$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8a5ff071-2589-4b8f-bab2-ab661880d472.roa File: 8a5ff071-2589-4b8f-bab2-ab661880d472.roa (raw, json) Hash identifier: 4Jh/kiShZYcrxzeUffFNeXhQqAXAMUdvzwcyEruN29o= Subject key identifier: 6D:06:DE:1B:75:6E:F5:6A:FC:6F:AA:9F:09:93:F8:75:2D:07:A7:D0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0188D17259B403F1B9B4DADB4B21762A19EF465E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8a5ff071-2589-4b8f-bab2-ab661880d472.roa Signing time: Tue 01 Jul 2025 15:00:08 +0000 ROA not before: Tue 01 Jul 2025 15:00:08 +0000 ROA not after: Tue 05 Aug 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:3c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:d1:72:59:b4:03:f1:b9:b4:da:db:4b:21:76:2a:19:ef:46:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 1 15:00:08 2025 GMT Not After : Aug 5 23:59:59 2025 GMT Subject: serialNumber=9427d4e58e069c2f7d71c5001601454aa37b93be0ebbe3afd89bb6f8c3e761f7, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b3:4e:bf:40:f4:4d:50:cd:4d:6e:cb:62:78: 61:53:06:7b:52:d2:8c:7b:cb:d1:03:fc:0c:37:53: 1b:b2:ec:c0:8b:1a:98:ec:66:3b:e1:b6:93:0f:2a: 52:a9:4e:71:17:0c:4a:37:e6:3a:b9:a7:b7:81:b5: 5e:10:2e:dd:ba:8f:8e:18:0f:99:94:16:9d:9e:a5: fc:7c:18:bd:97:48:a1:51:76:e3:a3:82:91:29:bf: da:4c:d9:00:d6:3d:c2:68:6a:a6:37:ce:bf:b9:b3: 9b:ff:7f:15:5e:51:3d:5a:8f:26:0c:c4:bd:25:dd: 70:85:0c:06:97:8f:ef:bf:c2:ca:7c:a9:f4:7c:3f: 70:61:ae:65:2d:4a:68:9c:6b:13:9f:01:81:fa:58: 46:25:81:b8:6f:3f:51:80:63:30:66:2e:74:23:b9: b2:3b:da:cf:4c:d7:a7:41:10:8e:cf:c6:a5:80:08: 5e:f5:21:be:95:c3:77:df:5b:ec:53:66:80:e4:3b: 15:5a:42:9c:d8:75:5f:f6:67:1c:2c:b6:4c:63:b1: fa:d4:20:4f:8c:1e:64:c0:88:2a:2c:8f:a6:b3:91: 87:1a:be:13:11:57:ac:94:cc:3d:4e:8a:0a:54:4d: a6:71:dd:8e:0d:f8:02:18:8f:89:f2:88:3b:6f:8e: 31:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:06:DE:1B:75:6E:F5:6A:FC:6F:AA:9F:09:93:F8:75:2D:07:A7:D0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8a5ff071-2589-4b8f-bab2-ab661880d472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3c2::/48 Signature Algorithm: sha256WithRSAEncryption 11:da:34:17:d1:50:e8:df:c1:6e:d8:93:67:69:bc:a3:37:00: aa:87:60:46:0c:31:f8:d1:e4:15:2b:40:9b:51:7a:2f:fa:d2: 31:6e:de:3c:dc:01:fd:86:ec:8b:f6:4a:f9:00:a5:99:52:77: 64:6a:4b:5a:5a:6d:04:d1:cf:0d:bb:35:66:03:4f:45:66:e6: b0:d4:34:57:0b:ea:5b:c9:9b:1a:57:8c:3e:88:a0:ce:6c:e2: 75:eb:5a:f2:d0:d7:b9:cb:7e:33:9a:fa:03:5b:81:e4:5b:2d: 66:77:46:15:53:ac:ee:a2:94:16:4e:e2:8c:62:95:79:0f:34: c4:77:a0:e5:91:89:ea:ae:11:c8:b9:64:55:76:32:b1:40:d8: 6a:86:f9:72:41:7c:72:ef:2d:8c:45:3d:1a:1c:02:d1:b7:1d: 55:ac:af:0d:a8:5a:e6:35:5b:92:94:0c:bb:1d:be:bb:79:c1: ef:2d:93:9c:f3:f0:fe:65:1f:06:6b:b8:b6:80:bf:5e:eb:19: 9f:73:82:66:f4:a3:0c:97:05:56:12:2c:82:37:e8:34:aa:88: bd:12:2c:ce:25:09:00:a9:3e:02:91:8b:10:57:b4:59:e7:f1: 9c:63:40:c7:62:55:e4:44:b6:ca:ad:94:82:6d:59:fd:7e:6f: aa:f2:7c:15 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAYjRclm0A/G5tNrbSyF2KhnvRl4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzAxMTUwMDA4WhcNMjUwODA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDI3ZDRlNThlMDY5YzJmN2Q3MWM1MDAxNjAxNDU0YWEz N2I5M2JlMGViYmUzYWZkODliYjZmOGMzZTc2MWY3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2s06/QPRNUM1NbstieGFTBntS0ox7y9ED/Aw3Uxuy7MCL GpjsZjvhtpMPKlKpTnEXDEo35jq5p7eBtV4QLt26j44YD5mUFp2epfx8GL2XSKFR duOjgpEpv9pM2QDWPcJoaqY3zr+5s5v/fxVeUT1ajyYMxL0l3XCFDAaXj++/wsp8 qfR8P3BhrmUtSmicaxOfAYH6WEYlgbhvP1GAYzBmLnQjubI72s9M16dBEI7PxqWA CF71Ib6Vw3ffW+xTZoDkOxVaQpzYdV/2ZxwstkxjsfrUIE+MHmTAiCosj6azkYca vhMRV6yUzD1OigpUTaZx3Y4N+AIYj4nyiDtvjjExAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbQbeG3Vu9Wr8b6qfCZP4dS0Hp9AwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzhhNWZmMDcxLTI1ODktNGI4Zi1iYWIyLWFiNjYxODgwZDQ3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8IwDQYJKoZIhvcNAQELBQADggEBABHaNBfRUOjfwW7Yk2dpvKM3 AKqHYEYMMfjR5BUrQJtRei/60jFu3jzcAf2G7Iv2SvkApZlSd2RqS1pabQTRzw27 NWYDT0Vm5rDUNFcL6lvJmxpXjD6IoM5s4nXrWvLQ17nLfjOa+gNbgeRbLWZ3RhVT rO6ilBZO4oxilXkPNMR3oOWRiequEci5ZFV2MrFA2GqG+XJBfHLvLYxFPRocAtG3 HVWsrw2oWuY1W5KUDLsdvrt5we8tk5zz8P5lHwZruLaAv17rGZ9zgmb0owyXBVYS LII36DSqiL0SLM4lCQCpPgKRixBXtFnn8ZxjQMdiVeREtsqtlIJtWf1+b6ryfBU= -----END CERTIFICATE-----Generated at Thu Jul 24 04:53:55 2025 by rpki-client