$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15c69da0-d471-4f52-b26d-a3639b01e410.roa File: 15c69da0-d471-4f52-b26d-a3639b01e410.roa (raw, json) Hash identifier: 8mkZNoA2Rn4RE7aq6vZ0p8ZajS7W0NThQ+p+ronTTBs= Subject key identifier: C2:A4:E4:31:75:67:A9:79:6C:31:60:66:99:71:E2:D3:8E:9C:8C:28 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 378436891ABA72B9CDBC6CB03AD121C1845CAD8D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15c69da0-d471-4f52-b26d-a3639b01e410.roa Signing time: Mon 06 Oct 2025 17:13:51 +0000 ROA not before: Mon 06 Oct 2025 17:13:51 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c0e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:84:36:89:1a:ba:72:b9:cd:bc:6c:b0:3a:d1:21:c1:84:5c:ad:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:13:51 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=9da944f735c28c92909047822797a07b981866aa188c96a3e3a6005db021395a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:64:59:19:8c:41:fb:a0:c2:4e:1c:8c:3b: 38:04:e2:12:17:b9:88:4e:ee:da:6a:44:bd:1e:36: 09:32:9b:fa:cb:f7:96:90:a0:f3:7d:93:3f:d0:c6: 92:e1:59:2a:a1:47:08:46:af:5d:3b:85:78:39:ac: 95:98:3a:73:29:bd:f1:b2:ed:51:39:3f:40:cc:0c: 2c:8a:cb:4d:85:7b:d3:74:20:5a:c5:b4:3b:b7:39: cb:07:f9:8e:89:6e:d3:88:da:3b:53:0f:6d:d7:14: 90:df:66:f3:b6:77:f3:19:bf:1d:07:28:75:e3:c4: 74:98:2c:48:11:05:0a:69:d1:d5:f8:9c:3d:2a:5a: b3:44:cb:d9:d6:57:89:c2:96:f8:54:08:5f:24:7e: 47:75:c5:9d:a8:3e:c8:42:4d:fe:e8:45:ed:6e:33: 73:ef:3c:23:5a:62:88:71:cf:85:4c:ff:2a:6a:88: 40:8e:24:66:92:cf:0a:89:79:90:ea:47:46:d2:5a: 72:22:29:fc:0b:fd:85:86:42:70:f6:ea:2d:ff:04: 7c:c7:a2:b8:67:15:7a:26:14:f8:2e:9a:83:94:a4: f6:cf:5e:f4:cd:db:97:70:17:e2:9d:65:5f:be:b7: 59:14:4e:00:0b:e9:65:a1:bc:f3:14:2e:60:18:7f: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A4:E4:31:75:67:A9:79:6C:31:60:66:99:71:E2:D3:8E:9C:8C:28 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/15c69da0-d471-4f52-b26d-a3639b01e410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0e::/48 Signature Algorithm: sha256WithRSAEncryption 20:87:6c:d0:ef:d8:59:78:ed:37:97:67:91:bd:ae:dd:40:f6: c4:ed:60:d7:83:78:f4:62:68:49:1c:1d:f1:0b:eb:01:40:72: 9d:bc:66:77:7a:e8:87:f4:a8:05:0a:b3:d4:06:f7:0b:f9:06: 7c:a1:b5:de:10:e6:1d:13:8e:55:4d:bf:23:59:75:01:e1:90: d3:0c:85:c6:42:96:36:d8:2b:37:52:15:42:7b:c8:bb:98:f6: c6:8a:ab:25:93:7b:7f:fd:fd:4b:38:f2:d9:91:a7:44:eb:8c: 14:fc:f7:ba:d6:f1:83:be:29:75:45:5e:df:47:3e:49:a8:74: e9:b9:f0:77:0c:0f:ef:dd:b4:2f:94:77:be:5e:08:9d:36:d7: a4:59:37:d1:d0:71:02:d2:1c:d8:17:52:c5:93:07:88:47:5e: 3e:e1:9b:13:60:f8:4f:4c:33:62:aa:bd:3a:85:a0:9f:c6:a7: c2:a5:26:e1:0a:c6:e2:08:6d:6c:52:7b:2d:ca:65:11:c8:7d: 7a:46:58:8a:6e:41:a1:e5:b9:85:65:66:bf:68:41:c2:7b:0d: 56:dd:5f:13:74:19:c1:64:7b:be:da:38:95:5d:93:ec:5c:9a: aa:18:3f:e1:79:13:4b:8f:2a:86:69:34:06:3d:83:4f:1d:a4: 34:bf:85:54 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN4Q2iRq6crnNvGywOtEhwYRcrY0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMzUxWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGE5NDRmNzM1YzI4YzkyOTA5MDQ3ODIyNzk3YTA3Yjk4 MTg2NmFhMTg4Yzk2YTNlM2E2MDA1ZGIwMjEzOTVhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4+2RZGYxB+6DCThyMOzgE4hIXuYhO7tpqRL0eNgkym/rL 95aQoPN9kz/QxpLhWSqhRwhGr107hXg5rJWYOnMpvfGy7VE5P0DMDCyKy02Fe9N0 IFrFtDu3OcsH+Y6JbtOI2jtTD23XFJDfZvO2d/MZvx0HKHXjxHSYLEgRBQpp0dX4 nD0qWrNEy9nWV4nClvhUCF8kfkd1xZ2oPshCTf7oRe1uM3PvPCNaYohxz4VM/ypq iECOJGaSzwqJeZDqR0bSWnIiKfwL/YWGQnD26i3/BHzHorhnFXomFPgumoOUpPbP XvTN25dwF+KdZV++t1kUTgAL6WWhvPMULmAYf3DJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwqTkMXVnqXlsMWBmmXHi046cjCgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE1YzY5ZGEwLWQ0NzEtNGY1Mi1iMjZkLWEzNjM5YjAxZTQxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA4wDQYJKoZIhvcNAQELBQADggEBACCHbNDv2Fl47TeXZ5G9rt1A 9sTtYNeDePRiaEkcHfEL6wFAcp28Znd66If0qAUKs9QG9wv5Bnyhtd4Q5h0TjlVN vyNZdQHhkNMMhcZCljbYKzdSFUJ7yLuY9saKqyWTe3/9/Us48tmRp0TrjBT897rW 8YO+KXVFXt9HPkmodOm58HcMD+/dtC+Ud75eCJ0216RZN9HQcQLSHNgXUsWTB4hH Xj7hmxNg+E9MM2KqvTqFoJ/Gp8KlJuEKxuIIbWxSey3KZRHIfXpGWIpuQaHluYVl Zr9oQcJ7DVbdXxN0GcFke77aOJVdk+xcmqoYP+F5E0uPKoZpNAY9g08dpDS/hVQ= -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:45 2025 by rpki-client