$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa File: a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa (raw, json) Hash identifier: m61wFU6Skvhc+tkQC6G/ffE1+QgVQ5in8y1aefECGpY= Subject key identifier: CA:7C:E2:0F:8F:5D:DE:2A:62:DE:3E:CB:60:70:B3:20:13:0D:8E:B1 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 119F942F4279931724F3D54CDEDCE02AE7C3BCD5 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa Signing time: Mon 06 Oct 2025 17:20:20 +0000 ROA not before: Mon 06 Oct 2025 17:20:20 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9f:94:2f:42:79:93:17:24:f3:d5:4c:de:dc:e0:2a:e7:c3:bc:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:20:20 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=bec829295d6a0366997da87ba697f9f7e9ffbce1717d64e097b5e3cbbe9241ff, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:7f:72:fc:59:13:81:30:d1:bb:9d:8d:81: fb:f7:00:e3:d7:c6:82:9e:a6:17:73:07:8a:20:d9: e2:9e:f7:7c:79:32:9b:16:0c:6f:be:e0:45:46:a5: dd:28:28:99:d5:13:de:bb:f7:b2:2a:6e:bc:69:c8: eb:7e:c8:31:94:e9:e9:6a:12:0c:9a:ce:91:02:42: 70:f8:b6:83:4d:d5:89:49:21:dc:a7:1e:31:74:1a: 41:b6:60:a1:5d:6e:37:d2:b9:a0:f9:70:32:32:c8: 16:f9:92:d0:30:ae:b9:83:5b:d9:01:fc:14:af:42: 9e:25:ed:1f:85:fc:2c:9a:ac:66:1e:e3:44:d0:e8: f5:5d:a6:5b:79:f7:11:96:e0:ad:71:82:45:03:95: 43:9f:71:f6:28:6f:81:4f:f0:c3:aa:3a:5c:f8:bd: b2:22:76:c4:5b:44:05:cb:3f:e1:de:4d:b2:d1:38: 07:da:e8:c4:de:14:f9:e1:f8:2f:85:81:c6:58:1b: 2e:14:81:f6:a9:cb:a9:f9:8b:bb:aa:9a:1c:00:bf: b3:df:7c:d9:17:08:05:e7:42:21:5d:8a:93:d0:71: fd:56:2a:fe:5c:ff:67:9c:51:21:bf:97:06:58:a2: ec:ec:c2:d9:1d:98:a4:c5:1a:2a:9f:6a:65:7a:3c: 90:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7C:E2:0F:8F:5D:DE:2A:62:DE:3E:CB:60:70:B3:20:13:0D:8E:B1 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1a::/48 Signature Algorithm: sha256WithRSAEncryption 07:0a:80:24:0e:ce:e1:aa:0f:87:7b:75:2c:f3:99:4d:32:4f: 59:96:fe:c9:f5:91:26:6a:f5:8f:89:6f:74:79:bb:d3:4f:23: c0:6b:09:fa:30:cb:07:4f:3d:43:87:d8:01:c8:35:18:99:07: bc:15:fd:1a:42:bd:7c:da:ba:7f:7f:3e:d0:3f:e0:45:a5:9e: e8:a5:12:8a:c4:36:d7:67:d1:e0:39:4a:8d:58:2e:d1:e3:3a: 6b:ef:da:6a:59:32:09:ff:03:50:8f:d8:bb:d4:29:a8:a2:ca: cf:a6:3b:b6:62:e0:7b:e7:6f:69:b8:89:e2:67:79:b6:fc:7d: 9f:97:fc:14:8c:17:3a:35:f4:98:15:e1:b7:42:1f:86:e6:3b: 42:3a:60:fe:91:44:be:be:0c:b0:0d:51:53:33:fc:67:41:c5: 84:f6:33:b3:ab:c7:7d:c2:69:c4:c8:e8:d6:9e:9d:b1:3f:b7: 43:f5:39:31:72:b1:d7:72:82:3f:cc:d9:85:d7:47:31:67:3d: 71:ce:1a:a4:af:a1:cb:03:12:38:62:fe:1c:e2:36:f6:1e:4b: fa:c1:2a:40:c5:cf:c0:8a:8f:a8:08:be:8e:17:af:89:b2:ab: 14:2f:3c:43:29:e9:7a:57:7f:3f:e2:82:f1:ba:84:32:10:c3: db:1f:49:92 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEZ+UL0J5kxck89VM3tzgKufDvNUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcyMDIwWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZWM4MjkyOTVkNmEwMzY2OTk3ZGE4N2JhNjk3ZjlmN2U5 ZmZiY2UxNzE3ZDY0ZTA5N2I1ZTNjYmJlOTI0MWZmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ839y/FkTgTDRu52Ngfv3AOPXxoKephdzB4og2eKe93x5 MpsWDG++4EVGpd0oKJnVE96797IqbrxpyOt+yDGU6elqEgyazpECQnD4toNN1YlJ IdynHjF0GkG2YKFdbjfSuaD5cDIyyBb5ktAwrrmDW9kB/BSvQp4l7R+F/CyarGYe 40TQ6PVdplt59xGW4K1xgkUDlUOfcfYob4FP8MOqOlz4vbIidsRbRAXLP+HeTbLR OAfa6MTeFPnh+C+FgcZYGy4Ugfapy6n5i7uqmhwAv7PffNkXCAXnQiFdipPQcf1W Kv5c/2ecUSG/lwZYouzswtkdmKTFGiqfamV6PJDLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUynziD49d3ipi3j7LYHCzIBMNjrEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E2MWUzYTEwLTFlMTMtNDI4MC1hYmRjLWM3ZjhjYjgwZGE4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBowDQYJKoZIhvcNAQELBQADggEBAAcKgCQOzuGqD4d7dSzzmU0y T1mW/sn1kSZq9Y+Jb3R5u9NPI8BrCfowywdPPUOH2AHINRiZB7wV/RpCvXzaun9/ PtA/4EWlnuilEorENtdn0eA5So1YLtHjOmvv2mpZMgn/A1CP2LvUKaiiys+mO7Zi 4Hvnb2m4ieJnebb8fZ+X/BSMFzo19JgV4bdCH4bmO0I6YP6RRL6+DLANUVMz/GdB xYT2M7Orx33CacTI6NaenbE/t0P1OTFysddygj/M2YXXRzFnPXHOGqSvocsDEjhi /hziNvYeS/rBKkDFz8CKj6gIvo4Xr4myqxQvPEMp6XpXfz/igvG6hDIQw9sfSZI= -----END CERTIFICATE-----Generated at Wed Oct 8 23:10:19 2025 by rpki-client