$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa File: 3191e88d-746d-41d2-84db-9fc65334e5a8.roa (raw, json) Hash identifier: XHDnsHOn4HZew2PkjUVehcMNw+lwSj+hmBKAofZyBek= Subject key identifier: 8C:1B:1D:59:46:F8:9B:BE:1F:6F:8D:6E:FD:E1:EC:30:74:29:CC:02 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 15E79A5CE1D2A6F2425F3DFD91D67B0A8C037A25 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa Signing time: Mon 01 Sep 2025 18:50:53 +0000 ROA not before: Mon 01 Sep 2025 18:50:53 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:100::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e7:9a:5c:e1:d2:a6:f2:42:5f:3d:fd:91:d6:7b:0a:8c:03:7a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 1 18:50:53 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=060e202a3fde0172f33cdf22dcea1407aadd6a1295c327c15066d902f622e8d9, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:cb:16:fa:d7:00:bd:14:0b:c5:7d:96:d4: d2:89:c7:c2:b0:66:45:ae:3c:aa:cf:a4:1e:5c:d3: 93:d9:01:bb:e3:3f:e1:ab:92:27:d5:1b:c6:93:1f: 54:5b:ba:46:98:6c:5e:e3:74:fc:9d:78:71:e1:2e: 2d:9b:bc:c8:fb:d7:10:b3:f9:c2:e8:11:81:4c:89: 29:d0:01:07:9a:61:d6:ed:eb:ac:f6:fa:44:05:39: 04:0b:f3:7e:6b:a7:ec:f8:e5:32:69:d1:3a:6f:fa: 93:91:bf:e7:78:bc:68:cc:24:a1:e3:77:1b:89:e6: ed:9f:27:20:fb:21:d3:97:08:9c:eb:26:79:7b:5c: e2:ef:ff:78:2d:59:00:b2:84:e9:ea:f5:70:31:73: 5f:44:27:45:02:c5:ac:e7:f9:b7:79:05:44:30:89: 57:bc:4a:36:9b:9d:4e:42:dc:8d:da:13:41:0a:ed: d2:ad:41:73:a0:8e:f7:0c:92:4c:60:20:b0:a4:42: e1:f2:c0:42:40:7d:29:5c:a3:50:14:6f:04:0e:cf: aa:c2:d4:1e:e9:9a:63:cc:c0:0f:84:fc:c8:eb:d0: 5e:e7:cc:29:c1:18:46:8a:06:69:8b:b3:fe:04:bf: c9:a4:aa:32:60:f2:ca:9e:f2:43:c9:a2:d4:dd:99: e6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1B:1D:59:46:F8:9B:BE:1F:6F:8D:6E:FD:E1:EC:30:74:29:CC:02 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:100::/42 Signature Algorithm: sha256WithRSAEncryption 12:fb:6d:e9:46:78:8d:49:66:c8:40:f9:ab:bf:ee:af:e6:75: 24:79:85:9a:7e:dd:e6:28:94:37:7f:61:ba:96:30:f5:67:7d: 4a:5d:61:06:68:af:1e:22:c0:9b:91:57:01:bf:25:e4:6d:30: 31:58:b3:e9:8e:62:9c:35:17:ba:c0:f7:13:38:87:c4:17:46: c0:7c:8a:83:c2:97:56:00:71:9d:7d:4c:aa:f2:2b:9a:9e:de: 61:a1:c6:f9:0d:02:6a:52:77:a4:ca:40:b6:2c:9e:03:e7:29: 5c:ee:fb:3f:63:ef:a5:0c:0e:d0:f4:1b:94:ac:3c:73:3f:e6: be:63:cc:59:37:ea:9d:c9:1c:4b:bb:f9:27:af:95:5d:16:d8: 5a:4d:3e:1f:3f:b3:92:88:e4:ef:66:e1:ec:f9:27:e0:18:7a: 02:98:c9:11:95:3c:d9:cf:7e:b9:e3:0c:f4:51:e1:87:e4:db: a3:68:ab:f9:75:6b:e9:bd:7d:3d:2e:59:a5:9e:b9:dc:02:da: 70:48:f9:8d:9a:13:68:2f:b7:ef:58:ba:b3:15:89:fd:e1:99: 9d:b7:1c:51:91:39:84:21:40:83:e4:82:53:bc:0f:e8:b8:c7: 31:08:63:4b:15:b2:62:86:a7:38:51:f2:71:42:9d:8a:64:8f: 46:93:0c:60 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFeeaXOHSpvJCXz39kdZ7CowDeiUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTAxMTg1MDUzWhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjBlMjAyYTNmZGUwMTcyZjMzY2RmMjJkY2VhMTQwN2Fh ZGQ2YTEyOTVjMzI3YzE1MDY2ZDkwMmY2MjJlOGQ5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB98sW+tcAvRQLxX2W1NKJx8KwZkWuPKrPpB5c05PZAbvj P+GrkifVG8aTH1RbukaYbF7jdPydeHHhLi2bvMj71xCz+cLoEYFMiSnQAQeaYdbt 66z2+kQFOQQL835rp+z45TJp0Tpv+pORv+d4vGjMJKHjdxuJ5u2fJyD7IdOXCJzr Jnl7XOLv/3gtWQCyhOnq9XAxc19EJ0UCxazn+bd5BUQwiVe8SjabnU5C3I3aE0EK 7dKtQXOgjvcMkkxgILCkQuHywEJAfSlco1AUbwQOz6rC1B7pmmPMwA+E/Mjr0F7n zCnBGEaKBmmLs/4Ev8mkqjJg8sqe8kPJotTdmeZzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjBsdWUb4m74fb41u/eHsMHQpzAIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzMxOTFlODhkLTc0NmQtNDFkMi04NGRiLTlmYzY1MzM0ZTVhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmBZzAAQAwDQYJKoZIhvcNAQELBQADggEBABL7belGeI1JZshA+au/7q/m dSR5hZp+3eYolDd/YbqWMPVnfUpdYQZorx4iwJuRVwG/JeRtMDFYs+mOYpw1F7rA 9xM4h8QXRsB8ioPCl1YAcZ19TKryK5qe3mGhxvkNAmpSd6TKQLYsngPnKVzu+z9j 76UMDtD0G5SsPHM/5r5jzFk36p3JHEu7+SevlV0W2FpNPh8/s5KI5O9m4ez5J+AY egKYyRGVPNnPfrnjDPRR4Yfk26Noq/l1a+m9fT0uWaWeudwC2nBI+Y2aE2gvt+9Y urMVif3hmZ23HFGROYQhQIPkglO8D+i4xzEIY0sVsmKGpzhR8nFCnYpkj0aTDGA= -----END CERTIFICATE-----Generated at Sun Sep 7 11:15:07 2025 by rpki-client