$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5280eeb-f2f8-4857-afde-734a5987207a.roa File: e5280eeb-f2f8-4857-afde-734a5987207a.roa (raw, json) Hash identifier: FbNvs1e9fczL9p4I9EaNrsK/PFhJqBxaKklRSMaLOF0= Subject key identifier: 04:19:5F:5D:FA:5B:2F:F7:6D:28:CB:1B:7C:9C:BB:4D:2C:F2:C9:DF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2CDD57A10293453B83E25A44241D3E9F39EB30D8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5280eeb-f2f8-4857-afde-734a5987207a.roa Signing time: Mon 06 Oct 2025 17:20:27 +0000 ROA not before: Mon 06 Oct 2025 17:20:27 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:dd:57:a1:02:93:45:3b:83:e2:5a:44:24:1d:3e:9f:39:eb:30:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:20:27 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=e513415bbfcb81acd5aedab52983d161f8debcd96d18522c473c56d9c01621ec, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:97:45:56:12:05:09:1d:8b:bf:ac:b3:0c: 1f:78:c8:02:f6:e4:b0:23:49:f1:4f:7c:24:2c:43: f8:cc:ff:7a:82:7f:9b:4f:5a:9e:f8:34:cf:0b:24: 4c:ca:a8:d8:24:4a:a9:19:49:84:e7:b9:63:f1:31: 18:b6:35:ed:ca:f9:56:24:40:76:5d:71:a1:67:f3: 51:03:2a:00:92:2e:06:95:55:d9:b8:af:7a:e5:3a: 35:15:80:46:38:94:7b:7a:b4:cb:d0:6b:b6:4e:a9: c6:73:15:3a:b9:c4:2f:ac:9b:79:aa:b9:52:78:90: d2:46:4b:f7:c5:1b:08:b0:10:ea:83:e0:9a:9c:df: 72:4a:31:69:63:12:05:26:78:bf:78:fd:6d:92:00: 51:e7:47:37:db:14:ae:e4:ab:dc:c1:2e:75:19:08: 7e:8a:d9:75:b9:78:34:20:b7:99:ee:ef:43:4b:9a: c1:8a:98:ca:e2:d1:d8:35:34:b7:2a:a6:ef:5d:ff: c4:5e:7f:5c:dc:d4:d0:5c:0e:61:9b:90:dc:27:c6: 09:3f:d6:b5:19:0f:86:4c:95:81:8e:99:5d:60:89: b3:97:e3:58:93:c9:ff:a4:3c:0e:35:ff:11:cd:00: cf:59:c5:c4:0c:74:1a:d1:74:d4:6a:47:fe:f8:73: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:19:5F:5D:FA:5B:2F:F7:6D:28:CB:1B:7C:9C:BB:4D:2C:F2:C9:DF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5280eeb-f2f8-4857-afde-734a5987207a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1d::/48 Signature Algorithm: sha256WithRSAEncryption a1:c3:16:58:4e:11:f5:6a:ab:92:5c:86:3a:50:0f:fc:1a:f1: c3:86:dc:45:ec:c5:d0:1f:b4:4a:ab:2a:b1:4f:cf:6e:5a:34: a9:c4:bd:17:c1:e7:96:92:bb:fd:b7:78:c7:10:68:41:e4:9f: 87:67:08:b4:66:85:ac:13:b0:51:20:83:ed:92:51:9f:73:f8: 31:51:5f:3e:9d:62:25:aa:55:61:41:6c:1e:aa:0f:2c:6c:e7: 74:27:e2:49:3d:d7:92:53:69:b4:df:c1:7b:c0:95:d1:df:6c: 71:82:07:05:c0:c2:d1:b5:55:d1:11:16:4d:28:cf:6d:8f:d3: 00:28:4f:e9:65:82:41:66:e0:e3:e5:34:8e:3d:dc:0a:fa:85: e8:0b:91:40:57:7b:39:01:0e:93:22:f4:1b:b4:95:f4:e5:42: a7:e1:83:20:f9:b8:e6:66:2e:00:28:67:df:bf:a9:38:f2:e5: 6e:fd:3a:0a:7f:78:13:58:4c:17:a9:d3:28:b2:99:cb:aa:c8: a0:0a:34:e3:c5:df:89:c5:07:9a:c7:84:3d:f8:b4:91:6c:c0: cd:41:d2:d4:d4:2b:3e:9c:1f:31:fa:71:2f:b5:db:a0:62:2f: 4a:c0:bc:55:f7:ad:63:7c:a0:dc:3e:0b:fe:20:6e:79:fa:fa: 7a:ff:7e:c3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULN1XoQKTRTuD4lpEJB0+nznrMNgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcyMDI3WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTEzNDE1YmJmY2I4MWFjZDVhZWRhYjUyOTgzZDE2MWY4 ZGViY2Q5NmQxODUyMmM0NzNjNTZkOWMwMTYyMWVjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyoZdFVhIFCR2Lv6yzDB94yAL25LAjSfFPfCQsQ/jM/3qC f5tPWp74NM8LJEzKqNgkSqkZSYTnuWPxMRi2Ne3K+VYkQHZdcaFn81EDKgCSLgaV Vdm4r3rlOjUVgEY4lHt6tMvQa7ZOqcZzFTq5xC+sm3mquVJ4kNJGS/fFGwiwEOqD 4Jqc33JKMWljEgUmeL94/W2SAFHnRzfbFK7kq9zBLnUZCH6K2XW5eDQgt5nu70NL msGKmMri0dg1NLcqpu9d/8Ref1zc1NBcDmGbkNwnxgk/1rUZD4ZMlYGOmV1gibOX 41iTyf+kPA41/xHNAM9ZxcQMdBrRdNRqR/74cwBbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBBlfXfpbL/dtKMsbfJy7TSzyyd8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2U1MjgwZWViLWYyZjgtNDg1Ny1hZmRlLTczNGE1OTg3MjA3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADB0wDQYJKoZIhvcNAQELBQADggEBAKHDFlhOEfVqq5JchjpQD/wa 8cOG3EXsxdAftEqrKrFPz25aNKnEvRfB55aSu/23eMcQaEHkn4dnCLRmhawTsFEg g+2SUZ9z+DFRXz6dYiWqVWFBbB6qDyxs53Qn4kk915JTabTfwXvAldHfbHGCBwXA wtG1VdERFk0oz22P0wAoT+llgkFm4OPlNI493Ar6hegLkUBXezkBDpMi9Bu0lfTl QqfhgyD5uOZmLgAoZ9+/qTjy5W79Ogp/eBNYTBep0yiymcuqyKAKNOPF34nFB5rH hD34tJFswM1B0tTUKz6cHzH6cS+126BiL0rAvFX3rWN8oNw+C/4gbnn6+nr/fsM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:38:19 2025 by rpki-client