$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa File: 2b35ab1a-8001-404a-9285-196aa943aa95.roa (raw, json) Hash identifier: qsd76gERBHyWPBsR9biHL5T8eFuJYbyW6yQBuZyuB9w= Subject key identifier: 5A:CD:E4:43:CA:1F:C9:C3:53:D0:A5:21:96:0A:B3:31:D5:AE:CA:D9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 50A7E047EE11E21B86D108539DA1579DD83AEDF5 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa Signing time: Fri 11 Jul 2025 18:10:45 +0000 ROA not before: Fri 11 Jul 2025 18:10:45 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:387::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a7:e0:47:ee:11:e2:1b:86:d1:08:53:9d:a1:57:9d:d8:3a:ed:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:10:45 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=947678b2d5686f4d9d4474f882e7aa1bb47822b960c96fef239804b44f833ba3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:e5:e5:f3:b9:2a:4b:bd:7a:6d:69:a5:23: 4c:67:ca:7c:17:4c:a8:8d:0a:bf:e2:c4:00:75:59: 7c:9d:f1:34:a9:1b:06:1e:d2:8c:13:92:f8:d3:36: 0f:59:d8:7e:30:93:36:88:29:69:52:07:fa:86:3d: 95:c5:f4:90:8a:eb:bd:61:11:c6:7e:e3:bf:df:f8: 0c:70:eb:64:1d:20:a3:88:5f:ae:d3:b9:b1:6f:a5: 84:e2:eb:58:fe:e9:cd:b4:da:7a:c3:5b:16:45:30: a5:67:59:ee:73:21:1b:df:e3:03:5a:e0:b2:92:eb: 4b:00:bb:87:7a:31:79:4e:ed:1b:13:90:28:d3:cb: 7d:7f:83:af:64:b7:37:2f:e9:b5:04:2f:d2:bd:cb: b4:0a:bd:19:0d:78:57:57:87:31:3b:aa:6f:be:e7: e2:98:d1:fa:5e:f0:d4:95:9d:f4:ba:c6:45:68:03: 76:6e:22:67:7b:24:fa:a4:db:9e:5c:3b:75:1c:57: c1:09:6d:6e:a1:a8:c7:f4:aa:54:c4:b1:60:ce:c9: 3a:44:39:7c:82:ce:5f:1f:68:c8:ec:9c:28:19:f4: 92:8a:77:82:fc:e3:71:97:1a:6b:4a:c5:07:eb:78: 76:e0:77:25:6e:1a:4e:d9:9a:bb:6c:2e:71:13:e8: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CD:E4:43:CA:1F:C9:C3:53:D0:A5:21:96:0A:B3:31:D5:AE:CA:D9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:387::/48 Signature Algorithm: sha256WithRSAEncryption 76:d3:d3:77:70:f1:ab:b3:fa:a6:9b:90:9d:d6:0a:8a:64:20: 77:af:ba:8b:db:62:d7:be:21:2d:47:56:f7:f1:8c:e1:78:81: 23:c9:16:80:5f:09:3c:c3:13:b8:98:8d:b9:95:47:f1:89:d0: 66:a8:33:52:e8:e4:b9:a3:82:96:5c:52:d9:17:62:2c:38:2b: 2b:16:6c:56:9e:9f:84:36:75:da:13:d0:1e:7c:6e:71:d5:92: 7c:ca:83:6e:c3:b7:50:db:70:f7:00:f8:77:43:a3:7b:0a:72: 1c:75:75:ad:6c:74:dd:b0:ba:ad:5d:39:6d:17:bb:e8:bf:12: de:a6:92:2a:29:f8:a2:85:12:d4:65:70:01:42:00:51:eb:bb: 0b:18:c2:aa:d8:96:12:2b:22:41:14:53:f0:1e:77:06:ec:04: 3d:3b:01:f7:b9:9a:84:d2:1e:13:ab:ec:0e:61:9b:8a:cc:62: 34:8f:db:29:81:c4:c4:f9:56:fc:16:52:d3:e1:a4:79:e8:66: 89:0d:55:12:ac:0b:da:91:34:8a:0e:13:fa:75:e9:08:e7:1a: e5:59:fe:8a:d2:fd:5e:6d:e2:bd:20:1c:a3:07:ab:93:db:11: 4b:c8:ae:9f:df:02:ee:41:6f:c1:d5:b5:fd:19:0a:7f:b7:a7: 7b:c7:7a:4b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUKfgR+4R4huG0QhTnaFXndg67fUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMDQ1WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDc2NzhiMmQ1Njg2ZjRkOWQ0NDc0Zjg4MmU3YWExYmI0 NzgyMmI5NjBjOTZmZWYyMzk4MDRiNDRmODMzYmEzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMIuXl87kqS716bWmlI0xnynwXTKiNCr/ixAB1WXyd8TSp GwYe0owTkvjTNg9Z2H4wkzaIKWlSB/qGPZXF9JCK671hEcZ+47/f+Axw62QdIKOI X67TubFvpYTi61j+6c202nrDWxZFMKVnWe5zIRvf4wNa4LKS60sAu4d6MXlO7RsT kCjTy31/g69ktzcv6bUEL9K9y7QKvRkNeFdXhzE7qm++5+KY0fpe8NSVnfS6xkVo A3ZuImd7JPqk255cO3UcV8EJbW6hqMf0qlTEsWDOyTpEOXyCzl8faMjsnCgZ9JKK d4L843GXGmtKxQfreHbgdyVuGk7ZmrtsLnET6JI1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWs3kQ8ofycNT0KUhlgqzMdWuytkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJiMzVhYjFhLTgwMDEtNDA0YS05Mjg1LTE5NmFhOTQzYWE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4cwDQYJKoZIhvcNAQELBQADggEBAHbT03dw8auz+qabkJ3WCopk IHevuovbYte+IS1HVvfxjOF4gSPJFoBfCTzDE7iYjbmVR/GJ0GaoM1Lo5LmjgpZc UtkXYiw4KysWbFaen4Q2ddoT0B58bnHVknzKg27Dt1DbcPcA+HdDo3sKchx1da1s dN2wuq1dOW0Xu+i/Et6mkiop+KKFEtRlcAFCAFHruwsYwqrYlhIrIkEUU/Aedwbs BD07Afe5moTSHhOr7A5hm4rMYjSP2ymBxMT5VvwWUtPhpHnoZokNVRKsC9qRNIoO E/p16QjnGuVZ/orS/V5t4r0gHKMHq5PbEUvIrp/fAu5Bb8HVtf0ZCn+3p3vHeks= -----END CERTIFICATE-----Generated at Tue Aug 5 16:48:31 2025 by rpki-client