$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa File: 4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa (raw, json) Hash identifier: DmsQ/BHrK5qf8gjK4sDvIcb9LgAZXvv22EEq7iJhUgk= Subject key identifier: 2A:70:8E:D9:10:5A:21:16:50:8C:27:C2:5B:77:7D:93:7C:47:83:99 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1484E6EE7E0180BF8A8EF8A0E3A47C934044A8C4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa Signing time: Fri 11 Jul 2025 18:10:16 +0000 ROA not before: Fri 11 Jul 2025 18:10:16 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:548::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:84:e6:ee:7e:01:80:bf:8a:8e:f8:a0:e3:a4:7c:93:40:44:a8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:10:16 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=f93433b8fada488762bfb6ad1627abaa5688f15f65907cff6cbc83570ec50163, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:b0:c5:97:6f:95:fd:3a:fc:70:0f:96:1d: 52:33:f7:c3:2a:63:10:99:e4:93:aa:80:e7:3b:41: 42:1e:9c:ab:a7:46:ae:94:e0:f7:ca:92:34:b3:5c: 92:29:f5:c2:f3:c4:d1:66:8e:b2:ec:63:6f:b0:d2: a9:e1:e1:56:38:57:a0:75:f4:76:46:82:43:70:c8: c8:75:40:84:de:b6:77:a0:c8:90:80:a6:51:da:d1: 8f:85:85:b9:8b:08:e9:db:6f:0a:67:82:59:52:db: a1:e1:f1:c0:e4:87:c2:72:3b:1d:41:14:b7:7c:d0: 63:bc:e5:14:c2:0d:72:97:76:3a:d1:3a:13:9c:8b: d7:50:b9:39:ef:f6:a5:71:f8:b9:4b:68:b5:b9:ac: a8:f9:8a:3e:44:84:06:70:2a:8d:9e:3e:ef:f9:93: 3f:5b:a4:45:ab:23:7e:02:31:1f:c5:17:c3:0c:85: a3:10:46:40:bd:ee:a2:fd:49:f1:a8:96:99:97:35: 42:c5:7f:f0:91:60:07:0e:bb:08:ba:8c:2c:84:4f: a2:36:73:77:70:28:bd:8a:17:e7:6c:1b:b3:5b:a8: 96:9b:73:2c:3f:c1:09:98:5c:62:99:29:13:d1:77: 4f:a4:01:48:b2:f4:fb:8c:4f:e9:65:12:60:f7:26: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:70:8E:D9:10:5A:21:16:50:8C:27:C2:5B:77:7D:93:7C:47:83:99 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4628fdc0-a31f-437d-8e33-b8f891b1dd1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:548::/48 Signature Algorithm: sha256WithRSAEncryption 21:45:4e:bf:96:96:65:79:d8:12:46:db:bc:cf:6b:a8:77:18: 0f:59:94:a0:af:67:c4:d6:c5:c8:1f:de:d1:b7:c0:f5:fb:b9: bd:64:1a:a6:c9:6b:9a:8c:49:9a:a8:00:f0:db:58:6f:72:a1: 11:90:82:20:86:96:b4:e2:1d:8f:46:c9:43:f9:5c:fa:9e:ce: fd:f2:a2:c4:02:b4:37:21:05:18:0b:c1:67:0c:90:38:0d:e1: 0d:2d:97:ac:5e:32:98:45:87:56:98:0d:6c:d9:78:d2:84:4f: e2:f8:71:fa:49:13:ca:26:3a:02:44:7b:d5:b9:35:8e:8e:97: 25:ef:ed:e0:5f:1e:b9:43:fe:3c:e2:28:83:db:2c:7e:eb:b8: 5d:35:5d:f0:26:d5:77:27:e1:fe:b1:8a:49:6e:93:0c:ec:85: f9:6d:63:83:75:1c:59:57:51:ca:ff:2b:50:86:8b:21:f4:ed: a6:9e:37:68:52:ea:55:54:73:5e:1c:e6:45:93:41:32:88:74: 15:72:e4:6c:2d:62:ac:bf:52:e7:a0:b0:61:04:eb:3e:bb:17: 43:b0:23:e7:33:84:fa:3a:1a:dd:e7:51:0f:8b:5a:30:7e:eb: 28:2e:e2:aa:bf:99:88:73:ad:e4:6a:d5:b2:ef:1d:29:82:16: 40:d1:0a:5f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFITm7n4BgL+Kjvig46R8k0BEqMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMDE2WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTM0MzNiOGZhZGE0ODg3NjJiZmI2YWQxNjI3YWJhYTU2 ODhmMTVmNjU5MDdjZmY2Y2JjODM1NzBlYzUwMTYzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJw7DFl2+V/Tr8cA+WHVIz98MqYxCZ5JOqgOc7QUIenKun Rq6U4PfKkjSzXJIp9cLzxNFmjrLsY2+w0qnh4VY4V6B19HZGgkNwyMh1QITetneg yJCAplHa0Y+FhbmLCOnbbwpngllS26Hh8cDkh8JyOx1BFLd80GO85RTCDXKXdjrR OhOci9dQuTnv9qVx+LlLaLW5rKj5ij5EhAZwKo2ePu/5kz9bpEWrI34CMR/FF8MM haMQRkC97qL9SfGolpmXNULFf/CRYAcOuwi6jCyET6I2c3dwKL2KF+dsG7NbqJab cyw/wQmYXGKZKRPRd0+kAUiy9PuMT+llEmD3Jo2tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKnCO2RBaIRZQjCfCW3d9k3xHg5kwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQ2MjhmZGMwLWEzMWYtNDM3ZC04ZTMzLWI4Zjg5MWIxZGQxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUgwDQYJKoZIhvcNAQELBQADggEBACFFTr+WlmV52BJG27zPa6h3 GA9ZlKCvZ8TWxcgf3tG3wPX7ub1kGqbJa5qMSZqoAPDbWG9yoRGQgiCGlrTiHY9G yUP5XPqezv3yosQCtDchBRgLwWcMkDgN4Q0tl6xeMphFh1aYDWzZeNKET+L4cfpJ E8omOgJEe9W5NY6OlyXv7eBfHrlD/jziKIPbLH7ruF01XfAm1Xcn4f6xiklukwzs hfltY4N1HFlXUcr/K1CGiyH07aaeN2hS6lVUc14c5kWTQTKIdBVy5GwtYqy/Uueg sGEE6z67F0OwI+czhPo6Gt3nUQ+LWjB+6ygu4qq/mYhzreRq1bLvHSmCFkDRCl8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:05:36 2025 by rpki-client