$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a5fcb3b-8689-4338-9c45-f707b48f641a.roa File: 7a5fcb3b-8689-4338-9c45-f707b48f641a.roa (raw, json) Hash identifier: z8NCjC5jJ44lS293NiPYXtCRyT2TLCABNox2e2n0N38= Subject key identifier: 45:5E:1A:02:A0:40:03:FE:D7:C6:12:E8:8C:AB:CF:B5:21:E0:02:36 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7F07C7714C5F3022BD9352151DBB12E84663502A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a5fcb3b-8689-4338-9c45-f707b48f641a.roa Signing time: Mon 21 Jul 2025 16:20:48 +0000 ROA not before: Mon 21 Jul 2025 16:20:48 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:07:c7:71:4c:5f:30:22:bd:93:52:15:1d:bb:12:e8:46:63:50:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:20:48 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=e68ef78573a111569ab113d1bee8a7212fc52cbb588e0fa1c4603f36b04ece9a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:f8:39:30:92:0f:fc:5d:6b:9b:aa:e8:f7: 3c:97:54:ce:22:17:4a:79:df:f9:9a:e6:f2:c1:e2: 6e:3c:7d:7c:1b:2a:64:8c:ea:fa:5b:c9:2e:e4:a6: 68:40:7a:98:9a:79:93:39:67:20:e4:c4:b1:0b:79: c1:87:46:73:76:cb:73:94:3e:9c:49:2b:d4:70:4d: c9:a2:f6:cf:de:32:26:a3:fb:56:01:d8:35:36:d4: 12:e0:ec:d3:fe:e5:ee:24:fb:91:48:12:94:7e:15: 55:9a:e6:9b:7f:87:16:46:29:30:07:13:00:5e:39: 33:cc:be:7b:d9:b8:cb:de:17:0b:db:32:8a:e3:14: a5:51:90:d7:6f:e7:b6:ae:26:9e:70:47:47:29:1c: 3a:f0:e9:c7:15:21:d4:32:40:db:b6:43:e6:92:aa: f6:52:65:7e:e4:3b:f1:9c:ad:34:9d:9a:6d:35:da: f5:85:e7:cd:69:0e:ce:eb:1d:dd:3d:49:83:1c:85: 5e:fb:3b:b5:38:48:f7:3a:45:18:ab:5b:5e:7a:ee: 9f:51:d8:a6:0a:b3:3d:b1:c0:2e:0f:b8:01:00:c6: c6:c3:33:58:db:fb:e0:9d:0b:b9:0c:90:eb:9a:96: 1e:f2:9f:f0:c5:2a:d3:98:9a:9f:05:48:f7:54:38: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5E:1A:02:A0:40:03:FE:D7:C6:12:E8:8C:AB:CF:B5:21:E0:02:36 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a5fcb3b-8689-4338-9c45-f707b48f641a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c12::/48 Signature Algorithm: sha256WithRSAEncryption 92:9f:d2:74:d5:92:ef:42:86:00:d9:9f:a3:f7:b1:0c:94:c0: c5:00:66:5c:55:8e:4c:12:18:20:9d:65:51:ba:60:f6:93:d0: 90:e1:9e:aa:d4:af:8d:3a:49:c9:a8:51:db:16:cf:9e:7d:74: ae:fa:e7:d1:30:f1:d3:99:31:46:84:9c:86:13:39:fc:28:7f: 8e:89:53:c1:5a:c9:66:bf:1d:94:22:18:47:41:8f:99:6d:8e: c4:a1:a6:c3:32:40:6d:99:f8:9b:9e:7e:a3:23:11:73:20:b2: b0:da:00:3e:ab:4d:b8:d7:3f:8f:0b:18:4b:d1:7c:a9:05:cd: 8e:2a:c5:5e:03:17:38:37:44:ed:f2:3f:eb:52:69:14:1c:ce: 74:55:d7:9f:a8:3e:21:0a:ac:d2:e4:7e:32:ca:33:ed:79:4c: 49:a0:a4:ef:84:60:33:5a:e1:f0:ba:35:b5:64:e9:d2:4f:98: 59:3b:af:bc:8d:2a:b6:16:d0:cf:59:fd:4d:a4:09:6e:76:72: b1:c9:96:c3:8d:7c:e4:f4:68:6c:e7:a0:ee:a4:d0:10:b8:06: 4b:3a:2a:c6:1e:9a:bf:96:c7:aa:fd:c4:f7:17:f1:25:d3:0e: 39:94:f6:c4:50:79:8d:1e:9f:09:8d:c1:79:e5:92:f0:02:5e: 35:f8:c1:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfwfHcUxfMCK9k1IVHbsS6EZjUCowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYyMDQ4WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjhlZjc4NTczYTExMTU2OWFiMTEzZDFiZWU4YTcyMTJm YzUyY2JiNTg4ZTBmYTFjNDYwM2YzNmIwNGVjZTlhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp//g5MJIP/F1rm6ro9zyXVM4iF0p53/ma5vLB4m48fXwb KmSM6vpbyS7kpmhAepiaeZM5ZyDkxLELecGHRnN2y3OUPpxJK9RwTcmi9s/eMiaj +1YB2DU21BLg7NP+5e4k+5FIEpR+FVWa5pt/hxZGKTAHEwBeOTPMvnvZuMveFwvb MorjFKVRkNdv57auJp5wR0cpHDrw6ccVIdQyQNu2Q+aSqvZSZX7kO/GcrTSdmm01 2vWF581pDs7rHd09SYMchV77O7U4SPc6RRirW1567p9R2KYKsz2xwC4PuAEAxsbD M1jb++CdC7kMkOualh7yn/DFKtOYmp8FSPdUOK9TAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURV4aAqBAA/7XxhLojKvPtSHgAjYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzdhNWZjYjNiLTg2ODktNDMzOC05YzQ1LWY3MDdiNDhmNjQxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBIwDQYJKoZIhvcNAQELBQADggEBAJKf0nTVku9ChgDZn6P3sQyU wMUAZlxVjkwSGCCdZVG6YPaT0JDhnqrUr406ScmoUdsWz559dK7659Ew8dOZMUaE nIYTOfwof46JU8FayWa/HZQiGEdBj5ltjsShpsMyQG2Z+JuefqMjEXMgsrDaAD6r TbjXP48LGEvRfKkFzY4qxV4DFzg3RO3yP+tSaRQcznRV15+oPiEKrNLkfjLKM+15 TEmgpO+EYDNa4fC6NbVk6dJPmFk7r7yNKrYW0M9Z/U2kCW52crHJlsONfOT0aGzn oO6k0BC4Bks6KsYemr+Wx6r9xPcX8SXTDjmU9sRQeY0enwmNwXnlkvACXjX4wRM= -----END CERTIFICATE-----Generated at Wed Aug 6 10:06:06 2025 by rpki-client