$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa File: bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa (raw, json) Hash identifier: WOSe7fRbgGxG2F5WbaVNKfmUIakb30yKsKRGxIxLAxE= Subject key identifier: 11:BD:A4:2E:3B:9C:21:BB:0A:82:04:BA:23:B1:3E:B7:CA:AB:0C:03 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4BBEE085242519C198D54E864CC88A677624D1EF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa Signing time: Wed 03 Sep 2025 00:10:26 +0000 ROA not before: Wed 03 Sep 2025 00:10:26 +0000 ROA not after: Wed 08 Oct 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:3b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:be:e0:85:24:25:19:c1:98:d5:4e:86:4c:c8:8a:67:76:24:d1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 3 00:10:26 2025 GMT Not After : Oct 8 23:59:59 2025 GMT Subject: serialNumber=401947565c991bd5c3cc3904cc4fcdf918433bed6143c6a8e11f386733283ebe, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:93:dd:00:f5:13:0e:27:0f:74:83:46:64:b5: a0:d5:6e:e1:81:e8:d7:03:40:f0:ea:89:de:62:d2: 43:2f:f9:42:fb:0e:39:a8:bb:c6:99:45:b6:9b:0e: 79:53:d6:98:71:24:14:13:8f:01:aa:1e:6d:c2:cb: c7:c7:5f:08:39:c8:82:d9:5e:2e:6a:0b:f4:2a:fc: 41:66:1e:fc:95:4e:9d:ae:7c:26:48:12:df:9d:62: 00:f3:41:be:06:d7:3d:b8:1c:a2:c8:61:45:b9:8b: b4:25:c2:0b:9a:07:94:ff:e6:ab:fc:7b:ee:16:88: 73:17:b5:3f:cb:48:4b:eb:9f:90:5b:16:3c:04:d0: 3c:ea:fe:45:58:2e:61:d3:d7:af:88:1e:46:81:ac: 9f:b3:9a:1e:e0:e8:83:ba:30:0f:54:87:a2:f7:d2: 78:e8:f5:1c:26:15:04:54:8f:d3:38:93:fc:46:f1: d1:90:95:a5:42:cd:1b:cc:ba:64:8f:2c:3e:48:f3: 80:df:85:8d:c5:f1:98:3f:5e:42:24:e0:66:24:2f: c0:b8:d0:cc:a9:02:d2:fc:eb:74:c7:a6:cd:26:d0: 5d:94:a6:ae:f9:70:3f:59:a5:b6:30:f1:a3:75:9a: 1d:23:ee:d4:86:80:00:4c:d7:d7:1e:51:c3:0c:48: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BD:A4:2E:3B:9C:21:BB:0A:82:04:BA:23:B1:3E:B7:CA:AB:0C:03 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3b3::/48 Signature Algorithm: sha256WithRSAEncryption 7e:23:8c:71:1a:2a:76:31:05:bc:51:c8:32:5b:d2:e7:5c:96: e8:4b:64:41:56:e3:02:a7:7f:c5:2d:77:55:01:28:63:c8:0a: b0:90:87:af:e8:8f:04:e2:b7:89:e9:a9:d9:ac:ec:5e:29:da: b2:16:74:c1:d6:d4:24:15:a9:93:6e:01:87:82:69:49:08:94: cb:32:b4:95:54:f5:cb:4f:62:88:08:88:df:2e:19:41:f1:27: 3b:50:e3:6c:6a:ae:d3:c3:e6:cf:f6:b2:de:d7:f4:52:d4:6c: 50:bc:8a:99:98:7a:70:da:d9:0d:62:78:8e:92:e9:c2:42:d6: ae:44:14:fb:00:5a:79:69:80:ef:bf:73:60:51:81:99:f5:b0: a4:e0:06:46:02:d4:31:c5:e2:fc:71:58:e6:ec:d8:81:b1:f7: b6:f3:ea:21:75:03:40:09:d4:90:53:85:09:05:ea:15:a2:c0: b4:69:ea:d4:e3:9d:10:0a:02:e0:22:36:66:b7:09:2b:a4:8d: 33:ad:22:58:ae:8c:cc:e0:2c:d4:39:f8:d0:48:4d:18:e3:c2: 55:e1:35:01:ce:b7:cc:08:bc:1d:d6:4d:0d:fd:a7:76:9d:62: f7:69:f8:70:de:98:bf:2a:7c:bb:d5:d4:7c:f8:64:61:59:17: 6f:54:6b:8a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS77ghSQlGcGY1U6GTMiKZ3Yk0e8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTAzMDAxMDI2WhcNMjUxMDA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDE5NDc1NjVjOTkxYmQ1YzNjYzM5MDRjYzRmY2RmOTE4 NDMzYmVkNjE0M2M2YThlMTFmMzg2NzMzMjgzZWJlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlk90A9RMOJw90g0ZktaDVbuGB6NcDQPDqid5i0kMv+UL7 Djmou8aZRbabDnlT1phxJBQTjwGqHm3Cy8fHXwg5yILZXi5qC/Qq/EFmHvyVTp2u fCZIEt+dYgDzQb4G1z24HKLIYUW5i7QlwguaB5T/5qv8e+4WiHMXtT/LSEvrn5Bb FjwE0Dzq/kVYLmHT16+IHkaBrJ+zmh7g6IO6MA9Uh6L30njo9RwmFQRUj9M4k/xG 8dGQlaVCzRvMumSPLD5I84DfhY3F8Zg/XkIk4GYkL8C40MypAtL863THps0m0F2U pq75cD9ZpbYw8aN1mh0j7tSGgABM19ceUcMMSO7zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEb2kLjucIbsKggS6I7E+t8qrDAMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JmNzZlZWUxLTgxYzYtNDAxOC05MjY0LWY3ZWRkYzllOGMyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA7MwDQYJKoZIhvcNAQELBQADggEBAH4jjHEaKnYxBbxRyDJb0udc luhLZEFW4wKnf8Utd1UBKGPICrCQh6/ojwTit4npqdms7F4p2rIWdMHW1CQVqZNu AYeCaUkIlMsytJVU9ctPYogIiN8uGUHxJztQ42xqrtPD5s/2st7X9FLUbFC8ipmY enDa2Q1ieI6S6cJC1q5EFPsAWnlpgO+/c2BRgZn1sKTgBkYC1DHF4vxxWObs2IGx 97bz6iF1A0AJ1JBThQkF6hWiwLRp6tTjnRAKAuAiNma3CSukjTOtIliujMzgLNQ5 +NBITRjjwlXhNQHOt8wIvB3WTQ39p3adYvdp+HDemL8qfLvV1Hz4ZGFZF29Ua4o= -----END CERTIFICATE-----Generated at Sun Sep 7 13:11:56 2025 by rpki-client