$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa File: 73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa (raw, json) Hash identifier: rKQYx4YrEKO2tNNqSR0msm0B6YPHOftPtUFN8heJrNk= Subject key identifier: 3F:A9:82:D1:E3:DD:0F:DD:EA:5D:39:F9:2D:50:B4:B2:9C:B3:6A:FB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 25925D5C324BDEB65AFEA51D927F8FB7CD585191 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa Signing time: Mon 06 Oct 2025 17:20:27 +0000 ROA not before: Mon 06 Oct 2025 17:20:27 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:92:5d:5c:32:4b:de:b6:5a:fe:a5:1d:92:7f:8f:b7:cd:58:51:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:20:27 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=358ead4b1a7c5eea1613d4a6bafb3cf93fabd4a45bfec964bf9d7c9a3cd667e8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2b:a5:de:0f:23:44:93:79:ff:a5:cd:73:c2: 96:b5:3f:9d:f2:86:66:d1:9f:af:e2:4e:bc:82:2c: b9:22:3c:57:9c:cc:27:2e:0f:9e:54:a4:c9:55:5d: 9d:c4:0c:eb:75:48:f1:a2:9b:99:7d:4b:30:18:70: 77:ec:ac:33:03:a0:63:5c:c0:a5:0b:bf:3c:8d:18: 9a:4b:91:3d:25:db:6b:4f:2f:ec:92:bf:90:de:cc: 75:bb:45:ca:6a:44:ad:65:f7:41:66:80:02:f4:12: 96:4d:7e:8c:7e:80:29:0c:16:c7:93:7f:ad:ae:6f: 5a:70:2b:90:84:c4:b5:c9:3f:5c:b1:95:93:00:24: 7d:1d:38:eb:c6:72:98:44:a5:3d:5d:a5:73:30:2d: f6:ae:21:a7:8a:6b:7d:b8:08:93:0b:bd:92:d9:d6: b6:0c:11:c1:31:4e:db:6b:ac:71:cc:58:6f:b3:87: 4c:43:0b:76:34:1d:27:bb:3f:35:5e:49:32:5f:89: 55:34:e9:74:4d:5b:d1:37:8a:fc:88:87:74:68:84: 16:c5:3c:ab:16:b8:65:ef:fe:0d:b7:b4:b4:ae:e8: a4:08:85:1d:1c:86:09:b1:46:91:ea:bc:3a:1a:37: 4e:10:6e:e0:3c:11:98:7c:a1:08:6a:6b:0f:c7:a2: c6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A9:82:D1:E3:DD:0F:DD:EA:5D:39:F9:2D:50:B4:B2:9C:B3:6A:FB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/73baf77e-28c1-47ba-a54f-b10fb58f6d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1d::/48 Signature Algorithm: sha256WithRSAEncryption 5d:ac:b6:26:73:a8:81:5d:f3:c3:0b:3a:1c:31:b4:19:6f:68: 76:b5:0e:cd:89:d0:1d:47:15:9d:c2:b5:e6:c9:39:fc:02:6a: 36:8f:97:96:6e:c0:c4:4e:b3:cb:e9:8d:68:31:94:23:37:0d: c7:60:bd:65:73:e3:26:60:5a:5c:1d:52:50:1b:a2:1c:8b:f5: 85:39:27:76:84:92:c4:6b:55:f7:8c:aa:6e:73:c3:d1:2b:4d: 98:ff:ae:16:5e:f1:8f:d7:dd:06:f8:89:74:22:4c:18:4d:48: c2:a0:15:20:b1:f2:00:cb:d6:8e:1e:71:aa:31:50:69:62:3c: 05:0b:b7:37:28:9f:29:4a:75:4a:1b:db:e6:12:b8:68:a9:fb: 9c:54:fe:01:00:7b:28:82:98:5c:ee:03:11:4e:55:f5:cf:0a: b5:59:99:87:d4:b2:9e:dd:c5:c3:ee:ac:c6:ff:17:ad:13:dc: 6e:2f:6b:73:b5:fb:49:f7:10:89:07:ae:ea:64:da:aa:39:3c: 76:c4:d4:e7:8f:9b:e8:7b:5b:cf:9e:20:30:68:c7:2f:9e:85: e6:47:54:57:c1:87:b2:49:35:e2:6b:7c:67:45:05:8a:55:a8: fe:3d:b8:d3:9b:f4:99:7c:7b:74:80:15:d4:b8:53:9a:1a:38: 3d:f1:e0:17 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJZJdXDJL3rZa/qUdkn+Pt81YUZEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcyMDI3WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNThlYWQ0YjFhN2M1ZWVhMTYxM2Q0YTZiYWZiM2NmOTNm YWJkNGE0NWJmZWM5NjRiZjlkN2M5YTNjZDY2N2U4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeK6XeDyNEk3n/pc1zwpa1P53yhmbRn6/iTryCLLkiPFec zCcuD55UpMlVXZ3EDOt1SPGim5l9SzAYcHfsrDMDoGNcwKULvzyNGJpLkT0l22tP L+ySv5DezHW7RcpqRK1l90FmgAL0EpZNfox+gCkMFseTf62ub1pwK5CExLXJP1yx lZMAJH0dOOvGcphEpT1dpXMwLfauIaeKa324CJMLvZLZ1rYMEcExTttrrHHMWG+z h0xDC3Y0HSe7PzVeSTJfiVU06XRNW9E3ivyIh3RohBbFPKsWuGXv/g23tLSu6KQI hR0chgmxRpHqvDoaN04QbuA8EZh8oQhqaw/HosZzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUP6mC0ePdD93qXTn5LVC0spyzavswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzczYmFmNzdlLTI4YzEtNDdiYS1hNTRmLWIxMGZiNThmNmQ1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADB0wDQYJKoZIhvcNAQELBQADggEBAF2stiZzqIFd88MLOhwxtBlv aHa1Ds2J0B1HFZ3CtebJOfwCajaPl5ZuwMROs8vpjWgxlCM3DcdgvWVz4yZgWlwd UlAbohyL9YU5J3aEksRrVfeMqm5zw9ErTZj/rhZe8Y/X3Qb4iXQiTBhNSMKgFSCx 8gDL1o4ecaoxUGliPAULtzconylKdUob2+YSuGip+5xU/gEAeyiCmFzuAxFOVfXP CrVZmYfUsp7dxcPurMb/F60T3G4va3O1+0n3EIkHrupk2qo5PHbE1OePm+h7W8+e IDBoxy+eheZHVFfBh7JJNeJrfGdFBYpVqP49uNOb9Jl8e3SAFdS4U5oaOD3x4Bc= -----END CERTIFICATE-----Generated at Wed Oct 8 21:19:38 2025 by rpki-client