$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dc95307b-87b9-475f-8acf-824b845b46f4.roa File: dc95307b-87b9-475f-8acf-824b845b46f4.roa (raw, json) Hash identifier: QYb6mcW8MrQQp9FkexcoxohXk3yhyT4sQKoOBUCwICE= Subject key identifier: 4B:16:46:65:89:15:D3:60:91:8C:87:D2:C0:45:F7:57:54:6B:48:2C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2979ADD67BF563A7F4313705BB5A0F9C4EFFD526 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dc95307b-87b9-475f-8acf-824b845b46f4.roa Signing time: Sat 12 Jul 2025 00:40:26 +0000 ROA not before: Sat 12 Jul 2025 00:40:26 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:610::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:79:ad:d6:7b:f5:63:a7:f4:31:37:05:bb:5a:0f:9c:4e:ff:d5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 12 00:40:26 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=506df5dae1a9f1d2a5d38910dd03ef79d9cdba63ba21a710a4ae54b9b9245c92, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:da:b2:64:e4:3f:56:2c:a0:86:90:2e:58: c5:f4:37:a7:28:1d:93:d2:85:dc:b7:19:13:2f:b5: 22:7d:5d:42:38:f6:53:b7:93:6f:bc:a6:72:f8:b2: 1a:34:a5:5b:de:3d:1a:e7:41:44:79:72:84:4d:1a: 17:0a:2e:3d:1e:da:a2:a5:ad:62:98:52:13:dc:32: cf:95:e3:56:41:6b:40:66:57:df:83:d9:d4:3b:e7: fd:f6:3a:16:57:aa:53:ae:09:ce:90:ba:d7:a0:57: c6:81:20:a0:3e:b4:e6:62:98:33:a3:9b:d4:4d:41: d0:f3:ec:e2:51:3a:76:95:ca:5c:37:c5:e6:6b:37: f8:8b:9a:d6:94:89:7d:55:a2:d5:9d:0e:93:f2:bd: e4:05:27:8c:6c:36:e8:71:1b:fb:1c:4e:31:d7:43: db:77:07:ad:22:fb:5d:08:ac:f4:5a:b1:77:af:87: 3f:48:5b:05:e8:72:18:dd:0a:6c:e6:26:82:d1:be: 86:83:77:b9:ea:eb:17:e7:01:6a:7d:9a:de:a7:e0: 3e:43:dd:7e:8d:63:d6:df:f6:9a:17:6e:cb:b1:78: 4a:04:3b:8f:93:49:0f:80:9e:15:d9:72:7a:dc:ca: 23:03:ab:14:da:9d:41:58:1c:e3:b5:90:dd:be:95: e3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:16:46:65:89:15:D3:60:91:8C:87:D2:C0:45:F7:57:54:6B:48:2C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dc95307b-87b9-475f-8acf-824b845b46f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:610::/48 Signature Algorithm: sha256WithRSAEncryption 5c:47:be:e4:a1:36:6d:1d:3a:30:f7:07:c6:0e:fd:ce:e2:a2: 5b:f5:9c:b2:66:78:82:cb:e8:c5:f9:a1:a4:ee:cb:6b:54:99: 54:00:a3:5e:2d:a5:6f:e0:ba:cb:3f:2a:f1:a1:21:cc:0d:e7: 38:61:c7:d6:80:01:cf:0c:82:bc:1a:1d:66:0c:8e:4b:3e:63: cb:7b:f2:7e:20:b7:da:55:95:40:df:73:87:7a:83:fd:05:62: 9f:6a:9c:76:bb:fc:41:39:b0:b2:85:c2:a2:c4:65:81:26:de: f3:96:bb:dc:46:11:73:f6:05:02:e1:81:05:f2:c7:ed:84:d2: 9e:7f:85:cd:f8:c1:fa:6e:74:c6:3c:4b:49:d9:a5:a6:a3:1b: 3e:b2:33:35:08:e4:88:58:a8:ee:c2:68:bf:ca:21:3f:87:c4: 38:d6:f3:09:bd:11:2d:a3:b8:0e:f3:2c:f5:41:02:40:3a:f7: a7:dc:3b:39:8a:1e:1c:6a:f9:09:7e:74:b4:e1:e0:1c:84:bd: 15:58:c6:8e:9d:58:01:20:92:36:a0:eb:52:0e:ad:66:69:68: fc:8d:ea:e2:d6:64:ac:3e:c1:70:90:53:6a:75:b1:54:4a:66: 1f:27:5d:18:c9:c5:01:3e:65:9d:40:b2:d9:af:eb:75:76:da: 6b:1d:89:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKXmt1nv1Y6f0MTcFu1oPnE7/1SYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzEyMDA0MDI2WhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDZkZjVkYWUxYTlmMWQyYTVkMzg5MTBkZDAzZWY3OWQ5 Y2RiYTYzYmEyMWE3MTBhNGFlNTRiOWI5MjQ1YzkyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxitqyZOQ/ViyghpAuWMX0N6coHZPShdy3GRMvtSJ9XUI4 9lO3k2+8pnL4sho0pVvePRrnQUR5coRNGhcKLj0e2qKlrWKYUhPcMs+V41ZBa0Bm V9+D2dQ75/32OhZXqlOuCc6QutegV8aBIKA+tOZimDOjm9RNQdDz7OJROnaVylw3 xeZrN/iLmtaUiX1VotWdDpPyveQFJ4xsNuhxG/scTjHXQ9t3B60i+10IrPRasXev hz9IWwXochjdCmzmJoLRvoaDd7nq6xfnAWp9mt6n4D5D3X6NY9bf9poXbsuxeEoE O4+TSQ+AnhXZcnrcyiMDqxTanUFYHOO1kN2+leOVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSxZGZYkV02CRjIfSwEX3V1RrSCwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2RjOTUzMDdiLTg3YjktNDc1Zi04YWNmLTgyNGI4NDViNDZmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhAwDQYJKoZIhvcNAQELBQADggEBAFxHvuShNm0dOjD3B8YO/c7i olv1nLJmeILL6MX5oaTuy2tUmVQAo14tpW/guss/KvGhIcwN5zhhx9aAAc8Mgrwa HWYMjks+Y8t78n4gt9pVlUDfc4d6g/0FYp9qnHa7/EE5sLKFwqLEZYEm3vOWu9xG EXP2BQLhgQXyx+2E0p5/hc34wfpudMY8S0nZpaajGz6yMzUI5IhYqO7CaL/KIT+H xDjW8wm9ES2juA7zLPVBAkA696fcOzmKHhxq+Ql+dLTh4ByEvRVYxo6dWAEgkjag 61IOrWZpaPyN6uLWZKw+wXCQU2p1sVRKZh8nXRjJxQE+ZZ1Astmv63V22msdiR0= -----END CERTIFICATE-----Generated at Mon Aug 4 21:47:03 2025 by rpki-client