$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa File: 1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa (raw, json) Hash identifier: iynA1h6iuj8fk4So18TDlFXTuKv2GvpH8BkcjPPSSWk= Subject key identifier: 5E:EF:7F:1E:84:1E:72:F6:24:14:18:E1:8D:E0:03:C2:37:0C:9B:26 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 0D07CD7FFAC5083350FF64A71D04D52DBCE5B059 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa Signing time: Tue 19 Aug 2025 00:40:14 +0000 ROA not before: Tue 19 Aug 2025 00:40:14 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2620:108:d000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:07:cd:7f:fa:c5:08:33:50:ff:64:a7:1d:04:d5:2d:bc:e5:b0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Aug 19 00:40:14 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=98676182404f0b5a947db18daa11e83f7007c5185fb021be9965dbde0dd54d92, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:ca:8e:26:cc:42:85:d0:90:81:ea:2e:58: 1d:aa:63:c6:a8:7b:24:c7:51:b9:09:10:cc:49:4a: f9:cb:50:10:2e:eb:e0:05:0e:a5:7d:19:9c:a0:c5: 3e:05:e1:a1:e1:90:d3:87:b4:14:20:b3:c6:2d:02: ac:d0:76:46:00:78:c0:50:e1:f9:9e:a9:79:14:47: 02:94:bd:99:7a:21:c0:5a:f2:a4:db:18:b3:6c:1b: 95:66:21:69:4c:c6:b3:7c:7b:f3:9f:b3:8d:dc:f5: ac:76:b7:7f:9f:48:e3:e1:0f:e3:2e:8c:42:7b:4a: ea:96:84:ab:eb:e1:e9:0d:38:38:e0:a1:fe:db:31: 37:db:a2:78:a8:7c:50:4f:f3:5c:6f:4b:04:a1:14: 3f:37:10:3c:26:70:3c:e3:b2:9d:4f:aa:90:ed:5d: 4e:d3:87:39:c2:b9:94:99:af:bc:17:8d:c2:1e:d1: 52:96:e9:a4:20:8e:f3:44:56:8a:ac:7e:56:4f:4d: 06:f4:2b:8a:70:e2:a8:d0:69:fc:c5:dc:8a:53:47: 11:ac:69:c7:05:c2:02:f8:b0:9d:be:ea:8e:4a:e4: 21:f3:cd:d4:9a:b9:d5:e1:d1:2b:46:2c:42:f8:bc: 1f:e3:c8:80:59:9f:34:dc:17:c3:e8:89:18:c4:9b: 84:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EF:7F:1E:84:1E:72:F6:24:14:18:E1:8D:E0:03:C2:37:0C:9B:26 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:108:d000::/44 Signature Algorithm: sha256WithRSAEncryption 67:5b:2b:5f:75:88:34:3f:48:4b:1b:1f:e4:2d:98:b8:6e:34: 85:d8:13:db:8e:f3:c6:d3:1e:44:9b:f4:de:fa:83:ab:22:5f: 32:29:2d:13:46:84:aa:9e:0f:cb:09:f5:8d:7a:51:31:1b:50: de:3a:c2:9a:77:74:ad:b1:32:8f:f8:1b:9e:7f:74:19:7d:18: 4a:57:b9:60:f5:54:8b:5c:be:3f:c1:41:92:93:78:9c:5a:0d: 60:e2:b6:0c:03:bf:92:52:59:4e:e6:be:d5:f7:c4:34:0b:27: 11:4d:76:e4:9d:b7:24:76:2f:88:46:55:5c:2f:ff:8c:6c:66: 39:d9:7a:60:ee:e2:0a:2c:ca:0d:7f:87:c9:84:3e:78:d2:63: 82:c1:f0:a3:a1:30:6d:49:cd:96:51:eb:7f:e5:cf:1b:0b:ea: 19:97:f8:f3:88:c6:c2:fd:2c:2e:60:10:67:6b:c3:9f:f8:95: b5:ec:29:6c:3c:77:c1:7e:50:83:a6:53:08:f4:9c:80:8c:d4: bb:58:ce:cf:56:3e:3d:b8:4f:d5:03:4b:b3:f5:d9:51:20:4e: 28:1e:ec:1c:ad:09:b2:8a:76:f0:7f:ec:29:1b:58:a3:0c:9f: aa:4d:3d:6c:95:85:37:5b:d7:06:70:e2:64:a4:20:24:6c:ed: fb:27:6b:12 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDQfNf/rFCDNQ/2SnHQTVLbzlsFkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwODE5MDA0MDE0WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODY3NjE4MjQwNGYwYjVhOTQ3ZGIxOGRhYTExZTgzZjcw MDdjNTE4NWZiMDIxYmU5OTY1ZGJkZTBkZDU0ZDkyMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDObMqOJsxChdCQgeouWB2qY8aoeyTHUbkJEMxJSvnLUBAu 6+AFDqV9GZygxT4F4aHhkNOHtBQgs8YtAqzQdkYAeMBQ4fmeqXkURwKUvZl6IcBa 8qTbGLNsG5VmIWlMxrN8e/Ofs43c9ax2t3+fSOPhD+MujEJ7SuqWhKvr4ekNODjg of7bMTfboniofFBP81xvSwShFD83EDwmcDzjsp1PqpDtXU7ThznCuZSZr7wXjcIe 0VKW6aQgjvNEVoqsflZPTQb0K4pw4qjQafzF3IpTRxGsaccFwgL4sJ2+6o5K5CHz zdSaudXh0StGLEL4vB/jyIBZnzTcF8PoiRjEm4ThAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXu9/HoQecvYkFBjhjeADwjcMmyYwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzEzMDdhZDhlLWRmMGUtNGFiZS04ZjM3LTQ5NGRkYzM1NTRlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEI0AAwDQYJKoZIhvcNAQELBQADggEBAGdbK191iDQ/SEsbH+QtmLhu NIXYE9uO88bTHkSb9N76g6siXzIpLRNGhKqeD8sJ9Y16UTEbUN46wpp3dK2xMo/4 G55/dBl9GEpXuWD1VItcvj/BQZKTeJxaDWDitgwDv5JSWU7mvtX3xDQLJxFNduSd tyR2L4hGVVwv/4xsZjnZemDu4gosyg1/h8mEPnjSY4LB8KOhMG1JzZZR63/lzxsL 6hmX+POIxsL9LC5gEGdrw5/4lbXsKWw8d8F+UIOmUwj0nICM1LtYzs9WPj24T9UD S7P12VEgTige7BytCbKKdvB/7CkbWKMMn6pNPWyVhTdb1wZw4mSkICRs7fsnaxI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:09:56 2025 by rpki-client