$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/236e1f34-a86b-4928-aaad-0acf3ea60b6e.roa File: 236e1f34-a86b-4928-aaad-0acf3ea60b6e.roa (raw, json) Hash identifier: eLPBqMcKnDB8xYis0cBQLqC1QEB9cG2GT6EbtqoSfsk= Subject key identifier: AE:24:8E:46:A6:65:07:CD:B7:E7:DA:01:F7:9C:88:F4:D0:05:33:DA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5888FFBA94678E341D8A8C3E049BA8ADFC63C47A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/236e1f34-a86b-4928-aaad-0acf3ea60b6e.roa Signing time: Fri 15 Aug 2025 15:10:57 +0000 ROA not before: Fri 15 Aug 2025 15:10:57 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:88:ff:ba:94:67:8e:34:1d:8a:8c:3e:04:9b:a8:ad:fc:63:c4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 15 15:10:57 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=60cbc896592deb9e65cf84fd0a6b5a3d2a7de6e92c2b09f5977affd954cd0b4f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:5b:78:63:d1:98:60:98:0a:c3:3b:a7:f0: 8f:10:27:c9:23:f2:43:f3:b3:fd:1e:9f:20:f1:28: de:5c:13:bb:d8:e9:c5:5a:4f:44:64:97:f3:67:d3: 76:2c:c0:5f:6d:68:26:33:23:bd:58:bb:0d:42:df: 37:1a:a9:24:93:8d:79:35:fb:9a:d7:42:75:cb:80: 75:77:5b:3c:71:5c:f9:b3:03:5c:4b:f4:05:0b:55: d5:da:c8:0b:3a:5b:dd:ae:f9:7b:3c:d0:f3:bf:b1: d4:70:25:a9:4d:50:22:8c:bf:34:e8:a1:4d:8b:12: 76:43:be:69:eb:9e:5f:bb:93:57:8d:34:3a:88:3f: b9:ac:f2:ab:45:21:f0:d4:af:bb:25:cb:e9:61:d9: 58:86:b9:56:c7:3a:b4:69:98:31:3f:5f:0f:98:b2: 58:c6:b6:65:79:59:11:49:17:f2:c5:eb:13:48:0d: 00:e7:2f:74:39:68:ef:c2:05:41:f1:4a:93:b5:16: af:75:8d:0e:96:65:41:bc:9a:4e:05:cd:d9:cf:db: a5:8b:c7:b3:cf:8e:a6:11:82:b6:fa:ab:4b:5c:fc: 0c:73:aa:6b:f6:6f:d3:2e:01:a2:8c:4b:74:c7:f9: 6c:d4:ff:bd:e7:a0:f9:c4:82:c7:ac:b2:2e:60:e7: 8b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:24:8E:46:A6:65:07:CD:B7:E7:DA:01:F7:9C:88:F4:D0:05:33:DA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/236e1f34-a86b-4928-aaad-0acf3ea60b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c09::/48 Signature Algorithm: sha256WithRSAEncryption a2:fa:4e:68:4b:4f:c3:06:24:22:8a:b9:92:a6:9f:e6:07:bb: 6f:f8:69:dc:5f:60:99:77:07:2b:b0:12:de:fc:aa:4c:51:3b: e6:8f:a8:dd:17:23:bd:e9:46:5e:2c:0d:7d:68:95:43:a9:22: 4a:59:b6:aa:b3:21:9c:84:19:3d:22:5e:df:4d:ba:08:a7:70: 5e:95:2e:e1:f9:9a:e9:4c:bc:72:0d:22:9c:b1:cb:9c:da:7c: 95:d2:a2:6f:4e:97:7d:27:8d:13:b7:6f:63:12:9b:01:ec:a4: 77:e8:32:7e:16:1a:57:bb:c1:42:40:95:dc:3b:31:dc:c3:8b: fa:f3:1a:cf:02:41:7f:6b:e7:f9:46:df:83:48:a9:e9:fa:8a: 1c:b5:ad:21:51:f3:0a:65:cb:32:b2:3e:ad:c8:22:05:cb:0e: 8c:6c:57:8a:3d:b3:10:b1:7d:bc:fb:ea:fe:58:f0:de:a3:f1: fe:cc:1d:77:35:b9:fc:77:3f:18:53:32:ba:e1:8b:26:6e:13: 24:d3:72:dd:56:26:17:e4:19:2e:2d:9a:35:93:e6:a4:8a:4b: 6b:0b:aa:26:a9:d4:f2:64:21:3a:29:32:ac:98:76:cb:18:42: 61:c6:f3:0f:37:bc:b1:e1:48:cd:39:2f:ed:8b:f1:eb:d4:93: bb:a9:60:53 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWIj/upRnjjQdiow+BJuorfxjxHowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE1MTUxMDU3WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGNiYzg5NjU5MmRlYjllNjVjZjg0ZmQwYTZiNWEzZDJh N2RlNmU5MmMyYjA5ZjU5NzdhZmZkOTU0Y2QwYjRmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6f1t4Y9GYYJgKwzun8I8QJ8kj8kPzs/0enyDxKN5cE7vY 6cVaT0Rkl/Nn03YswF9taCYzI71Yuw1C3zcaqSSTjXk1+5rXQnXLgHV3WzxxXPmz A1xL9AULVdXayAs6W92u+Xs80PO/sdRwJalNUCKMvzTooU2LEnZDvmnrnl+7k1eN NDqIP7ms8qtFIfDUr7sly+lh2ViGuVbHOrRpmDE/Xw+YsljGtmV5WRFJF/LF6xNI DQDnL3Q5aO/CBUHxSpO1Fq91jQ6WZUG8mk4FzdnP26WLx7PPjqYRgrb6q0tc/Axz qmv2b9MuAaKMS3TH+WzU/73noPnEgsessi5g54vNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUriSORqZlB82359oB95yI9NAFM9owHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzIzNmUxZjM0LWE4NmItNDkyOC1hYWFkLTBhY2YzZWE2MGI2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAkwDQYJKoZIhvcNAQELBQADggEBAKL6TmhLT8MGJCKKuZKmn+YH u2/4adxfYJl3ByuwEt78qkxRO+aPqN0XI73pRl4sDX1olUOpIkpZtqqzIZyEGT0i Xt9NugincF6VLuH5mulMvHINIpyxy5zafJXSom9Ol30njRO3b2MSmwHspHfoMn4W Gle7wUJAldw7MdzDi/rzGs8CQX9r5/lG34NIqen6ihy1rSFR8wplyzKyPq3IIgXL DoxsV4o9sxCxfbz76v5Y8N6j8f7MHXc1ufx3PxhTMrrhiyZuEyTTct1WJhfkGS4t mjWT5qSKS2sLqiap1PJkITopMqyYdssYQmHG8w83vLHhSM05L+2L8evUk7upYFM= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:54 2025 by rpki-client