$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa File: b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa (raw, json) Hash identifier: x4FndxI+5dWWh8A9pdYloI0ENW4mPJa7tYDr4JifS/o= Subject key identifier: EA:F4:89:B9:EC:FD:69:E8:F5:5E:71:24:B4:E0:B2:AF:E8:F2:F4:4C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 70E27A0CE3C528E2B4D3EA76F0F39B5B7855CBED Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa Signing time: Mon 06 Oct 2025 17:13:17 +0000 ROA not before: Mon 06 Oct 2025 17:13:17 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e2:7a:0c:e3:c5:28:e2:b4:d3:ea:76:f0:f3:9b:5b:78:55:cb:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:13:17 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=0127f3823f076507d51e84dbeeff277cee4561f06ee1113c09be43739cccdfc1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:cf:e2:8d:95:6b:43:59:1d:53:ff:8e:cc: fc:6a:42:7e:ce:d8:b1:a4:43:95:1f:5f:75:8a:8f: 81:59:67:fe:52:97:df:12:45:83:16:27:b7:41:60: dc:54:39:9a:bc:06:8a:86:26:22:5f:64:54:fe:3b: 9d:09:4e:3b:2b:45:26:ea:62:40:e7:04:99:74:0d: c6:cb:95:6b:92:ea:4d:4e:b3:61:10:77:c5:a7:e4: 94:0f:44:66:30:fb:af:19:85:d1:24:e2:09:46:a4: 0d:4a:43:59:fc:66:92:4f:0d:e9:24:3c:c7:4c:45: fd:b4:88:9e:d6:10:97:5e:7c:45:c2:c5:bd:9e:28: 0f:06:8b:b6:7b:3b:85:75:0a:2e:4c:76:80:e2:4e: 64:16:6e:14:1b:37:e0:ec:4a:57:9d:26:56:ca:8c: 02:46:21:be:cd:60:cd:89:4c:c9:f4:a2:25:fa:35: a8:51:5b:43:3d:cb:82:ee:46:0a:0b:97:59:0a:91: 28:aa:9e:db:8f:33:1f:91:41:2d:9f:40:c1:30:db: e8:e4:78:d2:ec:a3:f9:8e:2f:6c:c1:ad:e6:d0:5b: 83:ba:fe:6b:72:75:8c:09:83:52:0d:43:f4:34:15: d2:d9:f4:fb:65:eb:e5:5a:da:e7:c6:7e:4c:fd:75: 38:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F4:89:B9:EC:FD:69:E8:F5:5E:71:24:B4:E0:B2:AF:E8:F2:F4:4C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c07::/48 Signature Algorithm: sha256WithRSAEncryption 53:8e:a5:3f:f8:17:9a:bd:69:18:e2:7d:e9:c8:a2:6d:8a:4c: b1:ac:4b:2a:3f:fd:31:78:18:c6:54:85:ca:83:46:65:f6:e5: 26:a8:d7:cd:49:35:e4:5e:14:a8:3d:38:47:22:f2:a3:03:e9: c6:90:dd:95:54:a9:73:80:5b:e9:08:e2:da:f9:39:0f:5e:c4: a7:2b:81:54:12:c6:95:37:18:6a:cc:0e:2d:e4:bf:3c:68:aa: 1d:ee:4f:97:16:b8:5b:2e:23:3f:91:b7:fa:6d:7f:16:b6:f3: 27:5e:39:21:dd:ac:8e:e6:b9:b5:2d:32:28:cb:49:81:cb:96: 94:b0:94:c1:43:ec:73:c5:93:01:33:a6:4b:54:df:0e:2f:f2: 9f:5e:8a:2b:24:a4:ef:4e:01:1c:34:5b:ee:df:5a:b8:97:dd: 16:3b:b4:43:77:df:e3:4f:39:a3:53:2a:5b:50:76:f7:e6:b8: 44:76:3d:b6:50:de:9f:21:cb:02:68:f1:2b:af:b8:e9:bb:e7: 41:9c:4b:03:8b:ec:95:a8:34:fe:b4:93:bc:ea:6e:aa:50:f0: 3e:25:b7:41:08:c3:dd:c8:f8:27:50:47:bd:1b:95:ee:c4:ce: 3a:19:77:d4:18:d5:b5:21:3d:c3:a9:c3:e7:37:1d:22:41:a6: 69:3f:8c:d5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcOJ6DOPFKOK00+p28PObW3hVy+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMzE3WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTI3ZjM4MjNmMDc2NTA3ZDUxZTg0ZGJlZWZmMjc3Y2Vl NDU2MWYwNmVlMTExM2MwOWJlNDM3MzljY2NkZmMxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmlc/ijZVrQ1kdU/+OzPxqQn7O2LGkQ5UfX3WKj4FZZ/5S l98SRYMWJ7dBYNxUOZq8BoqGJiJfZFT+O50JTjsrRSbqYkDnBJl0DcbLlWuS6k1O s2EQd8Wn5JQPRGYw+68ZhdEk4glGpA1KQ1n8ZpJPDekkPMdMRf20iJ7WEJdefEXC xb2eKA8Gi7Z7O4V1Ci5MdoDiTmQWbhQbN+DsSledJlbKjAJGIb7NYM2JTMn0oiX6 NahRW0M9y4LuRgoLl1kKkSiqntuPMx+RQS2fQMEw2+jkeNLso/mOL2zBrebQW4O6 /mtydYwJg1INQ/Q0FdLZ9Ptl6+Va2ufGfkz9dThPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6vSJuez9aej1XnEktOCyr+jy9EwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2I0MTg4ODczLWY1ZjgtNGFiOS1hOWZhLTdiNjFhNDg2MGYyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAcwDQYJKoZIhvcNAQELBQADggEBAFOOpT/4F5q9aRjifenIom2K TLGsSyo//TF4GMZUhcqDRmX25Sao181JNeReFKg9OEci8qMD6caQ3ZVUqXOAW+kI 4tr5OQ9exKcrgVQSxpU3GGrMDi3kvzxoqh3uT5cWuFsuIz+Rt/ptfxa28ydeOSHd rI7mubUtMijLSYHLlpSwlMFD7HPFkwEzpktU3w4v8p9eiiskpO9OARw0W+7fWriX 3RY7tEN33+NPOaNTKltQdvfmuER2PbZQ3p8hywJo8SuvuOm750GcSwOL7JWoNP60 k7zqbqpQ8D4lt0EIw93I+CdQR70ble7EzjoZd9QY1bUhPcOpw+c3HSJBpmk/jNU= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:44 2025 by rpki-client