$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cf62b964-3d33-414c-b4ce-9c3db9218363.roa File: cf62b964-3d33-414c-b4ce-9c3db9218363.roa (raw, json) Hash identifier: HR94JfE29373mFAbqukfSYh16crbnlGkQ6BD9cMZJBU= Subject key identifier: CE:AC:EB:EB:88:0D:00:70:27:5A:A2:5B:D3:2C:2C:61:0B:A8:0E:26 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 248531670479E8D679CCF0CAEBA39DF0F40EF649 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cf62b964-3d33-414c-b4ce-9c3db9218363.roa Signing time: Thu 28 Aug 2025 15:37:11 +0000 ROA not before: Thu 28 Aug 2025 15:37:11 +0000 ROA not after: Thu 02 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:3cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:85:31:67:04:79:e8:d6:79:cc:f0:ca:eb:a3:9d:f0:f4:0e:f6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 28 15:37:11 2025 GMT Not After : Oct 2 23:59:59 2025 GMT Subject: serialNumber=9a54e4452e1b4c5436a28f8d6200305bfe14bc6f860ff9cb1b1d979ab4110cf2, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cf:fb:c4:6d:9c:53:81:a3:8f:53:a3:d2:3c: d1:cd:0b:2a:6b:01:77:d8:08:cf:7a:6e:98:36:ec: 85:52:b8:6f:d2:21:91:ff:13:46:7c:0f:3a:04:28: 88:3c:14:f1:1d:39:a8:37:6c:d4:02:79:f3:c6:5f: 5f:30:30:b4:f6:e9:ae:64:cf:d2:37:c3:55:31:b7: 19:1c:70:33:04:44:74:df:45:1e:0d:c3:bc:dd:d1: 8c:e4:2d:92:4d:83:0c:97:48:77:d2:6c:1d:9e:3f: 3c:f8:3c:9e:a8:d3:6f:a3:e3:23:30:e6:7a:78:af: 80:6d:53:ec:cb:ba:be:df:8f:4d:f5:a5:a9:da:94: a4:fb:58:79:35:9d:33:82:47:bb:ea:3c:7d:db:e3: dd:e3:31:91:36:97:58:27:45:ad:6d:4f:1f:07:d2: 94:a4:8a:3a:44:ed:d0:9f:70:18:6b:cc:2c:51:6c: 6e:33:c7:6c:2f:39:c4:f5:5b:1e:b7:ae:3d:fb:bc: 2c:4e:92:1c:a1:e4:e1:fc:fd:63:29:bb:69:4a:87: c9:a6:69:2c:ec:68:9b:17:13:bc:4f:ee:20:4d:6c: 68:d3:19:f9:a5:ec:82:95:8e:4a:19:16:47:2f:c0: 65:1c:b7:8a:70:1c:69:c1:64:5e:1b:cd:d8:20:e9: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AC:EB:EB:88:0D:00:70:27:5A:A2:5B:D3:2C:2C:61:0B:A8:0E:26 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cf62b964-3d33-414c-b4ce-9c3db9218363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3cc::/48 Signature Algorithm: sha256WithRSAEncryption 9c:f9:8b:a8:1a:f6:4f:b5:3d:6f:2e:ea:10:97:28:56:88:b8: d8:7a:ac:d9:22:f1:c6:90:c6:bb:2e:76:b5:92:c2:78:ca:c0: f0:c3:b5:7a:24:0e:b1:fb:12:07:e1:fe:f1:85:67:9d:5b:15: 70:d3:d4:ea:33:6d:93:7e:cc:bc:19:86:c8:99:81:bc:ca:76: bd:ea:36:88:17:03:e3:f3:79:02:d9:d3:07:33:0e:f5:90:29: 04:dd:b2:d2:6e:56:58:d3:dd:15:b7:1c:aa:ff:38:0e:80:4c: b9:fb:5b:96:7c:3d:3a:b9:b2:e4:18:5b:51:ad:57:ba:f3:9b: 67:44:60:e6:62:84:a5:c7:28:ed:f1:cb:14:3f:46:a1:1f:4e: ca:b8:9f:1b:34:a8:89:cf:37:4b:df:97:03:2d:1f:49:7e:a5: fc:5e:33:ef:49:96:c0:80:a6:46:d3:15:dc:b2:49:e1:74:60: c3:7c:13:42:2c:97:88:19:bb:42:b8:e1:38:b0:6d:45:03:88: 5d:3d:f1:82:72:d8:ad:c5:13:0a:b9:7d:13:49:f6:c6:09:cb: 4a:46:8b:5c:d6:db:ea:39:7a:f9:77:ac:db:08:00:65:23:3c: 1d:f4:d4:d4:80:cf:e9:21:d5:0a:a4:46:d2:32:12:4e:30:10: 5c:1f:cd:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJIUxZwR56NZ5zPDK66Od8PQO9kkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODI4MTUzNzExWhcNMjUxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTU0ZTQ0NTJlMWI0YzU0MzZhMjhmOGQ2MjAwMzA1YmZl MTRiYzZmODYwZmY5Y2IxYjFkOTc5YWI0MTEwY2YyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSz/vEbZxTgaOPU6PSPNHNCyprAXfYCM96bpg27IVSuG/S IZH/E0Z8DzoEKIg8FPEdOag3bNQCefPGX18wMLT26a5kz9I3w1UxtxkccDMERHTf RR4Nw7zd0YzkLZJNgwyXSHfSbB2ePzz4PJ6o02+j4yMw5np4r4BtU+zLur7fj031 panalKT7WHk1nTOCR7vqPH3b493jMZE2l1gnRa1tTx8H0pSkijpE7dCfcBhrzCxR bG4zx2wvOcT1Wx63rj37vCxOkhyh5OH8/WMpu2lKh8mmaSzsaJsXE7xP7iBNbGjT Gfml7IKVjkoZFkcvwGUct4pwHGnBZF4bzdgg6Wo7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzqzr64gNAHAnWqJb0ywsYQuoDiYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NmNjJiOTY0LTNkMzMtNDE0Yy1iNGNlLTljM2RiOTIxODM2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8wwDQYJKoZIhvcNAQELBQADggEBAJz5i6ga9k+1PW8u6hCXKFaI uNh6rNki8caQxrsudrWSwnjKwPDDtXokDrH7Egfh/vGFZ51bFXDT1OozbZN+zLwZ hsiZgbzKdr3qNogXA+PzeQLZ0wczDvWQKQTdstJuVljT3RW3HKr/OA6ATLn7W5Z8 PTq5suQYW1GtV7rzm2dEYOZihKXHKO3xyxQ/RqEfTsq4nxs0qInPN0vflwMtH0l+ pfxeM+9JlsCApkbTFdyySeF0YMN8E0Isl4gZu0K44TiwbUUDiF098YJy2K3FEwq5 fRNJ9sYJy0pGi1zW2+o5evl3rNsIAGUjPB301NSAz+kh1QqkRtIyEk4wEFwfzQY= -----END CERTIFICATE-----Generated at Fri Sep 19 00:11:59 2025 by rpki-client