$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa File: 354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa (raw, json) Hash identifier: DPzZpMGTnfxthkjCdnCQ/HKnhbigj8hN4PQBJIsHNPc= Subject key identifier: 0F:F9:84:2B:ED:37:AB:AE:F9:98:42:E7:C2:7B:60:53:1E:7D:F7:1B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2E57F7BF9536894A546785AB1038E91CC28E8BE9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa Signing time: Mon 21 Jul 2025 16:20:50 +0000 ROA not before: Mon 21 Jul 2025 16:20:50 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:57:f7:bf:95:36:89:4a:54:67:85:ab:10:38:e9:1c:c2:8e:8b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:20:50 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=4e9cee3d3e2c4785a036bd813241b23a5c853286b2ca59c2434f27ba972f9d3e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:0c:de:a8:da:ea:c1:d5:fc:45:7b:79:1a: ad:6d:d5:2e:72:91:f5:95:fd:0d:ea:f3:81:c3:05: 51:f7:5e:ab:82:71:1b:ba:ef:64:e1:bd:51:38:26: 2b:9e:2e:f4:66:11:c1:e7:15:18:47:67:78:96:89: f5:02:70:a0:3b:d2:11:68:24:7f:e3:a9:8a:2f:16: 26:df:9a:29:96:b7:57:11:3c:76:aa:6c:d1:a5:0d: 4f:ec:62:b7:28:a4:7e:21:0c:d9:08:89:a3:90:fe: d0:ab:36:46:99:85:07:9c:80:d3:cf:c7:db:d7:ea: 16:97:78:8f:1d:65:83:73:cd:d3:a6:e4:53:17:0e: 2a:0f:7f:d5:13:7e:4e:13:82:64:3c:8e:49:53:00: 0e:28:2f:aa:28:80:41:ff:95:c6:d1:39:03:60:0a: 7c:20:99:52:0f:b6:f6:d8:80:80:a3:82:00:39:a1: 5e:2a:c7:1a:9b:6a:d9:90:aa:28:71:49:83:9d:d2: de:e0:af:b1:ac:07:99:37:48:66:25:aa:a5:73:7d: f8:a0:9c:99:ff:2e:69:fa:94:dd:ae:fd:97:ed:a3: 20:ae:fb:8a:55:6a:e7:e1:a4:b6:3b:6c:e1:24:b8: 2b:73:66:fc:26:9c:04:45:22:ea:6e:57:7d:4e:23: 4c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F9:84:2B:ED:37:AB:AE:F9:98:42:E7:C2:7B:60:53:1E:7D:F7:1B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c12::/48 Signature Algorithm: sha256WithRSAEncryption 08:11:75:c4:5a:b9:1d:40:d4:d9:72:72:16:ae:f6:9d:36:f3: 11:0c:13:33:79:81:5d:6c:1c:53:f2:72:2d:3f:81:ed:29:74: 22:cf:75:23:92:5e:94:77:af:97:13:0e:d2:2e:e4:71:ce:c4: 03:62:e0:36:65:29:e0:92:d6:74:41:70:54:a0:c1:f2:e9:0e: a4:5a:ac:17:73:f3:c9:a0:e0:63:b5:86:0b:92:89:e8:b4:98: 0f:29:27:a6:23:b0:f5:07:58:4c:cd:79:fe:cd:9d:4f:81:53: f4:35:d5:22:26:a6:ff:a2:46:80:60:b1:6d:31:63:4e:8f:c6: b0:4d:c3:f8:ab:f1:0a:33:6f:c9:7f:b3:73:5b:1b:a2:2b:00: 92:04:10:2a:bf:0b:e2:cc:be:c7:b4:e6:6f:c9:01:f0:9e:6c: 9a:dd:f8:2b:5d:3a:8e:c2:0a:90:bf:fd:f6:e7:4e:89:ae:e7: ff:72:d6:b5:1c:bb:f7:69:cb:ea:62:54:a8:79:28:51:1e:3e: 42:44:2e:ee:48:84:da:23:ab:09:f7:b5:44:a6:6e:ef:4f:f6: 83:8e:da:db:e8:a3:a9:d4:b6:63:fe:d0:d6:95:e3:24:24:a6: 45:21:b8:17:ce:ce:82:97:25:c1:7c:4b:9c:c8:08:59:49:bf: 3e:96:b9:89 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULlf3v5U2iUpUZ4WrEDjpHMKOi+kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYyMDUwWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTljZWUzZDNlMmM0Nzg1YTAzNmJkODEzMjQxYjIzYTVj ODUzMjg2YjJjYTU5YzI0MzRmMjdiYTk3MmY5ZDNlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxmwzeqNrqwdX8RXt5Gq1t1S5ykfWV/Q3q84HDBVH3XquC cRu672ThvVE4JiueLvRmEcHnFRhHZ3iWifUCcKA70hFoJH/jqYovFibfmimWt1cR PHaqbNGlDU/sYrcopH4hDNkIiaOQ/tCrNkaZhQecgNPPx9vX6haXeI8dZYNzzdOm 5FMXDioPf9UTfk4TgmQ8jklTAA4oL6oogEH/lcbROQNgCnwgmVIPtvbYgICjggA5 oV4qxxqbatmQqihxSYOd0t7gr7GsB5k3SGYlqqVzffignJn/Lmn6lN2u/ZftoyCu +4pVaufhpLY7bOEkuCtzZvwmnARFIupuV31OI0xVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUD/mEK+03q675mELnwntgUx599xswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM1NGJhMWFiLTZiZDItNDhlZS1iZGFkLWUxZjM5NTRiMDJhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBIwDQYJKoZIhvcNAQELBQADggEBAAgRdcRauR1A1Nlychau9p02 8xEMEzN5gV1sHFPyci0/ge0pdCLPdSOSXpR3r5cTDtIu5HHOxANi4DZlKeCS1nRB cFSgwfLpDqRarBdz88mg4GO1hguSiei0mA8pJ6YjsPUHWEzNef7NnU+BU/Q11SIm pv+iRoBgsW0xY06PxrBNw/ir8Qozb8l/s3NbG6IrAJIEECq/C+LMvse05m/JAfCe bJrd+CtdOo7CCpC//fbnTomu5/9y1rUcu/dpy+piVKh5KFEePkJELu5IhNojqwn3 tUSmbu9P9oOO2tvoo6nUtmP+0NaV4yQkpkUhuBfOzoKXJcF8S5zICFlJvz6WuYk= -----END CERTIFICATE-----Generated at Thu Jul 24 04:52:44 2025 by rpki-client