$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa File: fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa (raw, json) Hash identifier: IAhF5cYsBZRKzL+qsBBLKOocFBV5MdsllKf6/TqnzXw= Subject key identifier: 86:DA:50:96:33:67:71:AE:01:E3:8E:78:2E:D7:A6:0E:A2:0B:1F:BC Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 16F3D755C3D84ED2CABC931A6702A25AD86D30F6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa Signing time: Mon 16 Jun 2025 19:00:47 +0000 ROA not before: Mon 16 Jun 2025 19:00:47 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:30d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f3:d7:55:c3:d8:4e:d2:ca:bc:93:1a:67:02:a2:5a:d8:6d:30:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:00:47 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=93517bc43463184ba040b334f9236de0c2679f9f2106f510f0dc2dc5795fef40, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:23:a7:c1:1f:62:3e:9e:53:a6:05:ff:b6: 90:cf:17:cd:09:ec:b4:49:87:1d:ca:42:42:be:9d: 4c:46:fa:a6:93:8c:ab:8b:bf:85:d3:ad:11:55:61: c9:8f:87:42:3d:85:b7:52:d5:b4:be:19:6b:69:ea: b0:5b:46:a8:26:9f:6f:e9:a0:36:6b:97:65:4d:35: b9:56:46:35:17:33:3c:70:bf:48:02:2c:5e:bb:b4: 54:06:7c:24:ec:ad:96:da:0b:18:11:43:e7:c0:84: 81:9a:39:58:61:31:b2:d9:9f:76:ff:6f:9d:6a:04: 28:a4:d3:5b:ac:fa:b3:56:ec:6f:e9:38:c8:3c:3d: 09:fb:4c:c9:1b:23:4c:88:d0:45:2c:1b:63:13:e1: ac:00:ea:da:09:6b:3a:a5:75:8d:1b:85:1d:0f:11: 24:97:05:af:b0:38:a0:d8:b9:04:84:55:53:9a:6f: aa:26:b4:de:86:71:69:fa:c5:d2:8e:a7:18:1a:1d: 17:62:a6:df:d1:87:28:7f:a2:9a:f9:57:82:55:a1: 1d:c4:fc:ea:b3:41:84:b0:11:b0:12:dd:23:48:06: 15:fb:18:38:dc:cb:c6:3e:38:b9:ac:a3:a3:1c:d4: ac:b4:b7:da:25:2b:35:4f:bd:a5:4a:42:47:5e:b9: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DA:50:96:33:67:71:AE:01:E3:8E:78:2E:D7:A6:0E:A2:0B:1F:BC X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30d::/48 Signature Algorithm: sha256WithRSAEncryption 6a:66:f5:72:89:a8:87:5d:74:d6:4d:c1:c7:61:f4:f3:c6:38: 8d:ee:e7:c8:03:50:ce:e8:3b:b0:46:6e:82:61:98:22:97:5b: cc:e0:73:69:0c:29:f0:2a:26:59:3b:ff:4c:ba:25:62:33:2d: 5c:d2:f0:06:a7:f1:ac:65:36:c6:2c:cc:86:d7:a9:ac:8f:f7: f9:59:02:20:b0:9c:c3:70:64:b1:ff:4b:af:3f:63:d4:c3:d5: 47:cf:58:0d:d2:3c:42:4e:34:38:dc:cb:95:fe:0c:8d:d2:df: 11:43:d0:1b:eb:87:5a:f8:e3:69:fd:60:f2:75:38:ab:07:82: 56:49:7f:3b:e4:e1:7e:89:75:16:70:5c:a5:4c:85:33:98:d8: 01:9b:67:ac:bd:10:aa:9c:73:a3:15:1a:5b:03:42:fb:cb:90: ed:a6:9b:77:9b:f1:7e:48:b3:4b:c4:ac:ff:49:d8:76:9c:5a: 60:64:03:2a:a7:2e:bc:1d:de:0d:6d:e8:43:09:3f:c2:6a:0f: ed:b9:6a:97:af:52:3d:a3:0b:40:61:c0:08:56:f9:39:fc:50: 44:1f:b8:bc:ef:f1:85:2f:65:26:5a:17:97:ec:39:1c:97:1c: 1e:3a:69:40:62:78:fc:a2:a7:79:e9:e5:58:20:b5:fe:58:09: d7:7d:86:a2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFvPXVcPYTtLKvJMaZwKiWthtMPYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkwMDQ3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzUxN2JjNDM0NjMxODRiYTA0MGIzMzRmOTIzNmRlMGMy Njc5ZjlmMjEwNmY1MTBmMGRjMmRjNTc5NWZlZjQwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrfSOnwR9iPp5TpgX/tpDPF80J7LRJhx3KQkK+nUxG+qaT jKuLv4XTrRFVYcmPh0I9hbdS1bS+GWtp6rBbRqgmn2/poDZrl2VNNblWRjUXMzxw v0gCLF67tFQGfCTsrZbaCxgRQ+fAhIGaOVhhMbLZn3b/b51qBCik01us+rNW7G/p OMg8PQn7TMkbI0yI0EUsG2MT4awA6toJazqldY0bhR0PESSXBa+wOKDYuQSEVVOa b6omtN6GcWn6xdKOpxgaHRdipt/Rhyh/opr5V4JVoR3E/OqzQYSwEbAS3SNIBhX7 GDjcy8Y+OLmso6Mc1Ky0t9olKzVPvaVKQkdeuSePAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhtpQljNnca4B4454LtemDqILH7wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2ZlODkyZDJmLTc1YmEtNDA4Ni04YTU2LTVmZTI0ZGU4ZDljNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAw0wDQYJKoZIhvcNAQELBQADggEBAGpm9XKJqIdddNZNwcdh9PPG OI3u58gDUM7oO7BGboJhmCKXW8zgc2kMKfAqJlk7/0y6JWIzLVzS8Aan8axlNsYs zIbXqayP9/lZAiCwnMNwZLH/S68/Y9TD1UfPWA3SPEJONDjcy5X+DI3S3xFD0Bvr h1r442n9YPJ1OKsHglZJfzvk4X6JdRZwXKVMhTOY2AGbZ6y9EKqcc6MVGlsDQvvL kO2mm3eb8X5Is0vErP9J2HacWmBkAyqnLrwd3g1t6EMJP8JqD+25apevUj2jC0Bh wAhW+Tn8UEQfuLzv8YUvZSZaF5fsORyXHB46aUBiePyip3np5Vggtf5YCdd9hqI= -----END CERTIFICATE-----Generated at Sun Jun 29 04:38:06 2025 by rpki-client