$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69e662e9-4f04-437e-8d50-872b6ccc4fbd.roa File: 69e662e9-4f04-437e-8d50-872b6ccc4fbd.roa (raw, json) Hash identifier: tov32M0mb5GgMmoXOZIgkR8jYuBqg8RhO4GNxfh2v4w= Subject key identifier: 1E:7D:F4:B6:28:13:02:84:9A:F0:2B:0A:9C:05:4F:43:EB:02:47:CC Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0940E1802133D331A25FC9EFCCFA538CF71338B3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69e662e9-4f04-437e-8d50-872b6ccc4fbd.roa Signing time: Mon 01 Sep 2025 18:51:20 +0000 ROA not before: Mon 01 Sep 2025 18:51:20 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:30c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:40:e1:80:21:33:d3:31:a2:5f:c9:ef:cc:fa:53:8c:f7:13:38:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 1 18:51:20 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=d2441cc77b46838d92b132dbfb63932782fd2dcca266f2834f1914ed0ce4ca0e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:62:d5:28:de:9a:ce:e0:18:61:0d:97:2d: ea:b0:6c:aa:7c:47:29:77:c1:ee:d6:9e:ce:95:d1: 41:6f:14:31:f7:35:25:b0:11:c1:31:5c:6c:3e:06: c2:5e:d6:b9:06:ad:1d:05:32:2f:54:5a:51:cc:f9: 30:34:6e:8b:bf:93:9b:ba:a8:83:f4:83:c8:48:c7: f3:1f:94:c2:c4:31:1a:16:75:1a:bc:29:9e:07:ef: 9e:a1:e9:17:87:08:b6:69:2b:ac:a9:9b:ff:3a:78: 97:bd:22:fe:19:b2:9a:8c:e7:65:b2:95:8e:76:2c: 64:2c:90:4b:5e:78:05:01:32:85:3c:f9:9f:f3:ef: 5b:dc:a5:ae:cf:cd:21:ba:fe:92:ec:28:34:e7:f0: 79:3a:b6:c8:a7:27:d7:aa:3f:b9:91:f5:f3:2f:77: b0:0f:2b:2d:b2:6b:fe:9a:32:aa:27:03:69:e9:3d: 6c:0d:bd:e5:3a:7a:1f:f2:d2:2a:58:f5:41:26:2e: 64:a3:95:66:f2:87:00:35:64:d1:1f:67:10:89:ec: 6c:ba:1f:b1:ba:ec:42:bd:ae:c8:12:5c:b6:c1:2b: 5a:40:6e:c1:ca:19:00:78:a5:b4:5d:89:8c:8d:a8: 0e:24:01:e2:bd:ac:b4:67:da:31:93:1c:22:69:2c: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7D:F4:B6:28:13:02:84:9A:F0:2B:0A:9C:05:4F:43:EB:02:47:CC X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/69e662e9-4f04-437e-8d50-872b6ccc4fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30c::/48 Signature Algorithm: sha256WithRSAEncryption a7:e9:7f:bd:36:73:ae:3c:ce:f8:28:4b:57:97:ef:9a:83:88: 66:48:ab:0e:e9:a6:cc:15:de:f8:b4:82:4b:f8:e6:5a:4c:e9: b1:b8:3d:38:26:f7:93:5f:98:b9:7e:e1:15:b3:21:69:7a:8e: 93:42:56:16:ad:00:11:87:c2:22:f5:6c:69:fe:0e:04:80:bd: 6d:64:d4:f1:20:ee:5f:44:5e:60:60:ad:8b:ab:8c:b3:2c:8a: 7e:a2:79:5e:4e:12:95:85:df:cb:c2:f5:5b:db:7b:c5:45:5f: 5a:dd:a2:13:0e:e8:39:a3:66:c8:ba:8c:ae:35:29:26:e6:54: 80:d9:08:5c:da:87:72:1a:96:2f:48:53:52:d2:af:cd:d2:76: 4c:50:e6:50:d9:82:3d:41:d9:a6:fd:e2:d6:43:59:d3:d3:89: 6e:d5:2a:d4:00:68:d1:af:9f:23:4b:55:e2:2d:54:c5:10:f1: ec:2e:d6:22:1c:13:6c:46:f8:c9:de:7e:27:5c:4d:6c:df:e4: d7:4d:a0:41:e8:d2:d1:5b:1b:f1:1b:39:b9:54:2b:1e:91:d2: 05:70:30:56:50:f9:13:e7:19:ba:db:5d:5c:87:29:13:71:d3: 36:e2:61:15:b8:7b:0f:6e:41:44:11:e4:c3:6a:43:6f:9a:31: 3f:53:c1:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCUDhgCEz0zGiX8nvzPpTjPcTOLMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTAxMTg1MTIwWhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjQ0MWNjNzdiNDY4MzhkOTJiMTMyZGJmYjYzOTMyNzgy ZmQyZGNjYTI2NmYyODM0ZjE5MTRlZDBjZTRjYTBlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8nmLVKN6azuAYYQ2XLeqwbKp8Ryl3we7Wns6V0UFvFDH3 NSWwEcExXGw+BsJe1rkGrR0FMi9UWlHM+TA0bou/k5u6qIP0g8hIx/MflMLEMRoW dRq8KZ4H756h6ReHCLZpK6ypm/86eJe9Iv4ZspqM52WylY52LGQskEteeAUBMoU8 +Z/z71vcpa7PzSG6/pLsKDTn8Hk6tsinJ9eqP7mR9fMvd7APKy2ya/6aMqonA2np PWwNveU6eh/y0ipY9UEmLmSjlWbyhwA1ZNEfZxCJ7Gy6H7G67EK9rsgSXLbBK1pA bsHKGQB4pbRdiYyNqA4kAeK9rLRn2jGTHCJpLNsvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHn30tigTAoSa8CsKnAVPQ+sCR8wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzY5ZTY2MmU5LTRmMDQtNDM3ZS04ZDUwLTg3MmI2Y2NjNGZiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwwwDQYJKoZIhvcNAQELBQADggEBAKfpf702c648zvgoS1eX75qD iGZIqw7ppswV3vi0gkv45lpM6bG4PTgm95NfmLl+4RWzIWl6jpNCVhatABGHwiL1 bGn+DgSAvW1k1PEg7l9EXmBgrYurjLMsin6ieV5OEpWF38vC9Vvbe8VFX1rdohMO 6DmjZsi6jK41KSbmVIDZCFzah3Iali9IU1LSr83SdkxQ5lDZgj1B2ab94tZDWdPT iW7VKtQAaNGvnyNLVeItVMUQ8ewu1iIcE2xG+MnefidcTWzf5NdNoEHo0tFbG/Eb OblUKx6R0gVwMFZQ+RPnGbrbXVyHKRNx0zbiYRW4ew9uQUQR5MNqQ2+aMT9TwbU= -----END CERTIFICATE-----Generated at Thu Sep 18 23:22:30 2025 by rpki-client