$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa File: ef61cc60-17a6-4a87-9035-322b2907a5e5.roa (raw, json) Hash identifier: AZ04EzokNivbJufhkmKehCxDj4ta5VxEeqDXEAH+INM= Subject key identifier: 64:13:DF:18:19:03:86:D8:33:CA:B2:DF:70:52:0A:65:E4:C1:3D:34 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 787ED193BBC6CB202FB245B17173BB267B80FB0B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa Signing time: Mon 21 Jul 2025 16:31:12 +0000 ROA not before: Mon 21 Jul 2025 16:31:12 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7e:d1:93:bb:c6:cb:20:2f:b2:45:b1:71:73:bb:26:7b:80:fb:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:31:12 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=f122f3abe19a4683f5f002d0bf59ab3ae912f6b88c51df39377446f04eae3e0a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:fa:f7:28:70:a2:93:43:df:dc:2a:67:54: 65:ad:03:60:39:fb:4d:32:ef:9d:e2:48:b0:7d:a6: 29:36:82:9a:6f:d9:f4:ef:ef:43:5e:5a:c4:da:4c: 1a:c4:f2:72:9b:9c:61:43:e2:f3:b1:c2:30:02:29: 8f:c1:9c:c4:11:8d:23:41:04:73:47:46:c7:95:23: 75:b8:e4:b0:24:2b:a6:e6:77:d3:4c:04:43:c1:87: 85:d6:06:97:80:00:77:a2:dc:b0:a3:d6:82:db:39: eb:08:ce:82:fd:34:9d:d2:cd:b4:3a:bc:08:bd:6f: 10:0c:03:fa:04:83:38:a1:47:41:fa:26:ee:ea:c0: 84:e7:e7:f7:09:f0:53:2e:35:73:0c:34:5d:c0:55: d8:77:66:07:e8:94:b9:35:07:c7:6f:37:62:9f:89: f6:c8:fe:03:2f:29:eb:a4:44:58:ee:90:8b:86:9f: b8:25:7d:1c:4a:94:35:21:3f:ec:d4:46:94:3e:92: 9f:f8:b0:4c:0d:0c:3b:76:97:ce:2b:df:22:3c:6d: d4:c5:09:f8:7a:9f:b8:9c:96:e1:2f:50:21:7f:64: 95:8a:25:0d:1f:dc:27:9b:36:7c:50:2f:17:d7:24: 41:8d:ab:3b:05:12:f8:72:ad:1d:4f:df:64:30:a6: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:13:DF:18:19:03:86:D8:33:CA:B2:DF:70:52:0A:65:E4:C1:3D:34 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1c::/48 Signature Algorithm: sha256WithRSAEncryption 2b:61:db:4c:b5:af:8b:f7:0c:fc:c1:6e:6b:91:e9:40:7f:dc: 6b:6e:85:d0:cc:e2:16:6f:b1:60:98:60:c8:3f:d5:ca:e1:75: 17:cd:7d:7c:7d:58:0e:40:e0:09:1d:7a:c9:e5:d2:c4:b5:11: 9e:c7:2f:95:9a:11:e1:03:4d:91:ba:0e:4d:cb:23:be:a3:95: 7f:3c:0e:60:eb:27:42:25:cb:77:49:ae:32:0f:b5:0b:97:5d: 42:8b:c6:30:ad:74:75:d1:3d:08:cf:f5:54:3b:6c:99:af:a1: 24:59:74:21:71:eb:7e:05:c0:05:a8:7d:5a:6f:97:9c:d4:fe: f0:9f:b4:71:36:8c:3a:e5:96:0b:9a:8e:cc:fd:44:9a:f6:e4: d7:a1:c1:6a:05:9e:04:2b:a3:91:33:9d:9f:be:1f:da:a5:d0: f1:ef:3d:e0:76:7f:f7:76:d6:8a:35:f8:54:dc:72:58:09:46: 77:3f:38:ea:39:81:4f:a9:d3:27:9f:7a:23:10:0c:0e:47:dd: a6:ef:d6:c8:0a:97:db:04:cd:3f:6b:99:25:ee:12:81:c2:6d: 6f:34:85:45:e8:91:0f:1a:1d:5f:6c:ec:33:da:58:b2:72:7f: e0:a2:05:4c:be:b8:ed:47:56:31:77:7a:89:ce:43:19:f9:83: 8b:cb:6e:e4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeH7Rk7vGyyAvskWxcXO7JnuA+wswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYzMTEyWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTIyZjNhYmUxOWE0NjgzZjVmMDAyZDBiZjU5YWIzYWU5 MTJmNmI4OGM1MWRmMzkzNzc0NDZmMDRlYWUzZTBhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLv/r3KHCik0Pf3CpnVGWtA2A5+00y753iSLB9pik2gppv 2fTv70NeWsTaTBrE8nKbnGFD4vOxwjACKY/BnMQRjSNBBHNHRseVI3W45LAkK6bm d9NMBEPBh4XWBpeAAHei3LCj1oLbOesIzoL9NJ3SzbQ6vAi9bxAMA/oEgzihR0H6 Ju7qwITn5/cJ8FMuNXMMNF3AVdh3ZgfolLk1B8dvN2KfifbI/gMvKeukRFjukIuG n7glfRxKlDUhP+zURpQ+kp/4sEwNDDt2l84r3yI8bdTFCfh6n7icluEvUCF/ZJWK JQ0f3CebNnxQLxfXJEGNqzsFEvhyrR1P32QwpsQ3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZBPfGBkDhtgzyrLfcFIKZeTBPTQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2VmNjFjYzYwLTE3YTYtNGE4Ny05MDM1LTMyMmIyOTA3YTVlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBwwDQYJKoZIhvcNAQELBQADggEBACth20y1r4v3DPzBbmuR6UB/ 3GtuhdDM4hZvsWCYYMg/1crhdRfNfXx9WA5A4Akdesnl0sS1EZ7HL5WaEeEDTZG6 Dk3LI76jlX88DmDrJ0Ily3dJrjIPtQuXXUKLxjCtdHXRPQjP9VQ7bJmvoSRZdCFx 634FwAWofVpvl5zU/vCftHE2jDrllguajsz9RJr25NehwWoFngQro5EznZ++H9ql 0PHvPeB2f/d21oo1+FTcclgJRnc/OOo5gU+p0yefeiMQDA5H3abv1sgKl9sEzT9r mSXuEoHCbW80hUXokQ8aHV9s7DPaWLJyf+CiBUy+uO1HVjF3eonOQxn5g4vLbuQ= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:55 2025 by rpki-client