$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8606154f-31dd-423a-a436-9da1712c8bc8.roa File: 8606154f-31dd-423a-a436-9da1712c8bc8.roa (raw, json) Hash identifier: Etk3OO+ZZqP8pOtCgOjPA0LDKg0b2/2QG12c+WSbBAg= Subject key identifier: 51:65:76:1E:47:6A:B5:DB:F9:AB:AB:3E:CF:ED:CA:BB:1E:AC:62:E0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5920C17371A223197C5D85A795BF44A2C135895C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8606154f-31dd-423a-a436-9da1712c8bc8.roa Signing time: Mon 21 Jul 2025 16:31:11 +0000 ROA not before: Mon 21 Jul 2025 16:31:11 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:20:c1:73:71:a2:23:19:7c:5d:85:a7:95:bf:44:a2:c1:35:89:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:31:11 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=c1aa4bba7f3cd7e8b749887e18bb858b7b02fda08253d9aefde88e5a0f0cdb40, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:46:82:bb:fa:85:48:26:19:47:32:99:6c: 8f:d4:0e:14:11:6c:d0:ed:9c:15:e2:4e:09:4a:49: 5d:3c:1b:47:c4:47:fc:69:51:d8:c8:85:b1:55:c0: a1:b0:1a:c8:fd:5e:cd:0c:59:65:03:9e:75:14:b3: 40:65:00:2d:34:53:9d:4d:6b:fb:1b:b4:a6:b4:d2: 21:43:85:e1:7f:5a:f2:3a:dc:2e:30:29:94:0f:6e: e4:ea:1a:49:8c:8f:98:c2:f9:d4:90:b7:d8:b2:54: 67:14:8b:68:fb:54:43:ab:6a:8f:9a:ca:b4:8c:52: 0a:e9:12:be:c8:19:1f:c2:40:0e:30:84:73:f4:70: 2f:02:d9:dc:e1:54:8b:e2:86:ff:03:c8:7b:b0:bd: ca:bd:6a:82:8f:c9:50:f9:d3:e6:9b:f8:78:b1:b9: 8a:3f:2c:bf:b1:2d:2a:40:1f:4c:52:70:d2:99:ea: 9f:df:1f:55:ac:17:65:7f:1e:3e:b3:44:52:ad:b6: 7b:4d:c1:86:b9:a5:6b:c6:1d:a8:c3:59:cb:80:6b: bd:6f:04:e0:ea:96:f0:9c:d2:ce:a4:cc:e8:30:64: 19:d7:e2:e3:74:1f:dc:01:01:54:b8:a7:0b:2a:65: 92:b5:e5:1b:dd:89:a7:47:73:44:94:5e:86:9d:71: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:65:76:1E:47:6A:B5:DB:F9:AB:AB:3E:CF:ED:CA:BB:1E:AC:62:E0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8606154f-31dd-423a-a436-9da1712c8bc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1b::/48 Signature Algorithm: sha256WithRSAEncryption 15:40:83:e6:f1:ae:57:78:66:f5:36:2e:c9:c4:97:32:a6:1b: ae:62:55:7c:6c:0f:ed:e8:6d:28:aa:d9:02:f9:a5:ef:95:c9: 0b:58:9c:c5:29:5c:fe:6e:0f:90:9d:25:82:63:a4:de:35:28: ea:bd:24:ce:9a:a2:87:53:3c:f6:68:61:0e:4c:1b:b6:ed:f5: 41:1f:3c:0e:2e:38:2f:da:3e:c7:8d:48:4f:58:10:7b:97:26: 8c:e8:a4:df:78:cf:0e:3f:a9:4c:77:87:e3:29:54:07:7e:fb: 9d:d7:93:de:39:85:92:bf:cf:9e:5a:39:c5:c5:23:d6:e8:94: 5c:bd:db:71:2c:8f:84:ad:ed:c4:57:fa:95:6f:3f:7b:7b:83: 79:2e:65:ef:81:17:21:2b:97:43:74:d0:f9:4d:8a:02:42:1d: ca:a5:8a:c0:69:45:b1:43:72:25:98:41:38:2a:1f:3d:b7:73: 7b:47:22:b2:b1:a1:ec:b5:e7:51:6d:7f:8a:92:b3:bb:d2:8b: 14:89:0e:7c:fa:c2:56:fc:63:b9:aa:4d:88:44:08:e8:47:22: 5f:11:e8:7b:c8:0f:bc:4e:ee:16:53:d0:0f:b3:86:d0:b2:56: 5d:a2:97:f8:f4:1e:ac:3a:da:9d:c0:4a:2c:5b:6f:df:0d:85: 5f:89:3d:8a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWSDBc3GiIxl8XYWnlb9EosE1iVwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYzMTExWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWFhNGJiYTdmM2NkN2U4Yjc0OTg4N2UxOGJiODU4Yjdi MDJmZGEwODI1M2Q5YWVmZGU4OGU1YTBmMGNkYjQwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZNUaCu/qFSCYZRzKZbI/UDhQRbNDtnBXiTglKSV08G0fE R/xpUdjIhbFVwKGwGsj9Xs0MWWUDnnUUs0BlAC00U51Na/sbtKa00iFDheF/WvI6 3C4wKZQPbuTqGkmMj5jC+dSQt9iyVGcUi2j7VEOrao+ayrSMUgrpEr7IGR/CQA4w hHP0cC8C2dzhVIvihv8DyHuwvcq9aoKPyVD50+ab+HixuYo/LL+xLSpAH0xScNKZ 6p/fH1WsF2V/Hj6zRFKttntNwYa5pWvGHajDWcuAa71vBODqlvCc0s6kzOgwZBnX 4uN0H9wBAVS4pwsqZZK15RvdiadHc0SUXoadcSRhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUWV2Hkdqtdv5q6s+z+3Kux6sYuAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg2MDYxNTRmLTMxZGQtNDIzYS1hNDM2LTlkYTE3MTJjOGJjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBswDQYJKoZIhvcNAQELBQADggEBABVAg+bxrld4ZvU2LsnElzKm G65iVXxsD+3obSiq2QL5pe+VyQtYnMUpXP5uD5CdJYJjpN41KOq9JM6aoodTPPZo YQ5MG7bt9UEfPA4uOC/aPseNSE9YEHuXJozopN94zw4/qUx3h+MpVAd++53Xk945 hZK/z55aOcXFI9bolFy923Esj4St7cRX+pVvP3t7g3kuZe+BFyErl0N00PlNigJC HcqlisBpRbFDciWYQTgqHz23c3tHIrKxoey151Ftf4qSs7vSixSJDnz6wlb8Y7mq TYhECOhHIl8R6HvID7xO7hZT0A+zhtCyVl2il/j0Hqw62p3ASixbb98NhV+JPYo= -----END CERTIFICATE-----Generated at Wed Aug 6 12:32:28 2025 by rpki-client