$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33cad6c3-e74e-478f-9b7a-5bae37505c27.roa File: 33cad6c3-e74e-478f-9b7a-5bae37505c27.roa (raw, json) Hash identifier: VZPHr9LA3uNDjbiMtrCiZwluqlacFpE3YZ1AnxvesYk= Subject key identifier: B9:DF:A4:B5:35:D5:5B:E5:F6:5A:CB:68:77:BC:B0:96:26:F0:2F:25 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 704ACCA6B5D2600A75DB5FBA1C640B3B409ECFF1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33cad6c3-e74e-478f-9b7a-5bae37505c27.roa Signing time: Mon 21 Jul 2025 16:31:05 +0000 ROA not before: Mon 21 Jul 2025 16:31:05 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4a:cc:a6:b5:d2:60:0a:75:db:5f:ba:1c:64:0b:3b:40:9e:cf:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:31:05 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=acd333e07481181936eb0bea1fffea476116b67705e98c0d0ffba2106725d1c0, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:e8:91:34:cf:06:12:94:c2:80:85:31:d9: c6:68:2e:7e:29:3e:11:81:28:7d:0b:4e:d1:ab:a3: 2c:ff:0b:47:f2:bc:3d:31:32:70:d8:1e:04:d4:7b: cf:a3:9e:82:b4:69:86:cf:bf:31:2b:e2:19:26:e2: c4:40:cd:b8:e1:44:80:62:a4:d9:8c:60:4f:48:d2: 4d:dc:c5:44:5f:06:53:1e:e2:5d:04:76:74:f0:2e: b5:a0:48:68:3b:46:da:ac:33:df:49:4d:3e:2f:25: f4:01:d8:a6:a4:4c:65:aa:5f:b4:1f:1e:b4:d8:07: f4:2c:69:89:ac:6b:ae:9f:ce:17:73:30:eb:c5:55: 16:47:80:1b:7e:75:3c:23:58:36:f5:45:25:1e:69: 94:3a:ca:b9:96:c5:1c:81:c0:90:1f:ef:29:1a:6c: aa:97:ea:70:d0:52:4e:18:10:0e:a6:ce:f2:cb:aa: f6:d7:b9:d4:45:d0:aa:de:3c:34:88:34:d5:a1:4d: fe:4f:88:fc:44:ef:5a:01:78:04:de:3b:aa:e9:0a: 35:bc:62:c2:dd:8c:5a:f6:33:f1:dd:08:07:ac:e3: 80:8e:b4:b7:79:2e:2b:e4:fa:c3:a2:6e:0d:a1:be: 31:21:17:ea:0f:bc:16:31:46:59:9e:10:ea:c5:d3: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DF:A4:B5:35:D5:5B:E5:F6:5A:CB:68:77:BC:B0:96:26:F0:2F:25 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33cad6c3-e74e-478f-9b7a-5bae37505c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c19::/48 Signature Algorithm: sha256WithRSAEncryption 68:85:90:45:7d:55:8e:37:6e:5d:bb:fc:53:57:7c:b7:17:9c: 49:e2:1d:05:93:76:93:a5:be:2a:79:53:99:c0:db:db:c6:38: 83:03:64:9a:02:71:83:22:5a:fb:ea:64:f4:2e:71:cb:d0:ae: 26:f8:eb:4e:0e:57:17:01:c3:34:d7:ba:69:33:00:90:e9:7b: 27:d5:31:36:81:a3:ad:0b:26:7e:34:35:db:82:08:78:2f:b3: 60:a6:02:3c:9a:ac:a2:02:4e:06:5e:90:c1:a2:51:56:4c:45: 17:50:f2:41:28:2c:df:ba:26:cf:10:fe:91:80:a1:39:4f:77: 22:85:5b:31:5c:e8:ec:5b:57:96:9e:8f:3a:ac:a3:9e:c1:95: b3:ab:6a:22:cf:62:72:fb:ae:aa:e8:3b:0d:7a:a6:4a:53:c0: 71:1b:d6:9f:38:eb:32:d3:59:03:75:d0:b4:03:ca:19:8b:2d: 90:41:76:e7:64:1f:dc:ac:53:35:99:2d:2c:7f:94:e7:2b:f1: ad:73:f7:c8:02:5a:ef:63:2a:9d:a7:a5:81:8e:81:e7:8b:88: 74:6c:12:ab:66:5b:bd:98:06:91:12:b2:70:3a:1c:32:2a:97: f8:00:3e:d1:d4:cf:5c:69:5d:03:94:3a:12:32:92:5e:5e:50: ba:ab:10:09 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcErMprXSYAp121+6HGQLO0Cez/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYzMTA1WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhY2QzMzNlMDc0ODExODE5MzZlYjBiZWExZmZmZWE0NzYx MTZiNjc3MDVlOThjMGQwZmZiYTIxMDY3MjVkMWMwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEkOiRNM8GEpTCgIUx2cZoLn4pPhGBKH0LTtGroyz/C0fy vD0xMnDYHgTUe8+jnoK0aYbPvzEr4hkm4sRAzbjhRIBipNmMYE9I0k3cxURfBlMe 4l0EdnTwLrWgSGg7RtqsM99JTT4vJfQB2KakTGWqX7QfHrTYB/QsaYmsa66fzhdz MOvFVRZHgBt+dTwjWDb1RSUeaZQ6yrmWxRyBwJAf7ykabKqX6nDQUk4YEA6mzvLL qvbXudRF0KrePDSINNWhTf5PiPxE71oBeATeO6rpCjW8YsLdjFr2M/HdCAes44CO tLd5Livk+sOibg2hvjEhF+oPvBYxRlmeEOrF0051AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUud+ktTXVW+X2Wstod7ywlibwLyUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzMzY2FkNmMzLWU3NGUtNDc4Zi05YjdhLTViYWUzNzUwNWMyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBkwDQYJKoZIhvcNAQELBQADggEBAGiFkEV9VY43bl27/FNXfLcX nEniHQWTdpOlvip5U5nA29vGOIMDZJoCcYMiWvvqZPQuccvQrib4604OVxcBwzTX umkzAJDpeyfVMTaBo60LJn40NduCCHgvs2CmAjyarKICTgZekMGiUVZMRRdQ8kEo LN+6Js8Q/pGAoTlPdyKFWzFc6OxbV5aejzqso57BlbOraiLPYnL7rqroOw16pkpT wHEb1p846zLTWQN10LQDyhmLLZBBdudkH9ysUzWZLSx/lOcr8a1z98gCWu9jKp2n pYGOgeeLiHRsEqtmW72YBpESsnA6HDIql/gAPtHUz1xpXQOUOhIykl5eULqrEAk= -----END CERTIFICATE-----Generated at Wed Aug 6 12:25:30 2025 by rpki-client