$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b367b14-b5b6-43fd-a421-784e5caa4455.roa File: 1b367b14-b5b6-43fd-a421-784e5caa4455.roa (raw, json) Hash identifier: sVYq9DWlVKtv/y2ZQ22iYY1XDhAMe9vdgAiCcWYNHjg= Subject key identifier: B7:8A:2D:F0:94:94:5A:2C:7C:6E:EA:4C:35:47:F1:6E:B3:FA:80:E4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3124715DE46579019055D64277F1819D0C976FA1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b367b14-b5b6-43fd-a421-784e5caa4455.roa Signing time: Fri 15 Aug 2025 15:20:18 +0000 ROA not before: Fri 15 Aug 2025 15:20:18 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:24:71:5d:e4:65:79:01:90:55:d6:42:77:f1:81:9d:0c:97:6f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 15 15:20:18 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=d4f3b78fc0cc6b4d4287da29062e6c5b9832388aeedbf39b2339997b926c4d4f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:de:d1:17:2e:0a:8b:c8:80:13:1e:fb:8a:46: 46:9b:7f:a6:54:1d:1f:06:f1:45:94:c3:a6:12:6b: b9:15:77:98:7e:24:b3:8a:f7:b4:ac:89:6e:0e:fe: 14:f9:d3:11:b4:cb:06:78:f3:6e:93:82:34:21:43: 33:5d:59:56:a2:62:d4:94:3f:83:11:10:f6:de:e1: a4:cb:cd:e2:53:be:5b:71:63:d8:76:76:e2:5e:d3: ba:de:f1:c3:60:8f:86:bd:28:c5:fd:03:94:b6:21: 30:25:57:34:ff:12:63:fb:98:ff:0d:a5:07:d4:a5: 79:f1:f8:99:50:3a:01:9d:f1:70:ae:38:6d:76:ec: f5:7b:65:c8:40:d9:b9:c7:b1:7d:5b:7e:68:b8:9c: b4:dc:42:d7:13:5d:15:8c:5a:df:c6:34:e2:10:d3: fb:61:00:45:ce:d9:ae:34:31:1c:a6:57:69:e6:b7: 6c:fa:41:0e:a9:37:a2:02:d2:97:07:7a:95:a6:54: 19:be:b6:67:ca:4a:88:3b:4b:07:58:13:3e:ec:bc: cc:30:49:e8:5a:ac:91:d5:93:c6:26:64:b4:08:c3: a6:12:d8:16:33:5c:b1:b3:64:b5:68:68:6a:b1:57: c9:2d:34:54:4b:a4:b7:0d:77:9b:2e:1b:05:a3:a5: eb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8A:2D:F0:94:94:5A:2C:7C:6E:EA:4C:35:47:F1:6E:B3:FA:80:E4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b367b14-b5b6-43fd-a421-784e5caa4455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1c::/48 Signature Algorithm: sha256WithRSAEncryption 5d:cc:fd:e6:6f:a2:55:92:67:e5:24:d5:c9:56:7a:9a:68:4f: a0:e1:38:ed:aa:30:40:59:14:4a:5a:be:ab:62:c5:d2:94:64: 30:f0:1b:22:5e:cc:d5:90:95:57:dd:99:6f:e7:89:14:f3:96: 25:94:96:af:e5:c4:8b:83:2f:94:ba:8b:44:cb:6e:50:6d:91: 38:43:1f:8c:6f:e0:68:d0:21:f1:c6:82:a9:20:93:1a:a1:a6: a4:32:6d:27:98:2b:ca:39:87:ce:91:e9:77:79:0f:fe:b9:be: e0:f1:9c:48:4d:ba:aa:ed:be:32:95:cf:6c:c0:b6:ff:e5:e4: df:f0:c3:2f:c4:b0:dc:99:56:d3:a4:70:80:21:f4:9c:e3:90: 57:76:5e:6d:fa:fc:c3:67:fa:35:ed:e4:39:78:79:38:72:b9: 66:e0:4a:e4:55:86:72:45:33:ea:27:87:88:60:5b:ec:36:fc: 53:0c:2e:01:52:b2:91:72:15:87:41:ea:55:e8:ef:93:28:0f: ee:b5:77:57:28:cf:4e:a6:ee:f2:67:a3:99:09:27:6f:ef:cb: 9e:85:8c:42:37:6f:cd:85:f5:c0:48:d8:12:c0:39:60:a7:ea: 8d:83:71:ec:63:82:a1:e0:2e:f3:17:f0:35:2a:66:ce:fd:8b: c8:7f:7c:bb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMSRxXeRleQGQVdZCd/GBnQyXb6EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE1MTUyMDE4WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGYzYjc4ZmMwY2M2YjRkNDI4N2RhMjkwNjJlNmM1Yjk4 MzIzODhhZWVkYmYzOWIyMzM5OTk3YjkyNmM0ZDRmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDw3tEXLgqLyIATHvuKRkabf6ZUHR8G8UWUw6YSa7kVd5h+ JLOK97SsiW4O/hT50xG0ywZ4826TgjQhQzNdWVaiYtSUP4MREPbe4aTLzeJTvltx Y9h2duJe07re8cNgj4a9KMX9A5S2ITAlVzT/EmP7mP8NpQfUpXnx+JlQOgGd8XCu OG127PV7ZchA2bnHsX1bfmi4nLTcQtcTXRWMWt/GNOIQ0/thAEXO2a40MRymV2nm t2z6QQ6pN6IC0pcHepWmVBm+tmfKSog7SwdYEz7svMwwSeharJHVk8YmZLQIw6YS 2BYzXLGzZLVoaGqxV8ktNFRLpLcNd5suGwWjpetHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUt4ot8JSUWix8bupMNUfxbrP6gOQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFiMzY3YjE0LWI1YjYtNDNmZC1hNDIxLTc4NGU1Y2FhNDQ1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBwwDQYJKoZIhvcNAQELBQADggEBAF3M/eZvolWSZ+Uk1clWeppo T6DhOO2qMEBZFEpavqtixdKUZDDwGyJezNWQlVfdmW/niRTzliWUlq/lxIuDL5S6 i0TLblBtkThDH4xv4GjQIfHGgqkgkxqhpqQybSeYK8o5h86R6Xd5D/65vuDxnEhN uqrtvjKVz2zAtv/l5N/wwy/EsNyZVtOkcIAh9JzjkFd2Xm36/MNn+jXt5Dl4eThy uWbgSuRVhnJFM+onh4hgW+w2/FMMLgFSspFyFYdB6lXo75MoD+61d1coz06m7vJn o5kJJ2/vy56FjEI3b82F9cBI2BLAOWCn6o2DcexjgqHgLvMX8DUqZs79i8h/fLs= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:50 2025 by rpki-client