$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa File: 23b3d13b-212f-42f5-9048-2b935e09c423.roa (raw, json) Hash identifier: ZWPTDGZFov9e92vYtwmefXT/yCvsbun3PskghPMBa8c= Subject key identifier: 88:4B:C6:1D:D9:87:50:54:26:D6:45:D0:EE:1B:91:4D:D0:45:CD:71 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6D431131311390FB92225CE4C4907E03D6C771D6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa Signing time: Fri 01 Aug 2025 18:06:22 +0000 ROA not before: Fri 01 Aug 2025 18:06:22 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:d70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:43:11:31:31:13:90:fb:92:22:5c:e4:c4:90:7e:03:d6:c7:71:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 1 18:06:22 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=f1e45f090f5654a525465e6eb2eb12ee58e171e0bdf4363c438d57a63118722e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:7d:fa:df:d5:7d:69:be:e0:36:86:d0:55: 9e:cd:ec:10:3d:4b:e7:dc:35:88:42:cb:de:3a:dc: 7f:3f:10:19:19:0e:2b:22:ce:09:2e:47:80:31:3e: 2a:d1:fc:c6:c7:f6:e3:a8:18:87:5b:f3:e4:76:9b: 3e:59:e9:3a:5d:9e:85:e3:fe:65:1a:3b:fe:bd:da: 15:50:ec:2d:16:25:00:d7:58:b9:f6:5c:45:59:ce: 48:bc:ba:dc:5b:f5:f9:11:0c:c4:30:12:36:1c:5b: 16:c6:b9:06:70:64:c6:e1:2c:3c:d8:2b:a3:73:16: 8e:f0:cc:03:a9:42:ae:f2:28:69:1b:dc:f7:81:81: 9d:17:68:fb:3e:c3:ce:9b:6a:01:07:b6:b5:8e:90: ed:8a:a3:e7:ab:83:c1:da:78:f8:36:cb:f2:0b:d8: 9e:4a:6a:9e:c0:7d:31:90:64:62:13:15:11:6e:74: 66:73:43:4c:e4:a4:54:c2:12:6e:77:75:0e:88:75: 38:10:0d:28:04:1b:1a:67:c3:d0:ea:19:aa:71:56: d3:ff:c6:4a:13:47:e4:cd:d6:42:6f:c4:c2:75:ae: e1:4e:ab:eb:84:7a:4c:32:29:f8:e2:3b:cf:ff:89: 31:c6:00:73:e6:3e:f8:f9:c8:05:61:5b:f0:d2:74: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4B:C6:1D:D9:87:50:54:26:D6:45:D0:EE:1B:91:4D:D0:45:CD:71 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:d70::/44 Signature Algorithm: sha256WithRSAEncryption 6d:a2:46:be:06:b6:94:73:f1:11:46:8d:83:63:33:6f:4d:57: ee:d9:9a:31:36:f3:80:5b:4b:73:f6:39:68:35:82:5c:e5:7b: e0:8e:c9:8c:84:57:21:34:29:8d:95:68:ae:58:d4:05:2f:48: 83:6c:40:ae:6f:e7:95:a7:61:59:62:d8:39:48:9a:73:8e:c5: 28:4a:09:cb:dc:cf:86:4f:8d:98:d7:f5:75:5f:2a:59:5f:8d: 0c:fd:b1:46:51:08:21:ae:4c:6a:56:c6:6a:c9:b1:78:3e:6e: ea:f1:e2:50:95:53:66:27:b1:17:89:f6:83:18:79:77:e6:e0: 84:25:00:18:22:76:ff:a5:4d:91:e4:be:ce:7c:96:d2:af:2c: 16:4e:ae:b9:e2:1f:89:5d:04:84:0e:99:e4:22:cb:86:36:84: 8f:47:75:79:8c:cf:b9:d0:43:47:61:92:e3:bf:1b:19:ff:dd: 83:75:70:ce:f5:7d:e6:05:eb:13:9e:23:6b:0a:65:ac:bd:42: 34:9e:3a:64:5a:9f:b9:0e:82:20:65:c2:2a:4e:d8:03:67:9c: 4a:5d:7a:af:1d:ad:9c:fd:06:1a:76:ed:9a:ec:d7:18:1b:7d: da:d9:93:39:61:b7:db:50:30:90:e8:66:82:24:3f:84:d1:54: 09:7b:03:95 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbUMRMTETkPuSIlzkxJB+A9bHcdYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODAxMTgwNjIyWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMWU0NWYwOTBmNTY1NGE1MjU0NjVlNmViMmViMTJlZTU4 ZTE3MWUwYmRmNDM2M2M0MzhkNTdhNjMxMTg3MjJlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfHn3639V9ab7gNobQVZ7N7BA9S+fcNYhCy9463H8/EBkZ DisizgkuR4AxPirR/MbH9uOoGIdb8+R2mz5Z6TpdnoXj/mUaO/692hVQ7C0WJQDX WLn2XEVZzki8utxb9fkRDMQwEjYcWxbGuQZwZMbhLDzYK6NzFo7wzAOpQq7yKGkb 3PeBgZ0XaPs+w86bagEHtrWOkO2Ko+erg8HaePg2y/IL2J5Kap7AfTGQZGITFRFu dGZzQ0zkpFTCEm53dQ6IdTgQDSgEGxpnw9DqGapxVtP/xkoTR+TN1kJvxMJ1ruFO q+uEekwyKfjiO8//iTHGAHPmPvj5yAVhW/DSdKCpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiEvGHdmHUFQm1kXQ7huRTdBFzXEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzIzYjNkMTNiLTIxMmYtNDJmNS05MDQ4LTJiOTM1ZTA5YzQyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADXAwDQYJKoZIhvcNAQELBQADggEBAG2iRr4GtpRz8RFGjYNjM29N V+7ZmjE284BbS3P2OWg1glzle+COyYyEVyE0KY2VaK5Y1AUvSINsQK5v55WnYVli 2DlImnOOxShKCcvcz4ZPjZjX9XVfKllfjQz9sUZRCCGuTGpWxmrJsXg+burx4lCV U2YnsReJ9oMYeXfm4IQlABgidv+lTZHkvs58ltKvLBZOrrniH4ldBIQOmeQiy4Y2 hI9HdXmMz7nQQ0dhkuO/Gxn/3YN1cM71feYF6xOeI2sKZay9QjSeOmRan7kOgiBl wipO2ANnnEpdeq8drZz9Bhp27Zrs1xgbfdrZkzlht9tQMJDoZoIkP4TRVAl7A5U= -----END CERTIFICATE-----Generated at Mon Aug 4 14:04:09 2025 by rpki-client