$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa File: f67723c2-64ad-4374-9b2b-3c1633b90448.roa (raw, json) Hash identifier: 26oyNuftzYNp2SG1gLlsZOXcQNI0AljofpvMTXd8+Bs= Subject key identifier: C7:BB:C3:84:B2:53:E8:D8:E6:55:1E:00:8D:AE:58:78:43:4E:AA:D5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0205AF205D3254CB4CE7E0F8C36C24D047CABD63 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa Signing time: Fri 26 Sep 2025 17:50:27 +0000 ROA not before: Fri 26 Sep 2025 17:50:27 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:39c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:05:af:20:5d:32:54:cb:4c:e7:e0:f8:c3:6c:24:d0:47:ca:bd:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:50:27 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=13d90ac4bf6666720b641439d7524bf7da84a6a59d3241931662800f4dff121b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:78:9e:73:96:7e:a4:7d:f3:08:1f:3f:0f: 77:64:a6:6a:60:a6:02:3c:98:53:d2:0f:50:59:ed: d5:21:51:62:c3:c9:e3:4b:83:a1:6a:07:ad:04:34: 0e:4b:4f:2f:2c:61:5a:b4:69:9b:63:70:4b:85:2f: d5:f3:ed:68:9e:56:a1:d9:47:92:14:3b:49:47:57: c9:02:05:3c:09:a3:2e:a3:96:c1:90:33:35:2b:ca: be:4e:1a:da:a8:82:00:b1:57:b0:c0:fe:4d:ae:fd: 4a:4d:83:92:cc:cd:6d:4d:cc:29:37:4c:1f:1d:52: ec:42:05:6d:97:a0:cd:ed:e2:08:a2:ed:93:51:c1: 6d:a7:80:2b:ca:0a:71:56:c6:c1:58:2a:3c:e3:ba: 1d:55:6e:9b:10:bd:b8:7f:33:22:41:9a:34:e4:09: bb:5e:e7:f9:85:b4:ce:67:aa:14:24:61:cd:91:57: f8:05:fd:6f:3d:02:32:56:81:a7:f1:bd:27:7f:c7: 30:ba:be:ca:8e:11:58:2c:dd:da:bb:25:47:50:b8: 6e:07:d7:68:82:27:14:d8:e3:a2:84:6a:26:ec:11: da:1d:08:f0:4e:13:66:92:b0:6a:be:48:ee:aa:67: e7:b7:21:64:98:ab:8b:05:fb:99:cc:93:06:3a:08: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BB:C3:84:B2:53:E8:D8:E6:55:1E:00:8D:AE:58:78:43:4E:AA:D5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:39c::/48 Signature Algorithm: sha256WithRSAEncryption 8b:d3:aa:b5:27:75:2b:67:e5:45:0b:c0:05:2e:8b:cc:1e:61: 50:89:c4:fb:4b:fb:0f:ac:17:10:67:9a:d6:80:df:b4:73:96: fe:31:a2:1b:92:65:35:12:3d:8f:20:27:5e:59:69:2c:1e:20: 12:e2:65:e8:04:18:72:e4:f7:52:e3:2d:59:c7:3e:fb:4f:69: d7:f1:2e:fe:2c:e2:a5:08:39:11:87:bc:1c:53:84:df:0d:a9: 3e:92:0f:12:f0:78:59:13:42:a5:45:8f:cd:70:98:cb:a0:aa: 20:1a:c0:d2:1a:50:40:bb:bc:b3:f4:89:b6:54:42:c6:b8:c4: 9e:27:11:45:e2:81:a5:22:34:45:8e:f5:46:e3:d3:01:d6:8b: a9:c5:74:94:44:b0:7e:bc:7e:21:59:85:be:40:71:19:e2:38: 51:92:2c:07:fa:af:88:f3:3e:f3:61:6e:56:d8:32:58:4e:41: 1b:4d:9c:33:72:a4:13:7b:6d:f5:a4:f7:d5:00:4f:0d:d0:41: a0:7c:b3:ca:82:52:e1:ac:1f:f4:2e:c9:b7:4f:cc:16:00:42: 8f:11:e6:f1:5b:97:3f:cd:0d:32:f0:eb:09:0e:6b:57:67:01: 7f:19:b5:b1:62:2b:40:64:d3:f9:dd:7f:f3:a7:0c:29:5d:6b: 3a:20:54:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAgWvIF0yVMtM5+D4w2wk0EfKvWMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MDI3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2Q5MGFjNGJmNjY2NjcyMGI2NDE0MzlkNzUyNGJmN2Rh ODRhNmE1OWQzMjQxOTMxNjYyODAwZjRkZmYxMjFiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+SXiec5Z+pH3zCB8/D3dkpmpgpgI8mFPSD1BZ7dUhUWLD yeNLg6FqB60ENA5LTy8sYVq0aZtjcEuFL9Xz7WieVqHZR5IUO0lHV8kCBTwJoy6j lsGQMzUryr5OGtqoggCxV7DA/k2u/UpNg5LMzW1NzCk3TB8dUuxCBW2XoM3t4gii 7ZNRwW2ngCvKCnFWxsFYKjzjuh1VbpsQvbh/MyJBmjTkCbte5/mFtM5nqhQkYc2R V/gF/W89AjJWgafxvSd/xzC6vsqOEVgs3dq7JUdQuG4H12iCJxTY46KEaibsEdod CPBOE2aSsGq+SO6qZ+e3IWSYq4sF+5nMkwY6CFaNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUx7vDhLJT6NjmVR4Aja5YeENOqtUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y2NzcyM2MyLTY0YWQtNDM3NC05YjJiLTNjMTYzM2I5MDQ0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5wwDQYJKoZIhvcNAQELBQADggEBAIvTqrUndStn5UULwAUui8we YVCJxPtL+w+sFxBnmtaA37Rzlv4xohuSZTUSPY8gJ15ZaSweIBLiZegEGHLk91Lj LVnHPvtPadfxLv4s4qUIORGHvBxThN8NqT6SDxLweFkTQqVFj81wmMugqiAawNIa UEC7vLP0ibZUQsa4xJ4nEUXigaUiNEWO9Ubj0wHWi6nFdJREsH68fiFZhb5AcRni OFGSLAf6r4jzPvNhblbYMlhOQRtNnDNypBN7bfWk99UATw3QQaB8s8qCUuGsH/Qu ybdPzBYAQo8R5vFblz/NDTLw6wkOa1dnAX8ZtbFiK0Bk0/ndf/OnDCldazogVIE= -----END CERTIFICATE-----Generated at Tue Oct 21 01:25:24 2025 by rpki-client