$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/310b10fe-7ba7-4fe1-b4e3-06b61bb2872f.roa File: 310b10fe-7ba7-4fe1-b4e3-06b61bb2872f.roa (raw, json) Hash identifier: ThDlrgNILytOd8q+h3BLqQs6UKgxRevd54vfcoAR3XY= Subject key identifier: 14:6C:DD:66:7B:AF:70:4B:67:41:76:56:69:82:E1:EB:E0:69:5A:8D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2568818A1EBA8E0CAC03477FB0BA3974ECFF2949 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/310b10fe-7ba7-4fe1-b4e3-06b61bb2872f.roa Signing time: Mon 06 Oct 2025 17:12:41 +0000 ROA not before: Mon 06 Oct 2025 17:12:41 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:68:81:8a:1e:ba:8e:0c:ac:03:47:7f:b0:ba:39:74:ec:ff:29:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:12:41 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=2ce9e0e04312a1012077135b72044118ac590cd1969d8360827972ac318f739b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:a8:6d:57:ec:d8:e1:80:b4:82:98:ae:55: 2a:e6:5b:6f:36:1b:c7:fc:fc:82:76:c9:c3:e8:13: 4f:fa:8f:8c:84:aa:66:b9:60:e2:31:d0:fe:29:ed: 52:1d:26:b7:fd:67:f0:f1:d6:70:57:ec:2f:d8:7e: e2:a8:ef:9b:f5:12:f1:ff:93:fc:27:93:25:37:33: 94:08:60:9f:a4:59:29:34:72:c1:8a:3f:5e:e3:39: 02:af:83:1b:65:36:68:3c:4e:d2:96:49:b3:62:d8: 46:93:e9:3b:f5:a3:20:fc:9d:dc:6a:b7:71:fa:02: 65:bf:01:be:9c:fe:7b:8f:2b:1b:1c:97:8a:89:50: 56:9c:12:b0:dc:82:5a:d2:97:a9:6b:c8:de:98:b8: 5d:cb:42:31:83:08:18:80:fe:33:3f:02:01:ad:5b: f3:89:8d:87:75:c0:f9:24:b5:4f:dd:ec:28:39:e8: be:39:77:4d:c0:45:5d:ff:9b:c7:41:43:71:65:67: e7:21:72:af:dd:b3:9c:1f:1f:13:bc:1a:7c:e1:ec: 4c:26:1a:c1:f9:de:90:1d:cf:4e:3d:80:3d:64:d3: e9:cd:4f:e3:3c:03:d5:f2:d0:ca:22:3f:13:46:0c: 41:04:1e:90:0f:60:e9:e2:43:f4:b8:7b:b3:87:ed: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6C:DD:66:7B:AF:70:4B:67:41:76:56:69:82:E1:EB:E0:69:5A:8D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/310b10fe-7ba7-4fe1-b4e3-06b61bb2872f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c01::/48 Signature Algorithm: sha256WithRSAEncryption 4a:9a:9c:94:cf:51:cf:4d:20:bf:cb:58:3d:15:4d:f4:f8:26: 5a:cb:ca:bb:70:82:f4:af:36:3b:67:84:b5:f8:3a:39:fc:e2: 43:cf:57:74:32:fd:c4:a3:cd:b9:0e:09:4b:77:20:bd:18:63: 21:0d:50:35:51:01:fa:27:b1:30:59:9d:0c:73:e3:39:e8:75: 8b:a0:fc:ef:e4:09:83:df:34:48:6a:01:60:b4:22:f8:1e:2f: 64:a4:47:8d:20:34:27:99:73:df:91:88:bf:0e:c7:bf:a9:6e: 1f:41:cf:eb:21:0a:79:aa:86:af:17:63:42:a8:cd:3d:19:80: 44:3a:9a:e8:a6:e5:83:60:dd:15:90:ba:4a:3a:a9:fd:50:6d: 3b:4f:54:f9:6c:ce:99:be:6c:60:8c:c0:9f:11:e9:eb:ed:ac: ab:84:4b:9a:95:ec:b2:44:d1:da:b2:05:eb:41:d6:67:ee:73: 62:8d:29:73:42:35:42:5b:ec:82:00:73:e3:ff:ec:41:be:d0: 32:10:7b:a6:47:6f:41:63:28:53:5c:03:4d:18:ad:26:ab:d8: ef:15:95:a4:6c:d9:c7:23:cc:54:0d:db:77:37:d8:95:a6:01: d9:f9:f4:26:b8:ef:4d:1b:04:9e:6a:2d:85:26:e2:46:82:06: 7b:b9:bd:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJWiBih66jgysA0d/sLo5dOz/KUkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMjQxWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2U5ZTBlMDQzMTJhMTAxMjA3NzEzNWI3MjA0NDExOGFj NTkwY2QxOTY5ZDgzNjA4Mjc5NzJhYzMxOGY3MzliMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNeahtV+zY4YC0gpiuVSrmW282G8f8/IJ2ycPoE0/6j4yE qma5YOIx0P4p7VIdJrf9Z/Dx1nBX7C/YfuKo75v1EvH/k/wnkyU3M5QIYJ+kWSk0 csGKP17jOQKvgxtlNmg8TtKWSbNi2EaT6Tv1oyD8ndxqt3H6AmW/Ab6c/nuPKxsc l4qJUFacErDcglrSl6lryN6YuF3LQjGDCBiA/jM/AgGtW/OJjYd1wPkktU/d7Cg5 6L45d03ARV3/m8dBQ3FlZ+chcq/ds5wfHxO8Gnzh7EwmGsH53pAdz049gD1k0+nN T+M8A9Xy0MoiPxNGDEEEHpAPYOniQ/S4e7OH7QW9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFGzdZnuvcEtnQXZWaYLh6+BpWo0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzMxMGIxMGZlLTdiYTctNGZlMS1iNGUzLTA2YjYxYmIyODcyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAEwDQYJKoZIhvcNAQELBQADggEBAEqanJTPUc9NIL/LWD0VTfT4 JlrLyrtwgvSvNjtnhLX4Ojn84kPPV3Qy/cSjzbkOCUt3IL0YYyENUDVRAfonsTBZ nQxz4znodYug/O/kCYPfNEhqAWC0IvgeL2SkR40gNCeZc9+RiL8Ox7+pbh9Bz+sh Cnmqhq8XY0KozT0ZgEQ6muim5YNg3RWQuko6qf1QbTtPVPlszpm+bGCMwJ8R6evt rKuES5qV7LJE0dqyBetB1mfuc2KNKXNCNUJb7IIAc+P/7EG+0DIQe6ZHb0FjKFNc A00YrSar2O8VlaRs2ccjzFQN23c32JWmAdn59Ca4700bBJ5qLYUm4kaCBnu5vSs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:38:35 2025 by rpki-client