$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa File: 23b3d13b-212f-42f5-9048-2b935e09c423.roa (raw, json) Hash identifier: gxpTA9MXYVRyddVuWFd7Ad2XdmqkxqeqToXulgCCczw= Subject key identifier: DB:0A:84:9F:AB:7A:F1:F4:76:EF:C6:D5:D8:69:DC:4E:23:E0:CB:29 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2A89EC368F189DAD906BC29C54371734A411A753 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa Signing time: Fri 17 Oct 2025 20:00:36 +0000 ROA not before: Fri 17 Oct 2025 20:00:36 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:d70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:89:ec:36:8f:18:9d:ad:90:6b:c2:9c:54:37:17:34:a4:11:a7:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 17 20:00:36 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=033e295abd044c956936badd6e6c715bbe3f1068c5c1029f1f34884e3ed8d94d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:2c:32:a4:46:fb:45:0d:b1:35:43:3c:85: fe:d9:c2:fc:2e:e6:c2:1a:21:e9:a9:ef:fd:59:84: ff:b2:44:25:af:06:0f:a4:11:92:3e:18:2b:d4:29: 5e:05:92:36:64:6d:67:ed:aa:5a:37:ef:21:a4:96: 25:ea:f3:68:8b:17:d4:4f:96:e2:f7:ae:c4:e3:50: 73:55:2d:6e:70:47:41:db:9f:a0:10:df:1e:33:da: 57:27:5e:58:d3:f1:9a:31:d0:40:96:e8:25:18:ac: 54:74:e1:41:37:1a:e7:04:d3:90:4a:88:eb:3b:a3: e7:f3:bb:1e:1f:e0:27:f6:a6:3f:bb:43:67:c4:b3: d8:ea:9a:25:97:eb:89:97:27:a9:f6:8c:30:a4:f0: 72:97:1c:40:b2:55:23:79:f7:2f:8d:6d:e4:0b:a8: 44:23:8b:11:87:75:a3:9c:52:32:b9:30:e5:39:74: 25:73:1e:36:c9:24:be:87:b0:be:2a:da:02:4a:17: 7b:3f:d1:11:7c:97:e9:95:52:4a:08:e9:46:74:f1: f3:ad:47:78:4d:d7:15:b2:7d:34:aa:93:fb:60:31: 6f:da:cb:5c:44:d5:d4:d9:54:c3:68:91:ac:f9:13: 31:b8:5e:f3:49:8b:03:2f:16:1f:23:e6:f8:2d:71: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0A:84:9F:AB:7A:F1:F4:76:EF:C6:D5:D8:69:DC:4E:23:E0:CB:29 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:d70::/44 Signature Algorithm: sha256WithRSAEncryption 5f:49:47:24:83:42:0f:37:62:ff:33:ce:d2:55:3a:cf:73:16: 4d:57:79:fb:40:31:c5:d6:f4:bb:64:8f:36:a0:28:39:5c:b1: 1a:9c:ae:bc:bc:32:69:e4:40:47:06:36:56:be:7f:a5:42:2d: c5:12:b1:45:c3:e5:9a:ff:b9:c2:55:97:d6:69:11:de:6a:46: 48:1f:2b:47:97:b2:f2:27:09:d6:9f:66:9c:4d:a7:fe:9b:61: 2d:ec:37:ce:f4:e2:fe:f6:fd:e1:19:0c:26:ba:a9:c0:07:77: 55:ff:86:0a:22:83:8a:ca:9d:b5:29:28:f5:79:17:f5:45:b6: 68:ed:c5:69:9c:e3:82:be:27:6c:90:30:a7:c8:cf:a2:9b:08: a3:3f:df:f9:21:0b:97:41:c9:4b:60:50:d1:e0:88:c5:07:fa: ab:e3:17:27:52:92:71:c5:43:48:77:22:f0:62:8d:fa:28:7c: 83:ea:09:8d:d2:e2:24:7c:89:11:55:ef:08:c6:ae:56:78:47: 26:9c:da:5b:a3:cc:2e:5e:57:50:d7:53:b3:6f:4b:c5:5c:d8: f3:e5:b8:62:8f:b7:e5:e6:08:6f:57:1e:5e:e2:9f:dd:58:8a: 5a:ec:ff:0b:d9:b9:dc:3f:41:5a:a7:90:c1:5f:2b:2a:5e:e2: e9:2e:b2:92 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKonsNo8Yna2Qa8KcVDcXNKQRp1MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDE3MjAwMDM2WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzNlMjk1YWJkMDQ0Yzk1NjkzNmJhZGQ2ZTZjNzE1YmJl M2YxMDY4YzVjMTAyOWYxZjM0ODg0ZTNlZDhkOTRkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyNiwypEb7RQ2xNUM8hf7Zwvwu5sIaIemp7/1ZhP+yRCWv Bg+kEZI+GCvUKV4FkjZkbWftqlo37yGkliXq82iLF9RPluL3rsTjUHNVLW5wR0Hb n6AQ3x4z2lcnXljT8Zox0ECW6CUYrFR04UE3GucE05BKiOs7o+fzux4f4Cf2pj+7 Q2fEs9jqmiWX64mXJ6n2jDCk8HKXHECyVSN59y+NbeQLqEQjixGHdaOcUjK5MOU5 dCVzHjbJJL6HsL4q2gJKF3s/0RF8l+mVUkoI6UZ08fOtR3hN1xWyfTSqk/tgMW/a y1xE1dTZVMNokaz5EzG4XvNJiwMvFh8j5vgtcTAVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2wqEn6t68fR278bV2GncTiPgyykwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzIzYjNkMTNiLTIxMmYtNDJmNS05MDQ4LTJiOTM1ZTA5YzQyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADXAwDQYJKoZIhvcNAQELBQADggEBAF9JRySDQg83Yv8zztJVOs9z Fk1XeftAMcXW9LtkjzagKDlcsRqcrry8MmnkQEcGNla+f6VCLcUSsUXD5Zr/ucJV l9ZpEd5qRkgfK0eXsvInCdafZpxNp/6bYS3sN8704v72/eEZDCa6qcAHd1X/hgoi g4rKnbUpKPV5F/VFtmjtxWmc44K+J2yQMKfIz6KbCKM/3/khC5dByUtgUNHgiMUH +qvjFydSknHFQ0h3IvBijfoofIPqCY3S4iR8iRFV7wjGrlZ4Ryac2lujzC5eV1DX U7NvS8Vc2PPluGKPt+XmCG9XHl7in91Yilrs/wvZudw/QVqnkMFfKype4ukuspI= -----END CERTIFICATE-----Generated at Sun Oct 19 23:10:49 2025 by rpki-client