$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa File: 354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa (raw, json) Hash identifier: 9OF8t+oj/Ok9GrDr9ELALdVAlPP1OdMI8zRuwGr8ZEU= Subject key identifier: D3:1A:39:6D:77:A5:84:DC:5E:D0:D5:02:AE:78:EE:F0:22:73:37:B5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 066A4CA5D5D1EC98BC45FF40620FE1C3A9342889 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa Signing time: Mon 06 Oct 2025 17:14:07 +0000 ROA not before: Mon 06 Oct 2025 17:14:07 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:6a:4c:a5:d5:d1:ec:98:bc:45:ff:40:62:0f:e1:c3:a9:34:28:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:14:07 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=3319706014aa1ddb885eb1b81461c8a3d5c9f1d062b1238c221b9abea6f86e83, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:a4:39:49:cb:cf:b6:a8:82:f3:c1:46:a7: 97:9e:5b:32:f0:45:1a:18:04:94:8d:89:4b:09:d5: 17:fe:9e:51:35:ec:ad:a2:0d:6e:2b:21:e4:32:56: 15:f4:8f:21:da:50:07:48:f2:9d:9d:ea:10:a2:01: 30:e2:74:97:26:b1:34:ab:7c:79:11:77:3c:94:0b: 66:a4:c8:a5:d0:81:f4:64:86:5a:de:c7:2f:af:e8: 4b:25:07:31:75:19:ff:86:5d:ea:07:60:44:7b:f1: ed:13:06:fa:ae:fb:93:b1:84:35:32:66:2f:7b:41: 48:32:3c:05:2d:67:f3:9b:5a:83:97:b5:95:4c:db: 2b:3e:f2:66:cf:bf:cb:95:b0:f7:7e:34:24:e3:b9: 8f:ef:22:ff:33:98:c3:51:d1:21:cb:fb:64:48:f6: a0:f2:0d:7d:16:32:35:b6:ef:cd:b4:dc:3e:b9:a1: 69:14:b1:d0:d8:3f:6f:c8:40:a6:82:2b:34:6e:a5: 79:4e:13:cc:31:d6:cb:e5:2a:24:72:f7:21:c8:74: 52:4b:75:bf:81:8a:39:a5:c1:02:b5:63:e3:fe:21: 44:4c:37:37:60:6f:06:6d:c1:2e:80:88:9f:8a:c2: 28:3a:a6:35:4c:71:4b:fe:87:5d:e7:38:62:33:51: 87:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1A:39:6D:77:A5:84:DC:5E:D0:D5:02:AE:78:EE:F0:22:73:37:B5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c12::/48 Signature Algorithm: sha256WithRSAEncryption 35:59:70:ac:8d:c0:a4:da:5e:0a:d6:b5:c7:89:97:7e:42:28: 9e:8b:e8:8c:92:af:71:5a:06:6f:8e:ce:26:de:aa:2b:a5:84: a2:74:8b:6f:56:ef:0f:1e:84:76:04:48:dc:76:d2:39:d7:a4: b8:a7:b5:27:28:ba:eb:f1:29:1f:2d:26:2d:e2:dd:45:c9:c0: 3a:ba:6c:93:35:eb:88:f1:c0:2e:eb:a6:32:23:9f:72:5b:71: c1:68:9b:bf:e5:df:4c:6e:17:2c:ec:06:d0:f3:20:f6:4d:cc: 4b:10:49:86:5f:41:3f:af:7c:e2:27:7e:f0:e6:df:87:cc:3c: 1e:f0:bd:1d:a3:ef:43:c9:a3:ab:c6:22:20:a3:d9:4f:53:ea: a1:31:a7:21:5b:3a:5e:9c:76:1c:59:58:fe:83:df:4a:25:c7: 7e:b6:0c:d4:b7:6d:b7:7b:a2:47:3b:80:aa:18:1f:36:ab:6b: 54:36:14:d0:13:78:ab:a3:c1:f4:d0:0f:0b:50:ab:69:21:1f: 20:7d:74:bd:54:ae:24:f0:35:95:ba:33:3d:29:d8:35:90:34: 0b:cd:91:c7:74:e5:df:1d:03:3a:bf:f2:8b:2f:9e:e9:7e:3f: 2d:31:5a:84:db:c3:33:17:39:7c:a6:ad:58:18:31:eb:b2:d8: f6:9d:7d:34 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBmpMpdXR7Ji8Rf9AYg/hw6k0KIkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxNDA3WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzE5NzA2MDE0YWExZGRiODg1ZWIxYjgxNDYxYzhhM2Q1 YzlmMWQwNjJiMTIzOGMyMjFiOWFiZWE2Zjg2ZTgzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+Z6Q5ScvPtqiC88FGp5eeWzLwRRoYBJSNiUsJ1Rf+nlE1 7K2iDW4rIeQyVhX0jyHaUAdI8p2d6hCiATDidJcmsTSrfHkRdzyUC2akyKXQgfRk hlrexy+v6EslBzF1Gf+GXeoHYER78e0TBvqu+5OxhDUyZi97QUgyPAUtZ/ObWoOX tZVM2ys+8mbPv8uVsPd+NCTjuY/vIv8zmMNR0SHL+2RI9qDyDX0WMjW278203D65 oWkUsdDYP2/IQKaCKzRupXlOE8wx1svlKiRy9yHIdFJLdb+BijmlwQK1Y+P+IURM NzdgbwZtwS6AiJ+Kwig6pjVMcUv+h13nOGIzUYexAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0xo5bXelhNxe0NUCrnju8CJzN7UwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM1NGJhMWFiLTZiZDItNDhlZS1iZGFkLWUxZjM5NTRiMDJhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBIwDQYJKoZIhvcNAQELBQADggEBADVZcKyNwKTaXgrWtceJl35C KJ6L6IySr3FaBm+OzibeqiulhKJ0i29W7w8ehHYESNx20jnXpLintScouuvxKR8t Ji3i3UXJwDq6bJM164jxwC7rpjIjn3JbccFom7/l30xuFyzsBtDzIPZNzEsQSYZf QT+vfOInfvDm34fMPB7wvR2j70PJo6vGIiCj2U9T6qExpyFbOl6cdhxZWP6D30ol x362DNS3bbd7okc7gKoYHzara1Q2FNATeKujwfTQDwtQq2khHyB9dL1UriTwNZW6 Mz0p2DWQNAvNkcd05d8dAzq/8osvnul+Py0xWoTbwzMXOXymrVgYMeuy2PadfTQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:41:32 2025 by rpki-client