$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa File: 60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa (raw, json) Hash identifier: fWxGhm+rKV7jcNShHIHXwOII1sdTSReGrL3VJaB1GJQ= Subject key identifier: CD:31:AD:CA:9E:FC:B7:11:3A:1D:BB:86:C7:8A:32:B5:4A:38:0D:68 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1162E429AD939311FD7068F04E9BA61AA91402E5 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa Signing time: Fri 15 Aug 2025 15:10:18 +0000 ROA not before: Fri 15 Aug 2025 15:10:18 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:62:e4:29:ad:93:93:11:fd:70:68:f0:4e:9b:a6:1a:a9:14:02:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 15 15:10:18 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=abc6e889b41be824504551b9c8477860624a00ea06efe8f725d3aef836da6a87, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:c9:95:80:e1:5f:b8:09:20:ca:bb:45:03: 07:6a:cf:85:db:0c:aa:bd:88:2d:14:2a:49:60:8b: eb:7e:d6:d5:b3:b1:e2:fe:6b:e1:88:0b:3c:32:23: 21:c4:a1:db:4a:bb:9c:a5:df:b5:40:46:a5:ce:cb: b3:72:95:8f:62:cb:dd:a8:2e:11:c1:0e:f7:19:f8: 2f:8f:34:56:b1:77:b2:4a:3f:97:5b:ca:a1:7e:bc: ef:e0:13:60:e7:57:30:eb:2d:48:b3:25:34:6a:e6: 2b:c2:94:c2:ee:2f:4c:c8:26:e3:5b:67:a2:11:db: 6f:5f:14:9c:2f:d1:90:f7:5d:12:a6:a2:96:5d:15: 04:c2:df:cd:85:b9:e3:fb:90:cf:e2:38:f8:34:b8: 8e:09:5a:4d:61:21:6b:20:1a:fe:1e:48:f6:ae:48: 20:1f:6c:9a:6d:cc:7b:2e:2c:d2:c9:6d:42:b9:c6: f1:bf:4d:73:c6:3a:28:42:d6:09:5f:c2:ec:e7:8d: 3a:eb:25:c0:5a:7b:86:76:5a:2c:6a:f8:16:64:f7: a6:70:06:29:d5:b6:d8:12:7f:3b:1c:70:f9:88:f0: a3:4b:48:4a:b1:b4:d3:23:cc:28:a8:2c:bd:98:93: 1f:79:7b:bb:c4:92:48:59:2e:51:32:54:fa:5c:9e: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:31:AD:CA:9E:FC:B7:11:3A:1D:BB:86:C7:8A:32:B5:4A:38:0D:68 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c04::/48 Signature Algorithm: sha256WithRSAEncryption 59:9a:3f:37:3e:34:1b:e7:17:63:99:29:e5:4c:39:b9:99:9b: 5d:51:05:37:ac:30:36:52:6d:d7:bf:4c:20:6e:b6:20:4e:f5: 8c:94:5d:84:7f:61:ba:5a:f8:6e:c8:98:b0:95:44:46:c1:d6: 60:c3:5d:11:8b:a1:80:0d:7f:b7:5e:9a:01:3a:28:6f:a2:09: 71:4a:2d:3a:66:26:a8:ab:0b:73:48:f7:57:f7:e4:58:2d:53: 28:db:7a:6f:8b:b8:0b:62:73:32:38:c0:ae:27:bb:c9:b5:cc: fb:fb:a5:bf:8f:8f:ea:84:df:9b:c1:bb:99:ba:43:1f:4f:9c: 30:17:d3:17:fb:6d:c5:7e:ab:a9:2a:59:e5:81:70:de:c0:f9: 06:c7:f6:17:d0:2f:93:04:cf:c1:c6:2d:9e:f2:2e:db:05:7b: c5:f0:44:7a:59:ca:99:92:69:88:a4:89:74:cd:dd:ae:c6:dc: b2:77:b5:0a:b7:5b:05:2a:6f:f9:c3:45:f5:3f:f3:9f:50:9b: e9:6f:c3:52:6d:3e:cf:c9:b0:9c:1d:28:d3:af:1c:bf:4e:8f: 71:25:a9:58:db:be:66:e8:24:f1:32:81:c3:0b:8c:44:68:be: 7d:90:e1:ee:dd:bc:65:3a:7d:2d:9c:35:4b:f1:8d:d8:6d:ed: 84:c0:67:21 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEWLkKa2TkxH9cGjwTpumGqkUAuUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE1MTUxMDE4WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmM2ZTg4OWI0MWJlODI0NTA0NTUxYjljODQ3Nzg2MDYy NGEwMGVhMDZlZmU4ZjcyNWQzYWVmODM2ZGE2YTg3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkEMmVgOFfuAkgyrtFAwdqz4XbDKq9iC0UKklgi+t+1tWz seL+a+GICzwyIyHEodtKu5yl37VARqXOy7NylY9iy92oLhHBDvcZ+C+PNFaxd7JK P5dbyqF+vO/gE2DnVzDrLUizJTRq5ivClMLuL0zIJuNbZ6IR229fFJwv0ZD3XRKm opZdFQTC382FueP7kM/iOPg0uI4JWk1hIWsgGv4eSPauSCAfbJptzHsuLNLJbUK5 xvG/TXPGOihC1glfwuznjTrrJcBae4Z2Wixq+BZk96ZwBinVttgSfzsccPmI8KNL SEqxtNMjzCioLL2Ykx95e7vEkkhZLlEyVPpcnv/FAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzTGtyp78txE6HbuGx4oytUo4DWgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzYwZjkyYjg5LWQwMDEtNDhjNS05YTc5LWFjN2ExYTE3ZjVjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAQwDQYJKoZIhvcNAQELBQADggEBAFmaPzc+NBvnF2OZKeVMObmZ m11RBTesMDZSbde/TCButiBO9YyUXYR/Ybpa+G7ImLCVREbB1mDDXRGLoYANf7de mgE6KG+iCXFKLTpmJqirC3NI91f35FgtUyjbem+LuAticzI4wK4nu8m1zPv7pb+P j+qE35vBu5m6Qx9PnDAX0xf7bcV+q6kqWeWBcN7A+QbH9hfQL5MEz8HGLZ7yLtsF e8XwRHpZypmSaYikiXTN3a7G3LJ3tQq3WwUqb/nDRfU/859Qm+lvw1JtPs/JsJwd KNOvHL9Oj3ElqVjbvmboJPEygcMLjERovn2Q4e7dvGU6fS2cNUvxjdht7YTAZyE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:03:59 2025 by rpki-client