$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa File: 96b3f615-0792-4abd-8381-86a2d78ce63d.roa (raw, json) Hash identifier: U6oeKgXQV5PNxeKrLGDNVtSwFNMssWa5UKY8Z6oqqBc= Subject key identifier: 42:D2:3E:91:13:8E:75:6E:7E:7B:C0:7C:C6:57:68:8E:DD:E5:6E:1B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0C01CA5D6A85EE9B80A2BFD6CB0B17F5AB986AC6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa Signing time: Mon 01 Sep 2025 19:01:27 +0000 ROA not before: Mon 01 Sep 2025 19:01:27 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:546::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:01:ca:5d:6a:85:ee:9b:80:a2:bf:d6:cb:0b:17:f5:ab:98:6a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 1 19:01:27 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=c5cd7910d2a9d11cecb14cc195e8e379123f38f1633252bd1d4f14f663254699, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:fb:ca:6f:14:7c:64:c9:17:c4:e5:16:1d: f9:1c:a1:36:43:91:36:11:d7:39:b3:28:f4:24:a9: d0:cd:e1:a8:c8:96:0b:f0:5a:46:f7:76:2b:b9:b8: 99:14:c6:59:72:b6:2a:0e:a0:9a:26:5b:89:80:28: cc:1b:16:7f:0a:a2:26:8d:0e:50:1d:7a:78:1e:3c: 72:93:3f:dc:56:0c:64:74:e2:b9:05:5e:47:18:d9: dc:cd:e2:3e:3d:23:91:5a:ee:5f:3b:19:d1:d7:e8: 59:3c:10:42:22:22:b0:2a:b0:27:38:ac:59:2f:6c: c8:b7:8e:52:d7:49:cd:46:7f:b3:db:4b:48:15:29: d3:0d:b2:98:c4:94:1a:2f:1c:45:30:22:0e:8f:31: 9c:51:49:da:bb:b1:4e:c4:3a:7c:fc:3c:a6:86:39: 79:e0:c9:84:8c:31:f1:bf:f8:fb:4e:0c:d4:39:80: c4:92:a8:ab:2c:75:c8:a8:99:56:3d:96:d7:b4:a6: c7:5c:8e:bb:b4:fb:94:2c:91:ed:2a:4b:88:80:13: 62:40:03:3d:fe:7a:60:4c:86:4d:01:6f:aa:fa:1b: a8:b0:22:e9:98:ef:1f:5f:a7:83:95:62:a6:71:f2: 78:6c:54:d5:41:d7:9f:2c:0b:0c:de:fa:6d:aa:7e: ae:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D2:3E:91:13:8E:75:6E:7E:7B:C0:7C:C6:57:68:8E:DD:E5:6E:1B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/96b3f615-0792-4abd-8381-86a2d78ce63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:546::/48 Signature Algorithm: sha256WithRSAEncryption 6c:4c:d1:a6:11:dd:a1:3c:df:e7:00:5d:34:57:50:d4:80:13: 5a:cb:1c:8f:3f:07:d1:93:84:5c:0a:a5:7b:91:76:dc:09:d0: bc:e6:88:ad:ff:95:f2:7e:40:89:d4:9a:29:57:21:5a:0f:7a: bc:75:4f:15:11:8a:e0:60:55:85:a8:23:1b:be:bd:6f:4c:ae: 89:be:38:a7:d7:8f:3e:6c:ab:03:f7:6c:7a:35:c6:54:e1:83: 8a:f1:6a:51:e3:8d:d1:a7:18:cd:20:87:6c:30:c2:2c:d6:02: a4:e9:2f:ce:a5:a3:07:f4:08:9f:df:43:2d:af:a3:8e:d9:67: f9:76:5b:59:89:46:96:35:99:19:d6:52:f8:1f:b6:3b:4b:1e: b7:91:74:54:b8:d9:6a:65:6f:16:c0:8a:57:dc:5b:8d:f0:54: 5c:0c:d0:f9:e3:91:d5:d9:1e:71:06:1a:02:94:27:5f:b0:29: 19:d4:4e:2d:99:88:e0:5b:0a:57:36:d8:49:4f:c5:b7:42:3b: 48:8b:20:5f:f0:7e:a3:16:37:70:30:d0:ca:d3:54:b1:0c:47: f6:94:b9:9b:2a:9d:df:3a:80:a0:84:93:64:03:20:c7:f9:d9: d1:29:64:37:56:5b:f5:66:2a:63:5d:19:98:31:16:0f:3b:ea: 01:ee:db:3e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDAHKXWqF7puAor/WywsX9auYasYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTAxMTkwMTI3WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNWNkNzkxMGQyYTlkMTFjZWNiMTRjYzE5NWU4ZTM3OTEy M2YzOGYxNjMzMjUyYmQxZDRmMTRmNjYzMjU0Njk5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWFfvKbxR8ZMkXxOUWHfkcoTZDkTYR1zmzKPQkqdDN4ajI lgvwWkb3diu5uJkUxllytioOoJomW4mAKMwbFn8KoiaNDlAdengePHKTP9xWDGR0 4rkFXkcY2dzN4j49I5Fa7l87GdHX6Fk8EEIiIrAqsCc4rFkvbMi3jlLXSc1Gf7Pb S0gVKdMNspjElBovHEUwIg6PMZxRSdq7sU7EOnz8PKaGOXngyYSMMfG/+PtODNQ5 gMSSqKssdciomVY9lte0psdcjru0+5Qske0qS4iAE2JAAz3+emBMhk0Bb6r6G6iw IumY7x9fp4OVYqZx8nhsVNVB158sCwze+m2qfq7xAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQtI+kROOdW5+e8B8xldojt3lbhswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk2YjNmNjE1LTA3OTItNGFiZC04MzgxLTg2YTJkNzhjZTYzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUYwDQYJKoZIhvcNAQELBQADggEBAGxM0aYR3aE83+cAXTRXUNSA E1rLHI8/B9GThFwKpXuRdtwJ0LzmiK3/lfJ+QInUmilXIVoPerx1TxURiuBgVYWo Ixu+vW9Mrom+OKfXjz5sqwP3bHo1xlThg4rxalHjjdGnGM0gh2wwwizWAqTpL86l owf0CJ/fQy2vo47ZZ/l2W1mJRpY1mRnWUvgftjtLHreRdFS42WplbxbAilfcW43w VFwM0PnjkdXZHnEGGgKUJ1+wKRnUTi2ZiOBbClc22ElPxbdCO0iLIF/wfqMWN3Aw 0MrTVLEMR/aUuZsqnd86gKCEk2QDIMf52dEpZDdWW/VmKmNdGZgxFg876gHu2z4= -----END CERTIFICATE-----Generated at Sun Sep 7 11:25:45 2025 by rpki-client