$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dd6f8923-ba0b-407d-a9e8-8c832583a0dd.roa File: dd6f8923-ba0b-407d-a9e8-8c832583a0dd.roa (raw, json) Hash identifier: zzgVUg8WUYkQAS10uqXb+A236zAwstuexCU9gt6EQB4= Subject key identifier: 2C:91:B3:24:B4:35:5B:0D:48:03:40:0A:DD:45:94:CE:19:53:E3:A7 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 074DC99D2AAABA25134DD65A1E02FB71CFEE47B3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dd6f8923-ba0b-407d-a9e8-8c832583a0dd.roa Signing time: Fri 26 Sep 2025 17:50:34 +0000 ROA not before: Fri 26 Sep 2025 17:50:34 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:544::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4d:c9:9d:2a:aa:ba:25:13:4d:d6:5a:1e:02:fb:71:cf:ee:47:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:50:34 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=4f3a4690d72c053f7b874c03c80dc6da3cf037235bf4ccacda24360ba79f2918, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:e8:76:38:48:62:53:5d:2c:a0:1e:ee:f0: 56:31:d1:43:18:3f:99:ac:99:9c:2d:52:1d:0e:50: 37:60:be:07:b1:88:e2:e6:40:9c:55:9a:79:59:ce: 39:9e:3e:64:02:f7:6a:25:37:d6:3e:9b:f9:86:ef: 9f:d6:fc:aa:ea:88:00:0c:5b:4f:ab:86:e1:59:81: 69:e6:f6:1a:6e:21:46:29:bf:8a:0e:0a:c6:1b:8a: 47:84:01:26:ab:74:ac:d8:43:19:65:28:a6:9a:7a: c9:70:18:db:88:72:a8:8a:8a:c9:8e:d6:6a:e7:d3: 6e:77:a4:74:2b:ee:eb:56:a5:1a:1e:28:22:90:3e: de:41:52:79:96:8d:04:60:63:85:aa:f1:d2:bf:f4: 15:bf:8a:38:5c:e3:19:69:6f:2e:cd:ac:86:78:a8: 23:89:b5:94:8e:0c:aa:41:1a:77:f4:44:d0:cb:0e: 9d:87:db:04:05:35:f2:4c:89:f4:3a:f4:c4:5b:03: 61:5d:1c:d6:64:f5:b6:6b:ff:19:04:7b:b1:fb:8b: ba:58:ef:cf:aa:a7:e8:53:c2:43:87:4c:05:07:2f: 2a:0b:32:6d:03:14:b8:a3:8b:de:52:d6:2c:dc:ea: 14:70:d9:3f:d6:0b:d8:30:a3:a7:58:09:00:ef:c2: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:91:B3:24:B4:35:5B:0D:48:03:40:0A:DD:45:94:CE:19:53:E3:A7 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dd6f8923-ba0b-407d-a9e8-8c832583a0dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:544::/48 Signature Algorithm: sha256WithRSAEncryption 79:bf:16:47:8f:47:e1:f4:c8:56:37:87:22:7d:f2:f0:57:a6: f3:09:80:67:71:cd:de:8c:5d:b8:3c:cb:08:5b:8f:9c:0b:73: e2:dd:38:63:79:37:4c:47:a3:8c:2d:46:74:d8:03:19:26:8d: b3:7f:83:a1:0d:31:6d:e3:82:0f:69:60:ef:4b:d3:39:fd:69: a9:d6:7a:18:d7:c8:f5:67:a1:f7:7f:66:02:94:d2:97:54:a8: d7:ba:c0:cd:a7:ba:57:3d:cc:2f:f7:68:9b:56:17:c9:d4:8c: 13:ef:3f:3b:1c:d9:e8:c8:be:32:97:7a:25:f7:6e:69:9d:94: 9e:71:58:c1:ae:e2:ed:f3:ff:ed:68:3c:28:6a:81:6a:80:61: 33:fd:6e:3d:0a:7a:68:b4:b8:18:df:d2:c0:b8:3f:f3:93:b5: a8:35:f9:07:72:0f:32:f9:88:13:2a:b7:08:57:8e:4c:7b:dc: e8:d7:a6:d2:22:04:d9:20:51:c2:cb:27:62:f7:77:35:c2:6b: 2b:81:e1:36:5f:9c:f3:25:70:49:c4:de:fc:7e:e8:9c:89:d5: 4a:a0:a2:a2:23:7f:56:90:7c:fb:3d:80:e3:9a:38:06:86:86: 41:01:ab:24:2c:46:f2:3d:b7:c8:11:03:6e:5c:95:06:73:68: 82:e5:f8:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB03JnSqquiUTTdZaHgL7cc/uR7MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MDM0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjNhNDY5MGQ3MmMwNTNmN2I4NzRjMDNjODBkYzZkYTNj ZjAzNzIzNWJmNGNjYWNkYTI0MzYwYmE3OWYyOTE4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCusuh2OEhiU10soB7u8FYx0UMYP5msmZwtUh0OUDdgvgex iOLmQJxVmnlZzjmePmQC92olN9Y+m/mG75/W/KrqiAAMW0+rhuFZgWnm9hpuIUYp v4oOCsYbikeEASardKzYQxllKKaaeslwGNuIcqiKismO1mrn0253pHQr7utWpRoe KCKQPt5BUnmWjQRgY4Wq8dK/9BW/ijhc4xlpby7NrIZ4qCOJtZSODKpBGnf0RNDL Dp2H2wQFNfJMifQ69MRbA2FdHNZk9bZr/xkEe7H7i7pY78+qp+hTwkOHTAUHLyoL Mm0DFLiji95S1izc6hRw2T/WC9gwo6dYCQDvwvzjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULJGzJLQ1Ww1IA0AK3UWUzhlT46cwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2RkNmY4OTIzLWJhMGItNDA3ZC1hOWU4LThjODMyNTgzYTBkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUQwDQYJKoZIhvcNAQELBQADggEBAHm/FkePR+H0yFY3hyJ98vBX pvMJgGdxzd6MXbg8ywhbj5wLc+LdOGN5N0xHo4wtRnTYAxkmjbN/g6ENMW3jgg9p YO9L0zn9aanWehjXyPVnofd/ZgKU0pdUqNe6wM2nulc9zC/3aJtWF8nUjBPvPzsc 2ejIvjKXeiX3bmmdlJ5xWMGu4u3z/+1oPChqgWqAYTP9bj0Kemi0uBjf0sC4P/OT tag1+QdyDzL5iBMqtwhXjkx73OjXptIiBNkgUcLLJ2L3dzXCayuB4TZfnPMlcEnE 3vx+6JyJ1UqgoqIjf1aQfPs9gOOaOAaGhkEBqyQsRvI9t8gRA25clQZzaILl+LY= -----END CERTIFICATE-----Generated at Mon Oct 20 04:56:57 2025 by rpki-client