$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f5ab890-0b33-4f1f-a004-6f2779e23026.roa File: 1f5ab890-0b33-4f1f-a004-6f2779e23026.roa (raw, json) Hash identifier: cubRJ/dha85CmRvfUxg4GQYnULsJkjx/RqBpZED6FE4= Subject key identifier: 9E:19:8A:3E:FF:3C:38:6E:92:FB:3E:04:15:F7:17:39:E2:65:B5:23 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7DA6FC208955A1FB43A19FCAFFDB0038E9CAB290 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f5ab890-0b33-4f1f-a004-6f2779e23026.roa Signing time: Fri 17 Oct 2025 20:00:32 +0000 ROA not before: Fri 17 Oct 2025 20:00:32 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:3cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a6:fc:20:89:55:a1:fb:43:a1:9f:ca:ff:db:00:38:e9:ca:b2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 17 20:00:32 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=ab67b6b8e2b7f7616b8e18710ebd69bd0f6b4475993287085fc635e734d050e6, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:9b:f2:cb:63:f7:e6:12:c2:dc:9f:d4:97: ef:4e:bb:90:75:eb:ae:3c:a9:f6:c5:2c:cf:54:f2: 00:98:19:b7:14:f8:a0:b4:67:f9:3e:a2:2a:31:2a: 6e:72:ff:f5:02:dd:a7:76:d1:5d:42:3a:99:8b:7f: a1:9c:fc:c9:fc:2d:e8:05:a7:d5:19:8b:7d:eb:91: 48:ae:5c:fc:38:9c:2e:08:92:b0:2b:5e:3e:b0:b0: a2:d0:06:14:36:27:ae:bd:2b:5c:82:6d:77:fe:52: cb:cf:af:fe:03:ab:f0:45:70:8c:e8:1f:c9:d2:90: f8:98:b8:56:1d:bd:c7:0f:94:d6:5f:6c:64:64:9e: 1c:a9:53:20:29:eb:03:f9:1e:d7:68:05:bc:5b:9f: 7b:2b:f6:cb:2d:ca:9b:56:08:7b:18:d5:7d:90:76: 63:a7:cd:b7:f3:64:3b:17:e3:a7:ba:9a:6d:3c:fb: 45:c6:b7:27:a6:ed:4b:36:b0:52:c5:c5:ff:a9:07: 47:6a:cb:03:96:38:12:ec:0d:bf:3d:c8:78:b3:7f: b4:7a:e8:48:e8:68:37:9d:c7:f0:a2:42:bf:25:70: ac:9c:01:45:14:68:86:6e:5e:a6:25:1e:b9:11:70: 06:bc:16:52:7d:ea:1e:52:ec:2b:11:eb:72:c6:a4: f0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:19:8A:3E:FF:3C:38:6E:92:FB:3E:04:15:F7:17:39:E2:65:B5:23 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f5ab890-0b33-4f1f-a004-6f2779e23026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3cc::/48 Signature Algorithm: sha256WithRSAEncryption 7f:43:9a:2c:4b:dd:52:a8:87:85:d0:e1:d7:53:c0:de:77:55: c4:2c:8b:b4:0c:e9:87:7d:56:97:a9:54:b9:66:f4:2d:af:e4: f0:dc:05:5d:a2:4e:48:45:0f:d4:ab:70:41:21:97:2f:75:6c: af:5f:f9:3d:e0:b8:61:ab:96:28:0f:19:df:2f:b7:35:87:6b: 8c:24:41:f1:95:ed:d5:82:d3:bd:e5:53:6d:24:9e:16:71:fa: d1:65:59:08:75:4f:bc:f9:6c:54:ab:31:ea:b9:e8:8c:25:5c: b7:c1:7d:9b:ba:14:67:49:0d:32:cc:e5:91:69:ef:e5:80:c7: 9f:33:ba:fd:e3:0c:68:dc:e8:83:96:dc:58:a9:10:e9:d9:5a: 8b:75:af:5f:f1:5d:d1:b0:9c:ed:79:49:6d:cf:4c:8b:91:ae: e0:0e:bf:5e:5c:d1:5c:69:f0:97:ff:0e:33:1f:46:7c:98:c5: 22:ec:5b:e7:53:65:bc:32:bf:ff:a5:36:39:b2:a5:9a:69:49: 6e:db:d3:fd:9d:1a:71:7e:02:1d:9f:44:7d:08:7f:e3:c4:3d: 7c:82:36:19:8e:d3:ee:db:6c:19:7e:d1:51:5f:04:6d:e7:ae: fa:62:87:d9:f5:9e:4b:6d:81:af:b3:0e:7c:dc:e2:26:21:a8: f3:45:c8:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfab8IIlVoftDoZ/K/9sAOOnKspAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDE3MjAwMDMyWhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjY3YjZiOGUyYjdmNzYxNmI4ZTE4NzEwZWJkNjliZDBm NmI0NDc1OTkzMjg3MDg1ZmM2MzVlNzM0ZDA1MGU2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGAZvyy2P35hLC3J/Ul+9Ou5B16648qfbFLM9U8gCYGbcU +KC0Z/k+oioxKm5y//UC3ad20V1COpmLf6Gc/Mn8LegFp9UZi33rkUiuXPw4nC4I krArXj6wsKLQBhQ2J669K1yCbXf+UsvPr/4Dq/BFcIzoH8nSkPiYuFYdvccPlNZf bGRknhypUyAp6wP5HtdoBbxbn3sr9sstyptWCHsY1X2QdmOnzbfzZDsX46e6mm08 +0XGtyem7Us2sFLFxf+pB0dqywOWOBLsDb89yHizf7R66EjoaDedx/CiQr8lcKyc AUUUaIZuXqYlHrkRcAa8FlJ96h5S7CsR63LGpPBnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnhmKPv88OG6S+z4EFfcXOeJltSMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFmNWFiODkwLTBiMzMtNGYxZi1hMDA0LTZmMjc3OWUyMzAyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8wwDQYJKoZIhvcNAQELBQADggEBAH9DmixL3VKoh4XQ4ddTwN53 VcQsi7QM6Yd9VpepVLlm9C2v5PDcBV2iTkhFD9SrcEEhly91bK9f+T3guGGrligP Gd8vtzWHa4wkQfGV7dWC073lU20knhZx+tFlWQh1T7z5bFSrMeq56IwlXLfBfZu6 FGdJDTLM5ZFp7+WAx58zuv3jDGjc6IOW3FipEOnZWot1r1/xXdGwnO15SW3PTIuR ruAOv15c0Vxp8Jf/DjMfRnyYxSLsW+dTZbwyv/+lNjmypZppSW7b0/2dGnF+Ah2f RH0If+PEPXyCNhmO0+7bbBl+0VFfBG3nrvpih9n1nkttga+zDnzc4iYhqPNFyEY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:25:42 2025 by rpki-client