$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce035316-a06e-4b49-a04d-0f1a5ca31246.roa File: ce035316-a06e-4b49-a04d-0f1a5ca31246.roa (raw, json) Hash identifier: 3ax/+cNH8AN0mNW5fnGQ5Fdqtkg9nHHMecEAr6hl9+Y= Subject key identifier: AB:1A:79:7C:D2:7E:45:06:24:FB:9E:15:49:0E:41:5A:5C:17:39:DE Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 724304A7E63A53F8CBC8B9CBD53A8BA4A5F4FBEB Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce035316-a06e-4b49-a04d-0f1a5ca31246.roa Signing time: Mon 21 Jul 2025 16:30:18 +0000 ROA not before: Mon 21 Jul 2025 16:30:18 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:43:04:a7:e6:3a:53:f8:cb:c8:b9:cb:d5:3a:8b:a4:a5:f4:fb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:30:18 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=4f92bfbc7b765a20d9d0d91ffb0d86b585330a1a9d20e61833f9dd279a61f0e0, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:88:d2:f8:a7:cb:53:8e:f6:fe:9c:f4:ee: 76:a9:21:9c:40:0c:e3:0c:00:62:bc:fc:28:d3:1f: 2b:6c:df:13:be:51:f9:a8:8b:08:6c:36:ad:10:14: e3:34:b8:2d:d9:b2:71:8f:7e:f9:15:de:0f:65:00: be:8a:72:f3:5f:75:8e:64:9a:24:eb:fc:88:bf:db: b4:61:07:01:65:58:1f:a4:df:ac:ab:35:d4:60:eb: c7:03:6d:e2:d1:11:ce:0d:28:41:7f:56:94:7a:e7: 57:f4:20:40:a5:48:11:a2:29:5a:a2:37:2b:a3:7b: 46:c7:76:97:3a:e2:fa:eb:e6:95:7e:e1:96:04:e9: a1:2a:4e:96:97:d2:a3:70:f0:df:d6:48:0d:3e:43: 19:0d:c7:ae:5f:44:f5:67:5a:35:3f:27:0e:8a:96: 70:9a:e2:b5:46:52:d5:81:87:e2:32:40:e8:cb:f2: af:cf:5e:8d:a9:8d:87:cf:81:86:53:41:25:e2:f9: 97:9e:a5:53:fc:c4:c1:6c:26:ff:e1:16:af:fe:dc: 02:b8:89:ed:3f:5b:43:94:5b:e2:cb:54:b1:d5:d6: ed:de:28:00:08:e8:a0:d6:d7:7a:e9:33:bd:d8:29: 4d:3e:b4:e6:34:93:33:da:fc:f0:50:f2:7d:d5:53: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:79:7C:D2:7E:45:06:24:FB:9E:15:49:0E:41:5A:5C:17:39:DE X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce035316-a06e-4b49-a04d-0f1a5ca31246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c18::/48 Signature Algorithm: sha256WithRSAEncryption 23:a2:12:03:78:f6:70:6e:74:8c:58:07:5c:97:68:9a:d8:96: fa:cc:92:68:8d:ef:0b:fc:e8:4e:51:dc:17:85:d7:3f:91:6c: 6f:e2:dc:a6:cc:22:40:1f:43:22:25:8c:98:c9:e7:4d:5b:a4: 9b:24:e0:14:eb:b3:de:c6:f5:f5:af:05:ae:5d:1d:dc:64:e5: 9a:98:52:22:d4:79:15:42:11:c0:66:2d:d5:9b:41:09:bd:25: 9f:15:58:02:6e:59:f8:9c:a1:21:a1:24:fe:e9:2f:f3:04:56: 7e:b8:e7:fd:b3:02:ac:b4:36:48:81:80:fb:3a:9d:0d:18:5e: ed:6f:79:03:b5:ab:8c:8f:50:70:47:e1:5f:3a:54:59:b9:11: bb:e8:17:cc:76:10:90:34:1d:36:c9:e1:a9:db:f1:19:02:b4: 35:a0:b4:81:cf:cb:fc:b4:e1:0a:6a:55:3d:29:22:f6:0a:d4: 67:81:6c:fb:1d:51:90:4e:60:54:34:60:86:c1:12:7a:9e:9d: 09:d8:9e:fb:07:6d:fb:ec:24:a5:1f:02:83:98:5b:b6:9a:eb: 4e:fd:dd:27:f8:40:c8:7a:a7:b7:12:81:62:d4:06:16:84:c5: d5:ac:58:13:02:73:1b:80:40:90:f5:02:74:4e:07:f7:7c:48: 6d:ea:72:c2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUckMEp+Y6U/jLyLnL1TqLpKX0++swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYzMDE4WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjkyYmZiYzdiNzY1YTIwZDlkMGQ5MWZmYjBkODZiNTg1 MzMwYTFhOWQyMGU2MTgzM2Y5ZGQyNzlhNjFmMGUwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCra4jS+KfLU472/pz07napIZxADOMMAGK8/CjTHyts3xO+ UfmoiwhsNq0QFOM0uC3ZsnGPfvkV3g9lAL6KcvNfdY5kmiTr/Ii/27RhBwFlWB+k 36yrNdRg68cDbeLREc4NKEF/VpR651f0IEClSBGiKVqiNyuje0bHdpc64vrr5pV+ 4ZYE6aEqTpaX0qNw8N/WSA0+QxkNx65fRPVnWjU/Jw6KlnCa4rVGUtWBh+IyQOjL 8q/PXo2pjYfPgYZTQSXi+ZeepVP8xMFsJv/hFq/+3AK4ie0/W0OUW+LLVLHV1u3e KAAI6KDW13rpM73YKU0+tOY0kzPa/PBQ8n3VU3eVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqxp5fNJ+RQYk+54VSQ5BWlwXOd4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NlMDM1MzE2LWEwNmUtNGI0OS1hMDRkLTBmMWE1Y2EzMTI0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBgwDQYJKoZIhvcNAQELBQADggEBACOiEgN49nBudIxYB1yXaJrY lvrMkmiN7wv86E5R3BeF1z+RbG/i3KbMIkAfQyIljJjJ501bpJsk4BTrs97G9fWv Ba5dHdxk5ZqYUiLUeRVCEcBmLdWbQQm9JZ8VWAJuWficoSGhJP7pL/MEVn645/2z Aqy0NkiBgPs6nQ0YXu1veQO1q4yPUHBH4V86VFm5EbvoF8x2EJA0HTbJ4anb8RkC tDWgtIHPy/y04QpqVT0pIvYK1GeBbPsdUZBOYFQ0YIbBEnqenQnYnvsHbfvsJKUf AoOYW7aa60793Sf4QMh6p7cSgWLUBhaExdWsWBMCcxuAQJD1AnROB/d8SG3qcsI= -----END CERTIFICATE-----Generated at Mon Aug 4 21:39:23 2025 by rpki-client