$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa File: d634cf95-850c-46d0-9812-120e229c9e7d.roa (raw, json) Hash identifier: deU2XRwCN3RXLZ4qLd1TuT1qksraOMMgFXlemGGA1q0= Subject key identifier: F5:B9:02:42:34:12:16:5C:56:58:2A:C7:9B:17:E6:FB:5E:8D:A8:91 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5AE4B4DEEB171856B4EF93EBAF5B589CA1A3B501 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa Signing time: Fri 15 Aug 2025 15:10:45 +0000 ROA not before: Fri 15 Aug 2025 15:10:45 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e4:b4:de:eb:17:18:56:b4:ef:93:eb:af:5b:58:9c:a1:a3:b5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 15 15:10:45 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=85bdd5310cbd5321b1dc9661acfe8ab96cf9f14db1649495ac76faa2832253b5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:09:8e:69:34:67:e8:88:4b:d5:40:11:07: 9f:ff:e6:f5:3c:4a:30:b6:6c:cb:b7:60:c2:00:55: 5f:39:88:c9:87:44:1c:6a:dc:18:77:3c:c2:b6:e2: 1c:ee:3f:ca:68:bb:ab:4e:05:d4:2f:43:04:a0:15: 63:dc:51:1c:41:8b:4b:a5:f9:d9:90:fe:99:f2:21: 45:7b:16:3a:d6:95:d7:76:b0:5c:8e:e1:2f:1f:dc: 5a:e5:74:3c:42:86:a3:24:94:0a:91:74:d6:a4:54: 12:ee:d7:80:32:0a:66:73:25:15:ec:81:54:58:ca: 0e:37:57:06:94:d2:d1:c5:d8:5f:bc:fe:77:b4:b8: c3:0b:99:33:87:b0:28:bc:64:7d:0d:a0:a3:71:73: 82:87:bc:80:ed:aa:c2:4e:0e:4a:10:d7:a8:51:dc: 98:b4:73:d0:bb:73:d9:72:15:1a:3f:bd:3e:07:2d: 3a:4f:ca:e0:b9:04:14:6c:0a:f4:af:da:fa:53:40: 11:8a:04:c9:05:f9:86:38:fa:bf:de:a5:46:be:3e: 1a:8d:0e:7b:26:d1:cf:20:d9:7f:1b:45:95:2e:46: 26:5e:90:7e:35:76:b3:37:cf:fd:40:85:b1:0f:65: b0:34:87:f4:14:7a:21:4b:d3:9c:6d:48:e3:b6:35: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B9:02:42:34:12:16:5C:56:58:2A:C7:9B:17:E6:FB:5E:8D:A8:91 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c06::/48 Signature Algorithm: sha256WithRSAEncryption 09:ea:bd:60:77:53:9d:88:b6:48:fe:08:4e:60:9b:15:7d:c5: 7e:c5:94:80:24:8b:eb:dc:37:30:b3:c5:1f:37:46:38:8d:60: 1b:66:7d:b6:3a:8b:58:76:45:bb:2c:80:55:82:ef:e7:dc:bd: c2:af:73:5a:12:8f:52:6e:e4:c6:2c:6b:e9:72:63:77:9c:f1: 22:65:43:00:03:22:48:d6:a0:1d:8e:29:06:27:3e:41:75:94: 61:fb:46:5b:9e:fe:04:4a:bf:22:2b:51:e4:d3:fe:56:6b:96: b1:b3:f7:33:1b:46:d9:68:34:47:6d:2a:b4:67:71:30:15:af: b4:bb:e5:a1:d1:ec:34:80:e9:2f:9a:85:f5:56:6a:09:17:af: 52:19:ae:21:7c:3c:4f:c6:99:3a:96:5d:5e:77:ee:50:15:ba: c0:b6:6f:dd:2b:3a:af:b0:c6:6b:83:8b:83:72:ab:23:40:56: 8b:da:ff:9b:db:36:b1:b4:aa:fb:63:5a:13:18:33:8c:5c:80: 11:b8:8c:75:ed:fe:d7:01:6d:4e:b6:b2:bb:9b:2a:13:28:7c: 10:d4:5b:56:dc:c4:f1:89:5c:1c:cc:37:d3:fe:d1:ef:60:b1: bc:10:a7:94:8d:77:44:04:c1:49:64:98:d9:a2:b1:46:a7:77: 5d:f1:68:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWuS03usXGFa075Prr1tYnKGjtQEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE1MTUxMDQ1WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWJkZDUzMTBjYmQ1MzIxYjFkYzk2NjFhY2ZlOGFiOTZj ZjlmMTRkYjE2NDk0OTVhYzc2ZmFhMjgzMjI1M2I1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnLwmOaTRn6IhL1UARB5//5vU8SjC2bMu3YMIAVV85iMmH RBxq3Bh3PMK24hzuP8pou6tOBdQvQwSgFWPcURxBi0ul+dmQ/pnyIUV7FjrWldd2 sFyO4S8f3FrldDxChqMklAqRdNakVBLu14AyCmZzJRXsgVRYyg43VwaU0tHF2F+8 /ne0uMMLmTOHsCi8ZH0NoKNxc4KHvIDtqsJODkoQ16hR3Ji0c9C7c9lyFRo/vT4H LTpPyuC5BBRsCvSv2vpTQBGKBMkF+YY4+r/epUa+PhqNDnsm0c8g2X8bRZUuRiZe kH41drM3z/1AhbEPZbA0h/QUeiFL05xtSOO2NaHfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9bkCQjQSFlxWWCrHmxfm+16NqJEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q2MzRjZjk1LTg1MGMtNDZkMC05ODEyLTEyMGUyMjljOWU3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAYwDQYJKoZIhvcNAQELBQADggEBAAnqvWB3U52Itkj+CE5gmxV9 xX7FlIAki+vcNzCzxR83RjiNYBtmfbY6i1h2RbssgFWC7+fcvcKvc1oSj1Ju5MYs a+lyY3ec8SJlQwADIkjWoB2OKQYnPkF1lGH7Rlue/gRKvyIrUeTT/lZrlrGz9zMb RtloNEdtKrRncTAVr7S75aHR7DSA6S+ahfVWagkXr1IZriF8PE/GmTqWXV537lAV usC2b90rOq+wxmuDi4NyqyNAVova/5vbNrG0qvtjWhMYM4xcgBG4jHXt/tcBbU62 srubKhMofBDUW1bcxPGJXBzMN9P+0e9gsbwQp5SNd0QEwUlkmNmisUand13xaB8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:55:32 2025 by rpki-client