$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33cad6c3-e74e-478f-9b7a-5bae37505c27.roa File: 33cad6c3-e74e-478f-9b7a-5bae37505c27.roa (raw, json) Hash identifier: Tb55GNL2w2W4WK3y5Bop4odri+udGHQRcLfJLdgpFaU= Subject key identifier: 9B:08:D4:30:2E:D9:22:4C:44:BF:87:FD:82:93:DE:6D:D6:08:54:83 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3012D5D4D66DCB37C37C2682DE7335C5EC29B6B9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33cad6c3-e74e-478f-9b7a-5bae37505c27.roa Signing time: Mon 06 Oct 2025 17:20:12 +0000 ROA not before: Mon 06 Oct 2025 17:20:12 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:12:d5:d4:d6:6d:cb:37:c3:7c:26:82:de:73:35:c5:ec:29:b6:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:20:12 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=52ed6f46aafd6b661a5d86c2932f098526ce5d872a471e57b9fb14d3e20db9bc, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:80:59:cb:4d:69:8c:3e:35:cf:16:76:22: ff:e5:33:27:5f:eb:35:93:f7:1c:1a:4d:01:64:7d: cd:a9:16:b8:c9:d3:e5:38:bd:77:83:93:3b:4d:02: d1:7e:3a:5c:c5:b8:8c:67:22:d5:13:54:0a:04:8c: 06:59:c4:58:c9:e9:1c:a8:1a:19:a9:96:63:b1:d9: cb:9e:04:a4:a9:ce:e2:18:11:08:59:25:f4:0f:1b: 14:39:48:d0:49:ed:4e:2d:d5:3a:9f:90:cf:d7:57: 86:95:0c:d1:84:05:e6:a9:2c:cb:86:a4:82:7f:35: 27:5e:3c:d3:91:21:5b:50:40:db:66:d7:8a:38:f1: 66:0f:17:b3:ec:10:5a:47:83:45:0f:59:45:b9:58: 97:1e:32:d3:b7:71:f4:df:9b:2f:5d:00:4d:f1:5b: f5:d4:84:50:2a:cf:e5:02:83:37:24:36:46:c2:c8: 74:f9:fd:ca:3b:51:8c:1a:78:c6:ea:3d:75:ed:61: af:d3:34:21:e5:34:7c:1e:3e:0c:b3:63:06:65:26: c2:9b:03:65:71:d2:83:42:bb:51:6e:f4:68:d8:6e: f1:09:21:3a:43:1a:6d:ec:13:3a:e7:3b:db:b1:2b: 42:b8:f9:81:2d:f3:c9:b2:27:05:d6:f3:3d:8d:e1: 9c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:08:D4:30:2E:D9:22:4C:44:BF:87:FD:82:93:DE:6D:D6:08:54:83 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33cad6c3-e74e-478f-9b7a-5bae37505c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c19::/48 Signature Algorithm: sha256WithRSAEncryption a9:92:5e:81:0b:29:76:cc:59:31:00:3b:cf:b9:0b:4a:cf:42: 0d:d4:13:e5:da:c4:96:ac:67:3c:5f:f2:e4:6f:15:c5:8f:94: 74:09:4f:8b:b3:1f:b1:f6:ea:74:fb:ea:d5:a1:2b:c9:4f:41: 3d:70:7f:56:bd:55:16:1b:f0:a3:ac:da:aa:c4:24:51:be:43: e3:9c:ef:b5:c9:15:47:4c:dd:ca:90:59:d0:7f:e7:d4:bd:e4: 7e:04:a5:67:df:1c:9d:7b:6b:0b:8f:ec:41:2b:bb:f8:f0:6b: cf:3b:f3:19:af:10:80:c5:cd:e4:a8:40:89:51:f4:19:37:87: 29:6e:82:d0:03:ef:39:3a:65:57:54:58:cb:f6:f7:f1:da:17: 7f:0e:72:ad:84:ad:ef:be:64:4a:b9:8f:10:3e:7f:5f:a8:94: 4d:04:d1:52:41:e6:57:a1:40:bd:a3:ee:0f:a1:2e:f4:52:dd: f9:f0:e0:79:2e:b8:e5:34:ed:0b:4a:76:1c:99:ab:f6:7b:1b: 8f:c0:2c:ae:3e:3c:6a:af:5d:38:eb:c2:06:4a:98:61:0d:9c: 91:db:82:8b:07:81:aa:0e:fa:88:84:95:1c:f3:5a:ad:b8:81: f8:2d:9e:8d:c3:8a:83:cb:ac:e7:94:4e:16:86:01:fa:34:d8: 63:3c:52:de -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMBLV1NZtyzfDfCaC3nM1xewptrkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcyMDEyWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmVkNmY0NmFhZmQ2YjY2MWE1ZDg2YzI5MzJmMDk4NTI2 Y2U1ZDg3MmE0NzFlNTdiOWZiMTRkM2UyMGRiOWJjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXzIBZy01pjD41zxZ2Iv/lMydf6zWT9xwaTQFkfc2pFrjJ 0+U4vXeDkztNAtF+OlzFuIxnItUTVAoEjAZZxFjJ6RyoGhmplmOx2cueBKSpzuIY EQhZJfQPGxQ5SNBJ7U4t1TqfkM/XV4aVDNGEBeapLMuGpIJ/NSdePNORIVtQQNtm 14o48WYPF7PsEFpHg0UPWUW5WJceMtO3cfTfmy9dAE3xW/XUhFAqz+UCgzckNkbC yHT5/co7UYwaeMbqPXXtYa/TNCHlNHwePgyzYwZlJsKbA2Vx0oNCu1Fu9GjYbvEJ ITpDGm3sEzrnO9uxK0K4+YEt88myJwXW8z2N4ZxnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmwjUMC7ZIkxEv4f9gpPebdYIVIMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzMzY2FkNmMzLWU3NGUtNDc4Zi05YjdhLTViYWUzNzUwNWMyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBkwDQYJKoZIhvcNAQELBQADggEBAKmSXoELKXbMWTEAO8+5C0rP Qg3UE+XaxJasZzxf8uRvFcWPlHQJT4uzH7H26nT76tWhK8lPQT1wf1a9VRYb8KOs 2qrEJFG+Q+Oc77XJFUdM3cqQWdB/59S95H4EpWffHJ17awuP7EEru/jwa8878xmv EIDFzeSoQIlR9Bk3hylugtAD7zk6ZVdUWMv29/HaF38Ocq2Ere++ZEq5jxA+f1+o lE0E0VJB5lehQL2j7g+hLvRS3fnw4HkuuOU07QtKdhyZq/Z7G4/ALK4+PGqvXTjr wgZKmGENnJHbgosHgaoO+oiElRzzWq24gfgtno3DioPLrOeUThaGAfo02GM8Ut4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:37:51 2025 by rpki-client