$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f4d9a8e-be4a-4717-b47c-2e16952fd9a5.roa File: 6f4d9a8e-be4a-4717-b47c-2e16952fd9a5.roa (raw, json) Hash identifier: M1DD3Fop9z+phw21mKuSPjI3peTraAPG83duBm+VFsI= Subject key identifier: C8:9D:A6:23:41:6C:71:2D:E1:C5:30:15:80:C8:BF:C4:0F:D1:9E:73 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 050E0815C3555E0237E51B42A527BC12E1A39248 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f4d9a8e-be4a-4717-b47c-2e16952fd9a5.roa Signing time: Mon 22 Sep 2025 18:10:27 +0000 ROA not before: Mon 22 Sep 2025 18:10:27 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0e:08:15:c3:55:5e:02:37:e5:1b:42:a5:27:bc:12:e1:a3:92:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 22 18:10:27 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=56e9b0541d5ab94bbb56b69ce9f1322d605be072c34b4bd3309260be355ed2b7, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:71:c3:1b:d4:a9:7f:d3:5f:b2:7f:cc:73:dc: b8:84:21:78:ae:65:18:ab:2a:45:b5:4e:0b:76:5d: c4:b7:04:be:78:91:e4:d1:43:c6:34:3c:d7:3e:c1: 20:68:a2:1d:84:de:6f:e1:c0:fd:3e:9a:ee:dc:06: 4b:dd:ff:ed:c6:d8:e4:d5:f9:30:9a:f4:fa:98:f7: 62:4d:1b:03:0a:26:28:a1:7c:ce:77:b5:bc:27:c1: 92:40:78:da:da:53:4f:be:9d:e1:bd:22:0b:c2:50: 31:db:0a:f1:66:8d:19:fa:31:47:a3:cc:7e:0c:f1: 5a:23:03:f5:53:01:12:81:c9:8a:ae:0a:fd:83:dd: 90:1f:00:8f:43:e9:72:ba:83:a0:23:cc:dc:13:36: a8:a3:c6:59:48:a9:24:af:be:eb:b1:11:b7:9c:63: f7:c7:30:7b:90:41:2d:ce:48:80:cc:78:b4:81:84: 33:17:51:99:5b:d6:31:81:08:36:4e:6d:33:d3:6f: c5:f9:00:98:b6:da:91:d9:bb:86:38:ee:61:68:6c: e4:a8:ec:fe:53:15:6f:57:68:bb:ba:8e:24:d6:aa: d8:25:1a:99:52:df:fd:b8:f1:f2:c6:14:42:48:4e: 31:bd:d1:a4:42:f6:85:90:21:2a:36:25:23:7c:b6: fd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9D:A6:23:41:6C:71:2D:E1:C5:30:15:80:C8:BF:C4:0F:D1:9E:73 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6f4d9a8e-be4a-4717-b47c-2e16952fd9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1f::/48 Signature Algorithm: sha256WithRSAEncryption 61:80:3a:6a:7d:40:4e:57:48:19:ea:f3:4b:fa:42:af:37:1a: ff:5b:d0:ff:62:24:a1:0a:cb:4d:e3:fc:eb:a0:88:e3:06:39: 9d:40:2f:96:c1:90:a4:25:79:2b:dd:fc:d8:81:f1:c0:e3:a7: bf:df:60:b3:09:e3:9f:6c:ae:c0:ef:78:66:e6:0a:51:e2:de: 71:42:8e:87:bf:7e:74:6c:5b:4a:c9:a0:08:df:da:e6:06:5e: be:5c:ad:bf:55:d9:b7:b5:95:cc:f1:45:0b:03:3e:de:85:51: 50:e8:ad:06:bc:f2:e7:16:72:e7:24:51:06:e7:7f:be:cb:af: 7d:8d:ad:86:bf:79:cf:9d:e1:2c:9d:9e:01:5b:1c:cb:ff:a3: 50:9b:95:fb:f5:19:85:5e:34:70:8f:1b:45:01:e2:c9:ea:c5: db:63:11:97:b2:a8:9a:8b:27:75:66:ca:ca:07:e7:fd:86:c8: 49:74:a7:5f:a9:dc:5b:ef:ed:c9:fe:8f:11:ee:5c:dc:4a:b2: a6:d7:b9:3e:fe:b0:f6:0b:1b:f3:1a:64:37:35:76:c1:9e:f8: 94:3a:6d:a5:8f:b8:bf:33:19:27:ae:f3:da:7c:d0:c9:e7:2d: 7f:ba:48:26:15:65:4a:2c:24:ba:39:c6:99:d6:b8:9e:9a:d5: 30:5a:f8:a0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBQ4IFcNVXgI35RtCpSe8EuGjkkgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTIyMTgxMDI3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NmU5YjA1NDFkNWFiOTRiYmI1NmI2OWNlOWYxMzIyZDYw NWJlMDcyYzM0YjRiZDMzMDkyNjBiZTM1NWVkMmI3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLccMb1Kl/01+yf8xz3LiEIXiuZRirKkW1Tgt2XcS3BL54 keTRQ8Y0PNc+wSBooh2E3m/hwP0+mu7cBkvd/+3G2OTV+TCa9PqY92JNGwMKJiih fM53tbwnwZJAeNraU0++neG9IgvCUDHbCvFmjRn6MUejzH4M8VojA/VTARKByYqu Cv2D3ZAfAI9D6XK6g6AjzNwTNqijxllIqSSvvuuxEbecY/fHMHuQQS3OSIDMeLSB hDMXUZlb1jGBCDZObTPTb8X5AJi22pHZu4Y47mFobOSo7P5TFW9XaLu6jiTWqtgl GplS3/248fLGFEJITjG90aRC9oWQISo2JSN8tv0vAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyJ2mI0FscS3hxTAVgMi/xA/RnnMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzZmNGQ5YThlLWJlNGEtNDcxNy1iNDdjLTJlMTY5NTJmZDlhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADB8wDQYJKoZIhvcNAQELBQADggEBAGGAOmp9QE5XSBnq80v6Qq83 Gv9b0P9iJKEKy03j/OugiOMGOZ1AL5bBkKQleSvd/NiB8cDjp7/fYLMJ459srsDv eGbmClHi3nFCjoe/fnRsW0rJoAjf2uYGXr5crb9V2be1lczxRQsDPt6FUVDorQa8 8ucWcuckUQbnf77Lr32NrYa/ec+d4SydngFbHMv/o1Cblfv1GYVeNHCPG0UB4snq xdtjEZeyqJqLJ3VmysoH5/2GyEl0p1+p3Fvv7cn+jxHuXNxKsqbXuT7+sPYLG/Ma ZDc1dsGe+JQ6baWPuL8zGSeu89p80MnnLX+6SCYVZUosJLo5xpnWuJ6a1TBa+KA= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:00 2025 by rpki-client