$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c01851c2-b2bc-4e62-90c7-81657fb0f3fd.roa File: c01851c2-b2bc-4e62-90c7-81657fb0f3fd.roa (raw, json) Hash identifier: Nio9zFmi8HFtqeN0Jvodd4dT9jlRmdHCRu2jqKUHHeE= Subject key identifier: 0D:3D:08:FC:12:C0:D7:CA:2C:07:66:23:74:E6:82:EF:7A:34:C9:97 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 10A51814943D5E1C85698A0679D7A0A84E396B52 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c01851c2-b2bc-4e62-90c7-81657fb0f3fd.roa Signing time: Mon 01 Sep 2025 18:51:17 +0000 ROA not before: Mon 01 Sep 2025 18:51:17 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:30a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a5:18:14:94:3d:5e:1c:85:69:8a:06:79:d7:a0:a8:4e:39:6b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 1 18:51:17 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=8465e1cb1be838330af4018f1c70f51f6beb2026bef4bb322b1e7e98dd6ee581, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:28:90:e9:17:e0:db:3e:18:b7:80:cb:ec: 25:15:61:de:ef:18:2a:e3:e9:3c:5f:8f:98:5f:0b: e1:98:7d:14:85:07:30:98:ae:10:6e:d8:0a:0b:bc: d9:9a:c0:b4:43:a1:7a:ae:4c:dd:7a:30:2f:81:86: f4:3a:6b:74:db:57:bb:9d:dd:c0:62:cc:3f:82:9e: 38:3b:07:e0:cc:1b:2f:11:c6:62:0e:51:64:94:d5: 15:ad:be:04:03:1b:3a:f2:9e:0f:97:e4:62:81:fa: a3:8c:7f:3f:d3:ac:4e:b0:fc:7a:71:16:f4:f3:f1: c1:c9:b2:38:92:5e:d5:69:84:fd:c6:b9:72:5e:d7: 84:d7:67:ba:a2:1c:00:38:de:c4:0a:8d:86:87:b5: f3:dc:1e:7a:22:bf:97:74:68:73:55:de:1c:ec:c5: ea:a4:3b:dd:bf:05:60:61:46:d4:82:43:86:88:7d: 7c:21:85:cd:48:8b:93:6a:66:cf:22:30:9e:7b:79: ed:e2:91:44:84:cd:69:8f:70:a0:47:cf:d3:65:48: 42:45:8f:95:78:6e:0a:e8:3f:7d:e3:24:0b:ba:6e: a4:3a:48:17:cc:2c:7e:2a:16:be:9d:6b:a8:51:90: d8:94:0a:23:15:0e:09:6a:fa:12:ec:41:50:53:f9: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3D:08:FC:12:C0:D7:CA:2C:07:66:23:74:E6:82:EF:7A:34:C9:97 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c01851c2-b2bc-4e62-90c7-81657fb0f3fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30a::/48 Signature Algorithm: sha256WithRSAEncryption 13:de:b9:ce:58:ba:af:40:13:00:d0:e3:69:d8:98:c2:cf:0a: cc:70:95:7e:90:43:e3:48:37:cb:c4:05:07:0a:56:bd:97:0e: 8d:0c:f3:06:cb:e0:f2:06:0f:2f:cb:f5:90:da:a0:76:a7:c1: 6c:76:4a:2e:20:53:88:0b:8d:54:5f:a2:38:bf:05:75:11:62: 06:9b:30:86:89:a5:81:4b:6e:dd:d3:e8:3c:b2:45:42:6c:ee: 73:dc:94:eb:4f:13:b0:64:2a:f6:01:0c:d5:03:4f:ba:6b:0f: df:f9:0a:c3:bd:0d:86:66:67:17:23:9d:fe:50:d1:50:87:1b: a6:5c:69:bb:dd:f7:27:d6:06:3d:03:2c:bf:85:06:97:a7:46: 8d:40:93:79:bf:c4:9b:1b:58:00:ba:97:8e:b5:12:bf:9b:3d: 3a:7e:72:a9:21:3a:17:6f:95:14:01:48:89:3f:4c:36:52:9c: 06:53:71:cc:ce:ae:1c:9e:14:4b:6e:05:0a:c5:b3:20:e8:cb: d2:5c:07:33:3a:63:e5:a8:cd:08:f2:84:1e:c3:d4:8d:b7:a5: fc:0e:de:e8:c4:ee:ba:d3:61:13:a6:da:d1:83:3a:ef:a8:05: 25:da:b8:4e:9b:9e:4d:ac:80:62:ae:5e:f9:ba:fa:3a:6a:a5: 89:cf:f1:d9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEKUYFJQ9XhyFaYoGedegqE45a1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTAxMTg1MTE3WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDY1ZTFjYjFiZTgzODMzMGFmNDAxOGYxYzcwZjUxZjZi ZWIyMDI2YmVmNGJiMzIyYjFlN2U5OGRkNmVlNTgxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUBiiQ6Rfg2z4Yt4DL7CUVYd7vGCrj6Txfj5hfC+GYfRSF BzCYrhBu2AoLvNmawLRDoXquTN16MC+BhvQ6a3TbV7ud3cBizD+Cnjg7B+DMGy8R xmIOUWSU1RWtvgQDGzryng+X5GKB+qOMfz/TrE6w/HpxFvTz8cHJsjiSXtVphP3G uXJe14TXZ7qiHAA43sQKjYaHtfPcHnoiv5d0aHNV3hzsxeqkO92/BWBhRtSCQ4aI fXwhhc1Ii5NqZs8iMJ57ee3ikUSEzWmPcKBHz9NlSEJFj5V4bgroP33jJAu6bqQ6 SBfMLH4qFr6da6hRkNiUCiMVDglq+hLsQVBT+fIdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDT0I/BLA18osB2YjdOaC73o0yZcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2MwMTg1MWMyLWIyYmMtNGU2Mi05MGM3LTgxNjU3ZmIwZjNmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwowDQYJKoZIhvcNAQELBQADggEBABPeuc5Yuq9AEwDQ42nYmMLP CsxwlX6QQ+NIN8vEBQcKVr2XDo0M8wbL4PIGDy/L9ZDaoHanwWx2Si4gU4gLjVRf oji/BXURYgabMIaJpYFLbt3T6DyyRUJs7nPclOtPE7BkKvYBDNUDT7prD9/5CsO9 DYZmZxcjnf5Q0VCHG6Zcabvd9yfWBj0DLL+FBpenRo1Ak3m/xJsbWAC6l461Er+b PTp+cqkhOhdvlRQBSIk/TDZSnAZTcczOrhyeFEtuBQrFsyDoy9JcBzM6Y+WozQjy hB7D1I23pfwO3ujE7rrTYROm2tGDOu+oBSXauE6bnk2sgGKuXvm6+jpqpYnP8dk= -----END CERTIFICATE-----Generated at Mon Sep 15 19:04:27 2025 by rpki-client