$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa File: f0f08d8e-64f4-4e2b-8f33-26427783e662.roa (raw, json) Hash identifier: BDfxDKdost03s5xnB3J0j/PSjgft3v9VlVRegntmcIM= Subject key identifier: 7B:B3:2C:7C:2D:D1:A8:2B:AC:76:77:40:3F:A6:1A:D0:7F:AC:29:CF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: B35F2CF5C708EAF9B085322B219EDDA59D617E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa Signing time: Wed 06 Aug 2025 00:40:47 +0000 ROA not before: Wed 06 Aug 2025 00:40:47 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:54a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b3:5f:2c:f5:c7:08:ea:f9:b0:85:32:2b:21:9e:dd:a5:9d:61:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 6 00:40:47 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=b01f857c4998158f7fa2519eaba77f65576873d4d9928943833c23d14fec417e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:8d:f7:30:ac:29:67:b5:1e:f4:13:c4:06: f4:87:56:87:17:79:bc:66:35:4a:d0:bf:71:cd:6b: 26:df:0e:5a:3b:f8:d3:8a:a9:e3:2f:c4:66:44:89: 9e:31:b4:1d:59:13:1a:c4:75:9c:86:a1:d8:0a:46: ad:fd:f6:d4:6e:51:ce:8b:10:b5:c7:2c:0e:bc:38: 7e:28:74:9b:8f:3a:e0:df:25:1f:8f:ca:99:c6:a0: 3d:6f:90:a9:76:61:dc:e4:77:b5:7d:48:ba:a8:f1: 23:60:43:90:bf:dc:44:9b:62:61:68:53:fd:86:37: 72:a9:b5:06:b2:45:ba:b6:25:fc:32:74:1e:a6:c4: 76:e1:dc:a2:78:26:f6:f9:af:53:69:f1:61:16:1a: f8:a1:b3:ea:29:8e:22:a3:37:37:c5:b1:d7:8b:19: e6:7b:8e:29:42:ef:98:e9:17:e6:b1:be:bc:b3:9a: de:6f:21:ed:c7:3b:7b:2a:c8:38:e4:96:82:fc:db: 38:f6:4d:4f:a4:4d:b7:27:2c:52:cd:39:d7:e3:9c: 90:a8:9d:12:a2:b1:dd:e7:a4:d6:f0:9e:ce:9f:cf: 8e:be:28:91:3a:f7:fd:90:ef:6a:fb:2c:a9:74:c2: 76:05:1b:a0:fc:d3:e3:17:99:b4:90:e8:63:4c:99: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B3:2C:7C:2D:D1:A8:2B:AC:76:77:40:3F:A6:1A:D0:7F:AC:29:CF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54a::/48 Signature Algorithm: sha256WithRSAEncryption 8d:b2:48:ba:e6:5f:b1:99:0a:ec:2d:bc:3e:73:7e:a3:58:53: 14:7b:5a:9b:85:d0:c8:b5:fb:6e:1d:1f:ad:36:00:8e:4c:7b: 19:65:69:d3:e6:ac:72:ff:e0:0b:ee:9b:aa:46:4b:62:46:ca: bb:12:4b:45:da:92:cb:f3:0b:11:0a:49:59:9d:1b:73:95:d3: 19:09:e6:a1:75:2f:f1:c2:3d:7a:a7:60:5e:0f:91:44:fe:a3: 5e:85:b9:a9:d8:60:9e:89:00:12:2e:db:05:80:49:82:f9:41: 27:07:4a:03:77:27:4c:84:1d:16:18:a7:29:48:07:22:92:ed: 8a:c7:45:36:cd:dd:a6:f1:2a:19:55:32:78:6f:2c:8a:a6:2f: ba:35:f1:0a:33:a8:95:ef:7c:17:06:88:b5:60:d5:ad:dc:a3: 77:01:40:70:5c:38:c6:63:f5:87:f1:6e:58:c2:04:e3:db:60: f4:9d:09:3f:3d:5c:f9:7c:d6:fb:0b:5c:47:f3:79:7a:e4:55: 84:12:e6:8f:8d:50:3e:8b:62:53:01:9a:24:8f:42:2d:d9:0a: 82:7c:46:ca:77:82:f9:d8:11:ea:ba:f4:94:35:eb:60:4b:06: 4a:fc:85:74:ea:9a:44:35:75:76:97:46:a9:d2:d5:30:57:1c: b7:ac:c6:58 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUALNfLPXHCOr5sIUyKyGe3aWdYX4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODA2MDA0MDQ3WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDFmODU3YzQ5OTgxNThmN2ZhMjUxOWVhYmE3N2Y2NTU3 Njg3M2Q0ZDk5Mjg5NDM4MzNjMjNkMTRmZWM0MTdlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/lo33MKwpZ7Ue9BPEBvSHVocXebxmNUrQv3HNaybfDlo7 +NOKqeMvxGZEiZ4xtB1ZExrEdZyGodgKRq399tRuUc6LELXHLA68OH4odJuPOuDf JR+PypnGoD1vkKl2Ydzkd7V9SLqo8SNgQ5C/3ESbYmFoU/2GN3KptQayRbq2Jfwy dB6mxHbh3KJ4Jvb5r1Np8WEWGvihs+opjiKjNzfFsdeLGeZ7jilC75jpF+axvryz mt5vIe3HO3sqyDjkloL82zj2TU+kTbcnLFLNOdfjnJConRKisd3npNbwns6fz46+ KJE69/2Q72r7LKl0wnYFG6D80+MXmbSQ6GNMmS7lAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUe7MsfC3RqCusdndAP6Ya0H+sKc8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YwZjA4ZDhlLTY0ZjQtNGUyYi04ZjMzLTI2NDI3NzgzZTY2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUowDQYJKoZIhvcNAQELBQADggEBAI2ySLrmX7GZCuwtvD5zfqNY UxR7WpuF0Mi1+24dH602AI5MexlladPmrHL/4Avum6pGS2JGyrsSS0XaksvzCxEK SVmdG3OV0xkJ5qF1L/HCPXqnYF4PkUT+o16FuanYYJ6JABIu2wWASYL5QScHSgN3 J0yEHRYYpylIByKS7YrHRTbN3abxKhlVMnhvLIqmL7o18QozqJXvfBcGiLVg1a3c o3cBQHBcOMZj9YfxbljCBOPbYPSdCT89XPl81vsLXEfzeXrkVYQS5o+NUD6LYlMB miSPQi3ZCoJ8Rsp3gvnYEeq69JQ162BLBkr8hXTqmkQ1dXaXRqnS1TBXHLesxlg= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:37 2025 by rpki-client