$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5a741f7f-68b8-4f80-a2e2-2198515b5973.roa File: 5a741f7f-68b8-4f80-a2e2-2198515b5973.roa (raw, json) Hash identifier: IEi1RU3CM2jhHDxxBoq1livYcSmtHIp3EBp7Cwd7HK8= Subject key identifier: 8A:D1:6D:DB:D7:BD:D5:C0:68:B8:F4:10:C8:DA:0E:05:B2:12:90:E3 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 561D61C7B8F5DD6241B6D3B7546A9FFD622BB11C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5a741f7f-68b8-4f80-a2e2-2198515b5973.roa Signing time: Fri 15 Aug 2025 15:20:23 +0000 ROA not before: Fri 15 Aug 2025 15:20:23 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1d:61:c7:b8:f5:dd:62:41:b6:d3:b7:54:6a:9f:fd:62:2b:b1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 15 15:20:23 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=653b21dda6e2fe557a10ade42ce7594dc8cc737d005c57edd5e5ab198935d45a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:04:e2:db:8b:9a:66:0c:e6:f9:50:e9:ba: af:66:15:d8:d2:e1:0f:03:34:77:66:3b:42:47:fa: 6f:c1:c8:dd:e6:60:24:6b:24:e7:fc:2f:51:68:14: 1c:d9:34:30:be:fe:92:fd:b5:d3:dc:5f:d7:6d:1a: be:17:c3:5d:0d:d2:42:11:60:48:a1:82:09:89:44: 5c:42:20:85:75:53:64:2b:a5:fe:14:38:6f:76:5c: c3:b2:7b:93:90:71:01:8a:f0:46:fd:fe:8f:67:65: 21:ca:24:e6:46:42:1a:c1:ea:3c:97:8d:39:b1:36: 14:3b:17:ee:3d:3f:b7:db:80:52:43:e8:b1:42:e1: ea:ba:de:88:bc:71:eb:f6:7a:87:53:db:f9:12:3b: 78:3b:55:27:b4:b3:eb:df:b1:30:2d:b2:a3:5a:2b: e0:7d:bd:31:09:c8:a5:4b:25:73:16:11:57:25:a9: 1a:f1:c8:53:7e:31:4a:d1:bf:53:36:24:9f:5e:1f: 08:54:ee:d5:12:53:f0:9b:84:c6:c5:e4:8b:4d:99: cd:46:27:7c:89:ba:64:28:c7:8f:00:6e:8f:2e:c6: 5f:8a:7f:32:cb:e4:cd:95:8b:e0:ad:a4:ff:cf:40: 17:1a:7d:58:9c:fe:90:1b:27:b6:6e:2b:8b:29:82: b1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D1:6D:DB:D7:BD:D5:C0:68:B8:F4:10:C8:DA:0E:05:B2:12:90:E3 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5a741f7f-68b8-4f80-a2e2-2198515b5973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1d::/48 Signature Algorithm: sha256WithRSAEncryption 46:5a:2f:03:01:52:ae:f8:2f:31:91:2e:d5:2a:4a:e7:7b:59: 7a:73:bf:94:f6:11:98:1f:ba:f6:76:11:c0:7d:93:db:66:8f: 98:90:ea:48:11:dd:80:b2:2d:d8:ea:f3:9e:3b:e4:e2:24:fc: 5a:37:15:91:66:68:f5:0e:2d:b6:bf:be:f4:99:2e:92:d8:da: 3e:8f:48:4f:c4:60:21:91:5f:a0:5b:e7:92:14:a1:4f:17:51: a0:43:8b:43:4a:ba:a1:ed:e1:99:a4:e8:12:c0:9b:e7:71:1a: d6:ff:1e:03:2e:8b:ed:98:d3:d0:72:9b:ff:08:96:af:ec:ce: ff:02:5e:56:75:5a:7a:3f:05:04:b2:2a:e9:31:3b:b7:34:cc: 8a:8d:b7:02:e2:7f:75:4d:c6:6d:34:1e:6f:20:a5:37:6a:c9: bc:b8:36:49:b0:93:8f:03:3c:ef:8c:23:7c:30:8c:1f:53:6c: 2e:36:6b:bb:99:f3:85:74:c9:11:62:a7:98:50:07:e4:5f:22: 05:89:97:2d:b1:ce:e6:c0:24:bc:cf:33:88:54:fe:3e:d9:ed: ca:5d:e7:35:7a:bc:44:b7:5d:ae:88:a5:ee:d3:1e:e8:09:93: e0:17:4e:b6:f1:29:e0:3a:45:b5:5f:76:b8:33:d5:18:ed:fd: 11:6b:14:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVh1hx7j13WJBttO3VGqf/WIrsRwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE1MTUyMDIzWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTNiMjFkZGE2ZTJmZTU1N2ExMGFkZTQyY2U3NTk0ZGM4 Y2M3MzdkMDA1YzU3ZWRkNWU1YWIxOTg5MzVkNDVhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4DATi24uaZgzm+VDpuq9mFdjS4Q8DNHdmO0JH+m/ByN3m YCRrJOf8L1FoFBzZNDC+/pL9tdPcX9dtGr4Xw10N0kIRYEihggmJRFxCIIV1U2Qr pf4UOG92XMOye5OQcQGK8Eb9/o9nZSHKJOZGQhrB6jyXjTmxNhQ7F+49P7fbgFJD 6LFC4eq63oi8cev2eodT2/kSO3g7VSe0s+vfsTAtsqNaK+B9vTEJyKVLJXMWEVcl qRrxyFN+MUrRv1M2JJ9eHwhU7tUSU/CbhMbF5ItNmc1GJ3yJumQox48Abo8uxl+K fzLL5M2Vi+CtpP/PQBcafVic/pAbJ7ZuK4spgrEbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUitFt29e91cBouPQQyNoOBbISkOMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVhNzQxZjdmLTY4YjgtNGY4MC1hMmUyLTIxOTg1MTViNTk3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADB0wDQYJKoZIhvcNAQELBQADggEBAEZaLwMBUq74LzGRLtUqSud7 WXpzv5T2EZgfuvZ2EcB9k9tmj5iQ6kgR3YCyLdjq85475OIk/Fo3FZFmaPUOLba/ vvSZLpLY2j6PSE/EYCGRX6Bb55IUoU8XUaBDi0NKuqHt4Zmk6BLAm+dxGtb/HgMu i+2Y09Bym/8Ilq/szv8CXlZ1Wno/BQSyKukxO7c0zIqNtwLif3VNxm00Hm8gpTdq yby4Nkmwk48DPO+MI3wwjB9TbC42a7uZ84V0yRFip5hQB+RfIgWJly2xzubAJLzP M4hU/j7Z7cpd5zV6vES3Xa6Ipe7THugJk+AXTrbxKeA6RbVfdrgz1Rjt/RFrFFk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:47:09 2025 by rpki-client