$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa File: 57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa (raw, json) Hash identifier: sEMzjY86D9kE2IHt60o0lRAPpzP17zikaxPfVSK1H1g= Subject key identifier: 11:65:2E:19:2D:74:97:C4:DD:86:6C:09:E8:4C:E0:92:E9:A6:1A:EC Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4945985ACC9D052058138AF74F255E01BD197F50 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa Signing time: Mon 06 Oct 2025 17:13:21 +0000 ROA not before: Mon 06 Oct 2025 17:13:21 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:45:98:5a:cc:9d:05:20:58:13:8a:f7:4f:25:5e:01:bd:19:7f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:13:21 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=87ba642823679c69e347bee00a37ba5485eb4ebeed9422f6a70d104009aad76d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:73:e3:b4:e3:49:d8:d2:0e:24:1f:c3:ef: 8d:80:e8:a2:fb:e0:d3:af:8d:dc:54:73:5c:d4:a5: ca:e0:f2:94:d7:11:04:99:b4:6a:68:5e:61:86:ad: 7f:06:61:f8:16:2b:f2:3c:ab:51:68:fc:db:b4:d7: 3b:03:f6:ec:8e:37:28:83:bf:5f:f6:1a:43:69:fd: a5:cc:5e:2b:cd:b2:6c:87:3b:7d:f6:78:c2:7b:f7: 59:d7:e3:24:eb:56:4c:a7:cb:d0:81:6e:32:ee:53: f8:dd:e8:2c:70:62:0c:bd:b3:76:1a:f6:85:56:dd: fa:59:c7:1b:3c:69:6c:ae:39:46:90:cc:b8:9f:79: a3:28:ec:89:44:e0:8d:50:b4:59:32:96:f6:ad:d0: 37:77:de:1f:04:38:2f:11:79:de:e8:25:f4:f5:d8: 88:c9:6e:d2:04:37:1e:51:04:e3:82:3b:ea:47:74: bd:61:d3:8f:b9:70:71:f0:4a:1a:ba:40:c8:54:28: 23:ba:1d:d6:0e:c0:01:9a:34:88:9b:b8:9d:98:33: 1e:1a:26:b1:cb:d9:c6:b5:cc:04:73:d7:6a:81:16: cc:98:5b:f8:80:24:84:c1:54:b2:91:68:9d:47:0f: a2:b2:2c:b7:6f:be:d4:52:3f:ea:e0:ca:58:9b:d1: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:65:2E:19:2D:74:97:C4:DD:86:6C:09:E8:4C:E0:92:E9:A6:1A:EC X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c09::/48 Signature Algorithm: sha256WithRSAEncryption 8b:f4:6e:6d:ca:dc:cb:50:cb:b5:d8:62:80:0f:3f:9b:8f:31: 59:bb:41:9b:48:73:f0:42:41:61:42:7a:19:87:3d:a9:70:10: 5e:c6:e1:b2:73:9e:be:12:30:35:96:3e:00:85:90:6f:e2:e0: 5b:fe:e2:96:24:d6:5e:e8:8b:6d:8a:32:0c:ca:5e:34:3d:da: 0c:c4:6c:72:d5:82:25:b8:38:38:54:90:eb:87:6f:d7:2a:e8: 2d:ba:6b:d2:8d:44:c3:cf:9b:6c:2e:5e:8e:7e:ba:62:8d:5a: 5f:04:8a:75:5c:56:1f:14:6c:f6:1c:2d:ed:f1:3c:db:be:43: 50:78:8d:23:0f:8c:61:dd:92:4c:0d:1c:09:37:08:00:64:0e: e1:e6:89:95:d0:bf:71:13:68:0e:1a:64:f1:79:17:d3:c5:4f: f1:9e:c4:72:cc:24:06:54:b8:24:ca:f1:d3:71:24:03:a6:a1: 72:20:ca:36:c7:ff:08:c3:c8:ae:de:8d:47:ce:5f:ce:62:7c: 09:86:a8:5b:87:a4:8f:96:81:c6:1e:3d:13:1f:f6:9d:a8:1f: a1:96:55:36:cc:dc:c6:4a:6e:90:5a:16:e7:84:e6:17:4b:79: f8:d7:d5:a2:cb:3e:35:f3:fd:4b:c7:f6:96:7c:c6:ce:bb:e3: 7b:d9:8e:5b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSUWYWsydBSBYE4r3TyVeAb0Zf1AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMzIxWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2JhNjQyODIzNjc5YzY5ZTM0N2JlZTAwYTM3YmE1NDg1 ZWI0ZWJlZWQ5NDIyZjZhNzBkMTA0MDA5YWFkNzZkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqmHPjtONJ2NIOJB/D742A6KL74NOvjdxUc1zUpcrg8pTX EQSZtGpoXmGGrX8GYfgWK/I8q1Fo/Nu01zsD9uyONyiDv1/2GkNp/aXMXivNsmyH O332eMJ791nX4yTrVkyny9CBbjLuU/jd6CxwYgy9s3Ya9oVW3fpZxxs8aWyuOUaQ zLifeaMo7IlE4I1QtFkylvat0Dd33h8EOC8Red7oJfT12IjJbtIENx5RBOOCO+pH dL1h04+5cHHwShq6QMhUKCO6HdYOwAGaNIibuJ2YMx4aJrHL2ca1zARz12qBFsyY W/iAJITBVLKRaJ1HD6KyLLdvvtRSP+rgylib0aEHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEWUuGS10l8TdhmwJ6EzgkummGuwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU3ZTc2ZTM2LTFiMWMtNDdmZS04OWUxLTE3ZmE3YTM5YzBhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAkwDQYJKoZIhvcNAQELBQADggEBAIv0bm3K3MtQy7XYYoAPP5uP MVm7QZtIc/BCQWFCehmHPalwEF7G4bJznr4SMDWWPgCFkG/i4Fv+4pYk1l7oi22K MgzKXjQ92gzEbHLVgiW4ODhUkOuHb9cq6C26a9KNRMPPm2wuXo5+umKNWl8EinVc Vh8UbPYcLe3xPNu+Q1B4jSMPjGHdkkwNHAk3CABkDuHmiZXQv3ETaA4aZPF5F9PF T/GexHLMJAZUuCTK8dNxJAOmoXIgyjbH/wjDyK7ejUfOX85ifAmGqFuHpI+WgcYe PRMf9p2oH6GWVTbM3MZKbpBaFueE5hdLefjX1aLLPjXz/UvH9pZ8xs6743vZjls= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:55 2025 by rpki-client