$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa File: 2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa (raw, json) Hash identifier: f7/koIuxd7Acrp+Km5qCxl3+/fhh6SDd1P/S1bUne4Q= Subject key identifier: 94:3C:17:AE:B5:8C:57:B6:84:21:29:AE:AD:60:6B:C4:43:42:44:00 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 114F3A61A00A0A992AA37CA93BB436B4ADDBACAB Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa Signing time: Tue 05 Aug 2025 18:10:09 +0000 ROA not before: Tue 05 Aug 2025 18:10:09 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:48f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4f:3a:61:a0:0a:0a:99:2a:a3:7c:a9:3b:b4:36:b4:ad:db:ac:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 5 18:10:09 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=2ba48c4352aae185be6dbe732225fdd3f40d0d857997d7c99260b7e171269664, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:3c:8c:ac:43:1f:81:93:43:4d:36:81:29: a6:e5:18:f9:e7:58:fd:6c:13:cc:eb:e5:51:d8:c1: ba:94:c1:05:aa:86:b5:46:14:01:5e:c3:ea:54:5b: a7:30:d0:89:47:f2:c9:fe:09:73:22:7d:36:57:a0: b9:3b:b1:3f:10:a0:b9:d3:89:7a:ab:ca:85:91:11: f5:88:3c:60:7d:e1:c5:ad:50:ba:c6:c0:20:54:67: 1f:79:72:32:40:3e:15:df:7e:9b:3c:14:9c:fc:49: 39:69:89:f6:2b:74:56:21:12:8b:86:8c:a4:ea:2c: 5d:38:44:ee:7f:e4:9f:76:6b:d7:fd:d8:f5:b7:2f: e9:6f:fc:84:90:25:5a:7e:e1:d3:68:38:ce:c8:bf: 5b:f7:da:08:e7:3f:b9:36:9b:5e:56:e1:4b:d1:38: b7:d8:b0:74:a4:c2:4b:f1:24:6d:92:c8:c2:8a:c0: 8d:1c:6e:e4:6c:43:e7:97:46:2e:be:b6:38:6c:fa: 8f:54:14:21:0d:47:56:44:e7:15:1d:bd:5e:ca:19: 55:de:69:b5:09:a2:0b:1b:ba:7c:81:df:c0:cd:8b: 80:8c:25:8f:9e:c8:30:be:ea:c1:fb:80:e1:20:32: ca:42:c0:c5:7a:12:a1:c3:1e:96:62:37:22:14:71: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3C:17:AE:B5:8C:57:B6:84:21:29:AE:AD:60:6B:C4:43:42:44:00 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c5b343e-eb35-4c66-8ea2-4b4a02882cd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:48f::/48 Signature Algorithm: sha256WithRSAEncryption 21:f8:51:b2:c8:54:95:27:3f:57:e4:fd:c0:0d:a8:a1:a8:83: 7b:70:4d:bd:f9:4a:12:e4:28:44:e9:b0:80:70:30:00:82:6b: 9e:4f:71:85:09:e5:ec:1b:55:e6:c6:91:d0:f4:ad:29:af:ab: 27:46:71:f3:1d:10:42:cc:f3:2a:9c:65:4a:bb:22:d4:76:1b: 07:b6:93:fa:fb:9d:28:10:22:28:54:a8:f5:30:5c:da:51:17: 1a:15:64:d1:5d:9b:66:b4:3f:85:6a:1e:54:7d:a6:7b:f9:f5: f0:8a:f2:d4:97:b0:98:7f:4f:22:0f:a7:70:39:c8:6b:fa:67: cc:d5:70:a9:53:f1:ed:97:2b:a7:d5:b5:81:0d:23:7b:e7:5f: bd:b6:00:be:da:c1:c5:b7:49:d1:fe:19:bf:38:dd:ad:1f:2d: cb:7c:81:34:38:7b:2a:58:13:dc:a1:7e:4f:fc:20:06:8c:88: 39:80:5d:8c:4e:d9:cd:df:e5:77:4b:8b:53:f2:1c:e0:ab:f5: 08:d2:a7:c8:16:44:66:51:d7:93:81:f7:33:23:a3:20:ea:29: 71:76:22:c1:5a:88:e9:14:14:27:1e:7e:a0:58:0b:35:ad:dd: 07:bc:92:12:fc:a2:c5:b0:b3:2a:3b:85:9f:9c:c7:26:95:ec: 55:3e:d9:61 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEU86YaAKCpkqo3ypO7Q2tK3brKswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODA1MTgxMDA5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmE0OGM0MzUyYWFlMTg1YmU2ZGJlNzMyMjI1ZmRkM2Y0 MGQwZDg1Nzk5N2Q3Yzk5MjYwYjdlMTcxMjY5NjY0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq/DyMrEMfgZNDTTaBKablGPnnWP1sE8zr5VHYwbqUwQWq hrVGFAFew+pUW6cw0IlH8sn+CXMifTZXoLk7sT8QoLnTiXqryoWREfWIPGB94cWt ULrGwCBUZx95cjJAPhXffps8FJz8STlpifYrdFYhEouGjKTqLF04RO5/5J92a9f9 2PW3L+lv/ISQJVp+4dNoOM7Iv1v32gjnP7k2m15W4UvROLfYsHSkwkvxJG2SyMKK wI0cbuRsQ+eXRi6+tjhs+o9UFCENR1ZE5xUdvV7KGVXeabUJogsbunyB38DNi4CM JY+eyDC+6sH7gOEgMspCwMV6EqHDHpZiNyIUcX3JAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlDwXrrWMV7aEISmurWBrxENCRAAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJjNWIzNDNlLWViMzUtNGM2Ni04ZWEyLTRiNGEwMjg4MmNkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABI8wDQYJKoZIhvcNAQELBQADggEBACH4UbLIVJUnP1fk/cANqKGo g3twTb35ShLkKETpsIBwMACCa55PcYUJ5ewbVebGkdD0rSmvqydGcfMdEELM8yqc ZUq7ItR2Gwe2k/r7nSgQIihUqPUwXNpRFxoVZNFdm2a0P4VqHlR9pnv59fCK8tSX sJh/TyIPp3A5yGv6Z8zVcKlT8e2XK6fVtYENI3vnX722AL7awcW3SdH+Gb843a0f Lct8gTQ4eypYE9yhfk/8IAaMiDmAXYxO2c3f5XdLi1PyHOCr9QjSp8gWRGZR15OB 9zMjoyDqKXF2IsFaiOkUFCcefqBYCzWt3Qe8khL8osWwsyo7hZ+cxyaV7FU+2WE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:27 2025 by rpki-client