$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa File: f0f08d8e-64f4-4e2b-8f33-26427783e662.roa (raw, json) Hash identifier: 4FmRLMGqFecS+7hwqrOsZJn/5guEMpI4vz1XtufWxOo= Subject key identifier: 79:9A:A8:88:DE:0C:72:F6:EE:63:14:9B:E8:8B:04:74:6B:84:00:4B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 330E9D82C9D7AE3F1418558AAD80B7E713E8D3A7 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa Signing time: Sat 12 Jul 2025 00:40:21 +0000 ROA not before: Sat 12 Jul 2025 00:40:21 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:54a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0e:9d:82:c9:d7:ae:3f:14:18:55:8a:ad:80:b7:e7:13:e8:d3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 12 00:40:21 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=ce66fb748e26d9f06ce0ac1e655deae389f93dd276fc3624b6b361da0abdeaa9, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:b7:55:62:1e:62:1c:ff:07:bf:55:b3:54: 75:c5:dc:45:e6:ec:52:de:b2:1a:85:17:52:38:99: fe:a0:0c:d6:79:be:db:ce:98:4a:17:f5:c2:66:09: 8c:c6:94:8a:74:4f:6e:c1:a7:6f:9d:02:b4:f7:b4: 4a:4e:85:eb:0a:43:a1:f8:36:57:83:92:0f:a8:db: f7:ac:ed:87:86:5c:30:49:c1:c2:99:d9:7d:2a:bd: 48:53:79:de:31:df:32:1b:9e:35:72:53:2e:95:85: 86:ff:89:ac:d1:d9:9f:06:85:b6:be:48:6b:50:d7: d4:40:f0:11:6e:ac:a7:d6:63:f4:a4:bf:94:7f:bb: f4:55:93:6c:d8:84:df:99:86:e7:27:20:32:57:38: c1:1a:87:6c:af:5f:6f:9e:95:33:bd:ef:b9:64:1e: 2b:8f:43:41:d7:d1:31:ab:e4:dd:0c:14:69:d1:78: 5c:cd:e5:90:14:cb:1b:16:bf:b5:01:30:f0:0c:05: 7e:9d:58:57:04:99:ed:a7:15:87:b6:7f:a0:f0:a9: e5:32:e3:14:f5:b5:7b:97:4a:98:2d:76:c2:d7:99: d5:2b:25:85:cf:18:32:f9:d4:c4:06:4b:69:26:7a: 5d:c0:2d:eb:6a:ab:8f:03:70:78:97:1d:96:d2:ee: 7a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9A:A8:88:DE:0C:72:F6:EE:63:14:9B:E8:8B:04:74:6B:84:00:4B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54a::/48 Signature Algorithm: sha256WithRSAEncryption 52:67:c2:f6:bd:0f:bb:1c:53:07:a4:03:e3:3d:a0:bd:7a:5a: 54:7d:3f:2d:8c:f3:19:ae:98:88:26:d8:ec:c7:66:eb:6a:5b: 50:d0:cf:91:02:07:61:12:f6:37:91:e3:a3:bc:f1:dd:73:bd: 1c:c9:83:bc:bb:86:70:a5:6a:a9:43:e7:b5:98:d3:b4:42:61: 27:b1:00:17:50:e4:36:4f:95:9c:5d:eb:7a:b6:df:c0:8a:50: 70:31:84:e8:85:2c:56:8e:5a:18:db:88:6b:b7:5c:bb:1d:30: a0:7c:f4:25:53:11:12:be:b6:ad:19:d9:05:26:7f:d3:46:12: 64:50:78:61:6c:0e:47:45:44:54:75:70:96:0d:c9:51:6c:46: bd:9e:99:57:95:2f:98:2f:dd:19:8a:c9:cb:f0:0c:6a:bc:2f: 35:b2:9c:0f:5e:d2:4f:ff:c2:06:35:ff:b6:8e:1c:d0:89:33: e4:4e:4c:8c:1f:5b:bf:6b:34:98:58:ef:6e:01:28:7a:dc:b9: 92:07:1c:c4:8e:3c:94:30:b6:0f:b5:ed:24:f1:ef:3c:c2:b8: 28:45:ed:57:97:39:16:c6:ff:df:3f:2d:fc:20:4e:c4:53:d3: 15:a0:3c:9a:db:a4:fb:3b:fa:fa:69:cf:36:a1:4f:4c:fa:31: 36:7f:0f:16 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMw6dgsnXrj8UGFWKrYC35xPo06cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzEyMDA0MDIxWhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTY2ZmI3NDhlMjZkOWYwNmNlMGFjMWU2NTVkZWFlMzg5 ZjkzZGQyNzZmYzM2MjRiNmIzNjFkYTBhYmRlYWE5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl9rdVYh5iHP8Hv1WzVHXF3EXm7FLeshqFF1I4mf6gDNZ5 vtvOmEoX9cJmCYzGlIp0T27Bp2+dArT3tEpOhesKQ6H4NleDkg+o2/es7YeGXDBJ wcKZ2X0qvUhTed4x3zIbnjVyUy6VhYb/iazR2Z8Ghba+SGtQ19RA8BFurKfWY/Sk v5R/u/RVk2zYhN+ZhucnIDJXOMEah2yvX2+elTO977lkHiuPQ0HX0TGr5N0MFGnR eFzN5ZAUyxsWv7UBMPAMBX6dWFcEme2nFYe2f6DwqeUy4xT1tXuXSpgtdsLXmdUr JYXPGDL51MQGS2kmel3ALetqq48DcHiXHZbS7nrFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUeZqoiN4McvbuYxSb6IsEdGuEAEswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YwZjA4ZDhlLTY0ZjQtNGUyYi04ZjMzLTI2NDI3NzgzZTY2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUowDQYJKoZIhvcNAQELBQADggEBAFJnwva9D7scUwekA+M9oL16 WlR9Py2M8xmumIgm2OzHZutqW1DQz5ECB2ES9jeR46O88d1zvRzJg7y7hnClaqlD 57WY07RCYSexABdQ5DZPlZxd63q238CKUHAxhOiFLFaOWhjbiGu3XLsdMKB89CVT ERK+tq0Z2QUmf9NGEmRQeGFsDkdFRFR1cJYNyVFsRr2emVeVL5gv3RmKycvwDGq8 LzWynA9e0k//wgY1/7aOHNCJM+ROTIwfW79rNJhY724BKHrcuZIHHMSOPJQwtg+1 7STx7zzCuChF7VeXORbG/98/LfwgTsRT0xWgPJrbpPs7+vppzzahT0z6MTZ/DxY= -----END CERTIFICATE-----Generated at Mon Aug 4 22:22:35 2025 by rpki-client