$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa File: 8f960b0d-c291-490f-aff5-abe964221bd2.roa (raw, json) Hash identifier: 9k9XHQLcBBNuj9uX4G2Fo5CBYtg8jDKAaiQpoXaTRCA= Subject key identifier: 91:5C:A1:4F:50:AC:AC:7E:DA:4C:6D:0F:10:11:35:B2:BE:C1:31:90 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 06351324917B727753DA23B00969E39261985F10 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa Signing time: Wed 08 Oct 2025 00:51:11 +0000 ROA not before: Wed 08 Oct 2025 00:51:11 +0000 ROA not after: Wed 12 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:108:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:35:13:24:91:7b:72:77:53:da:23:b0:09:69:e3:92:61:98:5f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Oct 8 00:51:11 2025 GMT Not After : Nov 12 23:59:59 2025 GMT Subject: serialNumber=95aa8abe7b7f0c2f88e895a4a4b0559f4e7f0287cb102e30dfa1058f7e227a39, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2d:69:78:1a:56:5c:b4:42:9e:e5:cc:49:5b: 13:95:0f:39:36:0f:9f:e4:1e:87:c2:85:28:26:b5: 40:4d:44:b8:f8:98:6d:54:9e:17:e3:58:8d:88:fa: 2d:3b:62:bb:a6:24:67:50:2c:17:90:73:e8:a8:25: b5:8b:6c:3e:44:9b:ce:a7:66:87:f1:80:8d:29:bc: 05:dd:6f:0a:b6:38:7f:b3:fc:23:00:4e:6c:af:43: 73:e3:1b:14:84:c5:f7:df:7e:85:c3:7a:28:81:fb: 38:b4:6f:8b:98:87:a8:94:dd:98:ba:62:d6:9c:15: f3:b1:27:19:10:d7:3d:e6:ac:f4:5b:f8:87:b4:0d: 8a:a2:fb:40:16:93:9a:08:d2:c6:9d:a0:1d:f5:4b: b0:d6:8c:16:8e:e6:1a:ec:40:a7:6b:a4:5d:17:cb: 0b:ca:8f:f1:78:fa:94:14:be:66:f4:e7:40:31:d5: d4:66:41:8a:7a:a1:4c:15:5d:70:97:2c:b8:c5:fa: 1e:40:d7:5b:c9:6f:a4:06:5a:61:b7:be:00:b7:ad: b0:39:63:fa:0e:8e:96:22:16:6e:1f:20:14:d0:8f: 8a:32:91:12:a8:e1:10:c4:47:92:b8:83:13:d3:f6: 9d:8e:85:87:35:34:5e:ba:d3:02:62:0c:1b:4b:98: 11:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5C:A1:4F:50:AC:AC:7E:DA:4C:6D:0F:10:11:35:B2:BE:C1:31:90 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:108:7000::/44 Signature Algorithm: sha256WithRSAEncryption 5f:8a:db:a2:34:3a:06:0d:91:58:88:46:c5:05:e7:d8:c8:80: ba:c4:0b:94:3e:9a:87:1f:b8:54:0f:2a:8b:40:e2:4c:a5:63: 27:8d:49:b2:d9:05:e7:eb:33:35:62:96:74:f8:ed:69:e2:08: e6:e1:a7:fd:50:4f:1e:7f:9a:00:19:3c:fe:00:bf:ad:ae:26: f1:13:dd:94:f9:17:f7:54:82:54:f4:09:5a:22:88:59:c5:d3: 5b:a1:ff:10:29:88:a4:14:33:c8:29:ba:e1:7a:42:b7:71:43: de:6c:2f:04:38:f1:45:cd:ed:aa:9e:5d:1f:50:88:b7:b9:3d: 01:5f:d8:3e:46:c5:44:2d:03:c0:ac:48:b7:29:41:61:7d:43: 69:50:15:61:e5:be:ed:cf:7f:a1:9b:1f:2d:cd:f4:77:d1:6a: 8c:4d:3f:36:fe:0b:af:04:c8:64:c2:33:14:eb:c5:a8:8c:3b: 99:75:7b:9e:69:26:87:69:89:d5:99:64:f9:b6:4a:42:f7:d1: df:96:f3:65:13:22:6d:a0:52:88:7f:1c:7b:f0:f3:7d:e0:17: e5:72:81:4c:9c:29:e8:82:e7:1f:c4:e4:80:59:70:ea:50:0e: 36:88:6e:83:82:8a:69:55:fb:75:88:89:24:f5:36:b1:64:19: 8a:ae:2d:f0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBjUTJJF7cndT2iOwCWnjkmGYXxAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUxMDA4MDA1MTExWhcNMjUxMTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWFhOGFiZTdiN2YwYzJmODhlODk1YTRhNGIwNTU5ZjRl N2YwMjg3Y2IxMDJlMzBkZmExMDU4ZjdlMjI3YTM5MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjLWl4GlZctEKe5cxJWxOVDzk2D5/kHofChSgmtUBNRLj4 mG1UnhfjWI2I+i07YrumJGdQLBeQc+ioJbWLbD5Em86nZofxgI0pvAXdbwq2OH+z /CMATmyvQ3PjGxSExffffoXDeiiB+zi0b4uYh6iU3Zi6YtacFfOxJxkQ1z3mrPRb +Ie0DYqi+0AWk5oI0sadoB31S7DWjBaO5hrsQKdrpF0XywvKj/F4+pQUvmb050Ax 1dRmQYp6oUwVXXCXLLjF+h5A11vJb6QGWmG3vgC3rbA5Y/oOjpYiFm4fIBTQj4oy kRKo4RDER5K4gxPT9p2OhYc1NF660wJiDBtLmBETAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkVyhT1CsrH7aTG0PEBE1sr7BMZAwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzhmOTYwYjBkLWMyOTEtNDkwZi1hZmY1LWFiZTk2NDIyMWJkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEIcAAwDQYJKoZIhvcNAQELBQADggEBAF+K26I0OgYNkViIRsUF59jI gLrEC5Q+mocfuFQPKotA4kylYyeNSbLZBefrMzVilnT47WniCObhp/1QTx5/mgAZ PP4Av62uJvET3ZT5F/dUglT0CVoiiFnF01uh/xApiKQUM8gpuuF6QrdxQ95sLwQ4 8UXN7aqeXR9QiLe5PQFf2D5GxUQtA8CsSLcpQWF9Q2lQFWHlvu3Pf6GbHy3N9HfR aoxNPzb+C68EyGTCMxTrxaiMO5l1e55pJodpidWZZPm2SkL30d+W82UTIm2gUoh/ HHvw833gF+VygUycKeiC5x/E5IBZcOpQDjaIboOCimlV+3WIiST1NrFkGYquLfA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:15 2025 by rpki-client