$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa File: 2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa (raw, json) Hash identifier: O9PCbawysE29d2PAwjtJUCiDg9S/0pvkwoWkBlV3duc= Subject key identifier: 65:C6:80:37:FB:B7:9A:6D:62:12:70:90:2C:99:6D:27:A9:89:49:5A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6D30680B8DEA47E5B5608800531D1E055653E8BF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa Signing time: Mon 21 Jul 2025 16:21:11 +0000 ROA not before: Mon 21 Jul 2025 16:21:11 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:30:68:0b:8d:ea:47:e5:b5:60:88:00:53:1d:1e:05:56:53:e8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:21:11 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=1774b99303ad051a024609ede7771afb78517798aefa914ad22b3819e92537a6, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:ba:ce:3a:12:96:f2:3d:a7:07:b4:11:3f: e9:b1:7b:f5:23:71:47:3c:86:0d:ff:8e:57:5e:2e: 4f:47:7a:86:62:c4:1c:0d:e3:59:1c:0e:73:df:ba: 12:b8:1e:fb:7a:b8:7d:d7:dd:6b:c6:0e:3d:f4:a8: 32:23:b4:6a:31:8d:a3:4b:d8:4b:3a:9b:aa:f6:eb: 64:68:73:84:c1:90:21:3d:6f:6e:9c:c6:27:d4:2c: 3b:92:bb:e6:68:17:c0:40:3b:e1:dc:f9:f9:d3:aa: 04:a5:4c:47:1e:de:ef:5d:81:cd:c8:ae:94:6d:54: ba:e7:48:31:e9:23:5c:00:f1:36:10:7d:be:c5:e5: 0f:31:6a:6f:67:2c:be:83:cf:d1:a5:85:7f:ee:58: 23:4e:de:19:ed:d8:bf:55:a0:17:f7:62:d3:f1:3d: 07:2e:fb:6c:9f:0d:ad:18:a8:30:da:41:c5:1d:ee: f2:67:8d:ee:9e:cd:7b:5e:a9:b7:bf:0a:ce:41:7e: 3c:54:c1:bb:d6:c0:51:27:eb:f0:43:be:5c:da:83: e5:d4:e9:6b:bb:f2:e3:1a:7e:eb:ce:cd:38:13:61: cf:16:7f:b8:8d:a3:62:b1:f6:cd:4e:65:c8:ae:0e: 52:f4:f3:f9:50:c7:4c:06:64:b4:ac:5a:f2:78:a0: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C6:80:37:FB:B7:9A:6D:62:12:70:90:2C:99:6D:27:A9:89:49:5A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c05::/48 Signature Algorithm: sha256WithRSAEncryption 75:b3:f9:d5:ae:20:8d:b7:66:93:9b:6f:d6:28:be:54:36:97: 67:3c:70:0c:6d:cf:fe:6d:65:39:d2:d3:b8:3b:65:b3:65:0b: 3b:48:d0:bc:3a:0d:7e:25:21:fa:12:9c:97:a7:60:6e:9d:9a: 6f:c2:96:78:3a:68:8d:85:f8:7f:f9:58:b0:fa:0f:61:f2:a9: 31:c3:34:71:6f:4e:99:e2:5c:76:97:33:aa:85:b8:7e:8f:f2: 54:dc:11:65:80:1b:07:d5:34:d1:25:03:56:01:5c:a4:fe:4c: 1c:a7:2f:ab:be:ea:ac:d6:18:ea:27:1e:12:71:b6:4f:63:0b: 9c:b0:26:71:2b:80:62:71:d2:60:6b:ee:dd:d8:de:9b:c0:f3: 46:59:4d:88:20:6e:e0:d9:0a:60:72:a7:79:f9:4c:16:38:79: d5:0c:6d:45:38:5b:4c:2f:cd:83:f1:46:7b:70:65:1a:ed:52: 9f:4a:78:dd:dd:a2:ad:b5:0e:65:24:38:c1:32:fd:15:0e:b6: 60:da:c0:5b:17:96:4b:a1:c9:7f:8d:e5:e1:32:c4:50:04:49: 6e:ed:b7:8e:09:af:20:31:d4:e2:57:b4:fd:81:83:87:f7:b7: b3:8d:ee:74:05:ad:b8:8b:10:fd:89:35:cb:c8:1c:64:91:aa: 8d:20:5b:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbTBoC43qR+W1YIgAUx0eBVZT6L8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYyMTExWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzc0Yjk5MzAzYWQwNTFhMDI0NjA5ZWRlNzc3MWFmYjc4 NTE3Nzk4YWVmYTkxNGFkMjJiMzgxOWU5MjUzN2E2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaOLrOOhKW8j2nB7QRP+mxe/UjcUc8hg3/jldeLk9HeoZi xBwN41kcDnPfuhK4Hvt6uH3X3WvGDj30qDIjtGoxjaNL2Es6m6r262Roc4TBkCE9 b26cxifULDuSu+ZoF8BAO+Hc+fnTqgSlTEce3u9dgc3IrpRtVLrnSDHpI1wA8TYQ fb7F5Q8xam9nLL6Dz9GlhX/uWCNO3hnt2L9VoBf3YtPxPQcu+2yfDa0YqDDaQcUd 7vJnje6ezXteqbe/Cs5BfjxUwbvWwFEn6/BDvlzag+XU6Wu78uMafuvOzTgTYc8W f7iNo2Kx9s1OZciuDlL08/lQx0wGZLSsWvJ4oPMFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZcaAN/u3mm1iEnCQLJltJ6mJSVowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI2NzBiNGFkLWQ1ZmEtNGZmMS05OTZmLTNjMGFkNDA0NmI4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAUwDQYJKoZIhvcNAQELBQADggEBAHWz+dWuII23ZpObb9YovlQ2 l2c8cAxtz/5tZTnS07g7ZbNlCztI0Lw6DX4lIfoSnJenYG6dmm/Clng6aI2F+H/5 WLD6D2HyqTHDNHFvTpniXHaXM6qFuH6P8lTcEWWAGwfVNNElA1YBXKT+TBynL6u+ 6qzWGOonHhJxtk9jC5ywJnErgGJx0mBr7t3Y3pvA80ZZTYggbuDZCmByp3n5TBY4 edUMbUU4W0wvzYPxRntwZRrtUp9KeN3doq21DmUkOMEy/RUOtmDawFsXlkuhyX+N 5eEyxFAESW7tt44JryAx1OJXtP2Bg4f3t7ON7nQFrbiLEP2JNcvIHGSRqo0gW8o= -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:49 2025 by rpki-client