$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e0833b-3ace-4211-a7aa-b56839feaad7.roa File: d4e0833b-3ace-4211-a7aa-b56839feaad7.roa (raw, json) Hash identifier: STrU4Pg+ji8kaAqD3XwVkEfhxbIoinJL6Va/TpBAs1k= Subject key identifier: 14:75:F9:E9:0A:07:02:51:6E:67:DB:2F:91:3F:1D:97:07:16:AB:22 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 60D9858FDE0D5829E5F5C987583AD25E674EE600 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e0833b-3ace-4211-a7aa-b56839feaad7.roa Signing time: Mon 06 Oct 2025 17:20:30 +0000 ROA not before: Mon 06 Oct 2025 17:20:30 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d9:85:8f:de:0d:58:29:e5:f5:c9:87:58:3a:d2:5e:67:4e:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:20:30 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=ed9b693824c02ae0c1f2019df3505af66c0e7809dff2881fe695a02913a2af1b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:c8:2e:ff:c2:eb:21:e7:7c:8f:21:9b:46: 2a:91:dc:09:e7:b2:23:44:d0:7b:06:84:cd:83:d2: d2:5b:64:5d:bb:31:58:8d:97:61:0e:d6:7e:61:34: 9b:53:b6:48:a8:ba:d8:f5:a4:f3:ef:2c:fc:dd:f2: d3:11:b3:41:3e:51:e6:76:fd:d1:17:f2:1a:9a:34: 90:c4:dd:e2:b1:65:ce:6c:6f:65:70:95:57:b4:21: a9:a4:87:67:56:6e:59:26:43:1d:32:ca:5e:be:d8: a8:5c:c7:01:07:0d:c4:60:d2:29:61:e5:94:c9:ac: 2b:b3:9a:b9:89:ec:86:96:eb:e9:4b:ad:f2:d8:6c: ac:c7:35:eb:3e:79:ab:1b:e8:02:a9:2a:4b:94:e6: 0c:85:6a:08:0c:82:32:cc:2c:99:41:a0:0d:ce:e3: 39:f7:c3:37:f9:e9:d1:e8:88:4e:51:26:52:7f:d3: d5:b0:25:21:79:1a:a1:36:e3:a5:75:44:d2:72:37: 99:4c:23:12:cf:cd:3f:e7:8f:11:db:47:14:6a:58: 90:95:13:9e:91:34:4f:74:ca:ea:d4:3e:c2:d9:0e: f0:56:aa:86:4c:24:c6:5c:0f:e0:06:f6:51:ab:fc: c4:c9:3c:23:e6:41:7d:86:11:98:c8:cf:0e:54:de: 50:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:75:F9:E9:0A:07:02:51:6E:67:DB:2F:91:3F:1D:97:07:16:AB:22 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e0833b-3ace-4211-a7aa-b56839feaad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1e::/48 Signature Algorithm: sha256WithRSAEncryption 14:46:e6:bd:07:05:2b:21:66:98:ef:9e:82:a1:dd:24:3d:97: f2:e1:75:8a:f3:76:f4:2b:7b:42:1a:7f:69:6b:4b:42:5d:00: 38:1f:f0:c2:df:1a:e7:82:e5:bd:cc:52:ba:6d:5b:07:7e:fc: a6:58:8f:55:fc:21:73:90:30:79:98:ae:c2:1a:11:bc:46:af: fe:a0:2a:6c:d6:f6:2c:ca:69:d9:62:23:30:1f:9c:8c:e9:2e: e8:75:d1:20:ce:d5:cb:07:a1:11:1d:6d:bb:db:5f:0b:90:4b: 70:a9:15:e9:bc:49:4e:e4:79:35:f9:9b:e7:aa:00:7c:b6:b0: a9:32:c3:e4:f2:48:cc:c0:30:2f:b8:e7:3a:51:30:da:e5:d2: c6:85:e3:fa:e4:01:0e:73:8c:bc:f5:6f:32:6e:2a:08:bd:95: 6a:df:a7:c6:1c:33:fe:1a:5d:53:1b:41:cd:c5:e2:1e:17:9f: ca:4e:75:0d:40:fd:f0:1c:45:65:8d:7d:16:fa:60:a3:71:ca: 10:49:65:81:8b:92:fc:1e:9c:10:b4:c3:3d:5a:3d:cc:54:5b: 8e:a4:a5:16:a5:e2:21:ac:26:c7:69:e6:4c:5f:f7:d0:a6:de: a0:a7:e1:78:01:0f:ab:09:af:3a:26:6c:87:ef:ab:6d:ad:e6: 1b:7d:51:bf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYNmFj94NWCnl9cmHWDrSXmdO5gAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcyMDMwWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDliNjkzODI0YzAyYWUwYzFmMjAxOWRmMzUwNWFmNjZj MGU3ODA5ZGZmMjg4MWZlNjk1YTAyOTEzYTJhZjFiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJg8gu/8LrIed8jyGbRiqR3AnnsiNE0HsGhM2D0tJbZF27 MViNl2EO1n5hNJtTtkioutj1pPPvLPzd8tMRs0E+UeZ2/dEX8hqaNJDE3eKxZc5s b2VwlVe0Iamkh2dWblkmQx0yyl6+2KhcxwEHDcRg0ilh5ZTJrCuzmrmJ7IaW6+lL rfLYbKzHNes+easb6AKpKkuU5gyFaggMgjLMLJlBoA3O4zn3wzf56dHoiE5RJlJ/ 09WwJSF5GqE246V1RNJyN5lMIxLPzT/njxHbRxRqWJCVE56RNE90yurUPsLZDvBW qoZMJMZcD+AG9lGr/MTJPCPmQX2GEZjIzw5U3lD1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFHX56QoHAlFuZ9svkT8dlwcWqyIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q0ZTA4MzNiLTNhY2UtNDIxMS1hN2FhLWI1NjgzOWZlYWFkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADB4wDQYJKoZIhvcNAQELBQADggEBABRG5r0HBSshZpjvnoKh3SQ9 l/LhdYrzdvQre0Iaf2lrS0JdADgf8MLfGueC5b3MUrptWwd+/KZYj1X8IXOQMHmY rsIaEbxGr/6gKmzW9izKadliIzAfnIzpLuh10SDO1csHoREdbbvbXwuQS3CpFem8 SU7keTX5m+eqAHy2sKkyw+TySMzAMC+45zpRMNrl0saF4/rkAQ5zjLz1bzJuKgi9 lWrfp8YcM/4aXVMbQc3F4h4Xn8pOdQ1A/fAcRWWNfRb6YKNxyhBJZYGLkvwenBC0 wz1aPcxUW46kpRal4iGsJsdp5kxf99Cm3qCn4XgBD6sJrzombIfvq22t5ht9Ub8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:41:46 2025 by rpki-client