$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5247e20e-4480-4c24-b0b9-365d2db6de35.roa File: 5247e20e-4480-4c24-b0b9-365d2db6de35.roa (raw, json) Hash identifier: i0oKCkjfzc7S7p5VrbibFQuYv0URoNENJH0V57pSq9o= Subject key identifier: 88:2C:4C:D0:D3:3B:EE:F6:3B:E6:4C:92:C7:B5:50:3A:EC:8E:D3:5B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 45F77D7B33F76CDCEABAEA735BBE0CD181B03416 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5247e20e-4480-4c24-b0b9-365d2db6de35.roa Signing time: Mon 06 Oct 2025 17:20:03 +0000 ROA not before: Mon 06 Oct 2025 17:20:03 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f7:7d:7b:33:f7:6c:dc:ea:ba:ea:73:5b:be:0c:d1:81:b0:34:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:20:03 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=b11b40e2b70b096140b01ac7803d1ac2a0b7b51348038973107ab233fdc3a0c3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:e9:6e:0a:f8:b0:50:64:8d:c8:ab:fb:c7: b6:ed:ac:55:0c:79:8d:3e:f4:e3:d7:ed:17:ce:97: 53:e1:2d:af:79:60:58:4a:df:55:d3:b9:be:17:8e: bd:65:e0:e4:c9:d3:fa:55:67:cb:06:ab:d3:5a:27: 89:68:9d:c4:e6:4b:40:95:1e:27:f4:6c:47:b5:a2: 82:5a:7f:e1:e3:89:6a:44:c2:27:19:cc:63:ec:27: 11:74:47:98:87:2d:c2:a9:a0:45:0f:5a:4f:65:63: b3:1c:56:6c:4f:94:3e:c8:c9:19:7b:47:46:ec:b9: 4d:bc:50:26:b8:19:a9:f4:0a:f1:ee:ac:ea:68:b1: b7:d2:87:8d:13:1f:e0:e3:e1:dc:07:11:73:0c:26: 53:63:3b:9a:93:a9:63:3d:a4:5c:9f:5d:20:bd:fd: c9:76:14:2d:b4:c5:e4:a0:d2:1c:a9:14:5a:1b:76: 20:d1:7d:ac:6f:86:42:58:58:bf:f8:b6:c1:e8:44: 1f:f4:70:ec:2c:af:d9:7b:d1:57:d9:cc:9c:b8:cc: 49:02:6d:87:6b:18:ff:18:40:5b:25:a3:c7:4e:9f: 77:1e:f7:ea:53:11:00:7a:21:79:5e:4e:61:f8:4b: d1:60:c6:4e:5b:90:cb:9c:15:eb:6e:3a:e3:59:98: 17:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2C:4C:D0:D3:3B:EE:F6:3B:E6:4C:92:C7:B5:50:3A:EC:8E:D3:5B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5247e20e-4480-4c24-b0b9-365d2db6de35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c15::/48 Signature Algorithm: sha256WithRSAEncryption 09:fd:69:a7:5c:df:33:1a:07:7f:32:9f:60:9b:4b:4e:06:18: dc:c6:36:69:9d:6d:8e:f1:ad:47:fc:e2:c5:de:3d:ab:ef:fa: 20:f2:92:34:3a:54:d7:13:a9:c7:bf:13:ea:59:2b:a7:0f:6f: 22:4b:51:4b:f7:42:6a:97:e4:b9:d7:9e:29:19:bb:ec:30:19: 24:24:63:6b:bb:57:02:25:cf:63:f9:65:01:b9:87:73:ee:56: 3f:d9:bd:92:d2:b9:d3:a8:50:bd:bc:87:f8:44:e4:1b:93:8c: 2d:4f:ca:41:50:19:00:36:81:5a:83:ec:df:10:c1:fb:4d:1f: aa:21:3b:25:1d:30:83:2a:58:b9:02:60:37:bb:0f:67:02:53: 2f:c1:f1:aa:bc:ac:a1:a7:25:7a:c2:78:ba:3c:6f:6f:f8:de: b2:c1:5b:39:5e:b2:90:a4:45:06:8f:2e:0e:26:12:91:af:02: 1e:24:a0:83:99:df:b0:5f:be:7a:0c:a9:a1:a1:95:38:25:6b: 15:93:c8:3a:d4:6e:ef:43:99:1f:35:be:0c:61:b1:1b:d2:3c: c3:11:ac:24:df:8e:05:e5:c0:5e:c4:ba:48:15:9e:28:dc:bc: 2a:d1:b4:bf:a1:be:b2:31:1a:5c:ea:d1:24:81:dc:bd:6d:02: c2:7d:fb:02 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURfd9ezP3bNzquupzW74M0YGwNBYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcyMDAzWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTFiNDBlMmI3MGIwOTYxNDBiMDFhYzc4MDNkMWFjMmEw YjdiNTEzNDgwMzg5NzMxMDdhYjIzM2ZkYzNhMGMzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn4eluCviwUGSNyKv7x7btrFUMeY0+9OPX7RfOl1PhLa95 YFhK31XTub4Xjr1l4OTJ0/pVZ8sGq9NaJ4loncTmS0CVHif0bEe1ooJaf+HjiWpE wicZzGPsJxF0R5iHLcKpoEUPWk9lY7McVmxPlD7IyRl7R0bsuU28UCa4Gan0CvHu rOposbfSh40TH+Dj4dwHEXMMJlNjO5qTqWM9pFyfXSC9/cl2FC20xeSg0hypFFob diDRfaxvhkJYWL/4tsHoRB/0cOwsr9l70VfZzJy4zEkCbYdrGP8YQFslo8dOn3ce 9+pTEQB6IXleTmH4S9Fgxk5bkMucFetuOuNZmBffAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiCxM0NM77vY75kySx7VQOuyO01swHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzUyNDdlMjBlLTQ0ODAtNGMyNC1iMGI5LTM2NWQyZGI2ZGUzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBUwDQYJKoZIhvcNAQELBQADggEBAAn9aadc3zMaB38yn2CbS04G GNzGNmmdbY7xrUf84sXePavv+iDykjQ6VNcTqce/E+pZK6cPbyJLUUv3QmqX5LnX nikZu+wwGSQkY2u7VwIlz2P5ZQG5h3PuVj/ZvZLSudOoUL28h/hE5BuTjC1PykFQ GQA2gVqD7N8QwftNH6ohOyUdMIMqWLkCYDe7D2cCUy/B8aq8rKGnJXrCeLo8b2/4 3rLBWzlespCkRQaPLg4mEpGvAh4koIOZ37BfvnoMqaGhlTglaxWTyDrUbu9DmR81 vgxhsRvSPMMRrCTfjgXlwF7EukgVnijcvCrRtL+hvrIxGlzq0SSB3L1tAsJ9+wI= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:35 2025 by rpki-client