$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5befdd2f-22ab-473f-936e-ffcd9943d082.roa File: 5befdd2f-22ab-473f-936e-ffcd9943d082.roa (raw, json) Hash identifier: 6k6YPB7psJwHCkIN1zvZvs+Foec6Y9IQDFBCwmgZTtA= Subject key identifier: E5:FF:DD:B1:D3:C5:E1:C2:20:53:31:9C:27:0A:8D:FB:D8:2B:8A:F6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4821B24AF57E4224ED0B3A525317044AE38F3564 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5befdd2f-22ab-473f-936e-ffcd9943d082.roa Signing time: Tue 05 Aug 2025 18:00:18 +0000 ROA not before: Tue 05 Aug 2025 18:00:18 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:310::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:21:b2:4a:f5:7e:42:24:ed:0b:3a:52:53:17:04:4a:e3:8f:35:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 5 18:00:18 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=a2db4e1fa2facd177172bc86a8112229090da10135674f24f88eae47c098b7f1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:f0:77:7f:5b:6c:13:86:02:93:7f:75:a1: 55:f9:37:50:e9:de:2a:af:21:34:76:0e:d1:dd:60: 4c:75:46:18:a9:00:0c:b2:96:95:6c:84:0c:69:a3: 3b:30:ef:5e:28:6a:ee:8f:13:6a:fe:6a:b3:92:1f: ed:a2:67:83:47:2e:56:51:43:ee:24:05:95:e6:13: fb:bf:6a:07:2a:fd:93:ab:b3:e8:b2:6d:5d:37:a0: b1:f1:6a:e4:e4:b8:ed:03:12:89:f4:0b:1e:55:bd: 5e:c2:6d:a8:7c:92:c2:e8:fe:b6:38:30:d4:fd:6e: dd:00:50:b9:94:32:ce:b2:79:f0:a6:07:37:f0:c2: 17:04:1d:25:d7:8d:e3:25:47:da:87:0c:43:4b:0d: 65:05:33:d8:af:0c:63:93:f4:6e:dd:a5:64:7a:6e: 03:00:0e:f7:d7:7f:40:ce:05:74:d1:85:a4:d3:d3: 0e:8a:5e:22:62:70:a8:84:0e:18:0d:0f:63:8c:83: 53:35:47:8d:ce:ec:fd:29:ab:fc:4e:58:b4:c3:53: cc:bd:4a:14:33:e8:98:71:58:cb:57:77:ec:a0:ae: d8:3e:d6:61:4d:a2:d2:18:b2:84:9e:46:b9:87:25: 57:54:79:c8:12:06:35:76:56:48:39:ce:5c:13:70: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FF:DD:B1:D3:C5:E1:C2:20:53:31:9C:27:0A:8D:FB:D8:2B:8A:F6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5befdd2f-22ab-473f-936e-ffcd9943d082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:310::/48 Signature Algorithm: sha256WithRSAEncryption 3e:88:f7:a9:ac:c4:51:07:ae:61:db:c1:0a:1e:24:61:29:20: 70:c4:e7:2a:0f:10:d7:ee:26:30:87:00:0e:02:6c:9f:3d:03: df:5c:fa:fd:15:61:13:13:be:59:19:e9:00:e7:43:ba:f4:5b: 42:3e:66:7b:75:0a:5c:89:cc:5f:0d:87:76:6f:d5:12:b5:5f: 80:74:ff:96:ed:a1:48:61:2c:af:4b:76:2b:56:0f:d1:d1:f8: 68:0f:a1:01:c2:b8:d6:e5:53:c1:63:6d:7e:a9:a3:da:4a:c0: ca:31:de:6c:d8:bf:b3:ef:ce:81:d5:a7:11:aa:f8:e4:1e:64: 3d:b1:71:ea:38:90:8d:a1:a7:2a:c7:93:d2:99:ec:5c:ee:fc: 04:62:88:ff:d5:66:a3:64:7c:44:21:15:ea:0b:c6:68:90:c3: 09:04:65:5a:48:6f:3f:fd:4d:87:ca:a6:75:81:fb:d0:e5:ed: 4f:d4:7b:4d:36:d4:45:87:fb:db:5f:6a:01:48:b8:f5:59:5e: d8:8c:60:b1:36:f6:d8:ee:57:7b:6d:e3:4b:67:1c:72:80:14: 85:b9:7d:10:5e:6c:e4:b3:3a:25:d4:f1:5e:00:01:a9:14:63: eb:c1:3f:23:31:3c:58:f2:01:93:8f:40:7f:0f:29:6b:32:04: 66:4e:a7:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSCGySvV+QiTtCzpSUxcESuOPNWQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODA1MTgwMDE4WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmRiNGUxZmEyZmFjZDE3NzE3MmJjODZhODExMjIyOTA5 MGRhMTAxMzU2NzRmMjRmODhlYWU0N2MwOThiN2YxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQAfB3f1tsE4YCk391oVX5N1Dp3iqvITR2DtHdYEx1Rhip AAyylpVshAxpozsw714oau6PE2r+arOSH+2iZ4NHLlZRQ+4kBZXmE/u/agcq/ZOr s+iybV03oLHxauTkuO0DEon0Cx5VvV7Cbah8ksLo/rY4MNT9bt0AULmUMs6yefCm BzfwwhcEHSXXjeMlR9qHDENLDWUFM9ivDGOT9G7dpWR6bgMADvfXf0DOBXTRhaTT 0w6KXiJicKiEDhgND2OMg1M1R43O7P0pq/xOWLTDU8y9ShQz6JhxWMtXd+ygrtg+ 1mFNotIYsoSeRrmHJVdUecgSBjV2Vkg5zlwTcOglAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5f/dsdPF4cIgUzGcJwqN+9grivYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzViZWZkZDJmLTIyYWItNDczZi05MzZlLWZmY2Q5OTQzZDA4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAxAwDQYJKoZIhvcNAQELBQADggEBAD6I96msxFEHrmHbwQoeJGEp IHDE5yoPENfuJjCHAA4CbJ89A99c+v0VYRMTvlkZ6QDnQ7r0W0I+Znt1ClyJzF8N h3Zv1RK1X4B0/5btoUhhLK9LditWD9HR+GgPoQHCuNblU8FjbX6po9pKwMox3mzY v7PvzoHVpxGq+OQeZD2xceo4kI2hpyrHk9KZ7Fzu/ARiiP/VZqNkfEQhFeoLxmiQ wwkEZVpIbz/9TYfKpnWB+9Dl7U/Ue0021EWH+9tfagFIuPVZXtiMYLE29tjuV3tt 40tnHHKAFIW5fRBebOSzOiXU8V4AAakUY+vBPyMxPFjyAZOPQH8PKWsyBGZOpys= -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:58 2025 by rpki-client