$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa File: 43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa (raw, json) Hash identifier: bbD7xBF0MY/pvga5UyPB/1tEPclXHpGVWu16bW4GbBE= Subject key identifier: F7:1C:BE:66:BD:12:E2:FF:D1:8B:53:79:F9:7C:05:86:EF:ED:04:0F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 718974ED4953DA5BF787B2A9014265A84E09C101 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa Signing time: Mon 21 Jul 2025 16:31:06 +0000 ROA not before: Mon 21 Jul 2025 16:31:06 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:89:74:ed:49:53:da:5b:f7:87:b2:a9:01:42:65:a8:4e:09:c1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:31:06 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=e7d85b98f9100c01e7b0fb2a5880ae3a90af156cbae4275ce54581d43bb50059, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:ec:fb:05:ef:c3:d1:0d:e7:40:fb:69:d6: 7a:d8:01:e0:d1:48:47:62:2f:5f:71:c3:9e:5e:a3: f0:01:fe:44:92:03:49:c6:ef:f3:2e:3e:fa:1b:74: b8:6e:5f:74:4f:48:5f:17:93:84:e5:b5:4d:d7:13: a3:da:0a:71:73:c4:04:2a:26:2b:b0:03:cc:58:bf: 32:4c:0f:3f:3d:4c:b4:73:33:74:e7:c7:4d:a8:08: 0e:5a:69:b6:cf:64:d3:84:1d:2e:25:0d:8e:3b:63: 10:09:cd:b5:64:32:16:53:10:49:93:12:38:8a:28: 2d:58:43:36:dc:11:30:b7:f8:8b:5f:51:e1:3a:a6: 1c:ae:bd:de:20:15:8b:88:42:7b:b8:bf:ae:de:be: 85:43:c9:02:a5:22:54:e7:1e:58:0e:80:3c:df:71: 6c:1c:3f:eb:8d:3a:3c:1a:5b:9c:56:90:50:f5:98: 98:d9:b3:b9:2e:c9:73:43:8e:01:9b:21:d8:79:47: 05:85:9d:e5:53:d1:d4:52:8c:33:d7:d5:8d:72:f6: f3:ee:7c:6f:99:cd:00:2f:f0:63:81:7f:b5:b0:5b: 4d:51:64:88:24:21:19:ce:be:bb:73:38:34:5a:b7: 5e:13:c9:2c:43:04:29:44:8a:01:5d:06:0f:21:ef: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1C:BE:66:BD:12:E2:FF:D1:8B:53:79:F9:7C:05:86:EF:ED:04:0F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1a::/48 Signature Algorithm: sha256WithRSAEncryption aa:48:a3:eb:93:74:4b:3f:f6:1e:94:b0:e8:87:57:a8:18:fd: 78:a1:6b:f9:ca:e7:c9:e8:f0:f9:5b:98:1c:61:7b:56:be:97: 02:a1:d4:19:a6:8e:5e:72:32:1c:6d:0b:e0:52:43:2f:d5:96: cc:3d:1a:66:26:95:67:a0:94:61:91:e4:44:c0:a1:ea:01:a1: 47:3f:ae:3d:c2:28:72:a5:a6:a5:fd:41:c3:39:79:b9:75:22: a3:ba:64:a2:d6:9e:25:19:d6:e5:bf:fe:0c:47:00:47:29:01: ee:08:60:19:e8:ad:a3:6e:ec:fb:53:d2:6b:ee:3f:83:56:aa: 51:b5:78:cc:eb:42:b2:90:d0:10:14:de:f6:73:7f:48:a9:a0: cc:81:12:8c:96:4d:63:54:21:b4:b7:ec:b1:bc:aa:a9:f5:73: ad:34:d9:3b:a8:16:71:ad:65:76:28:43:a1:d6:a3:f9:24:96: 62:33:36:82:e3:47:33:82:30:de:43:05:f7:cb:6f:7f:f9:04: 7c:1c:7c:09:5e:f6:29:3e:82:23:04:ef:c4:ef:3d:36:2d:d4: a7:a4:89:ac:f3:55:e3:bb:0e:c1:d6:98:41:ed:45:5a:bf:49: b6:89:d6:fc:03:70:8f:2e:6f:c1:32:46:f0:b6:27:30:e6:7a: c4:4b:88:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcYl07UlT2lv3h7KpAUJlqE4JwQEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYzMTA2WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlN2Q4NWI5OGY5MTAwYzAxZTdiMGZiMmE1ODgwYWUzYTkw YWYxNTZjYmFlNDI3NWNlNTQ1ODFkNDNiYjUwMDU5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsmOz7Be/D0Q3nQPtp1nrYAeDRSEdiL19xw55eo/AB/kSS A0nG7/MuPvobdLhuX3RPSF8Xk4TltU3XE6PaCnFzxAQqJiuwA8xYvzJMDz89TLRz M3Tnx02oCA5aabbPZNOEHS4lDY47YxAJzbVkMhZTEEmTEjiKKC1YQzbcETC3+Itf UeE6phyuvd4gFYuIQnu4v67evoVDyQKlIlTnHlgOgDzfcWwcP+uNOjwaW5xWkFD1 mJjZs7kuyXNDjgGbIdh5RwWFneVT0dRSjDPX1Y1y9vPufG+ZzQAv8GOBf7WwW01R ZIgkIRnOvrtzODRat14TySxDBClEigFdBg8h7yafAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9xy+Zr0S4v/Ri1N5+XwFhu/tBA8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQzZjM4YTkwLTk0MWMtNGU2MS04YWE1LWVhZDk1N2JmNmFlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBowDQYJKoZIhvcNAQELBQADggEBAKpIo+uTdEs/9h6UsOiHV6gY /Xiha/nK58no8PlbmBxhe1a+lwKh1Bmmjl5yMhxtC+BSQy/Vlsw9GmYmlWeglGGR 5ETAoeoBoUc/rj3CKHKlpqX9QcM5ebl1IqO6ZKLWniUZ1uW//gxHAEcpAe4IYBno raNu7PtT0mvuP4NWqlG1eMzrQrKQ0BAU3vZzf0ipoMyBEoyWTWNUIbS37LG8qqn1 c6002TuoFnGtZXYoQ6HWo/kklmIzNoLjRzOCMN5DBffLb3/5BHwcfAle9ik+giME 78TvPTYt1KekiazzVeO7DsHWmEHtRVq/SbaJ1vwDcI8ub8EyRvC2JzDmesRLiAs= -----END CERTIFICATE-----Generated at Mon Aug 4 21:38:44 2025 by rpki-client