$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa File: f7068e3e-0b73-43e3-83c2-9df613575814.roa (raw, json) Hash identifier: hIPWbjaPlvyHqdZdXxLjPz0RuY6Oe743LKSSPbciWeU= Subject key identifier: FF:D4:2A:95:57:AB:62:4B:A1:EB:DD:45:89:8E:22:EA:94:E8:8D:63 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 39945E22095366BB6C2785FBB21CF6298E5433A7 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa Signing time: Fri 11 Jul 2025 18:10:14 +0000 ROA not before: Fri 11 Jul 2025 18:10:14 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:547::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:94:5e:22:09:53:66:bb:6c:27:85:fb:b2:1c:f6:29:8e:54:33:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:10:14 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=16c5009e801ea64ddd143b29e379dba4633839391da7867270a6c422cc2a53b5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:fd:24:a8:ce:1a:8e:5a:a3:b7:42:cb:d8: 1d:79:2d:10:25:ff:70:ca:59:ba:a4:fe:f4:ca:39: f6:e8:61:cc:18:10:51:17:99:82:93:e5:f9:eb:5e: 72:2f:57:82:2c:c0:f7:9c:24:0b:b8:fd:23:b3:42: f3:fb:8a:1c:49:4b:4c:cb:46:e7:8a:d1:7b:e5:29: 74:58:d3:b1:f4:51:65:dc:ea:c5:8a:8f:52:bf:02: a2:60:0e:d2:14:6d:25:97:c4:67:cb:70:81:74:58: 48:58:39:6d:dc:1a:8b:5c:41:a5:53:c2:64:68:ad: c7:ee:38:51:e5:08:ab:09:05:c3:10:d4:70:5b:ba: b9:2d:77:d3:bd:66:77:94:10:62:21:03:c8:df:e2: c1:fb:48:b9:94:7c:8a:eb:38:b4:49:d5:b0:8e:27: 15:e2:c6:bf:f5:9d:e7:ae:89:c2:90:6b:ec:1f:f4: 9a:c5:46:c2:9a:3a:2d:21:b2:a7:b1:bd:d6:95:63: d9:57:fe:9d:f7:e6:bd:7b:3c:b5:b0:d6:6a:7e:42: 72:9f:6d:5a:1f:ae:38:67:f5:60:68:71:7a:1f:ba: 97:86:09:20:74:34:c4:7c:09:af:5e:34:95:8c:1d: 53:19:c2:f4:7c:32:ed:62:40:45:47:31:36:64:b6: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D4:2A:95:57:AB:62:4B:A1:EB:DD:45:89:8E:22:EA:94:E8:8D:63 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:547::/48 Signature Algorithm: sha256WithRSAEncryption 92:5e:5d:12:b3:4c:12:bd:a4:c9:fd:51:ac:14:65:fd:ef:ff: f0:07:91:0b:7a:02:01:5e:7d:5e:22:09:19:2f:f3:5e:b6:7b: 5c:08:79:61:c5:1d:a0:3e:e8:5c:00:d7:6a:30:c3:cc:af:bd: 7a:e6:20:d3:9f:bd:a6:eb:06:65:0a:7a:55:c6:17:79:92:e9: 16:b8:05:8e:5a:22:36:ee:f2:c1:73:da:87:bd:34:61:50:84: 04:db:87:60:a1:c5:a9:82:c4:df:0a:83:ea:48:a7:a1:37:9b: 9d:13:bf:d3:93:6a:54:42:63:ea:9a:ea:ef:39:00:90:5a:31: cd:26:a3:55:31:2f:1e:63:d6:b9:94:e5:8e:7a:dd:3e:0c:46: c0:23:59:54:3c:19:df:aa:8a:1f:50:41:49:ce:41:23:b2:d9: 1a:18:70:bc:c2:51:20:ef:ec:ca:6b:28:4a:33:be:02:41:02: 86:d7:53:ed:7f:09:b6:d2:77:32:fe:e9:ef:5c:8c:17:aa:cf: 4c:0a:03:cc:c9:e4:07:77:b1:75:0d:5f:d6:b5:3f:1b:41:70: d8:55:b7:b8:d1:4b:b5:56:ea:16:e7:bd:41:d4:69:92:f5:21: 01:0c:b0:44:24:24:e8:0b:a8:c0:87:4d:c9:ae:a3:40:7d:7f: c7:45:ed:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOZReIglTZrtsJ4X7shz2KY5UM6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMDE0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmM1MDA5ZTgwMWVhNjRkZGQxNDNiMjllMzc5ZGJhNDYz MzgzOTM5MWRhNzg2NzI3MGE2YzQyMmNjMmE1M2I1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoev0kqM4ajlqjt0LL2B15LRAl/3DKWbqk/vTKOfboYcwY EFEXmYKT5fnrXnIvV4IswPecJAu4/SOzQvP7ihxJS0zLRueK0XvlKXRY07H0UWXc 6sWKj1K/AqJgDtIUbSWXxGfLcIF0WEhYOW3cGotcQaVTwmRorcfuOFHlCKsJBcMQ 1HBburktd9O9ZneUEGIhA8jf4sH7SLmUfIrrOLRJ1bCOJxXixr/1neeuicKQa+wf 9JrFRsKaOi0hsqexvdaVY9lX/p335r17PLWw1mp+QnKfbVofrjhn9WBocXofupeG CSB0NMR8Ca9eNJWMHVMZwvR8Mu1iQEVHMTZktkE7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/9QqlVerYkuh691FiY4i6pTojWMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y3MDY4ZTNlLTBiNzMtNDNlMy04M2MyLTlkZjYxMzU3NTgxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUcwDQYJKoZIhvcNAQELBQADggEBAJJeXRKzTBK9pMn9UawUZf3v //AHkQt6AgFefV4iCRkv8162e1wIeWHFHaA+6FwA12oww8yvvXrmINOfvabrBmUK elXGF3mS6Ra4BY5aIjbu8sFz2oe9NGFQhATbh2ChxamCxN8Kg+pIp6E3m50Tv9OT alRCY+qa6u85AJBaMc0mo1UxLx5j1rmU5Y563T4MRsAjWVQ8Gd+qih9QQUnOQSOy 2RoYcLzCUSDv7MprKEozvgJBAobXU+1/CbbSdzL+6e9cjBeqz0wKA8zJ5Ad3sXUN X9a1PxtBcNhVt7jRS7VW6hbnvUHUaZL1IQEMsEQkJOgLqMCHTcmuo0B9f8dF7fQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:04:20 2025 by rpki-client