$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b55a29f3-9a2f-473b-a187-718a6f737768.roa File: b55a29f3-9a2f-473b-a187-718a6f737768.roa (raw, json) Hash identifier: P9BVt8XnT1pOz+kKORehTEziaWXVDHGOxOjF07HC0pA= Subject key identifier: 25:74:8A:23:AD:0C:BE:DE:FB:B2:58:58:06:79:20:67:F2:3A:69:20 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5CE761DF87E1FAE42D9CC10A9E93742FEE9052FE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b55a29f3-9a2f-473b-a187-718a6f737768.roa Signing time: Fri 26 Sep 2025 17:52:49 +0000 ROA not before: Fri 26 Sep 2025 17:52:49 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c28::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e7:61:df:87:e1:fa:e4:2d:9c:c1:0a:9e:93:74:2f:ee:90:52:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:52:49 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=6887175d5bc62eb40a400190ade9907e8dd8a04501e186cc03cf14a198637116, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:a7:2f:f8:bd:37:2d:62:51:20:aa:aa:2a: 63:ac:ba:3a:3f:9a:34:86:6f:6a:d9:04:f3:7a:c3: b3:d6:15:d2:89:9a:59:a0:9b:bb:f4:7f:0c:d2:5b: 14:24:18:1f:d0:71:d8:a9:1b:71:d0:6d:3f:f2:75: ff:e9:fe:79:57:6d:07:1e:23:42:d4:c2:29:a1:07: d0:1b:01:c0:d2:f2:b6:df:11:d8:97:4a:18:78:14: 06:eb:eb:67:e4:e8:70:44:46:46:e5:f5:e6:9c:5c: 6a:44:c6:56:fb:ae:d1:a8:60:1d:3a:89:74:5c:96: 21:a6:f9:ed:b8:71:74:e9:67:f3:7c:3b:b5:4e:df: e0:a7:00:1b:f8:93:94:55:6e:f6:5b:ca:78:3d:98: af:6e:cd:fc:1d:c2:69:27:1a:35:5a:75:28:e0:26: 10:e3:e9:a6:e9:11:2c:00:aa:9c:7b:bb:95:6c:d2: 67:e4:89:6c:ad:c7:6a:d1:f1:9f:f7:a6:6e:36:8a: 95:ad:42:cb:1e:e3:da:c8:66:3e:69:23:8c:4e:76: ac:c7:42:80:f5:c1:57:56:ee:06:2a:13:f4:6e:c0: 04:67:57:52:c5:38:a5:d6:51:09:ed:21:e3:e7:fa: 27:29:95:89:db:5a:af:d7:cc:23:cb:01:15:d0:06: b7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:74:8A:23:AD:0C:BE:DE:FB:B2:58:58:06:79:20:67:F2:3A:69:20 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b55a29f3-9a2f-473b-a187-718a6f737768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c28::/45 Signature Algorithm: sha256WithRSAEncryption 50:a9:97:84:a5:59:72:dd:4c:b7:16:aa:2a:9e:22:77:5a:a9: 48:2a:fd:db:a7:9a:06:c0:82:ab:0c:24:c8:1d:43:93:5e:02: 30:98:dd:8b:53:df:27:dd:18:c1:12:e3:1e:02:1a:9d:46:43: b7:15:9b:79:74:28:42:4a:da:ad:98:4d:c7:19:93:12:43:fd: 70:4c:b3:72:db:7e:00:e7:b0:f6:a4:0e:c7:a1:95:2e:11:5a: 2c:9f:01:2e:29:a3:df:06:48:3a:77:19:50:3c:3d:2c:30:34: 24:b9:b8:31:00:35:f3:92:c1:85:55:34:c8:be:b2:26:35:24: 89:ec:9e:34:a1:57:6a:13:c6:44:80:38:22:07:f3:e3:ba:95: 31:9e:7d:7a:fe:57:b0:5a:20:c3:18:a1:41:46:4d:c2:02:78: 9a:c7:9c:d9:32:87:18:ad:a5:85:55:64:ef:1d:36:06:01:00: 22:ea:bc:5b:03:98:5c:c1:fe:68:b5:41:b3:50:5e:6a:d4:8b: 09:5f:04:52:94:e8:d9:78:28:93:ea:fb:15:1a:f2:3e:0e:87: b2:4e:8a:89:7e:8b:e1:3a:5b:e0:98:32:bd:99:ae:ab:b9:c1: 1c:26:c1:7e:b5:43:6e:58:25:ad:83:99:83:28:2f:ca:90:cc: 21:44:a5:77 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXOdh34fh+uQtnMEKnpN0L+6QUv4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MjQ5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODg3MTc1ZDViYzYyZWI0MGE0MDAxOTBhZGU5OTA3ZThk ZDhhMDQ1MDFlMTg2Y2MwM2NmMTRhMTk4NjM3MTE2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/fqcv+L03LWJRIKqqKmOsujo/mjSGb2rZBPN6w7PWFdKJ mlmgm7v0fwzSWxQkGB/QcdipG3HQbT/ydf/p/nlXbQceI0LUwimhB9AbAcDS8rbf EdiXShh4FAbr62fk6HBERkbl9eacXGpExlb7rtGoYB06iXRcliGm+e24cXTpZ/N8 O7VO3+CnABv4k5RVbvZbyng9mK9uzfwdwmknGjVadSjgJhDj6abpESwAqpx7u5Vs 0mfkiWytx2rR8Z/3pm42ipWtQsse49rIZj5pI4xOdqzHQoD1wVdW7gYqE/RuwARn V1LFOKXWUQntIePn+icplYnbWq/XzCPLARXQBrd5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJXSKI60Mvt77slhYBnkgZ/I6aSAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2I1NWEyOWYzLTlhMmYtNDczYi1hMTg3LTcxOGE2ZjczNzc2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmBZzADCgwDQYJKoZIhvcNAQELBQADggEBAFCpl4SlWXLdTLcWqiqeInda qUgq/dunmgbAgqsMJMgdQ5NeAjCY3YtT3yfdGMES4x4CGp1GQ7cVm3l0KEJK2q2Y TccZkxJD/XBMs3LbfgDnsPakDsehlS4RWiyfAS4po98GSDp3GVA8PSwwNCS5uDEA NfOSwYVVNMi+siY1JInsnjShV2oTxkSAOCIH8+O6lTGefXr+V7BaIMMYoUFGTcIC eJrHnNkyhxitpYVVZO8dNgYBACLqvFsDmFzB/mi1QbNQXmrUiwlfBFKU6Nl4KJPq +xUa8j4Oh7JOiol+i+E6W+CYMr2Zrqu5wRwmwX61Q25YJa2DmYMoL8qQzCFEpXc= -----END CERTIFICATE-----Generated at Wed Oct 8 21:30:59 2025 by rpki-client