$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa File: 0934543e-90db-4ba0-9848-455452e0c367.roa (raw, json) Hash identifier: vl/oDfYq0VmKIEbJCV52XfGX1oXOj2cqsONEnstNqOk= Subject key identifier: 37:5A:3D:10:5D:43:26:25:CF:CE:AA:51:B1:9D:6F:27:5E:3A:BB:7C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 609BDAFAC77C7587FED2FBEFCF8BE6BFF427B414 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa Signing time: Mon 06 Oct 2025 17:12:41 +0000 ROA not before: Mon 06 Oct 2025 17:12:41 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9b:da:fa:c7:7c:75:87:fe:d2:fb:ef:cf:8b:e6:bf:f4:27:b4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:12:41 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=95aac4bbd6f7234f1c8f557f5594dd420c82e6f5fdc748d6b631fbc43b72812f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:53:ca:15:7d:17:a6:dd:83:3d:b4:af:9b: 08:fb:e5:dc:9e:f3:6f:96:c2:6a:9e:e0:d8:23:8b: 8b:be:5d:4f:da:a8:32:82:a4:bc:f1:20:b2:1a:fa: f9:a1:e8:a2:ca:8a:d1:79:1e:b0:0d:de:7f:87:87: db:db:a4:46:c4:0b:5a:ec:b1:04:41:b6:69:ff:fc: 21:fd:ea:73:13:d0:42:62:62:6b:a1:c9:54:7d:c0: 3f:00:ad:94:f7:c2:40:6a:7b:34:e8:38:2b:c4:83: dd:1f:b0:d9:68:0e:f6:1c:75:1c:0a:8a:0a:c5:5e: 60:12:86:94:f9:63:43:78:56:c8:4b:0f:88:cd:d3: d8:28:95:4b:5a:26:4b:d8:62:4a:b3:94:4e:2b:29: 32:1f:10:48:20:2e:0a:78:7b:7a:4f:73:38:5c:e9: 66:f0:a0:92:e5:4e:02:ac:51:29:f5:c6:19:0b:6d: 8c:45:ae:47:d2:f6:92:6f:fe:57:b4:df:32:b8:b0: bc:27:c0:3d:20:41:88:19:d4:eb:eb:82:08:49:0f: 1d:61:77:26:3a:92:6a:58:8e:cd:54:f8:89:5e:30: e3:43:c3:c9:fd:cf:1c:c3:cf:d2:3a:df:fe:56:4d: 3c:4b:e3:58:30:0d:b2:be:ef:dd:5f:e0:18:b0:32: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5A:3D:10:5D:43:26:25:CF:CE:AA:51:B1:9D:6F:27:5E:3A:BB:7C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c02::/48 Signature Algorithm: sha256WithRSAEncryption 7c:93:20:22:69:97:6d:8f:18:45:0f:c6:a5:5f:05:ff:22:9a: 24:fd:9e:a3:32:6f:8a:07:9b:72:57:63:c7:cb:5b:7f:52:fd: d7:bc:af:b5:1b:7d:a6:25:86:e7:13:20:7d:73:ac:ad:ca:4d: 5f:c2:34:f9:b8:67:fd:c8:23:c3:62:dc:b9:a9:bf:d2:53:8e: 42:e0:1e:79:8d:74:42:81:d8:44:1f:56:70:e1:d3:0b:88:66: 5d:02:ce:bd:62:77:f7:8a:a7:33:4e:d2:90:cb:a9:a5:f6:76: c1:3c:5b:21:c5:0f:0a:b0:df:6c:79:a4:fd:fd:d1:5a:9e:c7: 3b:69:e6:9b:db:c7:ae:01:e8:7a:37:5f:13:72:7b:56:82:2b: 20:ae:c7:3c:c5:61:9e:f0:66:2e:44:f2:b9:91:7c:5c:e1:a5: 4a:5f:05:d5:60:aa:95:21:93:b3:f0:a8:4c:ac:8f:01:c2:37: f7:9e:5e:ea:91:49:6d:a6:8c:a2:4f:77:22:5f:7a:ec:51:3d: be:56:47:d1:a7:96:e0:7e:0d:b0:ee:5c:74:b7:13:6a:c7:01: bf:2e:9a:68:f1:a9:e6:f3:28:1c:91:e6:c4:61:37:f4:43:b0: 7f:a9:64:b9:47:7b:e4:f3:2c:53:10:b7:ad:cf:b9:a1:4b:b4: fd:9f:d6:4d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYJva+sd8dYf+0vvvz4vmv/QntBQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMjQxWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWFhYzRiYmQ2ZjcyMzRmMWM4ZjU1N2Y1NTk0ZGQ0MjBj ODJlNmY1ZmRjNzQ4ZDZiNjMxZmJjNDNiNzI4MTJmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtNlPKFX0Xpt2DPbSvmwj75dye82+Wwmqe4Ngji4u+XU/a qDKCpLzxILIa+vmh6KLKitF5HrAN3n+Hh9vbpEbEC1rssQRBtmn//CH96nMT0EJi YmuhyVR9wD8ArZT3wkBqezToOCvEg90fsNloDvYcdRwKigrFXmAShpT5Y0N4VshL D4jN09golUtaJkvYYkqzlE4rKTIfEEggLgp4e3pPczhc6WbwoJLlTgKsUSn1xhkL bYxFrkfS9pJv/le03zK4sLwnwD0gQYgZ1OvrgghJDx1hdyY6kmpYjs1U+IleMOND w8n9zxzDz9I63/5WTTxL41gwDbK+791f4BiwMhItAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUN1o9EF1DJiXPzqpRsZ1vJ146u3wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA5MzQ1NDNlLTkwZGItNGJhMC05ODQ4LTQ1NTQ1MmUwYzM2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAIwDQYJKoZIhvcNAQELBQADggEBAHyTICJpl22PGEUPxqVfBf8i miT9nqMyb4oHm3JXY8fLW39S/de8r7UbfaYlhucTIH1zrK3KTV/CNPm4Z/3II8Ni 3Lmpv9JTjkLgHnmNdEKB2EQfVnDh0wuIZl0Czr1id/eKpzNO0pDLqaX2dsE8WyHF Dwqw32x5pP390Vqexztp5pvbx64B6Ho3XxNye1aCKyCuxzzFYZ7wZi5E8rmRfFzh pUpfBdVgqpUhk7PwqEysjwHCN/eeXuqRSW2mjKJPdyJfeuxRPb5WR9GnluB+DbDu XHS3E2rHAb8ummjxqebzKByR5sRhN/RDsH+pZLlHe+TzLFMQt63PuaFLtP2f1k0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:15 2025 by rpki-client