$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa File: 0934543e-90db-4ba0-9848-455452e0c367.roa (raw, json) Hash identifier: xaal48XkHowoLYQkXfLuAfNMmwkmtgHdsAY42VveI0k= Subject key identifier: EC:A4:42:E6:96:E9:6D:72:56:19:93:E7:BC:73:C4:E8:DF:35:33:20 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 34FE1A29E9446BA95DA8B3C1D89F54D593690736 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa Signing time: Fri 15 Aug 2025 15:10:10 +0000 ROA not before: Fri 15 Aug 2025 15:10:10 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fe:1a:29:e9:44:6b:a9:5d:a8:b3:c1:d8:9f:54:d5:93:69:07:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 15 15:10:10 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=b1337f601714773611536ee5468f67d10a24e0c9ec3b847d96652d1aecb6581a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:51:f4:7d:1b:4c:9a:c1:d7:66:b3:8f:4f: 09:6d:f3:dd:f8:d6:99:64:34:1f:b8:70:a7:77:b8: da:7e:c8:0e:44:8d:68:07:34:ed:5d:a1:7a:e4:65: f4:14:75:ef:ae:06:59:2c:17:3e:3b:a5:33:bc:10: f5:9d:c2:21:66:57:9d:d3:e7:37:cb:81:bc:0a:ae: 39:b2:f1:32:28:0a:d1:a3:01:92:ca:2d:16:3b:12: ee:3b:fe:60:c7:bd:4d:49:8f:30:13:05:b0:a5:35: 58:1c:85:4a:d7:4e:dd:d8:bb:66:3d:70:a3:39:35: 91:60:40:22:ea:6a:e1:40:f4:b6:b9:7a:b5:6e:f1: 46:ad:87:da:1a:d6:74:6e:ce:73:84:c9:2e:36:bb: 2e:c5:0d:55:b9:3e:b1:d2:c5:aa:87:f6:96:70:3b: 03:ba:1b:55:07:3d:da:d0:7b:75:f2:ff:40:eb:10: 76:50:be:86:54:fd:6c:83:85:79:c2:e4:76:9b:56: 81:a9:ab:30:99:d9:0e:0f:78:a7:95:e0:41:c7:ad: 07:45:4a:90:cd:38:e0:67:c1:92:d2:49:06:1b:d2: fa:37:1f:bf:b4:92:bc:3e:55:4a:1b:8c:8a:44:8d: 7d:af:50:51:58:d6:bf:2e:dc:6d:5d:6f:09:6d:81: 03:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A4:42:E6:96:E9:6D:72:56:19:93:E7:BC:73:C4:E8:DF:35:33:20 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c02::/48 Signature Algorithm: sha256WithRSAEncryption 11:cf:92:39:bc:1b:bf:e9:50:02:87:15:30:19:81:ec:09:2b: 84:eb:82:20:7c:33:0b:d2:bf:9b:46:4f:5c:2d:fd:55:53:91: 18:3c:87:d4:70:be:5f:a5:54:db:ed:07:62:fa:a7:72:90:9c: 74:b7:bf:de:59:31:a4:cc:12:6b:c3:03:80:80:6f:b6:57:1e: a9:e8:f3:b3:b0:9f:33:83:13:6e:d3:5b:3b:a3:f3:72:15:77: 0f:65:30:fa:fa:da:d3:c8:5a:05:a9:d9:fa:20:f4:ff:13:69: ae:0d:7a:47:a8:b4:44:c8:dc:a5:05:ad:85:a3:44:ea:50:25: 37:e7:a8:9e:d6:f5:89:68:2d:c1:36:ff:80:a7:53:13:87:27: 3e:c5:e4:05:17:1f:cd:e3:d3:65:73:ef:e3:38:82:44:04:63: e6:c6:d6:6d:3f:f0:ee:fa:c3:bf:89:23:85:26:75:79:8b:64: 80:aa:da:9c:89:a5:b0:1d:ce:04:cc:88:ec:75:ab:20:42:82: f1:55:cc:b5:e3:43:ab:3c:4a:e0:85:c3:cf:4b:d6:da:ba:e7: 57:a1:01:94:e1:66:6f:63:38:a5:18:bd:94:37:4c:53:8e:86: ae:1e:f7:35:52:8d:9a:a6:f2:bb:92:0c:99:5b:0a:58:ad:79: 17:92:62:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNP4aKelEa6ldqLPB2J9U1ZNpBzYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE1MTUxMDEwWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTMzN2Y2MDE3MTQ3NzM2MTE1MzZlZTU0NjhmNjdkMTBh MjRlMGM5ZWMzYjg0N2Q5NjY1MmQxYWVjYjY1ODFhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHLlH0fRtMmsHXZrOPTwlt89341plkNB+4cKd3uNp+yA5E jWgHNO1doXrkZfQUde+uBlksFz47pTO8EPWdwiFmV53T5zfLgbwKrjmy8TIoCtGj AZLKLRY7Eu47/mDHvU1JjzATBbClNVgchUrXTt3Yu2Y9cKM5NZFgQCLqauFA9La5 erVu8Uath9oa1nRuznOEyS42uy7FDVW5PrHSxaqH9pZwOwO6G1UHPdrQe3Xy/0Dr EHZQvoZU/WyDhXnC5HabVoGpqzCZ2Q4PeKeV4EHHrQdFSpDNOOBnwZLSSQYb0vo3 H7+0krw+VUobjIpEjX2vUFFY1r8u3G1dbwltgQOTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7KRC5pbpbXJWGZPnvHPE6N81MyAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA5MzQ1NDNlLTkwZGItNGJhMC05ODQ4LTQ1NTQ1MmUwYzM2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAIwDQYJKoZIhvcNAQELBQADggEBABHPkjm8G7/pUAKHFTAZgewJ K4TrgiB8MwvSv5tGT1wt/VVTkRg8h9Rwvl+lVNvtB2L6p3KQnHS3v95ZMaTMEmvD A4CAb7ZXHqno87OwnzODE27TWzuj83IVdw9lMPr62tPIWgWp2fog9P8Taa4Nekeo tETI3KUFrYWjROpQJTfnqJ7W9YloLcE2/4CnUxOHJz7F5AUXH83j02Vz7+M4gkQE Y+bG1m0/8O76w7+JI4UmdXmLZICq2pyJpbAdzgTMiOx1qyBCgvFVzLXjQ6s8SuCF w89L1tq651ehAZThZm9jOKUYvZQ3TFOOhq4e9zVSjZqm8ruSDJlbCliteReSYrA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:04:24 2025 by rpki-client