$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8606154f-31dd-423a-a436-9da1712c8bc8.roa File: 8606154f-31dd-423a-a436-9da1712c8bc8.roa (raw, json) Hash identifier: eQkdy8QUSSvywUdFonwwJZrSBtHnMSKpCv++k7kHAKg= Subject key identifier: B4:F1:70:FC:9B:76:17:C7:62:1C:5B:FB:62:9A:14:FD:1A:91:0F:7C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2F2FF11D5DB07E71951AE59DFC6D040F5572216B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8606154f-31dd-423a-a436-9da1712c8bc8.roa Signing time: Mon 06 Oct 2025 17:20:24 +0000 ROA not before: Mon 06 Oct 2025 17:20:24 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2f:f1:1d:5d:b0:7e:71:95:1a:e5:9d:fc:6d:04:0f:55:72:21:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:20:24 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=13f95810fa3d0d5d578897139dea2425c4d0e05573535f493d04271a98513be8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:25:41:ad:ea:fc:9b:23:b8:46:67:71:8a:10: 58:ff:9f:fb:48:be:a1:2e:85:6e:6b:a3:f6:5b:24: 7f:41:2d:e5:f5:e5:c3:1f:30:67:5a:5d:0e:bb:3d: c0:d2:7b:7a:d1:30:32:6a:66:34:28:72:c5:e0:8e: c0:39:15:74:0d:f6:9b:3f:9c:32:e9:1e:cd:73:cb: ec:45:20:bd:f3:9a:72:f2:96:74:7c:ed:6d:a5:63: b6:d2:09:6e:8b:b1:cb:57:3f:96:d9:95:20:96:4b: 11:31:7f:a9:dc:1b:94:dd:a1:4d:c9:a1:14:80:bb: f1:ab:0c:42:c1:86:f2:0d:a0:25:e8:71:15:2b:fd: f5:ba:0d:48:cb:ae:ec:61:fa:40:8b:fc:50:c5:d1: db:67:f6:9a:79:f0:f1:08:c3:47:c0:43:dd:ac:e8: 33:8c:dd:f7:78:01:31:cc:17:3d:87:13:3e:39:0d: fe:29:29:71:04:49:0d:c3:d3:df:77:80:8e:23:08: 01:e1:04:36:bf:fd:b5:68:fe:10:30:af:21:be:41: f8:f4:82:0b:3c:60:85:49:16:e3:0f:ae:68:e7:32: 1b:3f:9e:b5:c0:30:2b:0a:3b:6d:74:f0:69:58:db: 4c:96:13:07:c6:5a:18:8b:c9:f3:f3:9a:32:71:32: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F1:70:FC:9B:76:17:C7:62:1C:5B:FB:62:9A:14:FD:1A:91:0F:7C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8606154f-31dd-423a-a436-9da1712c8bc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1b::/48 Signature Algorithm: sha256WithRSAEncryption 29:37:d9:46:5a:2c:19:9b:43:ca:38:44:4c:cc:ea:f0:b0:cd: 92:fc:83:56:12:61:db:26:fe:2d:43:a6:2e:85:2e:52:86:62: ad:51:38:dd:fe:55:b7:78:5d:fb:3c:80:cc:85:bc:a0:db:2f: 75:6b:31:0e:9e:71:02:c0:3f:d1:a1:95:46:d3:af:40:9b:8d: e4:cd:da:15:6f:a1:76:46:80:70:a5:9e:c5:37:60:f6:7b:9f: e3:f5:d7:fe:59:30:19:20:9b:bf:ed:91:af:37:ce:65:5d:15: df:26:1f:e7:55:96:ee:7d:18:7c:19:03:76:64:f9:37:43:b1: 48:fc:5c:a8:ee:96:27:66:e7:b8:0a:29:1c:b1:21:6b:85:05: d5:b4:66:6f:f8:da:0a:21:da:52:07:b3:bf:a3:d1:d4:06:95: 6c:23:e5:76:cd:47:98:b7:94:7a:17:5a:6a:fb:87:b0:61:67: de:65:db:0b:8e:92:f6:47:59:c3:d3:df:b2:3a:cf:77:22:0c: 6f:f5:8d:a3:55:af:9f:11:bc:a6:d8:61:bc:7f:a8:84:32:ff: a4:34:3f:f7:77:b1:e1:63:e0:71:6c:c5:69:9d:d1:51:0f:66: ef:59:4a:cc:8c:84:c4:a9:af:ba:90:67:a8:a2:70:e7:ee:97: d6:17:18:c4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULy/xHV2wfnGVGuWd/G0ED1VyIWswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcyMDI0WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2Y5NTgxMGZhM2QwZDVkNTc4ODk3MTM5ZGVhMjQyNWM0 ZDBlMDU1NzM1MzVmNDkzZDA0MjcxYTk4NTEzYmU4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQJUGt6vybI7hGZ3GKEFj/n/tIvqEuhW5ro/ZbJH9BLeX1 5cMfMGdaXQ67PcDSe3rRMDJqZjQocsXgjsA5FXQN9ps/nDLpHs1zy+xFIL3zmnLy lnR87W2lY7bSCW6LsctXP5bZlSCWSxExf6ncG5TdoU3JoRSAu/GrDELBhvINoCXo cRUr/fW6DUjLruxh+kCL/FDF0dtn9pp58PEIw0fAQ92s6DOM3fd4ATHMFz2HEz45 Df4pKXEESQ3D0993gI4jCAHhBDa//bVo/hAwryG+Qfj0ggs8YIVJFuMPrmjnMhs/ nrXAMCsKO2108GlY20yWEwfGWhiLyfPzmjJxMohRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtPFw/Jt2F8diHFv7YpoU/RqRD3wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg2MDYxNTRmLTMxZGQtNDIzYS1hNDM2LTlkYTE3MTJjOGJjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBswDQYJKoZIhvcNAQELBQADggEBACk32UZaLBmbQ8o4REzM6vCw zZL8g1YSYdsm/i1Dpi6FLlKGYq1RON3+Vbd4Xfs8gMyFvKDbL3VrMQ6ecQLAP9Gh lUbTr0CbjeTN2hVvoXZGgHClnsU3YPZ7n+P11/5ZMBkgm7/tka83zmVdFd8mH+dV lu59GHwZA3Zk+TdDsUj8XKjulidm57gKKRyxIWuFBdW0Zm/42goh2lIHs7+j0dQG lWwj5XbNR5i3lHoXWmr7h7BhZ95l2wuOkvZHWcPT37I6z3ciDG/1jaNVr58RvKbY Ybx/qIQy/6Q0P/d3seFj4HFsxWmd0VEPZu9ZSsyMhMSpr7qQZ6iicOful9YXGMQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:42 2025 by rpki-client