$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ea014712-964e-4c9e-bacc-2630e4e451b2.roa File: ea014712-964e-4c9e-bacc-2630e4e451b2.roa (raw, json) Hash identifier: Wi73da5Tm083q4z2p0EH96Y0yQEbwBHZr30GCz2S+U4= Subject key identifier: 0F:7A:66:AB:88:3D:32:53:8F:FF:CA:1C:B9:7B:26:0A:A1:B1:88:D8 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4FDBBA30C1731F54E26CD9D5449BC4692751F8B5 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ea014712-964e-4c9e-bacc-2630e4e451b2.roa Signing time: Fri 11 Jul 2025 18:11:34 +0000 ROA not before: Fri 11 Jul 2025 18:11:34 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:db:ba:30:c1:73:1f:54:e2:6c:d9:d5:44:9b:c4:69:27:51:f8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:11:34 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=f2234649fa299ddd23ce60b31274ab72379e9b25c7b5c3f29f33f7bfc39c8e1a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:2e:a4:86:10:24:44:83:49:37:6f:ea:21: e2:9b:17:7b:e1:04:3b:f1:b6:0d:1d:d8:32:ca:6c: 26:7f:f1:dd:ff:8e:d6:a0:7c:37:a0:6f:b0:9e:28: be:48:e9:23:61:0f:bf:fc:dc:f2:e5:a6:18:ce:d3: d6:52:23:e9:99:ea:ed:1e:95:fd:06:bb:32:a4:a1: cd:4e:bc:7a:c9:95:3c:70:88:1d:0a:c1:51:15:b4: 35:2b:90:c1:5f:76:66:b6:19:e8:c1:5f:94:6a:31: c6:a3:ad:0a:ca:53:85:29:e6:05:0a:f8:44:a9:22: f4:08:06:62:72:f4:12:34:98:08:6b:f2:e6:d7:f7: 7a:f8:91:e3:5f:b2:9a:02:94:ab:95:be:ba:41:df: 28:be:91:6b:af:38:c7:a2:09:b6:ce:88:00:05:d1: 0d:2b:b1:d7:90:29:b4:d7:9d:b4:6f:53:05:60:d3: 8a:90:3b:81:bb:90:a1:5e:76:11:ea:cb:91:d3:17: 08:12:d6:3d:25:fc:1f:2b:bf:46:11:61:7d:c4:69: cc:df:4d:dc:f3:1e:8b:f3:4b:8a:27:4c:47:ee:f6: 40:cd:de:c4:1a:97:b6:ab:22:ef:35:32:8e:fa:e2: 37:14:5e:a3:78:f4:58:06:de:e7:3d:9c:77:2e:bf: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7A:66:AB:88:3D:32:53:8F:FF:CA:1C:B9:7B:26:0A:A1:B1:88:D8 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ea014712-964e-4c9e-bacc-2630e4e451b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:d00::/40 Signature Algorithm: sha256WithRSAEncryption 90:15:47:27:c2:ab:be:47:2b:86:0d:58:34:9a:3a:96:4a:0c: 9d:ef:85:34:a5:b9:bf:50:43:46:83:56:5c:a8:20:1e:c5:7d: 9c:5d:de:57:3e:df:53:f1:be:7d:ba:66:13:4a:8a:66:46:3a: 35:49:8f:d7:52:4a:6d:f7:17:ed:6c:81:69:e4:8e:54:9a:4a: 73:21:b7:ce:02:7e:70:1b:cf:3c:f1:a4:53:fb:ba:20:01:4a: 1e:fc:89:6c:80:3c:ad:4c:14:02:72:cc:53:e7:7e:5e:c5:75: 63:00:a6:1e:3f:98:c6:36:db:81:35:02:92:4e:6f:a6:72:d5: f3:6d:a9:df:c9:02:0c:8f:53:22:fa:9a:e3:13:63:a9:4c:12: 77:dd:04:75:bc:58:d2:2b:c5:cc:61:fc:71:d9:ce:07:65:06: 46:2c:cb:85:0f:d7:3d:cf:3b:89:76:53:11:11:58:7d:a0:b1: 8a:2e:b1:65:66:d1:71:b0:82:08:33:62:8e:68:1f:a8:43:b7: 12:b1:2f:65:58:81:97:a2:63:4b:d1:37:c8:ad:2b:f2:80:5b: ca:88:1a:b4:a1:83:2b:5d:38:7c:5e:35:38:3c:96:f2:80:eb: 5a:3d:96:0a:7f:37:27:de:8a:98:1e:e1:71:13:55:e5:3c:46: f1:8e:0b:45 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUT9u6MMFzH1TibNnVRJvEaSdR+LUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMTM0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjIzNDY0OWZhMjk5ZGRkMjNjZTYwYjMxMjc0YWI3MjM3 OWU5YjI1YzdiNWMzZjI5ZjMzZjdiZmMzOWM4ZTFhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEPS6khhAkRINJN2/qIeKbF3vhBDvxtg0d2DLKbCZ/8d3/ jtagfDegb7CeKL5I6SNhD7/83PLlphjO09ZSI+mZ6u0elf0GuzKkoc1OvHrJlTxw iB0KwVEVtDUrkMFfdma2GejBX5RqMcajrQrKU4Up5gUK+ESpIvQIBmJy9BI0mAhr 8ubX93r4keNfspoClKuVvrpB3yi+kWuvOMeiCbbOiAAF0Q0rsdeQKbTXnbRvUwVg 04qQO4G7kKFedhHqy5HTFwgS1j0l/B8rv0YRYX3EaczfTdzzHovzS4onTEfu9kDN 3sQal7arIu81Mo764jcUXqN49FgG3uc9nHcuvwCHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUD3pmq4g9MlOP/8ocuXsmCqGxiNgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2VhMDE0NzEyLTk2NGUtNGM5ZS1iYWNjLTI2MzBlNGU0NTFiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBZzADTANBgkqhkiG9w0BAQsFAAOCAQEAkBVHJ8Krvkcrhg1YNJo6lkoM ne+FNKW5v1BDRoNWXKggHsV9nF3eVz7fU/G+fbpmE0qKZkY6NUmP11JKbfcX7WyB aeSOVJpKcyG3zgJ+cBvPPPGkU/u6IAFKHvyJbIA8rUwUAnLMU+d+XsV1YwCmHj+Y xjbbgTUCkk5vpnLV822p38kCDI9TIvqa4xNjqUwSd90EdbxY0ivFzGH8cdnOB2UG RizLhQ/XPc87iXZTERFYfaCxii6xZWbRcbCCCDNijmgfqEO3ErEvZViBl6JjS9E3 yK0r8oBbyogatKGDK104fF41ODyW8oDrWj2WCn83J96KmB7hcRNV5TxG8Y4LRQ== -----END CERTIFICATE-----Generated at Mon Aug 4 14:21:04 2025 by rpki-client