$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59de13fe-c933-4e7f-b762-62adbcdbfec5.roa File: 59de13fe-c933-4e7f-b762-62adbcdbfec5.roa (raw, json) Hash identifier: 9Nf96Lcy+zqI5Vke/rrC3DVXnRvKFR1szVys1orizBE= Subject key identifier: DA:7E:92:69:E6:E2:FE:E6:42:23:E6:45:F3:B1:45:D2:CE:AF:73:DA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 386DB688074CB3F8CAA3A53F9DF7EE766D25E016 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59de13fe-c933-4e7f-b762-62adbcdbfec5.roa Signing time: Fri 22 Aug 2025 15:00:11 +0000 ROA not before: Fri 22 Aug 2025 15:00:11 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:3b40::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6d:b6:88:07:4c:b3:f8:ca:a3:a5:3f:9d:f7:ee:76:6d:25:e0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 22 15:00:11 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=8c66254be82e0bc5adbe22928efaf37ef9e303a5a4eace2d15ca3af76b3ab34c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:9b:c0:ec:15:a3:d9:d0:cb:71:fe:6b:d0: f8:fa:aa:be:04:ec:0c:cd:35:0f:85:28:4f:06:44: c7:a2:29:11:34:e5:87:c7:f6:54:ce:ca:bc:11:65: 23:10:8f:41:1f:6b:2d:88:19:a1:e6:e6:33:fd:8e: 2d:f9:25:e2:06:e9:e1:1e:36:6d:b0:d9:91:92:34: 98:f1:8b:ae:23:9f:92:09:74:c5:4b:34:21:ac:73: bc:b7:f7:3d:2b:06:7b:61:4e:bb:d6:2a:95:b5:13: af:be:cc:43:5f:06:aa:b4:37:85:70:d6:15:e6:03: 56:0f:82:7e:c5:64:8a:74:69:51:08:8b:99:8d:0a: 1f:e5:d9:4b:67:37:e7:25:b7:d0:52:8f:59:9c:53: 11:14:42:9c:60:51:5c:3d:75:c0:19:7e:e7:da:1c: 62:aa:df:bc:3f:00:c2:41:18:67:e2:1b:a8:68:7d: 17:2b:cf:01:64:30:37:6d:b3:ab:16:1c:30:79:60: 4c:f2:e5:21:2f:ea:98:d5:83:a0:01:8a:29:0a:2b: b0:62:ed:db:be:91:09:23:91:e6:08:78:f1:3b:5f: fb:b6:78:fe:6c:82:71:17:47:51:1c:32:ca:48:0f: 46:be:e8:ef:98:f8:97:b2:e8:9c:b8:32:41:b0:f3: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7E:92:69:E6:E2:FE:E6:42:23:E6:45:F3:B1:45:D2:CE:AF:73:DA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59de13fe-c933-4e7f-b762-62adbcdbfec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3b40::/46 Signature Algorithm: sha256WithRSAEncryption 3a:1e:50:cc:71:81:de:db:d1:6b:bd:a7:f6:2e:3f:fd:25:49: 06:1d:92:f6:f4:a3:f7:2f:61:a2:7e:fd:0f:d8:ae:aa:08:3a: a4:26:02:f3:8f:88:1c:7f:8b:ee:57:1e:9b:c1:76:9b:06:b0: 38:f1:35:1c:2d:6a:9f:9e:9f:bf:ea:04:ae:3b:72:69:d9:94: b9:68:8c:b1:c6:75:cf:f1:ae:78:b7:2f:00:65:f9:86:50:04: 55:6c:7a:60:7c:a7:e7:fd:ba:e2:50:6a:8c:fb:e8:92:a4:fb: b7:09:28:e1:5c:f0:0e:4d:b4:ce:11:6c:c8:20:08:ab:d5:e0: fa:01:fa:0d:a8:3c:c3:05:87:09:84:58:af:cd:02:4c:89:3e: a4:a1:b1:07:00:f2:0a:36:19:6a:db:4f:e9:18:5e:cb:71:76: b8:ed:55:03:d4:c8:57:3c:09:ca:cb:cb:46:aa:83:04:12:1c: 57:39:87:73:eb:f7:a6:c5:43:94:23:3c:97:e0:b0:73:4a:59: 18:93:34:f0:39:f5:bd:1f:26:7c:12:a1:b1:94:b0:99:ef:4e: 28:bd:95:ac:d3:46:bd:ae:60:47:87:81:6b:4a:a4:59:c3:1b: dc:d1:2f:a1:7f:84:c6:e9:09:f9:e6:ac:5e:72:fc:27:7d:58: af:2b:b4:c0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOG22iAdMs/jKo6U/nffudm0l4BYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODIyMTUwMDExWhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzY2MjU0YmU4MmUwYmM1YWRiZTIyOTI4ZWZhZjM3ZWY5 ZTMwM2E1YTRlYWNlMmQxNWNhM2FmNzZiM2FiMzRjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVa5vA7BWj2dDLcf5r0Pj6qr4E7AzNNQ+FKE8GRMeiKRE0 5YfH9lTOyrwRZSMQj0Efay2IGaHm5jP9ji35JeIG6eEeNm2w2ZGSNJjxi64jn5IJ dMVLNCGsc7y39z0rBnthTrvWKpW1E6++zENfBqq0N4Vw1hXmA1YPgn7FZIp0aVEI i5mNCh/l2UtnN+clt9BSj1mcUxEUQpxgUVw9dcAZfufaHGKq37w/AMJBGGfiG6ho fRcrzwFkMDdts6sWHDB5YEzy5SEv6pjVg6ABiikKK7Bi7du+kQkjkeYIePE7X/u2 eP5sgnEXR1EcMspID0a+6O+Y+Jey6Jy4MkGw83aTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2n6Saebi/uZCI+ZF87FF0s6vc9owHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU5ZGUxM2ZlLWM5MzMtNGU3Zi1iNzYyLTYyYWRiY2RiZmVjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImBZzAO0AwDQYJKoZIhvcNAQELBQADggEBADoeUMxxgd7b0Wu9p/YuP/0l SQYdkvb0o/cvYaJ+/Q/YrqoIOqQmAvOPiBx/i+5XHpvBdpsGsDjxNRwtap+en7/q BK47cmnZlLlojLHGdc/xrni3LwBl+YZQBFVsemB8p+f9uuJQaoz76JKk+7cJKOFc 8A5NtM4RbMggCKvV4PoB+g2oPMMFhwmEWK/NAkyJPqShsQcA8go2GWrbT+kYXstx drjtVQPUyFc8CcrLy0aqgwQSHFc5h3Pr96bFQ5QjPJfgsHNKWRiTNPA59b0fJnwS obGUsJnvTii9lazTRr2uYEeHgWtKpFnDG9zRL6F/hMbpCfnmrF5y/Cd9WK8rtMA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:34 2025 by rpki-client