$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa File: 4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa (raw, json) Hash identifier: M/wgDgdPRfZ3jnjq9y1o5KyqXCTvtlfzc1luExS/KHU= Subject key identifier: 22:CE:9E:F2:DF:D2:FE:84:F6:CE:1E:B5:69:F3:AB:18:69:DC:AB:19 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 72E2EDE9C302EB5D77FD3B5291C4186EAEE2A779 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa Signing time: Tue 30 Sep 2025 00:45:56 +0000 ROA not before: Tue 30 Sep 2025 00:45:56 +0000 ROA not after: Tue 04 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c50::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e2:ed:e9:c3:02:eb:5d:77:fd:3b:52:91:c4:18:6e:ae:e2:a7:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 30 00:45:56 2025 GMT Not After : Nov 4 23:59:59 2025 GMT Subject: serialNumber=b2724be3c6e96868e3deeb83e8a14207e18836833f7f694e457a6fff77948bcc, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:a1:68:5b:f2:14:4d:98:fb:4e:b4:34:15: 70:58:d2:5f:1a:17:17:4b:c9:24:46:75:45:9b:5b: 5b:ca:4f:80:cf:08:f8:73:15:d4:46:7f:20:13:16: df:09:94:03:e6:01:e8:23:5d:55:c4:a1:77:81:df: b5:d4:3f:e2:31:80:7c:3c:ed:bf:38:0a:04:2e:44: d0:7f:ed:6e:84:ce:a3:45:e1:f4:08:69:67:c5:aa: 10:b1:1b:c9:69:85:ea:3e:65:85:b1:61:7d:b9:f2: 0d:2e:ad:34:73:98:ea:69:44:02:da:1e:66:e6:bb: f4:be:b8:1d:dc:ce:4c:70:c0:44:f4:9f:8f:60:6c: bc:d1:04:4e:ca:98:ea:3a:0b:f4:1e:c6:37:00:59: 35:0c:fa:84:89:56:a0:81:4c:47:a1:24:4d:ef:73: 0f:69:18:e0:47:f3:45:90:1c:4b:d0:8c:c6:0b:0f: dc:cf:92:3d:db:49:ac:05:34:11:32:da:09:eb:cd: bd:49:fa:74:0b:1f:76:e0:46:96:a7:72:88:eb:93: 53:bf:4b:43:c9:12:c8:cd:97:88:e6:f3:2d:53:e4: f8:7e:14:5e:0b:23:21:8b:fa:52:86:b5:f0:40:1c: 52:4c:ba:d1:ca:31:bc:1b:3f:54:78:8a:08:d7:d2: ce:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CE:9E:F2:DF:D2:FE:84:F6:CE:1E:B5:69:F3:AB:18:69:DC:AB:19 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c50::/44 Signature Algorithm: sha256WithRSAEncryption a0:a9:74:33:d7:3f:55:8f:a9:b2:c0:db:4c:7a:f8:82:7f:20: d6:ab:35:58:de:04:cc:b6:40:df:6a:ca:12:f6:9d:b7:3b:4e: 39:80:b4:87:27:07:2c:d4:ba:cd:e1:a3:3f:ab:a4:14:cf:b1: 93:e1:69:37:e7:88:4b:d3:8c:cb:01:be:18:94:af:c2:c2:f6: 5c:a5:8e:8d:82:1e:59:ad:d9:5f:4a:11:f9:e7:80:8c:8b:12: 34:f7:47:c0:c0:b6:5b:7c:10:b2:aa:2e:da:21:d9:df:15:a4: 42:b5:c5:b1:92:94:5b:86:eb:32:e5:73:3b:e5:1b:a4:2e:6c: 3c:53:00:cd:2c:81:9e:bf:ff:45:a3:fb:b8:49:b1:3a:26:3e: 9d:a0:72:77:12:11:30:db:db:65:58:d5:3d:3e:b7:c7:60:4c: d1:ba:09:b8:db:7d:dd:5d:9b:73:ed:b9:9f:f4:af:eb:cd:5b: 98:8d:db:c0:6d:bc:8a:40:de:54:ff:09:94:7e:a9:eb:be:4d: c9:f8:9a:ef:bb:56:b5:12:31:a3:29:17:41:98:0e:cc:84:84: 40:3f:c8:0a:bb:cf:7f:0d:d5:02:82:de:75:5d:69:52:c3:6e: 4f:1f:64:02:4f:33:60:1d:3e:f1:6a:8d:ab:0a:d0:d9:20:48: 4f:3f:5e:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcuLt6cMC6113/TtSkcQYbq7ip3kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTMwMDA0NTU2WhcNMjUxMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjcyNGJlM2M2ZTk2ODY4ZTNkZWViODNlOGExNDIwN2Ux ODgzNjgzM2Y3ZjY5NGU0NTdhNmZmZjc3OTQ4YmNjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1d6FoW/IUTZj7TrQ0FXBY0l8aFxdLySRGdUWbW1vKT4DP CPhzFdRGfyATFt8JlAPmAegjXVXEoXeB37XUP+IxgHw87b84CgQuRNB/7W6EzqNF 4fQIaWfFqhCxG8lpheo+ZYWxYX258g0urTRzmOppRALaHmbmu/S+uB3czkxwwET0 n49gbLzRBE7KmOo6C/QexjcAWTUM+oSJVqCBTEehJE3vcw9pGOBH80WQHEvQjMYL D9zPkj3bSawFNBEy2gnrzb1J+nQLH3bgRpancojrk1O/S0PJEsjNl4jm8y1T5Ph+ FF4LIyGL+lKGtfBAHFJMutHKMbwbP1R4igjX0s6dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIs6e8t/S/oT2zh61afOrGGncqxkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRkZTVkOGYwLTIzZmQtNGI4NS1iMGE4LWRiYmYwYzY3ZjI1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADFAwDQYJKoZIhvcNAQELBQADggEBAKCpdDPXP1WPqbLA20x6+IJ/ INarNVjeBMy2QN9qyhL2nbc7TjmAtIcnByzUus3hoz+rpBTPsZPhaTfniEvTjMsB vhiUr8LC9lyljo2CHlmt2V9KEfnngIyLEjT3R8DAtlt8ELKqLtoh2d8VpEK1xbGS lFuG6zLlczvlG6QubDxTAM0sgZ6//0Wj+7hJsTomPp2gcncSETDb22VY1T0+t8dg TNG6Cbjbfd1dm3PtuZ/0r+vNW5iN28BtvIpA3lT/CZR+qeu+Tcn4mu+7VrUSMaMp F0GYDsyEhEA/yAq7z38N1QKC3nVdaVLDbk8fZAJPM2AdPvFqjasK0NkgSE8/Xlk= -----END CERTIFICATE-----Generated at Wed Oct 8 21:19:36 2025 by rpki-client