$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e4f3825d-1bf4-4609-92e1-985d8b73441e.roa File: e4f3825d-1bf4-4609-92e1-985d8b73441e.roa (raw, json) Hash identifier: +3Z6NxEy3t6qOFSJkm3oiBis85SC3/y/3Xva/iTH4kI= Subject key identifier: 83:C4:B2:C7:8E:A7:90:B1:73:6F:5C:DB:6D:E7:7E:7E:AC:9A:D5:0F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 797A3BE8F07A08A2BDD2FCAD7FD388337E98D282 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e4f3825d-1bf4-4609-92e1-985d8b73441e.roa Signing time: Mon 13 Oct 2025 17:55:04 +0000 ROA not before: Mon 13 Oct 2025 17:55:04 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:3c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7a:3b:e8:f0:7a:08:a2:bd:d2:fc:ad:7f:d3:88:33:7e:98:d2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 13 17:55:04 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=681bcda5939d53a1276ea4dc0410b14312b4c00e400009e2010646d96054fe46, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:8a:7a:05:52:18:6d:10:11:e3:8e:88:81: 81:49:61:55:af:cf:bb:ba:11:65:bc:b6:0e:1e:12: 14:7a:85:1b:44:cf:e3:34:ed:32:8a:5e:66:ee:19: 4e:4a:ee:f6:d1:3e:0f:4f:c5:8b:67:de:56:f6:08: 4e:e6:f2:1c:90:43:ef:dc:e3:28:ba:29:05:be:a8: f9:d0:10:31:f8:60:aa:b8:99:99:64:9f:f1:7a:1f: dc:15:a2:95:c0:1a:68:e7:3c:2a:a1:fd:1a:4c:6a: 16:0c:ed:8d:8d:7d:d1:61:d1:ff:42:f7:b1:21:6f: ff:bc:23:f1:b4:64:48:89:41:3d:01:8b:7a:c9:a2: 0b:ab:b3:60:08:95:7f:f2:45:14:52:0d:e5:52:cb: 8c:5c:79:39:d8:a1:76:4c:c5:da:ee:ad:47:59:db: ad:ac:0d:c8:4b:fc:5a:fc:91:c7:49:8c:51:ff:0a: ee:29:d2:77:22:a8:c0:e8:08:df:d7:9d:a9:3c:87: 1b:96:cc:f5:0f:dc:c1:ba:0a:75:dd:e2:b0:01:0d: fc:02:5b:fc:cf:93:b8:89:c1:e8:73:fb:29:cb:ee: ef:aa:d9:5d:e0:9e:46:3d:1b:cc:58:2a:fb:78:3d: 2c:58:5f:5f:b0:bd:af:60:e7:51:e9:e5:b3:ff:a1: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C4:B2:C7:8E:A7:90:B1:73:6F:5C:DB:6D:E7:7E:7E:AC:9A:D5:0F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e4f3825d-1bf4-4609-92e1-985d8b73441e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3c2::/48 Signature Algorithm: sha256WithRSAEncryption 0d:f0:af:55:c0:a8:9b:a1:0f:9a:7e:b9:d3:dd:68:5d:57:50: e4:7e:4d:5d:35:b5:9d:5e:15:dd:ba:0b:88:31:9d:01:dc:b9: 9d:ef:db:ea:e1:4f:64:f7:62:69:6d:21:a5:09:96:f5:5c:e5: 6c:a8:58:cb:c1:95:df:3f:8b:05:cf:a0:10:8d:5a:9e:68:3c: ab:33:cc:c1:be:fa:49:a8:de:59:c6:8f:ef:70:93:6e:43:38: f5:21:f1:2b:94:d4:0f:30:ed:2e:b6:4f:7d:46:66:78:1a:44: a2:f4:4c:45:5c:c4:d7:07:ec:9e:c1:09:41:7d:f0:24:ea:8f: 99:2b:30:79:ea:81:50:d6:d0:dd:e6:f2:e4:3a:b5:6d:3e:53: 18:e3:09:be:bc:ce:fe:03:5c:57:3e:61:9d:c3:28:e2:25:3c: 8a:2e:22:3a:2d:89:f5:45:03:72:fd:a5:1f:d3:55:00:88:a6: 77:fe:6c:05:1b:65:d7:0e:6c:88:33:8b:98:c4:54:9e:62:9f: 09:34:58:94:b1:67:1c:34:66:7a:b5:bd:59:cf:c9:88:9d:b4: 3e:22:24:f3:af:f6:6d:67:f2:9f:03:c1:8f:8c:96:5c:1a:c4: cb:41:55:9f:db:fb:ff:f8:55:15:27:0d:ef:99:16:9e:74:64: c1:15:a9:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeXo76PB6CKK90vytf9OIM36Y0oIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDEzMTc1NTA0WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODFiY2RhNTkzOWQ1M2ExMjc2ZWE0ZGMwNDEwYjE0MzEy YjRjMDBlNDAwMDA5ZTIwMTA2NDZkOTYwNTRmZTQ2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPxIp6BVIYbRAR446IgYFJYVWvz7u6EWW8tg4eEhR6hRtE z+M07TKKXmbuGU5K7vbRPg9PxYtn3lb2CE7m8hyQQ+/c4yi6KQW+qPnQEDH4YKq4 mZlkn/F6H9wVopXAGmjnPCqh/RpMahYM7Y2NfdFh0f9C97Ehb/+8I/G0ZEiJQT0B i3rJogurs2AIlX/yRRRSDeVSy4xceTnYoXZMxdrurUdZ262sDchL/Fr8kcdJjFH/ Cu4p0nciqMDoCN/Xnak8hxuWzPUP3MG6CnXd4rABDfwCW/zPk7iJwehz+ynL7u+q 2V3gnkY9G8xYKvt4PSxYX1+wva9g51Hp5bP/oZcJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUg8Syx46nkLFzb1zbbed+fqya1Q8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2U0ZjM4MjVkLTFiZjQtNDYwOS05MmUxLTk4NWQ4YjczNDQxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8IwDQYJKoZIhvcNAQELBQADggEBAA3wr1XAqJuhD5p+udPdaF1X UOR+TV01tZ1eFd26C4gxnQHcuZ3v2+rhT2T3YmltIaUJlvVc5WyoWMvBld8/iwXP oBCNWp5oPKszzMG++kmo3lnGj+9wk25DOPUh8SuU1A8w7S62T31GZngaRKL0TEVc xNcH7J7BCUF98CTqj5krMHnqgVDW0N3m8uQ6tW0+UxjjCb68zv4DXFc+YZ3DKOIl PIouIjotifVFA3L9pR/TVQCIpnf+bAUbZdcObIgzi5jEVJ5inwk0WJSxZxw0Znq1 vVnPyYidtD4iJPOv9m1n8p8DwY+MllwaxMtBVZ/b+//4VRUnDe+ZFp50ZMEVqY0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:48 2025 by rpki-client