$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d2172b33-b6ce-4878-b487-295b9543d932.roa File: d2172b33-b6ce-4878-b487-295b9543d932.roa (raw, json) Hash identifier: sl3uK1CV1XctSk9yKF8CqjXm0IB1fu/MXEt5IG/CzPs= Subject key identifier: 5C:50:C4:7D:12:C7:4F:C3:41:07:70:DF:53:A1:AF:58:B7:75:FB:61 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 14E269077DD848DA702DAAE368B42087B5A306D6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d2172b33-b6ce-4878-b487-295b9543d932.roa Signing time: Fri 11 Jul 2025 18:10:51 +0000 ROA not before: Fri 11 Jul 2025 18:10:51 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:397::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e2:69:07:7d:d8:48:da:70:2d:aa:e3:68:b4:20:87:b5:a3:06:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:10:51 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=21399023bc6e1e249efc1a9b2ac4176db3eb2d9b8b5239897ec793ef689f1e26, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e9:8e:7c:bb:0e:52:86:29:7f:fb:2f:d6:7d: 83:9a:8c:a3:f6:1f:52:06:e0:7c:af:92:d5:3d:b8: cc:34:ea:20:01:94:d7:76:8e:87:90:f7:45:f8:a1: 3a:cd:ce:f4:1a:7b:92:a9:f5:1a:c7:a0:af:b1:0e: cc:d3:fe:3f:6e:aa:6f:d4:23:13:86:56:b2:ae:56: 1d:35:73:d6:b7:28:f5:0d:23:52:09:fb:6a:f7:a7: 0e:6b:14:ce:92:d3:58:63:ed:6a:38:9c:ae:20:a4: 76:33:1a:06:12:5f:52:e5:0a:9a:ac:3e:16:b4:73: 4a:4d:f9:42:be:11:ce:3b:20:e2:ad:e4:df:8a:63: 55:19:06:2a:30:03:b0:d7:68:d2:32:a1:ac:eb:af: 0f:5b:37:9e:e0:11:4f:8e:9f:4c:63:7a:77:2c:9f: 27:3c:be:18:c0:30:ab:dd:42:b0:12:be:03:88:31: 2d:c0:d7:94:59:8c:e6:d6:db:fb:6e:5e:5c:b0:1a: 51:78:57:d7:a6:73:e9:57:54:6e:14:1b:fd:82:1f: 63:a2:64:94:07:a4:25:a7:0d:9c:6d:06:d9:f3:15: 06:40:3c:22:a5:61:7d:31:a2:5d:52:9d:69:2a:a3: fb:12:62:21:32:67:86:62:5f:6f:56:e7:8d:d0:60: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:50:C4:7D:12:C7:4F:C3:41:07:70:DF:53:A1:AF:58:B7:75:FB:61 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d2172b33-b6ce-4878-b487-295b9543d932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:397::/48 Signature Algorithm: sha256WithRSAEncryption 0a:04:85:66:12:27:13:3d:fa:e7:3d:59:e8:d0:14:51:e5:37: ee:03:f0:bf:36:c9:ea:f9:5f:b1:bc:25:63:3e:7a:ef:43:45: da:52:87:63:23:7f:40:b3:73:5c:d6:f4:11:54:b0:7d:73:00: 95:ab:c8:6a:e8:6f:8a:eb:c0:87:d7:68:20:62:73:30:ef:d6: 39:28:03:92:cb:3a:44:35:c1:d9:89:64:ba:f0:57:e5:3b:3c: ac:22:ee:5b:b7:85:b6:16:ec:e3:ad:26:87:d3:95:c8:0e:50: 61:19:98:70:19:fa:02:98:cb:ac:52:34:be:db:7c:78:c2:b3: 88:73:20:01:b7:f6:53:cd:86:a2:32:68:03:55:86:db:96:c2: 32:0c:94:16:3f:06:dd:f7:72:f0:6b:26:9f:57:b9:b8:da:09: 1c:4c:fc:1b:8c:56:57:d6:0d:7c:2d:c8:54:18:7f:ce:65:a6: 0f:e0:e9:19:76:99:ce:fc:f2:80:e0:56:f1:10:8f:91:76:16: d2:75:09:05:de:a0:95:5a:55:71:fe:19:18:8b:fb:94:ed:4c: 10:1f:9d:00:6f:20:d8:f0:55:70:04:33:ee:95:84:df:59:4d: 4e:f3:69:5b:42:71:88:1a:d5:f2:7e:10:f5:a9:e2:af:f2:d8: 6e:7d:32:c2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFOJpB33YSNpwLarjaLQgh7WjBtYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMDUxWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTM5OTAyM2JjNmUxZTI0OWVmYzFhOWIyYWM0MTc2ZGIz ZWIyZDliOGI1MjM5ODk3ZWM3OTNlZjY4OWYxZTI2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDe6Y58uw5Shil/+y/WfYOajKP2H1IG4HyvktU9uMw06iAB lNd2joeQ90X4oTrNzvQae5Kp9RrHoK+xDszT/j9uqm/UIxOGVrKuVh01c9a3KPUN I1IJ+2r3pw5rFM6S01hj7Wo4nK4gpHYzGgYSX1LlCpqsPha0c0pN+UK+Ec47IOKt 5N+KY1UZBiowA7DXaNIyoazrrw9bN57gEU+On0xjencsnyc8vhjAMKvdQrASvgOI MS3A15RZjObW2/tuXlywGlF4V9emc+lXVG4UG/2CH2OiZJQHpCWnDZxtBtnzFQZA PCKlYX0xol1SnWkqo/sSYiEyZ4ZiX29W543QYMIXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXFDEfRLHT8NBB3DfU6GvWLd1+2EwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2QyMTcyYjMzLWI2Y2UtNDg3OC1iNDg3LTI5NWI5NTQzZDkzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5cwDQYJKoZIhvcNAQELBQADggEBAAoEhWYSJxM9+uc9WejQFFHl N+4D8L82yer5X7G8JWM+eu9DRdpSh2Mjf0Czc1zW9BFUsH1zAJWryGrob4rrwIfX aCBiczDv1jkoA5LLOkQ1wdmJZLrwV+U7PKwi7lu3hbYW7OOtJofTlcgOUGEZmHAZ +gKYy6xSNL7bfHjCs4hzIAG39lPNhqIyaANVhtuWwjIMlBY/Bt33cvBrJp9Xubja CRxM/BuMVlfWDXwtyFQYf85lpg/g6Rl2mc788oDgVvEQj5F2FtJ1CQXeoJVaVXH+ GRiL+5TtTBAfnQBvINjwVXAEM+6VhN9ZTU7zaVtCcYga1fJ+EPWp4q/y2G59MsI= -----END CERTIFICATE-----Generated at Mon Jul 21 23:22:34 2025 by rpki-client