$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa File: f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa (raw, json) Hash identifier: ee2jeHiJ/ir7AVxUAk99G5n9XKqrWwBHzHcYQsq0Y6A= Subject key identifier: F1:2E:2E:B7:C2:A4:F9:57:7E:F0:D4:0C:30:B9:64:7B:CF:3B:D5:83 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 19E25E4986EF224F28E82F693EAC4E12FBB40300 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa Signing time: Fri 11 Jul 2025 18:11:17 +0000 ROA not before: Fri 11 Jul 2025 18:11:17 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e2:5e:49:86:ef:22:4f:28:e8:2f:69:3e:ac:4e:12:fb:b4:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:11:17 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=cad75dcf6ab64124c4f6b9639e5cc278d890ac35ce3dc78e3c76342837f06428, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a1:65:94:0c:e2:15:d6:b6:db:94:da:ac:6f: 15:f2:39:5e:ad:ad:aa:cd:e1:90:91:49:11:30:54: c2:e7:c5:49:cc:a8:35:61:17:7d:6e:e4:1a:c9:4d: ac:3b:93:92:45:27:ab:51:03:0e:0b:f4:cb:22:d8: b5:87:8b:54:b5:ba:63:b9:d2:8b:85:2c:ed:47:e0: b0:02:00:c2:97:cd:6f:7f:db:9c:7c:9d:af:42:83: b0:82:bc:fa:f6:ae:71:5d:4b:da:f5:36:b6:f8:21: 25:84:02:f8:fa:80:15:3c:c8:24:e0:d2:d0:50:45: 9b:12:24:ad:4b:1d:c0:d4:01:01:2d:86:40:da:9a: 5a:c5:9a:3c:87:c5:cc:d9:7b:6d:c4:d3:74:4f:23: 43:c5:3f:05:1a:ed:39:58:2d:a7:9c:8d:0a:f8:fa: a3:59:f7:20:05:b5:14:e0:51:b9:1b:71:79:33:0e: 3a:1b:79:09:f1:39:d0:1f:4d:cd:1a:56:70:f5:13: 55:90:05:53:d8:8f:b7:77:19:9d:44:6a:ab:ec:04: 9a:d2:c8:bf:e1:3f:38:00:79:da:a5:72:e2:2d:92: 80:aa:13:75:7b:b6:a5:a6:81:9f:88:18:12:9a:0a: ff:24:b5:05:d7:f7:f2:b0:4c:1a:df:0f:23:bc:b7: fc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2E:2E:B7:C2:A4:F9:57:7E:F0:D4:0C:30:B9:64:7B:CF:3B:D5:83 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f45e2fc4-e171-4aa3-862b-4af57208c9ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c23::/48 Signature Algorithm: sha256WithRSAEncryption 5b:c5:46:ac:9b:15:1d:4a:e5:a0:cf:41:2b:07:ab:4f:64:af: e0:1c:10:3f:c6:8f:af:58:37:92:ba:98:4a:24:52:61:a4:03: 5e:6f:f0:e5:c9:24:0c:f6:6a:5c:00:59:06:21:ce:12:7e:a3: f6:0e:e2:b1:a4:5f:d2:81:4d:68:c9:5c:8e:6a:ff:ee:36:a4: b8:ab:90:34:e4:2a:2d:d1:99:1c:fd:c5:a2:f5:6c:31:71:44: 06:6c:23:e0:60:24:2f:76:0e:f6:74:82:f2:fe:c3:3e:1e:58: 82:38:17:23:e9:a5:8a:3a:d7:aa:c5:65:51:70:7d:da:7a:35: 00:ff:31:d9:72:43:aa:4f:92:ae:09:64:81:ce:52:b3:6c:17: e7:7c:f0:6b:da:86:ca:5a:86:77:d7:1b:d9:93:23:e1:61:0d: f3:8f:8b:df:5a:a0:de:73:a5:3b:61:4f:2d:72:96:18:e5:cd: 41:0d:b4:1e:c9:4b:eb:38:1c:8f:7d:30:aa:18:b0:38:b0:b9: d4:c5:9d:f1:74:1d:1f:7a:0a:9a:95:a9:e2:30:b2:c2:46:b6: 2a:02:da:08:49:a5:38:ab:76:62:d1:fc:b5:30:b8:ce:22:28: 32:47:0d:fb:c7:80:9f:b1:fe:d7:69:dc:54:7a:ab:1f:49:b8: b1:6f:66:03 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGeJeSYbvIk8o6C9pPqxOEvu0AwAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMTE3WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWQ3NWRjZjZhYjY0MTI0YzRmNmI5NjM5ZTVjYzI3OGQ4 OTBhYzM1Y2UzZGM3OGUzYzc2MzQyODM3ZjA2NDI4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIoWWUDOIV1rbblNqsbxXyOV6trarN4ZCRSREwVMLnxUnM qDVhF31u5BrJTaw7k5JFJ6tRAw4L9Msi2LWHi1S1umO50ouFLO1H4LACAMKXzW9/ 25x8na9Cg7CCvPr2rnFdS9r1Nrb4ISWEAvj6gBU8yCTg0tBQRZsSJK1LHcDUAQEt hkDamlrFmjyHxczZe23E03RPI0PFPwUa7TlYLaecjQr4+qNZ9yAFtRTgUbkbcXkz DjobeQnxOdAfTc0aVnD1E1WQBVPYj7d3GZ1EaqvsBJrSyL/hPzgAedqlcuItkoCq E3V7tqWmgZ+IGBKaCv8ktQXX9/KwTBrfDyO8t/xzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8S4ut8Kk+Vd+8NQMMLlke8871YMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y0NWUyZmM0LWUxNzEtNGFhMy04NjJiLTRhZjU3MjA4YzllZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADCMwDQYJKoZIhvcNAQELBQADggEBAFvFRqybFR1K5aDPQSsHq09k r+AcED/Gj69YN5K6mEokUmGkA15v8OXJJAz2alwAWQYhzhJ+o/YO4rGkX9KBTWjJ XI5q/+42pLirkDTkKi3RmRz9xaL1bDFxRAZsI+BgJC92DvZ0gvL+wz4eWII4FyPp pYo616rFZVFwfdp6NQD/MdlyQ6pPkq4JZIHOUrNsF+d88GvahspahnfXG9mTI+Fh DfOPi99aoN5zpTthTy1ylhjlzUENtB7JS+s4HI99MKoYsDiwudTFnfF0HR96CpqV qeIwssJGtioC2ghJpTirdmLR/LUwuM4iKDJHDfvHgJ+x/tdp3FR6qx9JuLFvZgM= -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:29 2025 by rpki-client