$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/602ceb72-505c-4859-8c8f-a71c4016f28f.roa File: 602ceb72-505c-4859-8c8f-a71c4016f28f.roa (raw, json) Hash identifier: dKiz6/Yy7iMZ/LwbMO8bauFttKMaD/kOzMrCCVLFAGM= Subject key identifier: 85:29:57:79:74:F9:2B:AC:2C:A9:28:5D:F0:CC:65:04:F2:BC:07:CC Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 41E0EE5C8C76708FF1CAAC1713CDD145D74262B3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/602ceb72-505c-4859-8c8f-a71c4016f28f.roa Signing time: Mon 01 Sep 2025 19:01:24 +0000 ROA not before: Mon 01 Sep 2025 19:01:24 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:545::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e0:ee:5c:8c:76:70:8f:f1:ca:ac:17:13:cd:d1:45:d7:42:62:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 1 19:01:24 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=d4cec26af0c9d516d3fbcfb38ddedfe7c9d26e6eee592d05a856abb79eba8bc9, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:36:dd:a9:95:ad:99:23:c6:ce:6f:9a:0d:45: 00:93:51:6e:30:8b:6c:19:29:17:30:43:27:ff:c1: f4:d1:cd:b2:aa:65:b9:3e:f3:c2:d9:05:5a:97:88: 8e:f2:96:77:9b:a4:21:b1:a3:14:84:02:cb:d5:c8: c7:74:b2:04:cf:0c:45:4e:e2:12:15:9f:77:fd:ed: cf:ec:76:1c:91:1e:d0:dd:4b:71:13:20:9e:96:e4: 4c:5b:a4:28:54:95:0c:0c:8c:e5:71:03:64:89:cb: 8e:a2:e2:81:37:53:9f:e2:fd:eb:38:57:82:ad:d2: 5e:85:6e:a9:3f:68:87:95:23:8d:a6:01:b5:f0:59: 95:fb:59:55:43:e9:64:76:25:cf:e3:47:4d:14:f9: c9:9e:82:58:64:b0:49:b7:23:e1:f4:f1:0d:b7:b3: 22:01:67:ce:5d:7d:73:c8:a0:cd:8d:43:d1:ba:32: 18:d0:0a:09:c3:57:50:5e:8e:24:5b:d6:40:74:86: 9f:cf:ac:38:f5:ed:3e:05:29:00:92:a7:1f:c3:df: 89:8a:5a:1a:9a:02:9a:b9:10:45:af:43:46:30:98: ed:9f:25:d8:f7:60:98:4a:3d:00:e9:14:a4:ae:95: fe:33:3d:d7:a4:6b:ef:0a:91:26:42:6e:d8:0e:38: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:29:57:79:74:F9:2B:AC:2C:A9:28:5D:F0:CC:65:04:F2:BC:07:CC X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/602ceb72-505c-4859-8c8f-a71c4016f28f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:545::/48 Signature Algorithm: sha256WithRSAEncryption 1f:9b:58:20:ce:7d:77:cb:a4:38:38:69:40:76:b3:6b:95:75: 25:88:75:b9:9d:d6:3f:fe:5d:e7:16:0c:41:ad:04:19:d8:61: 8e:bd:51:e1:b6:37:4d:a1:59:dc:9e:38:02:e1:b2:25:53:80: 1b:b6:47:c4:f9:d6:6a:a3:61:06:10:f4:cd:c7:fa:bd:6c:50: 7f:58:e6:de:44:c7:27:e9:13:ae:66:05:83:31:5d:a7:52:00: 5c:76:7e:8f:1a:31:83:7a:f2:35:29:67:6a:de:05:ec:55:08: 31:f4:07:f0:3a:02:f9:88:cd:40:16:75:dc:93:4c:b9:5b:2d: 6e:4a:19:b6:3e:6c:01:55:f2:c3:4e:5a:d0:2e:b3:e3:de:06: b5:05:5a:b1:47:01:a6:43:02:54:8f:7e:ab:ce:6f:d3:19:81: 8e:47:ae:50:95:d9:04:d5:2c:65:0a:71:c9:57:f5:07:c5:d9: bc:ec:4e:f5:73:83:7f:eb:25:13:54:45:69:b4:73:0f:6c:01: 2e:8a:22:7d:86:3a:86:09:1b:c5:70:e6:28:dc:9c:01:95:59: 69:cc:d7:7b:9e:1b:e9:ac:34:0d:a1:10:fe:ff:84:27:7a:f0: 39:5d:49:3d:02:b7:5d:5c:eb:73:3d:97:b2:e5:d3:4e:34:34: 9e:77:87:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQeDuXIx2cI/xyqwXE83RRddCYrMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTAxMTkwMTI0WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGNlYzI2YWYwYzlkNTE2ZDNmYmNmYjM4ZGRlZGZlN2M5 ZDI2ZTZlZWU1OTJkMDVhODU2YWJiNzllYmE4YmM5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD4Nt2pla2ZI8bOb5oNRQCTUW4wi2wZKRcwQyf/wfTRzbKq Zbk+88LZBVqXiI7ylnebpCGxoxSEAsvVyMd0sgTPDEVO4hIVn3f97c/sdhyRHtDd S3ETIJ6W5ExbpChUlQwMjOVxA2SJy46i4oE3U5/i/es4V4Kt0l6Fbqk/aIeVI42m AbXwWZX7WVVD6WR2Jc/jR00U+cmeglhksEm3I+H08Q23syIBZ85dfXPIoM2NQ9G6 MhjQCgnDV1BejiRb1kB0hp/PrDj17T4FKQCSpx/D34mKWhqaApq5EEWvQ0YwmO2f Jdj3YJhKPQDpFKSulf4zPdeka+8KkSZCbtgOONiRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhSlXeXT5K6wsqShd8MxlBPK8B8wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzYwMmNlYjcyLTUwNWMtNDg1OS04YzhmLWE3MWM0MDE2ZjI4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUUwDQYJKoZIhvcNAQELBQADggEBAB+bWCDOfXfLpDg4aUB2s2uV dSWIdbmd1j/+XecWDEGtBBnYYY69UeG2N02hWdyeOALhsiVTgBu2R8T51mqjYQYQ 9M3H+r1sUH9Y5t5ExyfpE65mBYMxXadSAFx2fo8aMYN68jUpZ2reBexVCDH0B/A6 AvmIzUAWddyTTLlbLW5KGbY+bAFV8sNOWtAus+PeBrUFWrFHAaZDAlSPfqvOb9MZ gY5HrlCV2QTVLGUKcclX9QfF2bzsTvVzg3/rJRNURWm0cw9sAS6KIn2GOoYJG8Vw 5ijcnAGVWWnM13ueG+msNA2hEP7/hCd68DldST0Ct11c63M9l7Ll0040NJ53hx0= -----END CERTIFICATE-----Generated at Sun Sep 7 11:15:12 2025 by rpki-client