$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f73b34f7-01b4-474f-a473-362785b20779.roa File: f73b34f7-01b4-474f-a473-362785b20779.roa (raw, json) Hash identifier: nAZf7YiHRlf8wczs1yyPqhGBfhvj+PFR85OBa3OpI90= Subject key identifier: 1E:E3:0F:B8:6A:1F:5C:1A:D9:F2:D9:F7:02:D5:6E:F5:28:D7:42:F9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4360942BF48E790D00496F8D5FE3D74E2EA97F2C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f73b34f7-01b4-474f-a473-362785b20779.roa Signing time: Mon 21 Jul 2025 16:31:07 +0000 ROA not before: Mon 21 Jul 2025 16:31:07 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:60:94:2b:f4:8e:79:0d:00:49:6f:8d:5f:e3:d7:4e:2e:a9:7f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:31:07 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=b2d3b222445eb5f9b407e49cedac07813271a6c0d88ae8be79ef4200a0d76934, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:77:b3:12:ec:f7:3b:f9:ea:3e:39:ef:2a: a1:64:e6:33:91:e2:b1:87:37:87:45:b1:7a:38:72: 50:0a:5e:4f:07:2b:41:80:7f:67:7a:3a:8b:fc:09: c6:43:f1:53:91:cb:2c:aa:53:0d:2e:82:dc:14:14: b5:e4:58:06:50:cb:01:03:f7:0b:03:df:87:44:cc: 45:83:cd:62:79:ab:0e:8f:76:33:41:63:19:dc:51: 88:24:f7:3d:e5:eb:2d:95:0b:3c:12:b0:d0:85:38: 60:c8:4c:4a:36:50:90:1d:fe:01:ff:2c:ac:4e:18: cf:75:35:54:ee:a0:76:79:61:7c:7b:1b:2e:ef:ca: ea:dd:5e:54:8c:d8:1c:12:59:51:3f:cc:f5:78:dc: 93:7e:93:6e:db:ea:d4:00:ad:ad:f8:69:74:ae:53: c0:e3:71:f3:19:b3:03:c1:d3:08:e4:4d:85:d4:e3: d4:ef:b7:a2:c7:f1:77:1f:58:8e:5d:9d:66:5e:95: 12:4d:c0:b3:64:55:ec:b0:2f:7c:3f:ff:64:ed:23: e0:c4:89:e7:9a:39:f5:44:14:ed:7a:5e:b8:32:73: ba:9b:8d:2b:bf:a0:9e:ef:54:ec:f1:48:a4:d5:64: 3b:e5:97:e5:49:04:40:95:b4:93:70:58:27:d8:55: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E3:0F:B8:6A:1F:5C:1A:D9:F2:D9:F7:02:D5:6E:F5:28:D7:42:F9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f73b34f7-01b4-474f-a473-362785b20779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1a::/48 Signature Algorithm: sha256WithRSAEncryption a0:06:25:55:b7:10:6d:84:0d:d5:cb:f7:7f:24:5e:4f:db:61: ed:d1:d8:aa:2a:07:3c:8c:2c:40:11:9d:3a:76:1e:fb:a8:fc: d2:67:40:e3:86:c3:ba:83:f8:38:f0:98:32:59:bc:44:35:e5: 22:a4:dd:ce:0f:2b:d8:d2:e0:73:57:8e:1c:a2:a9:b9:e8:62: d3:f9:0d:bb:77:fc:8b:3b:d3:58:15:37:d5:66:68:4e:2d:8e: 29:7c:6c:f8:bc:8f:b3:2e:ed:ad:d3:09:93:89:d6:6b:48:7c: dc:e3:41:6d:af:53:85:aa:9e:ff:ec:63:c7:f8:c8:f8:aa:c6: 7f:18:d7:48:ab:77:b9:f6:66:35:1c:37:0f:6d:2f:b5:25:25: 87:33:10:20:c7:c2:00:95:8c:e1:7e:41:c4:bd:07:19:da:73: dd:35:8d:e1:e0:63:5a:ef:37:43:34:a7:5d:7b:6d:ea:3a:0c: 4e:94:d1:c1:1d:96:5e:ad:a4:9f:54:a4:ec:6a:1c:3b:d7:3c: e3:4b:ab:72:85:b0:9d:7a:36:9f:c0:7e:db:d8:23:e2:a0:36: a8:22:d6:46:cb:05:6b:b3:e5:ae:03:26:14:dc:0e:77:ed:6f: b5:74:e5:7e:ff:a4:f4:3e:f6:c7:90:f1:87:64:98:6a:a9:48: cb:98:34:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ2CUK/SOeQ0ASW+NX+PXTi6pfywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYzMTA3WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmQzYjIyMjQ0NWViNWY5YjQwN2U0OWNlZGFjMDc4MTMy NzFhNmMwZDg4YWU4YmU3OWVmNDIwMGEwZDc2OTM0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0uHezEuz3O/nqPjnvKqFk5jOR4rGHN4dFsXo4clAKXk8H K0GAf2d6Oov8CcZD8VORyyyqUw0ugtwUFLXkWAZQywED9wsD34dEzEWDzWJ5qw6P djNBYxncUYgk9z3l6y2VCzwSsNCFOGDITEo2UJAd/gH/LKxOGM91NVTuoHZ5YXx7 Gy7vyurdXlSM2BwSWVE/zPV43JN+k27b6tQAra34aXSuU8DjcfMZswPB0wjkTYXU 49Tvt6LH8XcfWI5dnWZelRJNwLNkVeywL3w//2TtI+DEieeaOfVEFO16Xrgyc7qb jSu/oJ7vVOzxSKTVZDvll+VJBECVtJNwWCfYVeB9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHuMPuGofXBrZ8tn3AtVu9SjXQvkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y3M2IzNGY3LTAxYjQtNDc0Zi1hNDczLTM2Mjc4NWIyMDc3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBowDQYJKoZIhvcNAQELBQADggEBAKAGJVW3EG2EDdXL938kXk/b Ye3R2KoqBzyMLEARnTp2Hvuo/NJnQOOGw7qD+DjwmDJZvEQ15SKk3c4PK9jS4HNX jhyiqbnoYtP5Dbt3/Is701gVN9VmaE4tjil8bPi8j7Mu7a3TCZOJ1mtIfNzjQW2v U4Wqnv/sY8f4yPiqxn8Y10ird7n2ZjUcNw9tL7UlJYczECDHwgCVjOF+QcS9Bxna c901jeHgY1rvN0M0p117beo6DE6U0cEdll6tpJ9UpOxqHDvXPONLq3KFsJ16Np/A ftvYI+KgNqgi1kbLBWuz5a4DJhTcDnftb7V05X7/pPQ+9seQ8YdkmGqpSMuYNIg= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:21 2025 by rpki-client