$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa File: 941f79ce-715f-49f4-a576-333c065d82c6.roa (raw, json) Hash identifier: 2b25j1mMrvKRpKX2AzZD3xNvSAI3PCZmLnV2c2lQ1SU= Subject key identifier: FB:19:36:98:A9:4B:9C:26:0C:DB:54:7A:4C:E2:68:6C:5C:2E:D9:B1 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0A8284C50E43397F0E4F019AEA5A8D1599FE39A5 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa Signing time: Fri 11 Jul 2025 18:10:06 +0000 ROA not before: Fri 11 Jul 2025 18:10:06 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:48f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:82:84:c5:0e:43:39:7f:0e:4f:01:9a:ea:5a:8d:15:99:fe:39:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:10:06 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=e5389346532ca82296a793ca8442672f789a403ee6788bd9dfbe78d0002cc27c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e4:fe:de:1b:49:00:f3:e7:d3:ba:a9:db:3f: 79:01:5b:a2:f7:81:45:b1:a1:0b:7a:3f:ce:a5:05: 46:f1:60:6b:85:64:80:18:df:e2:f0:29:46:4e:2f: 7c:09:7a:d3:cf:dc:3e:ff:81:f1:23:97:95:b2:f2: a2:95:01:1b:26:4f:1b:67:17:bd:df:88:1e:d4:9e: 7d:db:74:ac:00:97:54:68:41:b3:2d:42:f6:ec:7b: 1c:82:71:56:e0:a4:e7:ae:ed:8d:2d:ce:fc:54:a9: 7b:d0:24:38:ad:1b:48:20:88:19:02:3a:0d:d9:87: 96:30:09:09:52:fa:9f:a9:bd:08:89:eb:38:bf:83: 36:90:9f:2e:6c:23:d4:52:e6:4c:78:ef:25:00:e1: af:4d:e7:06:16:df:c5:a3:d6:5b:b2:51:00:2b:2a: 3a:62:93:97:25:d6:ad:22:c4:12:db:20:6d:bb:92: 23:2b:28:4b:34:d0:47:e4:7a:22:40:e7:3b:c1:c7: 3d:09:2e:4d:e9:7a:f7:ed:9b:4c:bf:22:25:58:42: 6a:c4:42:85:d1:3e:1a:48:53:f8:58:ff:c6:cb:32: 36:dd:f9:40:62:02:6a:cc:82:2a:65:e0:85:6b:04: 25:d1:e6:d8:61:47:b0:49:59:4f:55:57:2d:64:56: 70:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:19:36:98:A9:4B:9C:26:0C:DB:54:7A:4C:E2:68:6C:5C:2E:D9:B1 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:48f::/48 Signature Algorithm: sha256WithRSAEncryption 4b:ea:b3:3a:84:fe:e8:f6:47:c7:1f:b9:75:62:cd:20:6c:26: 56:d1:bf:f3:43:10:a3:a3:9e:36:bd:95:1f:70:41:01:1e:c6: 7b:61:0f:0e:33:34:a1:4d:f0:2c:22:c5:c2:a5:8e:cc:16:28: b9:0e:97:6a:69:80:eb:1c:61:34:c1:61:ee:bc:27:89:2a:94: a9:5a:46:7f:5e:4c:fe:99:25:a6:55:0c:b8:ca:0a:a3:ec:e4: 90:88:35:7c:8b:56:21:ac:cd:e3:fd:cf:98:1f:fc:5e:38:f0: 5e:ed:48:22:c7:81:9d:af:35:a7:30:1d:11:9b:12:04:5b:1d: 39:a1:a5:c2:2b:8f:15:ac:6b:e0:b8:2f:f8:1a:d3:77:dc:3c: 2b:5c:33:18:e6:31:11:d9:85:7c:99:e9:75:2c:d6:22:3c:86: a5:a9:2b:b1:6a:3a:09:e5:35:0c:65:c8:a2:59:3d:18:50:e3: ef:3a:eb:90:78:32:64:77:73:38:9d:28:0a:7e:75:fc:c2:59: 20:da:94:f4:1b:30:95:d4:a6:42:da:55:a6:cc:59:eb:12:88: b6:7f:0e:39:f8:60:e8:72:5c:a2:7a:81:e8:ec:f2:d6:e7:17: d7:5d:76:d2:5a:d5:ca:86:f0:35:9a:23:0a:4b:8c:d9:51:3c: 5a:e8:7c:d5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCoKExQ5DOX8OTwGa6lqNFZn+OaUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMDA2WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTM4OTM0NjUzMmNhODIyOTZhNzkzY2E4NDQyNjcyZjc4 OWE0MDNlZTY3ODhiZDlkZmJlNzhkMDAwMmNjMjdjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU5P7eG0kA8+fTuqnbP3kBW6L3gUWxoQt6P86lBUbxYGuF ZIAY3+LwKUZOL3wJetPP3D7/gfEjl5Wy8qKVARsmTxtnF73fiB7Unn3bdKwAl1Ro QbMtQvbsexyCcVbgpOeu7Y0tzvxUqXvQJDitG0ggiBkCOg3Zh5YwCQlS+p+pvQiJ 6zi/gzaQny5sI9RS5kx47yUA4a9N5wYW38Wj1luyUQArKjpik5cl1q0ixBLbIG27 kiMrKEs00EfkeiJA5zvBxz0JLk3pevftm0y/IiVYQmrEQoXRPhpIU/hY/8bLMjbd +UBiAmrMgipl4IVrBCXR5thhR7BJWU9VVy1kVnDVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+xk2mKlLnCYM21R6TOJobFwu2bEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk0MWY3OWNlLTcxNWYtNDlmNC1hNTc2LTMzM2MwNjVkODJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABI8wDQYJKoZIhvcNAQELBQADggEBAEvqszqE/uj2R8cfuXVizSBs JlbRv/NDEKOjnja9lR9wQQEexnthDw4zNKFN8CwixcKljswWKLkOl2ppgOscYTTB Ye68J4kqlKlaRn9eTP6ZJaZVDLjKCqPs5JCINXyLViGszeP9z5gf/F448F7tSCLH gZ2vNacwHRGbEgRbHTmhpcIrjxWsa+C4L/ga03fcPCtcMxjmMRHZhXyZ6XUs1iI8 hqWpK7FqOgnlNQxlyKJZPRhQ4+8665B4MmR3czidKAp+dfzCWSDalPQbMJXUpkLa VabMWesSiLZ/Djn4YOhyXKJ6gejs8tbnF9dddtJa1cqG8DWaIwpLjNlRPFrofNU= -----END CERTIFICATE-----Generated at Tue Aug 5 08:23:51 2025 by rpki-client