$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa File: f67723c2-64ad-4374-9b2b-3c1633b90448.roa (raw, json) Hash identifier: 0HIxc5YvblSox83rqo+E7E6zWB9zh5xaxMrfI7ayRrQ= Subject key identifier: 1B:59:28:39:B7:89:9D:6A:02:03:C4:82:04:3E:09:6D:82:24:EE:57 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 011480E1346D788A46738E14D6F04EE1D29CA7B6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa Signing time: Fri 11 Jul 2025 18:10:58 +0000 ROA not before: Fri 11 Jul 2025 18:10:58 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:39c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:14:80:e1:34:6d:78:8a:46:73:8e:14:d6:f0:4e:e1:d2:9c:a7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:10:58 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=843586b16837d6e92613e94b38fb342f975c3b59ff85386587dd053ca6f8c559, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:06:1a:b8:1b:43:97:9e:14:43:38:56:1a: 66:2d:e8:f5:71:cc:6d:3a:c9:4c:af:28:8f:2b:8f: 09:ed:a8:b6:ad:1e:e7:33:5d:91:5a:f0:57:d1:17: 9d:6f:37:36:e6:06:e8:66:c7:d0:51:75:f6:46:a8: 8b:da:fe:73:d9:3f:3a:63:1b:4d:18:26:84:06:5d: 67:c1:49:41:89:58:32:3b:ce:10:8c:09:34:5c:35: e4:86:51:47:b6:8c:e5:31:ab:8f:e5:e5:1e:ca:20: 6b:c1:0f:f9:fe:d0:48:7a:a1:fa:29:48:df:9a:54: bd:5a:f4:86:6c:ed:e1:9b:bc:03:3a:9a:c0:7b:83: 6d:76:b2:6a:15:af:50:e4:f4:ba:09:38:b7:da:26: 24:ce:0d:7e:5e:f4:79:33:08:84:a6:49:9a:8d:5e: 5a:34:af:78:13:33:6c:0b:f2:47:18:f0:a3:71:d6: ed:16:10:09:d1:c2:f2:07:89:65:fb:04:c3:59:b4: 24:e0:84:34:d7:94:97:5d:86:a1:24:9d:7e:ae:9f: 92:02:00:25:7a:b2:7e:2d:28:3a:e0:b6:20:1d:33: fa:8a:a8:33:26:9a:10:4a:c2:c0:20:84:46:f9:b1: eb:41:46:0d:d6:c9:28:8f:cb:05:c9:d5:71:6f:cf: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:59:28:39:B7:89:9D:6A:02:03:C4:82:04:3E:09:6D:82:24:EE:57 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:39c::/48 Signature Algorithm: sha256WithRSAEncryption 71:9e:71:60:44:85:06:de:d3:f1:cc:d1:45:b7:e1:02:56:b1: 56:8b:85:b9:84:c0:55:08:9e:c6:2a:43:bd:12:71:40:b8:b5: 7e:a1:72:92:3e:da:21:aa:fa:20:09:06:e5:29:84:60:d2:4d: ea:e6:69:90:b6:0b:03:60:6f:dc:66:04:56:fb:d3:b4:91:bc: 09:0f:bd:d5:d0:3e:b2:86:90:6b:1e:c3:13:ff:25:3c:bb:05: a2:e3:dd:af:1c:df:8b:36:cc:7d:0c:a1:7f:14:eb:62:58:d1: 68:dd:d8:ab:0f:9f:73:e7:08:d5:ca:80:2c:0c:12:8b:7a:68: 52:1e:e6:af:78:bf:eb:62:fd:98:94:51:af:87:dc:14:06:55: 6a:fd:b7:34:50:b0:cf:6e:f9:a8:a8:d9:e2:d6:72:ed:fa:98: e4:da:c6:51:e9:3f:30:05:dd:a9:e0:96:b9:7b:1f:87:78:04: 42:2a:ef:b9:ab:67:59:1e:68:c9:16:84:63:f1:60:c7:c5:bf: 27:e0:39:14:ca:c7:e8:3c:66:30:9c:27:4d:37:6a:53:f9:f1: 75:34:39:21:74:d2:74:35:77:3c:6e:9b:3c:4a:83:ce:b7:55: ff:b8:1f:a4:a9:0f:d2:96:50:d8:27:4a:a1:57:66:01:8a:02: 52:63:1f:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUARSA4TRteIpGc44U1vBO4dKcp7YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMDU4WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDM1ODZiMTY4MzdkNmU5MjYxM2U5NGIzOGZiMzQyZjk3 NWMzYjU5ZmY4NTM4NjU4N2RkMDUzY2E2ZjhjNTU5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJnQYauBtDl54UQzhWGmYt6PVxzG06yUyvKI8rjwntqLat HuczXZFa8FfRF51vNzbmBuhmx9BRdfZGqIva/nPZPzpjG00YJoQGXWfBSUGJWDI7 zhCMCTRcNeSGUUe2jOUxq4/l5R7KIGvBD/n+0Eh6ofopSN+aVL1a9IZs7eGbvAM6 msB7g212smoVr1Dk9LoJOLfaJiTODX5e9HkzCISmSZqNXlo0r3gTM2wL8kcY8KNx 1u0WEAnRwvIHiWX7BMNZtCTghDTXlJddhqEknX6un5ICACV6sn4tKDrgtiAdM/qK qDMmmhBKwsAghEb5setBRg3WySiPywXJ1XFvz+8FAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUG1koObeJnWoCA8SCBD4JbYIk7lcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y2NzcyM2MyLTY0YWQtNDM3NC05YjJiLTNjMTYzM2I5MDQ0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5wwDQYJKoZIhvcNAQELBQADggEBAHGecWBEhQbe0/HM0UW34QJW sVaLhbmEwFUInsYqQ70ScUC4tX6hcpI+2iGq+iAJBuUphGDSTermaZC2CwNgb9xm BFb707SRvAkPvdXQPrKGkGsewxP/JTy7BaLj3a8c34s2zH0MoX8U62JY0Wjd2KsP n3PnCNXKgCwMEot6aFIe5q94v+ti/ZiUUa+H3BQGVWr9tzRQsM9u+aio2eLWcu36 mOTaxlHpPzAF3anglrl7H4d4BEIq77mrZ1keaMkWhGPxYMfFvyfgORTKx+g8ZjCc J003alP58XU0OSF00nQ1dzxumzxKg863Vf+4H6SpD9KWUNgnSqFXZgGKAlJjH8o= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:20 2025 by rpki-client