$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1433f75c-c179-4b87-bc70-9b0cbea932be.roa File: 1433f75c-c179-4b87-bc70-9b0cbea932be.roa (raw, json) Hash identifier: L1dOFn24xEN0foiGasKIquW5PGqEyEHivNmU/kSAOGg= Subject key identifier: 3A:65:D7:3F:10:C0:72:B7:6B:35:6F:F6:7D:BE:98:3C:DC:87:51:60 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 41D55FD7B08964CB65A0B52CFDE3B3ACDE8AE54E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1433f75c-c179-4b87-bc70-9b0cbea932be.roa Signing time: Fri 15 Aug 2025 15:21:40 +0000 ROA not before: Fri 15 Aug 2025 15:21:40 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d5:5f:d7:b0:89:64:cb:65:a0:b5:2c:fd:e3:b3:ac:de:8a:e5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 15 15:21:40 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=4b86aadc21b795351a64c4811505e18212a09bcda972da253067cb16ce9f455e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9d:61:1d:99:0c:ad:7d:00:42:9c:e1:49:93: 30:13:6e:a3:98:08:0c:eb:27:38:e8:52:c5:6a:2e: 03:d1:50:45:db:7d:60:39:a3:a7:50:11:08:4c:a6: 53:8a:8b:a7:2d:af:c9:95:8a:5c:2f:4f:fe:c5:3a: 9a:a8:b7:e9:5d:b0:1c:34:83:bd:6d:08:8d:68:f6: 0d:bb:d1:aa:4e:83:90:90:c5:6d:51:56:83:c8:f6: c7:73:94:aa:98:53:96:e0:4e:a2:ca:b8:ea:c1:4a: 12:8c:88:ef:67:90:e6:78:f6:00:cf:b4:2b:55:f5: 1a:95:3c:f8:d2:23:65:bb:dc:d0:32:5c:b7:e8:25: 8a:2f:df:79:23:b1:1b:cd:fd:72:3e:65:19:20:76: d3:07:40:d2:99:4d:95:bd:a4:7e:e7:45:02:0e:8e: 3d:6b:11:2d:52:8f:4e:48:cf:e3:fc:83:2f:5f:ff: bd:a8:30:b4:d7:db:f2:4a:46:05:3c:f0:e1:6d:fc: f7:04:a9:fc:63:ed:71:00:a2:08:32:03:51:8e:a1: d7:06:8d:ac:42:89:d4:0a:f5:38:f1:59:dc:24:43: 67:b8:67:8f:69:6a:a6:b8:d7:89:e2:c7:f3:91:c2: 7e:8a:62:0f:34:47:0b:a0:37:77:84:97:84:8e:47: ed:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:65:D7:3F:10:C0:72:B7:6B:35:6F:F6:7D:BE:98:3C:DC:87:51:60 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1433f75c-c179-4b87-bc70-9b0cbea932be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c11::/48 Signature Algorithm: sha256WithRSAEncryption 0b:46:a5:74:1d:27:56:44:ff:36:cf:72:65:d3:e4:4a:dc:76: 26:46:8b:d5:be:98:92:ee:73:f3:34:10:8b:9a:8b:35:63:58: 59:96:ef:fe:06:cc:c1:af:9f:61:71:71:15:70:cf:6a:fd:92: da:92:e7:85:69:21:f1:c9:48:50:9d:2b:29:74:10:83:33:4a: 91:2b:23:62:2e:36:54:f9:0f:31:7a:fa:84:d7:d1:e4:76:81: 2c:06:5d:3a:d0:ba:0c:d3:75:0d:f7:8f:2b:cd:e4:1c:98:24: 15:81:36:0c:18:75:9e:20:65:b4:1e:30:e3:22:ca:f3:2c:4b: 34:dc:5a:4b:21:40:61:f9:99:1c:f2:2d:ca:89:91:07:a7:ef: 5f:36:31:a4:c1:6b:81:0a:0f:c8:f5:9e:d6:e9:f1:d5:e1:85: da:79:91:4d:54:fe:65:ec:7e:e4:7a:15:83:52:0c:66:5a:13: f7:b7:8a:09:01:cb:58:5f:90:05:b2:d3:ed:b7:73:c6:d1:65: cc:15:97:96:41:ba:89:45:fa:6f:78:91:f7:23:37:68:53:d1: 51:74:d7:8b:72:66:17:ac:e0:cb:91:2d:a0:61:5d:10:70:1d: ae:9f:1e:83:29:85:13:e8:08:f4:fa:43:ac:c5:4f:ca:5d:0b: bc:1f:f8:97 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQdVf17CJZMtloLUs/eOzrN6K5U4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE1MTUyMTQwWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Yjg2YWFkYzIxYjc5NTM1MWE2NGM0ODExNTA1ZTE4MjEy YTA5YmNkYTk3MmRhMjUzMDY3Y2IxNmNlOWY0NTVlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTnWEdmQytfQBCnOFJkzATbqOYCAzrJzjoUsVqLgPRUEXb fWA5o6dQEQhMplOKi6ctr8mVilwvT/7FOpqot+ldsBw0g71tCI1o9g270apOg5CQ xW1RVoPI9sdzlKqYU5bgTqLKuOrBShKMiO9nkOZ49gDPtCtV9RqVPPjSI2W73NAy XLfoJYov33kjsRvN/XI+ZRkgdtMHQNKZTZW9pH7nRQIOjj1rES1Sj05Iz+P8gy9f /72oMLTX2/JKRgU88OFt/PcEqfxj7XEAoggyA1GOodcGjaxCidQK9TjxWdwkQ2e4 Z49paqa414nix/ORwn6KYg80RwugN3eEl4SOR+3hAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOmXXPxDAcrdrNW/2fb6YPNyHUWAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE0MzNmNzVjLWMxNzktNGI4Ny1iYzcwLTliMGNiZWE5MzJiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBEwDQYJKoZIhvcNAQELBQADggEBAAtGpXQdJ1ZE/zbPcmXT5Erc diZGi9W+mJLuc/M0EIuaizVjWFmW7/4GzMGvn2FxcRVwz2r9ktqS54VpIfHJSFCd Kyl0EIMzSpErI2IuNlT5DzF6+oTX0eR2gSwGXTrQugzTdQ33jyvN5ByYJBWBNgwY dZ4gZbQeMOMiyvMsSzTcWkshQGH5mRzyLcqJkQen7182MaTBa4EKD8j1ntbp8dXh hdp5kU1U/mXsfuR6FYNSDGZaE/e3igkBy1hfkAWy0+23c8bRZcwVl5ZBuolF+m94 kfcjN2hT0VF014tyZhes4MuRLaBhXRBwHa6fHoMphRPoCPT6Q6zFT8pdC7wf+Jc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:41:25 2025 by rpki-client