$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa File: 941f79ce-715f-49f4-a576-333c065d82c6.roa (raw, json) Hash identifier: dKpXiqx43XgUPdmrfH9TQsTa5TwcyAay9pXfrjZHfek= Subject key identifier: 7D:EC:A6:B8:84:BB:85:3E:F1:23:9D:B3:24:FF:4D:03:1A:BB:CB:47 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2F328CC8521F5419F24D9B99A044A8CC6B902000 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa Signing time: Tue 05 Aug 2025 18:10:09 +0000 ROA not before: Tue 05 Aug 2025 18:10:09 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:48f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:32:8c:c8:52:1f:54:19:f2:4d:9b:99:a0:44:a8:cc:6b:90:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 5 18:10:09 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=512bb166ba3b54841a1bc42ff963db910dfafd94ff71e9b667f3897bd8de077d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:c4:3f:0a:66:5e:56:63:11:58:de:db:ad: 71:46:25:53:39:00:41:2e:5b:ce:85:b6:d6:16:44: 76:21:f9:1d:9e:a1:bb:8b:20:0c:3b:3d:8c:6f:51: 65:83:df:cb:f5:59:0d:81:ca:e6:6a:57:7d:75:56: c8:da:d8:1a:b2:4b:27:d7:98:6d:ef:9e:29:e3:22: 89:a8:49:c0:26:84:be:7b:9c:90:d4:9d:30:3f:52: 0f:c6:fd:83:30:39:c3:b7:60:e1:24:5f:30:0a:5e: c2:06:45:fe:e0:d2:ad:32:ed:33:2f:17:ca:0a:8a: 8e:86:27:2c:d0:3c:87:3b:fe:db:59:14:fc:39:e6: 0b:76:fe:05:79:b0:7a:4e:27:68:6b:fc:06:ae:2f: 4e:f0:4b:3d:57:cb:91:f2:63:27:bb:f3:60:d8:a0: 5a:e9:61:0e:e5:dd:2d:27:82:79:3a:c9:b6:0c:42: 34:4d:47:c0:82:e6:00:12:c9:9b:59:71:b9:37:ea: 79:14:64:5f:91:04:b9:39:c4:0d:20:37:e4:25:6f: 9c:63:ab:67:6e:e7:8b:41:66:38:b8:63:f2:af:75: f4:3a:9c:f5:cb:39:f7:a4:b8:79:a9:d2:98:4d:8a: 6c:ff:27:d2:3f:d2:f7:2d:86:93:20:ee:c8:25:1a: b9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EC:A6:B8:84:BB:85:3E:F1:23:9D:B3:24:FF:4D:03:1A:BB:CB:47 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:48f::/48 Signature Algorithm: sha256WithRSAEncryption 42:b4:f7:47:76:45:30:1a:f3:8f:c7:80:55:f2:a8:46:4c:78: ed:d6:06:bb:7b:b8:3b:c2:01:47:07:24:13:1d:20:f1:b6:0c: 9c:82:1e:a3:46:02:ee:65:56:3b:7a:53:49:9b:03:d3:66:57: 93:ff:de:14:78:22:44:d2:ab:5b:78:1b:fe:d7:34:96:9e:92: 70:71:44:a0:2c:22:74:c6:01:bf:bd:11:77:5e:eb:76:f8:a4: 04:45:48:51:90:c7:a0:e2:66:ea:17:fb:20:e8:eb:63:44:e7: 78:7f:b8:c0:b6:e2:93:c0:fa:92:c6:7c:ef:f6:24:ae:8e:97: 98:81:83:b9:a6:c5:57:3f:17:e5:14:da:30:77:b2:22:ea:a7: af:fc:78:26:56:6f:f0:f1:27:15:70:91:87:38:0b:6f:6c:04: 4e:74:c0:8c:29:38:a7:9f:a2:fc:31:8a:81:a8:54:1a:3d:2f: 10:26:ab:cd:e2:e3:5e:27:d5:17:e3:89:18:75:e7:14:de:39: 9f:ad:a4:48:78:00:49:9d:6f:da:27:b1:fc:55:46:f5:c2:ed: d9:cf:d1:c7:6b:87:05:b5:75:a4:75:db:f9:0a:2a:64:40:b4: 7b:df:0d:6a:ba:df:82:8d:e5:8f:75:2d:38:c0:93:16:81:75: 3e:b4:84:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULzKMyFIfVBnyTZuZoESozGuQIAAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODA1MTgxMDA5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTJiYjE2NmJhM2I1NDg0MWExYmM0MmZmOTYzZGI5MTBk ZmFmZDk0ZmY3MWU5YjY2N2YzODk3YmQ4ZGUwNzdkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/I8Q/CmZeVmMRWN7brXFGJVM5AEEuW86FttYWRHYh+R2e obuLIAw7PYxvUWWD38v1WQ2ByuZqV311Vsja2BqySyfXmG3vninjIomoScAmhL57 nJDUnTA/Ug/G/YMwOcO3YOEkXzAKXsIGRf7g0q0y7TMvF8oKio6GJyzQPIc7/ttZ FPw55gt2/gV5sHpOJ2hr/AauL07wSz1Xy5HyYye782DYoFrpYQ7l3S0ngnk6ybYM QjRNR8CC5gASyZtZcbk36nkUZF+RBLk5xA0gN+Qlb5xjq2du54tBZji4Y/KvdfQ6 nPXLOfekuHmp0phNimz/J9I/0vcthpMg7sglGrnRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfeymuIS7hT7xI52zJP9NAxq7y0cwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk0MWY3OWNlLTcxNWYtNDlmNC1hNTc2LTMzM2MwNjVkODJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABI8wDQYJKoZIhvcNAQELBQADggEBAEK090d2RTAa84/HgFXyqEZM eO3WBrt7uDvCAUcHJBMdIPG2DJyCHqNGAu5lVjt6U0mbA9NmV5P/3hR4IkTSq1t4 G/7XNJaeknBxRKAsInTGAb+9EXde63b4pARFSFGQx6DiZuoX+yDo62NE53h/uMC2 4pPA+pLGfO/2JK6Ol5iBg7mmxVc/F+UU2jB3siLqp6/8eCZWb/DxJxVwkYc4C29s BE50wIwpOKefovwxioGoVBo9LxAmq83i414n1RfjiRh15xTeOZ+tpEh4AEmdb9on sfxVRvXC7dnP0cdrhwW1daR12/kKKmRAtHvfDWq634KN5Y91LTjAkxaBdT60hAs= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:53 2025 by rpki-client