$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/65ea263d-892a-4498-ad3d-884b258d30d6.roa File: 65ea263d-892a-4498-ad3d-884b258d30d6.roa (raw, json) Hash identifier: XrhyHKhVB38wowsM1EdR7JsGLuzhsazbtZicfroZGYw= Subject key identifier: 49:FB:D4:AC:25:6E:C0:99:50:50:64:DB:8A:EC:EA:8D:A8:DE:50:E2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 209E70D1BFA7F7CBA965A145291179675EAAFC17 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/65ea263d-892a-4498-ad3d-884b258d30d6.roa Signing time: Fri 15 Aug 2025 15:11:18 +0000 ROA not before: Fri 15 Aug 2025 15:11:18 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9e:70:d1:bf:a7:f7:cb:a9:65:a1:45:29:11:79:67:5e:aa:fc:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 15 15:11:18 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=1d4f98db1e3940e8849f0f5ecf0016482fdf4c1e2cc151b842e3a4d77e84f686, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:19:88:d9:3c:87:6e:c4:c7:73:cd:d9:f8: 63:ac:32:76:ca:37:89:54:a0:10:b6:d1:7b:34:78: 76:5d:18:77:27:58:1f:34:03:03:42:37:e5:0d:4d: 82:1a:b8:5c:4f:06:92:a9:22:10:5b:86:6b:be:25: c0:c4:77:66:b7:5d:f8:da:32:1d:25:44:b5:c6:82: 2d:2d:c4:3f:f3:19:7d:18:03:d7:88:e5:78:84:b0: 83:e0:d4:bf:1e:56:83:36:e2:4c:93:3d:90:98:26: 3b:2f:6b:24:fe:79:ab:78:a4:2d:c7:3a:f4:db:8a: e7:4c:a3:a9:de:10:b3:45:8d:ba:91:38:a4:34:58: a0:5c:98:9e:15:01:ed:8a:bb:59:41:4a:1f:83:1c: 83:74:6a:92:fe:32:bd:86:f9:0e:d7:ae:f9:76:23: e9:4f:3f:87:7d:34:63:24:4b:1b:f6:d5:d4:f9:5a: 8d:6e:c4:6a:c6:9d:6e:92:03:61:e9:be:a4:e9:55: 51:0c:3b:34:2e:9f:ec:68:8a:d1:1c:f5:9a:42:09: bc:ca:b3:92:36:b7:2c:57:ef:82:8e:ec:4b:30:a4: b2:32:ab:ab:85:5d:0a:23:2d:34:ba:64:f7:50:37: c2:31:ce:ed:b2:25:02:29:61:3a:e1:68:5d:b6:1e: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FB:D4:AC:25:6E:C0:99:50:50:64:DB:8A:EC:EA:8D:A8:DE:50:E2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/65ea263d-892a-4498-ad3d-884b258d30d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0c::/48 Signature Algorithm: sha256WithRSAEncryption 8d:93:49:9d:f2:92:8c:1c:48:3b:b6:4e:8e:31:04:70:29:a4: a8:a1:3d:0a:a6:16:1c:5b:25:95:e6:91:78:6d:47:0e:cc:cb: 47:31:07:06:b5:59:57:81:95:01:b2:c5:d7:a2:3c:f9:e7:3d: 5c:1f:23:3d:ec:c6:c7:aa:55:20:ae:b9:33:42:1b:40:c6:e5: 7f:69:89:48:bf:b3:53:08:ff:1e:14:ae:d9:3f:59:95:dd:42: 72:36:46:e1:13:4b:37:a5:4e:4d:ab:01:cd:6a:b4:b7:75:33: 65:dd:b3:0d:e3:1a:99:c7:a4:a1:b2:57:96:2c:19:34:eb:c2: e2:54:78:a0:41:16:dd:04:7e:28:73:19:47:dc:9a:55:7f:18: 3d:2b:1b:d3:5d:ef:b8:b5:5b:bf:80:56:09:31:dc:74:f8:f0: 02:e5:4a:72:ee:25:90:35:e3:25:90:f2:77:89:b9:c8:d5:8f: 37:61:45:12:c0:9a:4c:cd:0a:5e:8f:2e:26:82:4a:23:7f:e1: 0d:c4:c1:49:63:7d:c8:4c:3e:73:00:40:ee:55:61:40:84:2a: ee:07:63:ab:c6:bf:f5:ab:90:ec:94:dc:da:38:30:82:3f:59: 4d:6a:81:13:3c:ed:11:29:b6:ec:19:2f:76:e6:7e:bc:b2:db: 71:a5:cf:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIJ5w0b+n98upZaFFKRF5Z16q/BcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE1MTUxMTE4WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDRmOThkYjFlMzk0MGU4ODQ5ZjBmNWVjZjAwMTY0ODJm ZGY0YzFlMmNjMTUxYjg0MmUzYTRkNzdlODRmNjg2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/OxmI2TyHbsTHc83Z+GOsMnbKN4lUoBC20Xs0eHZdGHcn WB80AwNCN+UNTYIauFxPBpKpIhBbhmu+JcDEd2a3XfjaMh0lRLXGgi0txD/zGX0Y A9eI5XiEsIPg1L8eVoM24kyTPZCYJjsvayT+eat4pC3HOvTbiudMo6neELNFjbqR OKQ0WKBcmJ4VAe2Ku1lBSh+DHIN0apL+Mr2G+Q7Xrvl2I+lPP4d9NGMkSxv21dT5 Wo1uxGrGnW6SA2HpvqTpVVEMOzQun+xoitEc9ZpCCbzKs5I2tyxX74KO7EswpLIy q6uFXQojLTS6ZPdQN8Ixzu2yJQIpYTrhaF22HkixAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSfvUrCVuwJlQUGTbiuzqjajeUOIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzY1ZWEyNjNkLTg5MmEtNDQ5OC1hZDNkLTg4NGIyNThkMzBkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAwwDQYJKoZIhvcNAQELBQADggEBAI2TSZ3ykowcSDu2To4xBHAp pKihPQqmFhxbJZXmkXhtRw7My0cxBwa1WVeBlQGyxdeiPPnnPVwfIz3sxseqVSCu uTNCG0DG5X9piUi/s1MI/x4Urtk/WZXdQnI2RuETSzelTk2rAc1qtLd1M2Xdsw3j GpnHpKGyV5YsGTTrwuJUeKBBFt0EfihzGUfcmlV/GD0rG9Nd77i1W7+AVgkx3HT4 8ALlSnLuJZA14yWQ8neJucjVjzdhRRLAmkzNCl6PLiaCSiN/4Q3EwUljfchMPnMA QO5VYUCEKu4HY6vGv/WrkOyU3No4MII/WU1qgRM87REptuwZL3bmfryy23Glz/U= -----END CERTIFICATE-----Generated at Sat Aug 23 06:38:17 2025 by rpki-client