$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ff4c7b2-a6a3-42fb-9f80-b7f5ffc66399.roa File: 3ff4c7b2-a6a3-42fb-9f80-b7f5ffc66399.roa (raw, json) Hash identifier: o2Kv+NN0MWAunBf2DWUEDiQIev6xhiomdoEQTQATJ+A= Subject key identifier: 5E:77:AF:14:00:80:5E:89:82:4A:68:E4:8B:5E:07:A3:94:00:15:E0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 511BFFA7E8EAABB971C86C3F783196C9C8A93352 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ff4c7b2-a6a3-42fb-9f80-b7f5ffc66399.roa Signing time: Mon 21 Jul 2025 16:11:10 +0000 ROA not before: Mon 21 Jul 2025 16:11:10 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:64d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1b:ff:a7:e8:ea:ab:b9:71:c8:6c:3f:78:31:96:c9:c8:a9:33:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:11:10 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=c48813afe0d02e588ff47b2c2ac40a9d2cccacb0cbf33366a335cba86d4cdff3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:b5:dd:87:a7:39:42:7f:97:d2:1c:e4:d2: 2d:c9:2a:27:2b:09:68:1e:bc:5c:9e:34:16:2d:da: d2:15:4a:f9:10:25:13:e5:f9:a1:14:bf:13:97:14: 0d:fa:ed:65:5a:8d:95:1b:e9:64:db:ba:b8:63:36: 60:ef:11:c5:7b:dc:2c:80:f6:16:82:6d:75:3b:1d: 5e:a9:7b:2e:11:a2:bd:fe:5f:cc:fe:6a:dc:00:4b: d9:41:4c:04:83:8b:b4:f9:76:34:b7:30:09:cd:b0: cf:06:58:40:db:d5:d8:50:b1:e4:f7:d2:f4:d5:83: 5a:73:4d:a6:34:cb:42:ad:40:d1:0c:04:64:05:a5: 30:65:23:04:1d:d5:4e:eb:43:6a:4a:1c:4f:18:5e: 4d:39:0b:5c:2a:c1:e8:db:17:44:11:70:43:09:3e: 64:e9:63:a1:9a:95:87:a7:cb:b4:3a:a8:59:0c:53: df:65:14:61:9e:ce:cc:3b:ba:ce:d6:d1:0c:7e:cb: 8c:b8:f2:fe:94:00:b0:ca:a4:54:41:8c:41:3e:1b: 0b:9d:6d:76:af:4e:73:18:23:38:8b:01:b6:f1:32: c5:c2:4f:03:f5:b1:c1:a7:c5:8d:3e:5b:cf:d6:74: f2:15:ec:d2:b6:57:76:99:90:c6:e0:65:0a:a4:42: 0b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:77:AF:14:00:80:5E:89:82:4A:68:E4:8B:5E:07:A3:94:00:15:E0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ff4c7b2-a6a3-42fb-9f80-b7f5ffc66399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:64d::/48 Signature Algorithm: sha256WithRSAEncryption a3:a5:45:7e:43:70:0e:f4:e0:3d:26:89:77:b4:f5:40:5b:3c: 3a:22:2a:10:40:f0:b0:e7:0e:72:33:45:ac:4f:ea:e5:a0:a6: d1:e8:47:f8:30:5b:7d:51:d2:35:3b:16:0a:e6:d9:e1:33:b3: e5:74:59:95:f4:e7:1d:ed:36:85:18:84:0f:40:b1:5b:14:4c: f0:2a:77:7d:c1:13:75:3d:da:54:40:49:7f:1c:77:3f:1d:af: 48:c4:e1:d9:2c:0d:13:98:be:e2:4c:35:22:9b:4f:5d:e4:25: 05:b4:73:b3:1b:0b:63:94:20:c4:ab:de:bc:a3:05:c8:9d:6f: 4a:53:9c:91:ef:00:f9:6b:79:e2:ed:44:be:3a:fb:f8:b1:22: 80:2a:2b:66:df:bd:e7:75:d8:42:51:33:c8:a4:a3:0b:55:df: 8c:df:b7:c2:15:70:c4:05:78:4a:c9:83:38:f9:ab:1b:41:e3: 57:4e:2e:fc:17:e9:f0:79:21:85:0c:cd:5f:f3:36:0b:ea:89: 9b:8b:5f:39:b6:a6:e0:11:55:12:f3:ec:87:1d:6b:44:7a:45: 01:c1:ef:25:89:91:0f:37:99:bb:fb:89:6d:b8:10:98:75:66: cd:db:4c:bf:67:2a:3e:25:ef:0e:97:38:a5:f5:62:e9:4d:f7: 80:e6:e1:d4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUURv/p+jqq7lxyGw/eDGWycipM1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYxMTEwWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDg4MTNhZmUwZDAyZTU4OGZmNDdiMmMyYWM0MGE5ZDJj Y2NhY2IwY2JmMzMzNjZhMzM1Y2JhODZkNGNkZmYzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrXbXdh6c5Qn+X0hzk0i3JKicrCWgevFyeNBYt2tIVSvkQ JRPl+aEUvxOXFA367WVajZUb6WTburhjNmDvEcV73CyA9haCbXU7HV6pey4Ror3+ X8z+atwAS9lBTASDi7T5djS3MAnNsM8GWEDb1dhQseT30vTVg1pzTaY0y0KtQNEM BGQFpTBlIwQd1U7rQ2pKHE8YXk05C1wqwejbF0QRcEMJPmTpY6GalYeny7Q6qFkM U99lFGGezsw7us7W0Qx+y4y48v6UALDKpFRBjEE+GwudbXavTnMYIziLAbbxMsXC TwP1scGnxY0+W8/WdPIV7NK2V3aZkMbgZQqkQguBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXnevFACAXomCSmjki14Ho5QAFeAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzNmZjRjN2IyLWE2YTMtNDJmYi05ZjgwLWI3ZjVmZmM2NjM5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABk0wDQYJKoZIhvcNAQELBQADggEBAKOlRX5DcA704D0miXe09UBb PDoiKhBA8LDnDnIzRaxP6uWgptHoR/gwW31R0jU7Fgrm2eEzs+V0WZX05x3tNoUY hA9AsVsUTPAqd33BE3U92lRASX8cdz8dr0jE4dksDROYvuJMNSKbT13kJQW0c7Mb C2OUIMSr3ryjBcidb0pTnJHvAPlreeLtRL46+/ixIoAqK2bfved12EJRM8ikowtV 34zft8IVcMQFeErJgzj5qxtB41dOLvwX6fB5IYUMzV/zNgvqiZuLXzm2puARVRLz 7Icda0R6RQHB7yWJkQ83mbv7iW24EJh1Zs3bTL9nKj4l7w6XOKX1YulN94Dm4dQ= -----END CERTIFICATE-----Generated at Thu Jul 24 04:51:06 2025 by rpki-client