$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ef9ebc-2d09-4c34-8550-c15d1183a8ad.roa File: 84ef9ebc-2d09-4c34-8550-c15d1183a8ad.roa (raw, json) Hash identifier: e6iNBo3h2T1OOIFXjL8vH4bidbTZssYOYb6FuBBer+s= Subject key identifier: 51:18:C7:5F:15:E9:E5:CF:26:91:D7:BD:EC:53:03:10:27:BF:1A:F3 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 37A99A8D71201A4D6E2318B9D9FE3F23E9B5CC85 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ef9ebc-2d09-4c34-8550-c15d1183a8ad.roa Signing time: Fri 26 Sep 2025 17:50:25 +0000 ROA not before: Fri 26 Sep 2025 17:50:25 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:39c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a9:9a:8d:71:20:1a:4d:6e:23:18:b9:d9:fe:3f:23:e9:b5:cc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:50:25 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=a18d381315d53fbcd3713f63c8cc6fdafd6e8c6e3002e02c1ea0db5e986c7373, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3e:25:15:64:bc:73:99:a9:4e:6f:fd:1b:c1: 2c:73:e5:3b:cf:01:ec:50:c0:dc:64:f1:df:8c:50: 86:3d:ce:c9:5c:3a:3f:b5:0e:2f:c3:10:8b:f4:2d: 0a:5b:32:69:db:ec:49:f1:d4:cd:a7:27:04:30:c2: 79:4f:93:b7:d0:3d:a7:a9:77:7d:67:c0:c4:6d:30: cf:33:cc:36:32:bf:29:34:8b:09:cc:84:a3:81:ba: a8:69:38:d6:21:51:9c:b8:e0:48:a0:ef:f5:07:69: 7f:58:51:5e:95:dd:f0:f8:08:29:19:f6:72:31:34: 28:f3:bc:f8:0c:a1:8d:9e:3d:5d:76:8b:0c:f4:03: 5a:70:eb:52:16:76:dc:9c:b7:82:2d:a7:3a:02:19: 6a:6d:54:76:e9:4b:02:02:c1:cf:67:29:88:d7:c9: 0e:7e:31:45:b5:3a:98:32:f3:5d:da:2b:31:7d:27: 40:47:22:2f:6f:ce:78:24:0b:c7:b6:ca:1c:96:22: 72:2f:0c:aa:5f:d4:83:ca:57:bd:53:4d:e9:93:06: 10:9d:86:89:d0:9f:a2:4a:18:d0:27:bf:d4:4c:91: fb:ca:ef:15:0f:b4:5b:d6:2f:1b:65:c3:23:31:99: 4a:2f:8f:ff:ee:a8:d8:f7:f0:c5:cc:67:53:47:76: 6d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:18:C7:5F:15:E9:E5:CF:26:91:D7:BD:EC:53:03:10:27:BF:1A:F3 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ef9ebc-2d09-4c34-8550-c15d1183a8ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:39c::/48 Signature Algorithm: sha256WithRSAEncryption 39:98:6d:b7:68:de:84:0f:3b:b0:2e:c1:b0:52:e7:50:25:19: 90:71:95:1f:a4:4f:21:79:2f:1f:ef:1f:31:87:50:37:32:04: c5:59:1c:23:b3:aa:89:40:66:f5:9b:8c:8f:a7:13:de:55:4a: 05:7f:be:fc:54:fe:79:86:77:1c:e4:d2:f5:15:d3:04:1d:6a: 64:82:f4:9c:bd:5d:66:f1:56:13:a5:00:a9:15:54:5e:1c:14: 42:a1:5c:fb:b9:8b:56:73:9a:f1:f8:74:5a:86:50:8f:28:48: 70:13:e1:9e:74:3f:ff:f9:28:6e:83:d4:7b:c1:6d:46:94:7a: 51:62:41:a0:bc:8d:8a:77:b8:1d:ba:e0:7f:0f:88:af:14:76: a9:22:b0:00:51:ba:49:f4:66:bd:58:74:a4:0c:82:26:e6:69: 23:d6:f0:8d:a0:7b:1b:c8:ec:eb:58:58:5f:62:f8:39:d0:86: 27:19:c4:40:93:42:ef:60:90:5e:1d:d9:43:9c:c1:c7:c0:fe: 0e:46:4a:40:28:4e:1c:a8:be:fc:ff:3c:92:c1:99:69:f4:5a: 2b:a4:72:2c:41:90:36:3a:5d:40:5a:6f:ce:49:56:b3:0d:c6: c3:cc:48:1f:15:42:d6:a9:0d:70:b9:5c:db:4a:aa:ca:f8:8e: 16:5c:e3:12 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN6majXEgGk1uIxi52f4/I+m1zIUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MDI1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMThkMzgxMzE1ZDUzZmJjZDM3MTNmNjNjOGNjNmZkYWZk NmU4YzZlMzAwMmUwMmMxZWEwZGI1ZTk4NmM3MzczMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKPiUVZLxzmalOb/0bwSxz5TvPAexQwNxk8d+MUIY9zslc Oj+1Di/DEIv0LQpbMmnb7Enx1M2nJwQwwnlPk7fQPaepd31nwMRtMM8zzDYyvyk0 iwnMhKOBuqhpONYhUZy44Eig7/UHaX9YUV6V3fD4CCkZ9nIxNCjzvPgMoY2ePV12 iwz0A1pw61IWdtyct4ItpzoCGWptVHbpSwICwc9nKYjXyQ5+MUW1Opgy813aKzF9 J0BHIi9vzngkC8e2yhyWInIvDKpf1IPKV71TTemTBhCdhonQn6JKGNAnv9RMkfvK 7xUPtFvWLxtlwyMxmUovj//uqNj38MXMZ1NHdm2zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUURjHXxXp5c8mkde97FMDECe/GvMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg0ZWY5ZWJjLTJkMDktNGMzNC04NTUwLWMxNWQxMTgzYThhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5wwDQYJKoZIhvcNAQELBQADggEBADmYbbdo3oQPO7AuwbBS51Al GZBxlR+kTyF5Lx/vHzGHUDcyBMVZHCOzqolAZvWbjI+nE95VSgV/vvxU/nmGdxzk 0vUV0wQdamSC9Jy9XWbxVhOlAKkVVF4cFEKhXPu5i1ZzmvH4dFqGUI8oSHAT4Z50 P//5KG6D1HvBbUaUelFiQaC8jYp3uB264H8PiK8UdqkisABRukn0Zr1YdKQMgibm aSPW8I2gexvI7OtYWF9i+DnQhicZxECTQu9gkF4d2UOcwcfA/g5GSkAoThyovvz/ PJLBmWn0WiukcixBkDY6XUBab85JVrMNxsPMSB8VQtapDXC5XNtKqsr4jhZc4xI= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:11 2025 by rpki-client