$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa File: 1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa (raw, json) Hash identifier: 8o8350WFMj9lQcScCnqLF2B2TwRGO9jWHTYm4e4TCMo= Subject key identifier: 82:7F:43:DC:70:B5:BB:92:98:50:29:BA:10:B6:57:AE:51:62:C2:FF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2E84FBE16107FF301E5E96133A77314EEAFDD4C9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa Signing time: Fri 26 Sep 2025 18:00:25 +0000 ROA not before: Fri 26 Sep 2025 18:00:25 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:f03e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:84:fb:e1:61:07:ff:30:1e:5e:96:13:3a:77:31:4e:ea:fd:d4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 18:00:25 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=da38cac972b9b4cfc22321a8dd023d61e652b6526a86a8c15cc33046f8d3a0d1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:00:2f:12:c7:45:cb:2f:a6:cf:c3:38:72:0c: 2f:67:45:b0:3f:cb:32:b1:52:2b:f9:00:14:c5:04: 60:28:b9:0d:54:a1:70:7a:46:30:ad:0a:57:10:ad: 77:c2:d2:27:07:0d:31:b2:e9:f6:ba:23:1e:b4:2b: f0:d7:7a:e3:92:cc:dd:06:9d:04:a1:bb:a6:91:86: 70:91:3a:c7:cd:2e:61:80:18:04:8f:df:7a:dc:f1: e2:f6:06:78:27:96:8d:99:e0:04:f7:ee:0a:c5:4b: 0d:f7:1b:9f:26:a5:0e:51:d3:e0:61:07:55:56:d4: 09:8b:b8:64:0f:3a:69:12:f5:6e:94:e4:7e:ba:ab: 03:45:24:9f:0d:ac:1f:f2:95:76:2b:20:fb:e7:dd: 55:ef:81:55:73:c1:f9:ef:0c:58:f3:89:2d:a7:10: 9a:62:a3:26:88:e0:af:44:0e:65:2a:32:1f:17:1f: b7:55:2d:dd:1a:e9:40:4c:a4:e2:5b:ed:2c:52:b5: 35:4e:5c:3d:1c:98:d9:21:4c:50:fc:d1:0f:8b:11: ea:7a:99:44:00:2b:ee:d3:49:48:8f:78:5f:75:f4: 56:b3:db:b0:01:84:ce:89:c4:d2:ac:42:1a:af:42: ec:4e:ed:24:73:93:b7:02:1d:a7:18:66:2a:e4:bb: a7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7F:43:DC:70:B5:BB:92:98:50:29:BA:10:B6:57:AE:51:62:C2:FF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03e::/48 Signature Algorithm: sha256WithRSAEncryption 6c:2c:6f:75:3f:30:82:50:12:6d:84:53:66:78:dd:00:59:e0: 4c:69:80:81:b6:1c:85:e4:30:45:2c:d6:e0:87:ed:6a:39:f4: dd:7b:38:23:37:e9:d6:49:74:93:ef:a4:49:ba:fd:69:32:30: 62:67:5d:a9:ab:32:1b:2c:fb:fa:d2:fb:8a:88:56:92:ed:02: 82:9d:ca:fd:f6:04:f0:3e:c5:d4:48:48:3e:3b:f5:80:ac:b8: 8c:53:b6:6e:42:5b:eb:86:d6:2e:d5:b4:45:3a:3a:67:9b:e3: 8c:ef:50:86:cd:c4:b1:71:24:4f:f4:e3:74:48:0f:10:36:8f: dd:30:ab:b0:89:65:14:c7:6d:f9:1b:49:de:d7:09:c0:55:f1: 56:cb:30:7b:49:87:a0:73:8c:d9:93:38:2b:f3:77:fa:a5:66: 4d:fe:c8:36:80:8e:a7:b6:39:c5:9b:8d:15:11:9f:72:fb:19: 20:31:64:48:70:e8:9c:d2:eb:98:ac:1f:a4:27:8f:35:d9:1c: d2:c1:a5:42:81:c8:66:3d:f0:72:79:19:d4:ff:0b:a8:35:b9: 2a:62:20:bd:a8:2c:c1:1f:3e:a2:5f:5c:82:9f:bf:38:04:62: 27:ff:27:2e:1b:ce:7f:de:64:08:46:d6:46:b1:d1:48:7d:35: 2b:99:d4:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULoT74WEH/zAeXpYTOncxTur91MkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTgwMDI1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTM4Y2FjOTcyYjliNGNmYzIyMzIxYThkZDAyM2Q2MWU2 NTJiNjUyNmE4NmE4YzE1Y2MzMzA0NmY4ZDNhMGQxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3AC8Sx0XLL6bPwzhyDC9nRbA/yzKxUiv5ABTFBGAouQ1U oXB6RjCtClcQrXfC0icHDTGy6fa6Ix60K/DXeuOSzN0GnQShu6aRhnCROsfNLmGA GASP33rc8eL2Bngnlo2Z4AT37grFSw33G58mpQ5R0+BhB1VW1AmLuGQPOmkS9W6U 5H66qwNFJJ8NrB/ylXYrIPvn3VXvgVVzwfnvDFjziS2nEJpioyaI4K9EDmUqMh8X H7dVLd0a6UBMpOJb7SxStTVOXD0cmNkhTFD80Q+LEep6mUQAK+7TSUiPeF919Faz 27ABhM6JxNKsQhqvQuxO7SRzk7cCHacYZirku6cFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgn9D3HC1u5KYUCm6ELZXrlFiwv8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFmZGQxZjVkLWNhMmEtNDBiNy04NTE2LThlOGI3NGUwZWFjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D4wDQYJKoZIhvcNAQELBQADggEBAGwsb3U/MIJQEm2EU2Z43QBZ 4ExpgIG2HIXkMEUs1uCH7Wo59N17OCM36dZJdJPvpEm6/WkyMGJnXamrMhss+/rS +4qIVpLtAoKdyv32BPA+xdRISD479YCsuIxTtm5CW+uG1i7VtEU6Omeb44zvUIbN xLFxJE/043RIDxA2j90wq7CJZRTHbfkbSd7XCcBV8VbLMHtJh6BzjNmTOCvzd/ql Zk3+yDaAjqe2OcWbjRURn3L7GSAxZEhw6JzS65isH6QnjzXZHNLBpUKByGY98HJ5 GdT/C6g1uSpiIL2oLMEfPqJfXIKfvzgEYif/Jy4bzn/eZAhG1kax0Uh9NSuZ1Fo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:38:14 2025 by rpki-client