$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa File: e7607360-6fe5-44db-bbe5-edd1b127da54.roa (raw, json) Hash identifier: 6B11LNAfF/ph8ycbSvkyh++DpuXUZTZnqJfc9+3+hPo= Subject key identifier: 7A:FB:7B:C6:2C:3E:A2:26:2D:D8:7F:AD:14:AD:4A:78:CB:50:B6:76 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 76EA4222F11DCDD1445A34CB90A8676D768A3C0D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa Signing time: Fri 26 Sep 2025 18:00:20 +0000 ROA not before: Fri 26 Sep 2025 18:00:20 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:f03d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ea:42:22:f1:1d:cd:d1:44:5a:34:cb:90:a8:67:6d:76:8a:3c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 18:00:20 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=83ebeddfd43110dbed2dcdbf919b7de2cbd0388bfa27a6e2ac2209ff1dcafa92, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:8a:0e:c0:66:2a:4e:dc:a9:e5:8b:c5:3b: 00:b4:ac:4e:ed:03:93:6c:8e:a6:26:fd:3e:7b:10: 4e:35:72:46:df:42:80:b3:b3:c7:21:35:40:01:0f: cb:47:5a:6b:92:21:3f:6c:d3:a3:8c:d0:d0:05:4e: b4:97:ee:e7:63:f8:d3:e1:03:05:b6:fb:c8:52:be: dc:62:81:f7:f3:29:f8:96:8d:50:56:1c:93:5d:2c: c4:75:7d:25:34:cf:06:1f:ea:5a:18:20:3b:e0:51: 14:eb:aa:3f:6b:df:a6:33:ef:5b:23:f2:56:de:95: 30:07:43:bc:c7:d1:e7:9f:1e:41:7c:11:1e:15:19: b8:15:8c:f1:3c:57:12:c8:39:9f:d6:f1:42:d9:4a: 7f:9b:e1:1c:83:83:5d:ec:e7:a4:59:b8:f2:99:83: f1:be:11:81:db:5c:82:79:74:00:d3:78:a0:79:c4: fc:8c:b6:07:b8:58:e9:6e:25:28:52:18:b0:b5:33: 66:5c:4e:40:83:4d:52:41:b6:d9:27:9d:ff:17:37: 73:2f:71:ee:43:bb:94:65:93:f5:56:bd:78:70:3a: 56:3e:79:c5:69:c8:73:ed:b8:b0:42:22:d8:a1:85: e7:fb:59:68:df:5a:e5:e3:9b:40:55:10:d6:83:d2: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FB:7B:C6:2C:3E:A2:26:2D:D8:7F:AD:14:AD:4A:78:CB:50:B6:76 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03d::/48 Signature Algorithm: sha256WithRSAEncryption 40:bb:a8:91:46:3b:d0:a9:5b:99:e8:b6:15:46:97:c5:5a:99: c5:b1:06:a6:76:d0:a8:f2:4c:49:82:14:0e:ba:04:ad:6c:69: af:28:41:ef:9e:02:d0:c1:5c:4d:1b:52:64:26:0e:a4:8c:4f: 2e:b8:f4:55:91:07:89:44:6d:20:d7:19:27:ef:e3:e9:95:fa: cc:70:3c:51:1c:43:20:03:6c:b7:4c:57:5e:fb:77:37:fe:2e: c4:76:f7:91:df:1d:60:ec:43:a8:d1:b5:a3:8d:a1:0f:d5:48: e8:b6:d0:7c:d4:15:0e:e3:13:ca:58:77:83:8f:c0:a3:64:2b: 8d:07:10:a8:2c:bc:1d:69:bf:12:b7:9c:3b:48:ab:38:a5:45: 7d:0f:84:8a:ee:85:9e:44:8b:7a:6f:7a:b8:e6:8f:78:d4:b9: b7:7e:ef:0b:42:d3:1c:3f:bf:eb:f4:60:68:51:e2:02:ea:d5: 92:09:3a:44:ea:66:9e:82:ed:2f:1b:8a:92:17:6d:29:e1:9a: 40:88:41:f2:85:4a:73:67:56:69:42:32:e4:b5:e5:3d:ab:90: 05:72:11:88:b1:fe:82:ae:6a:f6:ea:f3:85:ad:94:7f:91:7d: e4:6d:01:33:46:33:5e:73:46:63:99:4f:92:95:76:10:42:9a: 42:fb:99:ac -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdupCIvEdzdFEWjTLkKhnbXaKPA0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTgwMDIwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2ViZWRkZmQ0MzExMGRiZWQyZGNkYmY5MTliN2RlMmNi ZDAzODhiZmEyN2E2ZTJhYzIyMDlmZjFkY2FmYTkyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxJYoOwGYqTtyp5YvFOwC0rE7tA5NsjqYm/T57EE41ckbf QoCzs8chNUABD8tHWmuSIT9s06OM0NAFTrSX7udj+NPhAwW2+8hSvtxigffzKfiW jVBWHJNdLMR1fSU0zwYf6loYIDvgURTrqj9r36Yz71sj8lbelTAHQ7zH0eefHkF8 ER4VGbgVjPE8VxLIOZ/W8ULZSn+b4RyDg13s56RZuPKZg/G+EYHbXIJ5dADTeKB5 xPyMtge4WOluJShSGLC1M2ZcTkCDTVJBttknnf8XN3Mvce5Du5Rlk/VWvXhwOlY+ ecVpyHPtuLBCItihhef7WWjfWuXjm0BVENaD0s8lAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUevt7xiw+oiYt2H+tFK1KeMtQtnYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2U3NjA3MzYwLTZmZTUtNDRkYi1iYmU1LWVkZDFiMTI3ZGE1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D0wDQYJKoZIhvcNAQELBQADggEBAEC7qJFGO9CpW5nothVGl8Va mcWxBqZ20KjyTEmCFA66BK1saa8oQe+eAtDBXE0bUmQmDqSMTy649FWRB4lEbSDX GSfv4+mV+sxwPFEcQyADbLdMV177dzf+LsR295HfHWDsQ6jRtaONoQ/VSOi20HzU FQ7jE8pYd4OPwKNkK40HEKgsvB1pvxK3nDtIqzilRX0PhIruhZ5Ei3pverjmj3jU ubd+7wtC0xw/v+v0YGhR4gLq1ZIJOkTqZp6C7S8bipIXbSnhmkCIQfKFSnNnVmlC MuS15T2rkAVyEYix/oKuavbq84WtlH+RfeRtATNGM15zRmOZT5KVdhBCmkL7maw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:38:10 2025 by rpki-client