$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/845a3102-27ea-4c97-8d05-2688587d8229.roa File: 845a3102-27ea-4c97-8d05-2688587d8229.roa (raw, json) Hash identifier: 0I0iqHkKh13L4gBTD9trg9jv4UlyS+1a15XMHYRV8LE= Subject key identifier: 1A:18:34:8E:98:CD:F9:EC:61:F5:D1:1A:90:B0:C7:74:A6:3D:C1:09 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 06C97A7A06769C304C99ADE7684A04CC52C59BAF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/845a3102-27ea-4c97-8d05-2688587d8229.roa Signing time: Fri 06 Jun 2025 15:00:10 +0000 ROA not before: Fri 06 Jun 2025 15:00:10 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:e00::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c9:7a:7a:06:76:9c:30:4c:99:ad:e7:68:4a:04:cc:52:c5:9b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 6 15:00:10 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=3d32f16db60c0322c87238e9f5072570cd8f1aa14a7ebac7953c64deb0b5bdf8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:b6:66:64:8e:5e:3e:a3:fc:f7:d3:b8:82: 23:4a:ff:18:b5:da:c5:40:6f:4f:80:13:d5:03:d6: f9:d8:16:7a:44:80:57:24:1f:35:7d:a2:62:19:bf: ce:0a:49:d9:3c:df:1a:6c:c6:3b:33:a4:59:76:fd: bf:84:58:e0:6d:26:fb:56:82:65:82:10:3b:c9:6b: cd:41:7f:e2:6f:05:c0:9e:1d:15:f4:fb:98:71:0c: fb:04:15:d2:e4:9c:a0:bb:03:7b:3a:b7:29:c4:e3: 4b:a1:e6:fb:9b:b0:de:25:4c:91:97:a5:bf:0d:42: b5:94:06:b0:58:dc:f1:c2:3b:d3:78:fe:09:7d:59: 6b:f9:c0:26:65:ed:96:0b:a2:cb:e7:fe:af:ed:f3: 9d:0c:59:4c:52:73:6e:f0:d6:8c:96:77:3f:16:4e: cf:de:b3:f9:c7:fd:2e:08:a0:e9:15:c3:5e:b7:c8: ec:d4:7e:6e:92:4c:52:ed:a6:c5:e1:97:2c:4b:32: d1:d5:13:c5:98:c3:5e:24:c1:9c:ef:43:54:f0:f0: 29:6d:ba:0f:5d:75:70:a9:9e:5c:7f:c9:c1:5a:3d: 58:1b:46:5e:03:ea:09:ee:6b:0a:ba:60:85:5a:c8: e2:27:97:b5:54:d7:f5:6b:8a:93:76:65:cc:67:5c: e7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:18:34:8E:98:CD:F9:EC:61:F5:D1:1A:90:B0:C7:74:A6:3D:C1:09 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/845a3102-27ea-4c97-8d05-2688587d8229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:e00::/43 Signature Algorithm: sha256WithRSAEncryption 00:d2:c6:f7:a8:8a:45:66:4f:c7:32:d8:65:7a:08:a4:65:a4: 07:f2:45:e5:03:1d:51:73:a6:4b:86:4f:6a:75:50:34:9c:72: a8:0f:37:10:75:d9:95:4a:bd:65:aa:ab:94:16:dc:75:e0:e3: e6:f8:9f:8d:97:3b:b2:75:a2:9a:a6:bf:a4:35:99:b7:e1:f3: aa:72:cc:e8:aa:8d:87:44:75:4b:90:96:af:45:29:15:6c:3b: 3b:96:20:85:59:38:f5:97:60:7b:d3:23:cb:22:e4:5d:3d:ee: 07:47:3f:00:9d:b3:7e:9c:7d:1c:4b:16:1c:8f:db:8a:26:65: c4:55:ab:34:91:23:ab:1d:7a:64:f9:dc:b2:70:18:f8:d6:4c: eb:f6:41:a5:1d:0f:ae:b5:09:f4:b4:3d:81:c1:e4:76:4d:33: d1:12:5f:ce:b4:2b:ff:da:b6:91:f2:c4:fd:dd:97:a3:6d:ca: f5:3d:20:74:9b:fa:a2:d9:cf:63:b2:b6:bc:25:7b:00:09:95: b8:e9:35:27:c0:bd:c5:36:ed:ff:4a:49:95:70:27:80:40:f8: f7:72:8a:af:7a:f8:39:a6:f5:b4:96:7b:3f:a8:e3:95:2e:49: 6c:cf:12:4e:6d:34:52:56:d4:93:04:0b:82:7d:20:57:40:73: 27:c5:02:05 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBsl6egZ2nDBMma3naEoEzFLFm68wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjA2MTUwMDEwWhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDMyZjE2ZGI2MGMwMzIyYzg3MjM4ZTlmNTA3MjU3MGNk OGYxYWExNGE3ZWJhYzc5NTNjNjRkZWIwYjViZGY4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCogbZmZI5ePqP899O4giNK/xi12sVAb0+AE9UD1vnYFnpE gFckHzV9omIZv84KSdk83xpsxjszpFl2/b+EWOBtJvtWgmWCEDvJa81Bf+JvBcCe HRX0+5hxDPsEFdLknKC7A3s6tynE40uh5vubsN4lTJGXpb8NQrWUBrBY3PHCO9N4 /gl9WWv5wCZl7ZYLosvn/q/t850MWUxSc27w1oyWdz8WTs/es/nH/S4IoOkVw163 yOzUfm6STFLtpsXhlyxLMtHVE8WYw14kwZzvQ1Tw8Cltug9ddXCpnlx/ycFaPVgb Rl4D6gnuawq6YIVayOInl7VU1/VripN2ZcxnXOdDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGhg0jpjN+exh9dEakLDHdKY9wQkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg0NWEzMTAyLTI3ZWEtNGM5Ny04ZDA1LTI2ODg1ODdkODIyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmBZzADgAwDQYJKoZIhvcNAQELBQADggEBAADSxveoikVmT8cy2GV6CKRl pAfyReUDHVFzpkuGT2p1UDSccqgPNxB12ZVKvWWqq5QW3HXg4+b4n42XO7J1opqm v6Q1mbfh86pyzOiqjYdEdUuQlq9FKRVsOzuWIIVZOPWXYHvTI8si5F097gdHPwCd s36cfRxLFhyP24omZcRVqzSRI6sdemT53LJwGPjWTOv2QaUdD661CfS0PYHB5HZN M9ESX860K//atpHyxP3dl6NtyvU9IHSb+qLZz2OytrwlewAJlbjpNSfAvcU27f9K SZVwJ4BA+Pdyiq96+Dmm9bSWez+o45UuSWzPEk5tNFJW1JMEC4J9IFdAcyfFAgU= -----END CERTIFICATE-----Generated at Sat Jun 14 06:29:16 2025 by rpki-client