$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99479912-3c63-442a-a1c0-4057977a054b.roa File: 99479912-3c63-442a-a1c0-4057977a054b.roa (raw, json) Hash identifier: ZvFphHOZ9k9C5vx4GJB5/UxRjzk3k9Ihd3sg9VLGSoE= Subject key identifier: B7:4F:9B:A1:B1:FC:74:54:E0:5F:DC:FC:DE:AC:87:0A:F2:C4:7A:AD Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3E4437B2D6E498D97B41B7210775F3258F0F8EF7 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99479912-3c63-442a-a1c0-4057977a054b.roa Signing time: Fri 06 Jun 2025 15:00:06 +0000 ROA not before: Fri 06 Jun 2025 15:00:06 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:3c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:44:37:b2:d6:e4:98:d9:7b:41:b7:21:07:75:f3:25:8f:0f:8e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 6 15:00:06 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=78ee8dd4276fb0881eed4f8d81f39a0cd12e5fdd67509a2824b13f4783d1e60b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:0e:75:a4:5c:96:0a:58:0f:21:4d:81:36: 69:0d:69:eb:f6:89:e4:94:ba:3d:e3:c2:73:a4:2d: f6:40:b3:9a:c6:41:f6:df:0e:6c:12:07:7d:c1:97: 39:4b:58:41:17:f5:85:76:62:ec:aa:13:15:1d:ab: 56:10:93:88:5c:54:02:dc:3c:af:e6:a5:0e:a9:51: 7b:51:7e:a8:17:36:a5:3d:1f:0c:a2:c7:da:7f:c1: 00:29:bd:94:40:09:91:c0:b3:e5:32:a6:4c:1f:54: 5a:a1:cb:78:54:d9:74:9c:e9:69:60:11:1d:a0:63: 99:0b:c4:8f:4d:35:f0:a5:8d:26:5a:17:fc:d2:97: 4e:d2:05:e8:93:38:5c:ed:58:ef:ad:41:f0:0f:7a: ae:af:94:0f:63:a1:33:8f:14:7f:9b:33:c6:26:26: 87:2b:d0:36:9f:a6:d8:c4:ab:42:50:c8:3e:df:d8: c2:a0:09:a6:f1:b0:be:ab:2f:35:23:ea:98:e9:ef: b3:3d:c2:dd:55:bc:50:b2:c5:09:46:b5:2f:3c:34: 17:96:d4:65:eb:f0:37:7b:2f:b9:b8:5e:a0:f8:b3: bc:c5:d0:15:ab:ec:00:85:2e:cc:74:df:bf:23:a3: fd:ef:ba:af:3d:fc:40:3e:95:ca:9e:03:64:89:81: cb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4F:9B:A1:B1:FC:74:54:E0:5F:DC:FC:DE:AC:87:0A:F2:C4:7A:AD X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99479912-3c63-442a-a1c0-4057977a054b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3c2::/48 Signature Algorithm: sha256WithRSAEncryption a6:61:d6:1c:f9:d5:ab:6f:9d:fa:ef:55:59:af:a9:80:66:57: 21:24:68:a5:a6:1d:ef:b2:c6:90:5e:53:72:9b:26:aa:80:e6: 4d:68:36:60:9e:bc:08:18:46:53:70:a5:ae:01:5d:7b:12:97: 02:1b:bc:dd:e2:25:06:52:fa:71:b8:36:2b:c3:3a:30:64:5e: 58:dd:66:e6:77:bc:67:2e:81:fb:12:1f:37:4d:7d:92:8f:54: 67:5a:72:09:43:64:c3:c6:85:ec:bd:9b:a0:b9:fa:ba:d2:74: 4b:91:cd:a1:24:bf:0b:44:3b:d6:a5:1a:e8:17:3c:fc:8b:5f: 54:97:75:75:c4:1d:f5:66:35:22:90:3a:13:56:2f:87:5d:4f: b5:9d:9c:ff:b9:11:12:5a:82:26:6a:67:5d:1e:ac:bc:df:73: e8:9c:33:b3:82:c5:ea:07:aa:ef:2f:1c:b8:0c:3a:0a:23:a2: fe:b1:0e:c3:df:5e:22:ab:06:e7:ca:ab:44:dd:d6:cb:e3:b3: 26:47:7b:ec:a6:51:b5:b8:cb:ad:98:7a:a5:20:1c:38:df:8b: 32:ce:47:7b:d3:11:36:a6:53:18:59:10:0e:e6:de:a7:75:3c: 47:3d:7c:f5:ba:05:15:fc:b7:7a:f6:93:40:31:e1:ac:7e:29: e7:80:f2:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPkQ3stbkmNl7QbchB3XzJY8PjvcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjA2MTUwMDA2WhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGVlOGRkNDI3NmZiMDg4MWVlZDRmOGQ4MWYzOWEwY2Qx MmU1ZmRkNjc1MDlhMjgyNGIxM2Y0NzgzZDFlNjBiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxHA51pFyWClgPIU2BNmkNaev2ieSUuj3jwnOkLfZAs5rG QfbfDmwSB33BlzlLWEEX9YV2YuyqExUdq1YQk4hcVALcPK/mpQ6pUXtRfqgXNqU9 Hwyix9p/wQApvZRACZHAs+UypkwfVFqhy3hU2XSc6WlgER2gY5kLxI9NNfCljSZa F/zSl07SBeiTOFztWO+tQfAPeq6vlA9joTOPFH+bM8YmJocr0DafptjEq0JQyD7f 2MKgCabxsL6rLzUj6pjp77M9wt1VvFCyxQlGtS88NBeW1GXr8Dd7L7m4XqD4s7zF 0BWr7ACFLsx0378jo/3vuq89/EA+lcqeA2SJgcufAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUt0+bobH8dFTgX9z83qyHCvLEeq0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk5NDc5OTEyLTNjNjMtNDQyYS1hMWMwLTQwNTc5NzdhMDU0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8IwDQYJKoZIhvcNAQELBQADggEBAKZh1hz51atvnfrvVVmvqYBm VyEkaKWmHe+yxpBeU3KbJqqA5k1oNmCevAgYRlNwpa4BXXsSlwIbvN3iJQZS+nG4 NivDOjBkXljdZuZ3vGcugfsSHzdNfZKPVGdacglDZMPGhey9m6C5+rrSdEuRzaEk vwtEO9alGugXPPyLX1SXdXXEHfVmNSKQOhNWL4ddT7WdnP+5ERJagiZqZ10erLzf c+icM7OCxeoHqu8vHLgMOgojov6xDsPfXiKrBufKq0Td1svjsyZHe+ymUbW4y62Y eqUgHDjfizLOR3vTETamUxhZEA7m3qd1PEc9fPW6BRX8t3r2k0Ax4ax+KeeA8iA= -----END CERTIFICATE-----Generated at Sun Jun 15 11:41:20 2025 by rpki-client