi0PuM jeO7VZh5BRMIvHbD1eDP/7LqLWneXOfeKjRplQTnFVBjRb5QaJgBoYhN6F1JAGGp 516uU/5ARoSo7GLy7PqgbzbEAW4leRzF33Rf6Xk5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkCr1a0B4qxqHmcbHaFhA+UWYGHwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y5Y2NjYjA3LTkwODItNDgxOS04ODlhLTI2MmFmMzIxMTA4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUswDQYJKoZIhvcNAQELBQADggEBAEtks09XxKqNQFb+RthTbsAM 8OpR82t5W3Pkihosf4IeI1n6VcRgu+XEho2Bb6VJC9ikgXTORL1C63qxKvxJcv1E PStjj9RDYLKzovh6V6/u0zDOi/8IztZrv3L3MzP6dtVHRx/CxGSDYz6OZVRNmJUX uXS0FQAnGxz7sIf8b+ak+EbkT35Ids46PQETh2ZMTe7bFlfCRVymQWuPIvi3cY1A XSuiNzL9CboqRyZEkccPeCieIk0gbkLl7phcdX2ufGjw+3DhZkhmVrzW19flhQ/g IL3LLiBXPbivUv2K3sDZ7PPNCrzybG/WnNM9NGAO7c+3NlEoPQmzSbUxUhpdae4= -----END CERTIFICATE-----Generated at Sun Jun 29 08:41:54 2025 by rpki-client