$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa File: 5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa (raw, json) Hash identifier: IrthfWLsH4psIusMbarMXSNOz1SLXwll4j91ACEoUSo= Subject key identifier: 49:F5:56:0E:7D:7E:93:61:1D:57:3E:BD:A6:72:55:C4:3B:5E:46:EC Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2A6847ED7933D55637CB86A076A885B5C1C1CC0D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa Signing time: Mon 06 Oct 2025 17:14:09 +0000 ROA not before: Mon 06 Oct 2025 17:14:09 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:68:47:ed:79:33:d5:56:37:cb:86:a0:76:a8:85:b5:c1:c1:cc:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:14:09 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=3638c4eb0d63862222e07e184cc1420e3950974e902af409dd6fa60550fc31da, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ee:20:d1:ca:e7:fe:26:ea:0b:cc:d7:cf:61: db:32:5c:69:b5:c3:80:7d:9d:12:0a:b9:9b:5c:91: 80:e4:04:9f:93:c8:cb:e4:78:d7:07:f5:bb:11:24: 9b:ee:35:fb:b5:c9:b0:88:2a:da:01:23:39:a4:1a: 7a:c0:37:d3:51:d3:c5:51:c5:65:5b:3e:4b:9d:73: ef:b1:c7:fe:a4:f6:dd:03:02:d6:d8:3c:60:fe:e5: 76:f7:ca:a2:fb:7d:af:88:0e:04:0e:d5:82:21:30: 5d:13:b0:57:80:17:3f:0c:03:dd:66:4c:f3:de:9a: dd:ef:63:be:91:29:cc:55:1a:b5:2a:a6:2d:49:be: ae:ad:e4:7c:4c:0d:fe:42:ef:35:8a:54:0d:be:1b: ec:33:b5:5d:ba:b8:b6:e5:1f:28:88:82:68:95:8a: cb:59:cd:48:e9:e1:d5:2f:87:47:75:75:7c:ef:bb: 7b:d6:20:66:6e:12:15:97:21:8f:26:a8:0a:a7:e5: ae:83:aa:3d:ca:8e:28:72:ec:b7:99:de:5f:9f:c2: 73:f8:76:b4:93:6f:03:c0:b4:af:df:9b:f7:e8:6f: 4d:d8:c6:ca:44:25:7d:77:dc:6e:e5:e3:bb:70:02: b8:ad:23:96:81:ea:d8:1b:dc:0e:8d:ed:59:ab:7a: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F5:56:0E:7D:7E:93:61:1D:57:3E:BD:A6:72:55:C4:3B:5E:46:EC X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fb3dc50-e80e-47ac-b09d-ad1ae225fcec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c13::/48 Signature Algorithm: sha256WithRSAEncryption 13:43:89:1f:ed:a3:a9:fb:f9:44:00:09:f0:6a:46:84:92:f7: c4:40:f3:cb:9f:66:e8:88:c4:ff:aa:22:f7:3a:b2:00:a5:45: 0d:3d:96:11:a5:67:5a:2c:15:d2:2c:39:cf:09:cd:e4:79:f2: 42:5c:1d:08:f7:e2:d6:27:8a:c4:b3:b1:79:67:b3:40:7f:e7: bb:25:97:8e:a0:be:25:df:38:2a:3a:ce:f9:ba:85:a0:7c:b4: a6:79:65:aa:2e:d4:ed:2b:d3:7c:64:a5:41:f0:b3:f6:b1:4a: c8:7c:50:b5:b5:bd:b9:85:64:e4:10:66:2f:04:6d:ac:17:91: 55:2e:e5:8a:1d:21:05:d3:a1:b8:bb:78:a9:b5:a2:19:ff:ce: 4f:96:ef:d5:54:20:69:2b:21:6d:b8:21:26:59:27:6d:3f:9d: 28:71:52:7d:27:ae:70:69:48:ff:eb:03:b4:d7:4c:46:b7:bb: 6f:c1:07:71:77:b3:9d:b4:ae:cc:8a:fd:a4:44:8a:d5:36:33: 06:6d:b4:b5:49:fe:0f:9d:49:f9:af:51:c4:35:f9:a5:d9:7b: 66:fd:92:39:20:c0:26:f3:29:53:23:84:20:7c:60:91:0d:78: f3:cc:55:37:2e:a4:e6:f9:6b:79:0a:c7:ba:2c:2d:6b:d4:15: 82:f0:f5:e4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKmhH7Xkz1VY3y4agdqiFtcHBzA0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxNDA5WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjM4YzRlYjBkNjM4NjIyMjJlMDdlMTg0Y2MxNDIwZTM5 NTA5NzRlOTAyYWY0MDlkZDZmYTYwNTUwZmMzMWRhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCa7iDRyuf+JuoLzNfPYdsyXGm1w4B9nRIKuZtckYDkBJ+T yMvkeNcH9bsRJJvuNfu1ybCIKtoBIzmkGnrAN9NR08VRxWVbPkudc++xx/6k9t0D AtbYPGD+5Xb3yqL7fa+IDgQO1YIhMF0TsFeAFz8MA91mTPPemt3vY76RKcxVGrUq pi1Jvq6t5HxMDf5C7zWKVA2+G+wztV26uLblHyiIgmiVistZzUjp4dUvh0d1dXzv u3vWIGZuEhWXIY8mqAqn5a6Dqj3Kjihy7LeZ3l+fwnP4drSTbwPAtK/fm/fob03Y xspEJX133G7l47twAritI5aB6tgb3A6N7VmreuJ/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSfVWDn1+k2EdVz69pnJVxDteRuwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVmYjNkYzUwLWU4MGUtNDdhYy1iMDlkLWFkMWFlMjI1ZmNlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBMwDQYJKoZIhvcNAQELBQADggEBABNDiR/to6n7+UQACfBqRoSS 98RA88ufZuiIxP+qIvc6sgClRQ09lhGlZ1osFdIsOc8JzeR58kJcHQj34tYnisSz sXlns0B/57sll46gviXfOCo6zvm6haB8tKZ5Zaou1O0r03xkpUHws/axSsh8ULW1 vbmFZOQQZi8EbawXkVUu5YodIQXTobi7eKm1ohn/zk+W79VUIGkrIW24ISZZJ20/ nShxUn0nrnBpSP/rA7TXTEa3u2/BB3F3s520rsyK/aREitU2MwZttLVJ/g+dSfmv UcQ1+aXZe2b9kjkgwCbzKVMjhCB8YJENePPMVTcupOb5a3kKx7osLWvUFYLw9eQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:19 2025 by rpki-client