$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa File: 33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa (raw, json) Hash identifier: KaL/xmuQ18ZulFmhQzNxECY8JOTJBJloJLxaxr+7JME= Subject key identifier: 1E:1F:59:A7:53:53:05:23:78:4A:6E:49:27:28:7A:A7:78:FF:5E:31 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2DC84D4A0B5F0D4151DE53F4EF961F68E0E1632B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa Signing time: Fri 26 Sep 2025 17:52:05 +0000 ROA not before: Fri 26 Sep 2025 17:52:05 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:545::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c8:4d:4a:0b:5f:0d:41:51:de:53:f4:ef:96:1f:68:e0:e1:63:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:52:05 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=ce720f43ab99b5fad2edaa1e42bad9dd0e5b08aeb482577324444554f29be3fe, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:87:2e:f6:df:06:09:91:08:6f:0c:64:38: a1:9a:ab:dc:39:58:59:52:5d:d3:8b:2f:1c:0a:b6: 92:3b:66:88:79:79:8d:01:6c:31:88:61:90:41:52: a0:a0:64:54:a0:30:b9:d4:56:48:a3:28:c3:fd:b0: 76:f1:7a:1d:a6:4e:0f:ab:7e:fe:0f:47:8f:3b:a2: bd:0c:2a:8e:01:68:71:02:de:97:96:b3:cc:68:34: 45:c0:d0:4b:78:cd:1a:8b:24:a3:52:ed:11:71:44: 21:41:53:a2:c3:6b:b9:15:51:fb:d8:c9:c3:3a:4c: 31:08:6d:42:5b:47:25:05:3a:86:9e:9d:a9:11:67: c1:be:a6:c1:5b:36:1b:14:9a:1c:47:2f:05:62:5e: 29:a8:bf:c3:43:48:d9:7d:ca:c4:2d:f1:b4:b4:6b: 23:80:b0:13:1b:5b:a0:aa:aa:ca:7f:fa:70:3f:fe: 79:f2:eb:e3:e2:85:af:f6:9a:da:8d:f8:1a:b9:1f: cd:a3:72:c3:af:a9:6e:eb:70:9d:2a:be:ed:a0:6d: 3e:d6:62:80:64:e2:4f:ad:dc:c3:df:20:6f:42:60: b9:48:ec:e7:13:49:d8:70:65:79:81:63:08:39:47: 99:67:8c:96:22:ea:88:6f:31:bf:8b:60:53:ec:6f: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1F:59:A7:53:53:05:23:78:4A:6E:49:27:28:7A:A7:78:FF:5E:31 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:545::/48 Signature Algorithm: sha256WithRSAEncryption 2c:27:8d:07:3f:26:30:7b:02:9c:5d:be:2c:ad:b5:1b:c3:dd: fe:0f:e4:3d:00:ce:3d:8c:71:a5:30:ae:0b:84:62:01:5d:44: 7a:44:0d:6d:6f:20:61:22:65:cf:49:5c:5d:fb:28:a6:86:a4: 54:bd:c1:17:25:43:23:d2:dc:7c:64:a5:1a:7e:87:1a:f6:19: be:84:67:98:5a:69:54:fc:a6:05:1e:a0:58:70:40:6b:38:c1: 97:e4:cf:8f:71:e5:d1:62:6e:0c:e6:59:f9:3d:19:43:c7:c8: 69:94:51:ec:24:b2:fe:c6:1a:2e:39:3f:81:f5:79:59:bb:74: 07:e2:7a:e9:69:48:23:f6:51:70:7f:7c:41:ee:de:93:fe:b1: 90:7c:c9:23:9c:a0:72:b9:7a:2b:99:36:62:0b:6a:d4:b2:29: 58:10:2e:5a:fd:c6:91:34:c3:85:9b:7e:21:e8:1f:8e:2d:18: 6d:bd:22:7e:ac:f9:16:a3:2b:de:e6:97:34:82:14:f5:fa:72: 16:94:04:34:97:4b:cf:88:f5:fd:01:73:4d:34:27:45:f7:30: 14:0c:09:0b:c4:d2:3e:35:ff:63:19:f0:20:10:c2:4b:bf:6c: cd:87:c3:1a:ba:67:db:7a:fa:f7:f2:fa:77:e6:05:35:32:ee: cd:00:05:4f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULchNSgtfDUFR3lP075YfaODhYyswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MjA1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTcyMGY0M2FiOTliNWZhZDJlZGFhMWU0MmJhZDlkZDBl NWIwOGFlYjQ4MjU3NzMyNDQ0NDU1NGYyOWJlM2ZlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFCIcu9t8GCZEIbwxkOKGaq9w5WFlSXdOLLxwKtpI7Zoh5 eY0BbDGIYZBBUqCgZFSgMLnUVkijKMP9sHbxeh2mTg+rfv4PR487or0MKo4BaHEC 3peWs8xoNEXA0Et4zRqLJKNS7RFxRCFBU6LDa7kVUfvYycM6TDEIbUJbRyUFOoae nakRZ8G+psFbNhsUmhxHLwViXimov8NDSNl9ysQt8bS0ayOAsBMbW6Cqqsp/+nA/ /nny6+Piha/2mtqN+Bq5H82jcsOvqW7rcJ0qvu2gbT7WYoBk4k+t3MPfIG9CYLlI 7OcTSdhwZXmBYwg5R5lnjJYi6ohvMb+LYFPsb4R3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHh9Zp1NTBSN4Sm5JJyh6p3j/XjEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzMzYzZjZWUzLWEyODYtNGU5YS05MmQyLTRiN2JmYjhhYjUwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUUwDQYJKoZIhvcNAQELBQADggEBACwnjQc/JjB7ApxdviyttRvD 3f4P5D0Azj2McaUwrguEYgFdRHpEDW1vIGEiZc9JXF37KKaGpFS9wRclQyPS3Hxk pRp+hxr2Gb6EZ5haaVT8pgUeoFhwQGs4wZfkz49x5dFibgzmWfk9GUPHyGmUUewk sv7GGi45P4H1eVm7dAfieulpSCP2UXB/fEHu3pP+sZB8ySOcoHK5eiuZNmILatSy KVgQLlr9xpE0w4WbfiHoH44tGG29In6s+RajK97mlzSCFPX6chaUBDSXS8+I9f0B c000J0X3MBQMCQvE0j41/2MZ8CAQwku/bM2Hwxq6Z9t6+vfy+nfmBTUy7s0ABU8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:38:44 2025 by rpki-client