$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d2172b33-b6ce-4878-b487-295b9543d932.roa File: d2172b33-b6ce-4878-b487-295b9543d932.roa (raw, json) Hash identifier: ga1YBCUncoLdJ/aFof1BD9BaXPkZfw3wqiVYJKONOFU= Subject key identifier: 49:0F:F5:FB:79:C4:AB:62:48:0C:04:4A:BE:60:5A:32:BA:42:AF:9C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6A69F6E4709B6F9ED2AB73BF8D7097212FA04AE6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d2172b33-b6ce-4878-b487-295b9543d932.roa Signing time: Tue 05 Aug 2025 18:11:22 +0000 ROA not before: Tue 05 Aug 2025 18:11:22 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:397::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:69:f6:e4:70:9b:6f:9e:d2:ab:73:bf:8d:70:97:21:2f:a0:4a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 5 18:11:22 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=cd8ad03480fde870f69b84a9024b1e917ce92d0486d85513e427616bd1c03c8c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:2c:5f:c1:10:37:98:d6:2b:f7:c4:b1:a3: aa:36:c3:6f:27:f8:b5:0c:72:98:24:00:33:d4:5a: b5:9d:fa:81:ab:29:df:fe:36:55:67:0d:3c:6c:aa: 3d:4d:f6:69:e8:12:e4:c6:b0:6e:b3:7a:fc:e3:fa: 09:3f:48:22:e5:72:b0:84:c1:1b:ee:b6:9c:f0:0c: 5c:b3:78:52:42:91:4f:c3:68:46:91:ba:e8:9a:af: d7:74:7c:a6:6e:64:e4:9c:40:86:d0:ab:a5:8d:e7: aa:8f:93:5b:f5:6d:04:fc:92:e2:94:07:e0:f8:5c: b2:f1:1b:8e:eb:be:2a:78:23:1d:ff:48:a5:1e:b6: 1f:d7:e5:ba:51:4f:9e:8f:49:4d:25:1f:87:85:d3: c0:92:24:69:f2:82:6c:27:a1:2d:d4:b6:89:b3:79: ff:34:27:58:34:cd:b9:32:bc:5a:9d:99:d5:b3:67: 70:5c:bf:f2:7a:cd:05:8c:13:50:9b:ce:ca:e8:9c: a8:d2:6e:e4:6b:9d:7a:51:f8:37:af:25:1e:7b:87: 98:c1:55:b8:c1:9d:f4:89:14:30:cc:ec:b1:e8:39: cc:bf:f3:24:7e:1f:40:d1:b7:05:bc:fd:1c:88:56: bf:c8:a3:84:d5:88:16:dd:3f:4f:1f:74:e9:04:6b: e2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0F:F5:FB:79:C4:AB:62:48:0C:04:4A:BE:60:5A:32:BA:42:AF:9C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d2172b33-b6ce-4878-b487-295b9543d932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:397::/48 Signature Algorithm: sha256WithRSAEncryption 06:6a:3f:51:a8:5a:55:3c:b9:0e:82:82:96:a3:f6:f1:38:9f: 45:d9:83:a5:50:fc:ad:78:c6:55:49:2f:c4:2d:9b:97:03:4c: 71:62:e7:d7:41:e3:48:df:22:c3:d9:3c:b9:15:55:03:fc:b1: 97:95:38:43:ae:00:0a:1c:39:94:48:d7:3e:9e:09:0a:c6:d8: 7c:a8:78:43:ed:aa:f8:43:26:c7:ec:9d:11:6c:48:11:4c:67: 84:5b:e3:40:c6:09:93:56:ec:1f:25:ca:bf:e6:e9:d3:e4:3b: 17:59:22:76:11:b6:20:0e:09:c9:63:73:b7:2a:03:34:47:7f: 07:ab:43:2e:33:2c:42:f5:7e:be:d1:0c:8a:77:23:f9:ea:d2: af:54:4c:b0:ed:1e:91:a5:2b:40:e6:df:63:4a:47:a8:de:60: b3:ec:33:af:4d:db:4b:e9:9c:02:c2:61:86:94:02:dc:c9:ae: a9:96:b5:4c:0c:b9:c9:ce:2a:0c:c8:31:30:44:8e:15:57:82: 91:88:35:c7:9c:ad:74:6d:60:25:83:26:25:29:77:f5:47:4a: 1d:f6:db:ae:28:c6:aa:70:8e:d0:06:9d:e7:12:b2:e1:80:58: 18:e7:b0:f1:ca:15:c1:9d:58:c7:c2:04:56:99:64:81:78:f7: 3c:61:70:cf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUamn25HCbb57Sq3O/jXCXIS+gSuYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODA1MTgxMTIyWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDhhZDAzNDgwZmRlODcwZjY5Yjg0YTkwMjRiMWU5MTdj ZTkyZDA0ODZkODU1MTNlNDI3NjE2YmQxYzAzYzhjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ7yxfwRA3mNYr98Sxo6o2w28n+LUMcpgkADPUWrWd+oGr Kd/+NlVnDTxsqj1N9mnoEuTGsG6zevzj+gk/SCLlcrCEwRvutpzwDFyzeFJCkU/D aEaRuuiar9d0fKZuZOScQIbQq6WN56qPk1v1bQT8kuKUB+D4XLLxG47rvip4Ix3/ SKUeth/X5bpRT56PSU0lH4eF08CSJGnygmwnoS3Utomzef80J1g0zbkyvFqdmdWz Z3Bcv/J6zQWME1CbzsronKjSbuRrnXpR+DevJR57h5jBVbjBnfSJFDDM7LHoOcy/ 8yR+H0DRtwW8/RyIVr/Io4TViBbdP08fdOkEa+LbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSQ/1+3nEq2JIDARKvmBaMrpCr5wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2QyMTcyYjMzLWI2Y2UtNDg3OC1iNDg3LTI5NWI5NTQzZDkzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5cwDQYJKoZIhvcNAQELBQADggEBAAZqP1GoWlU8uQ6Cgpaj9vE4 n0XZg6VQ/K14xlVJL8Qtm5cDTHFi59dB40jfIsPZPLkVVQP8sZeVOEOuAAocOZRI 1z6eCQrG2HyoeEPtqvhDJsfsnRFsSBFMZ4Rb40DGCZNW7B8lyr/m6dPkOxdZInYR tiAOCcljc7cqAzRHfwerQy4zLEL1fr7RDIp3I/nq0q9UTLDtHpGlK0Dm32NKR6je YLPsM69N20vpnALCYYaUAtzJrqmWtUwMucnOKgzIMTBEjhVXgpGINcecrXRtYCWD JiUpd/VHSh32264oxqpwjtAGnecSsuGAWBjnsPHKFcGdWMfCBFaZZIF49zxhcM8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:08 2025 by rpki-client