$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c7ca5bb9-77fb-485c-8036-ffef85993132.roa File: c7ca5bb9-77fb-485c-8036-ffef85993132.roa (raw, json) Hash identifier: FVOCa3wUN2P4GnVldGZvmRICkQZ3AtWMfnpPErLfBaM= Subject key identifier: 73:BF:E4:5C:C3:D7:7D:95:AC:E9:D7:CF:0B:BE:CD:31:39:5E:F9:49 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6460F361BB2DA9FD3B9CD60245EC0948124793E2 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c7ca5bb9-77fb-485c-8036-ffef85993132.roa Signing time: Mon 04 Aug 2025 17:30:03 +0000 ROA not before: Mon 04 Aug 2025 17:30:03 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:da0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:60:f3:61:bb:2d:a9:fd:3b:9c:d6:02:45:ec:09:48:12:47:93:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 4 17:30:03 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=87415dc28529df7de2560743ef209a0955befc5ad28521e9b573c4a8ed8e3d5b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0b:23:a1:9a:4f:27:06:47:c1:8f:0b:d4:d1: f6:5a:a4:50:87:7d:4b:56:46:16:76:7a:a4:5b:da: 5a:f6:01:2b:2d:21:1b:44:5a:07:5c:d7:c6:79:f8: 80:cb:71:c5:2e:b9:ec:68:f6:75:89:f5:f5:37:f3: f4:d6:e8:24:f0:1c:19:61:37:2a:ae:80:37:62:8a: 67:12:cb:79:e9:90:3c:ea:39:53:85:bb:a7:3c:09: 39:ae:4c:2d:05:25:cb:d7:c3:4f:c8:a1:16:93:56: 47:64:29:52:af:28:18:fa:3e:cf:3b:a6:23:da:3a: a1:67:2c:f7:23:0a:b3:ac:24:15:a0:96:5d:48:de: d7:4c:87:b0:e7:ef:cb:45:29:48:50:d9:de:e3:a7: 18:5b:5b:63:03:db:29:c8:e3:92:76:c0:02:ee:8e: f4:f8:e7:83:bc:82:ab:05:a8:00:09:21:3b:ee:aa: 04:af:1d:74:92:fd:09:03:a7:af:a0:e9:5b:11:71: 36:23:2d:05:24:b4:a4:89:47:19:07:43:29:2c:8d: c3:49:21:14:b8:21:44:ed:c0:bf:1b:0a:30:c8:7a: b4:9d:4b:03:67:99:48:bb:c6:e4:a6:c6:01:53:c9: 78:b9:5f:83:5a:85:3f:96:75:55:fc:e5:a9:df:2f: c5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BF:E4:5C:C3:D7:7D:95:AC:E9:D7:CF:0B:BE:CD:31:39:5E:F9:49 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c7ca5bb9-77fb-485c-8036-ffef85993132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:da0::/44 Signature Algorithm: sha256WithRSAEncryption 41:00:23:e9:5c:6c:06:16:33:af:7e:e6:69:bc:98:25:fe:b5: 03:6b:11:3b:09:b4:9e:8a:c3:bb:1b:95:74:bb:fe:79:9c:b6: 12:99:11:08:e0:3e:38:c3:d9:b6:23:43:f1:1a:db:40:dd:94: 51:b9:b8:63:91:88:86:e6:81:3a:fa:18:c9:cf:0f:b0:87:5f: 11:dd:e4:d2:f9:24:ce:63:34:3e:1d:65:36:e3:f6:12:86:5d: 3a:f6:d9:7f:26:8d:a8:18:b2:87:9a:b2:6d:29:68:c7:27:92: 00:29:c0:f3:78:b1:de:72:3e:8a:29:a6:60:1f:70:9d:2e:42: 5d:38:fa:8a:ed:1a:64:ff:df:fb:f4:07:0a:43:6a:bd:b7:de: 42:1e:45:8b:ae:e2:de:a0:8f:33:58:09:2b:44:2b:14:b6:bd: cb:fd:e8:e2:f1:93:35:e9:d1:43:6d:90:51:8f:47:66:a7:57: b8:0d:4a:ae:80:2e:9d:9a:56:12:cd:af:b4:5f:df:1d:b0:e8: 1b:03:41:74:2f:c4:93:0e:aa:58:85:d8:c2:d4:df:6d:74:04: 14:d0:41:7a:0c:36:6b:1c:75:7b:ed:99:7f:d5:98:ad:2a:6f: c2:d9:f1:22:f6:e9:60:10:f2:b0:c0:f6:b6:ea:d3:44:e8:26: 64:1a:a0:bf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZGDzYbstqf07nNYCRewJSBJHk+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODA0MTczMDAzWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzQxNWRjMjg1MjlkZjdkZTI1NjA3NDNlZjIwOWEwOTU1 YmVmYzVhZDI4NTIxZTliNTczYzRhOGVkOGUzZDViMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSCyOhmk8nBkfBjwvU0fZapFCHfUtWRhZ2eqRb2lr2ASst IRtEWgdc18Z5+IDLccUuuexo9nWJ9fU38/TW6CTwHBlhNyqugDdiimcSy3npkDzq OVOFu6c8CTmuTC0FJcvXw0/IoRaTVkdkKVKvKBj6Ps87piPaOqFnLPcjCrOsJBWg ll1I3tdMh7Dn78tFKUhQ2d7jpxhbW2MD2ynI45J2wALujvT454O8gqsFqAAJITvu qgSvHXSS/QkDp6+g6VsRcTYjLQUktKSJRxkHQyksjcNJIRS4IUTtwL8bCjDIerSd SwNnmUi7xuSmxgFTyXi5X4NahT+WdVX85anfL8WBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUc7/kXMPXfZWs6dfPC77NMTle+UkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2M3Y2E1YmI5LTc3ZmItNDg1Yy04MDM2LWZmZWY4NTk5MzEzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADaAwDQYJKoZIhvcNAQELBQADggEBAEEAI+lcbAYWM69+5mm8mCX+ tQNrETsJtJ6Kw7sblXS7/nmcthKZEQjgPjjD2bYjQ/Ea20DdlFG5uGORiIbmgTr6 GMnPD7CHXxHd5NL5JM5jND4dZTbj9hKGXTr22X8mjagYsoeasm0paMcnkgApwPN4 sd5yPooppmAfcJ0uQl04+ortGmT/3/v0BwpDar233kIeRYuu4t6gjzNYCStEKxS2 vcv96OLxkzXp0UNtkFGPR2anV7gNSq6ALp2aVhLNr7Rf3x2w6BsDQXQvxJMOqliF 2MLU3210BBTQQXoMNmscdXvtmX/VmK0qb8LZ8SL26WAQ8rDA9rbq00ToJmQaoL8= -----END CERTIFICATE-----Generated at Wed Aug 6 12:26:04 2025 by rpki-client