$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb75fc4b-0627-4c79-b591-308eee344e77.roa File: bb75fc4b-0627-4c79-b591-308eee344e77.roa (raw, json) Hash identifier: z2/2QcHsbIaqaz+BGJ9SJih3jznRCouvpr2mVrXGkV0= Subject key identifier: 61:C1:85:59:1C:47:AF:69:AE:A3:71:26:AC:2D:63:21:77:01:AC:BB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1F84F13104757013250D751DDA2CDAC0601D8F4D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb75fc4b-0627-4c79-b591-308eee344e77.roa Signing time: Fri 26 Sep 2025 17:53:13 +0000 ROA not before: Fri 26 Sep 2025 17:53:13 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:610::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:84:f1:31:04:75:70:13:25:0d:75:1d:da:2c:da:c0:60:1d:8f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:53:13 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=a01b0e6da61f2fe1058505db4324f3e3d90230ad67715449766a292c1aeff018, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:10:56:f7:b4:ac:e9:0f:e4:89:31:df:cd: 97:f9:8a:ee:51:fa:8d:b4:c0:79:f3:fd:f5:54:50: 6d:a6:38:f4:57:91:07:68:18:77:6d:ad:7b:ea:9a: f2:22:cb:82:ef:a0:7e:a3:8d:ef:73:0f:dc:da:8a: 19:13:22:dd:6f:82:01:2b:25:bb:10:a5:b7:47:61: 4e:79:01:f6:63:57:26:27:9a:61:73:9c:62:81:c5: 42:28:33:e7:f7:5b:9c:6c:0c:ec:f1:da:fc:1a:7f: 32:87:9e:74:42:27:71:af:bf:34:30:c7:78:1f:66: 90:52:45:66:21:55:ea:87:87:7a:81:74:c5:dd:e9: 8e:59:a5:6b:85:55:5f:55:d3:34:81:71:42:8a:6f: eb:8c:26:1f:37:da:a1:ff:4e:78:c7:5e:fd:b0:69: ed:e5:a9:39:62:22:1e:4d:27:d1:e1:9a:16:3b:51: 41:09:10:15:8a:09:f7:3c:b4:66:65:57:4c:fd:b3: 2e:37:cd:61:d2:6c:37:ff:53:a8:3a:6c:c7:93:a3: 9b:43:97:3c:e3:b9:1c:75:01:1d:fb:fe:ec:55:29: 51:82:1f:1e:90:6c:ee:7d:9d:75:ff:ad:b2:ac:03: 20:05:c0:06:c0:0b:6f:f6:25:6c:63:76:0c:bd:aa: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C1:85:59:1C:47:AF:69:AE:A3:71:26:AC:2D:63:21:77:01:AC:BB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bb75fc4b-0627-4c79-b591-308eee344e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:610::/48 Signature Algorithm: sha256WithRSAEncryption 35:d7:26:d7:d7:c9:07:b8:52:b0:3c:cb:71:0a:fb:56:15:38: 84:3a:82:e2:a0:31:41:32:7a:b7:62:4a:23:c6:da:78:fc:37: 1b:ce:97:84:9a:43:12:31:54:97:f0:7a:1a:78:6f:da:e5:b1: 3c:c9:79:3a:2d:a0:dd:f0:1c:15:13:df:6d:9f:d2:ce:01:6b: 6e:0f:be:6b:49:5b:b6:cd:d5:ce:a3:04:65:6e:df:70:97:d6: b1:33:30:10:28:86:9b:bb:04:c7:28:80:67:e3:2a:76:7a:95: d2:1d:fe:ff:e6:2f:1d:36:6c:d8:aa:1e:4c:02:8a:53:9e:7c: d9:94:d5:34:fd:37:6b:c2:5e:1f:fd:3c:66:cf:ab:77:73:78: 45:39:db:64:9d:da:0e:4a:2a:52:7c:9b:09:9a:6b:20:49:b0: 11:f7:c0:db:71:9d:f8:85:75:7c:ec:a4:6e:31:6a:5b:81:e0: 17:ef:15:b2:14:a3:36:4f:fe:a7:64:d5:87:dc:94:0a:fe:b5: b5:af:8d:58:28:b8:50:80:de:e1:3c:0e:bd:e0:65:cd:5f:06: 58:3d:12:37:57:42:f6:80:31:e0:9d:98:b1:da:e1:e7:62:5a: 0a:5f:14:14:81:df:7a:0c:26:38:41:b6:8d:2f:57:c4:15:2d: 6b:69:a3:7e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUH4TxMQR1cBMlDXUd2izawGAdj00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MzEzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDFiMGU2ZGE2MWYyZmUxMDU4NTA1ZGI0MzI0ZjNlM2Q5 MDIzMGFkNjc3MTU0NDk3NjZhMjkyYzFhZWZmMDE4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7uxBW97Ss6Q/kiTHfzZf5iu5R+o20wHnz/fVUUG2mOPRX kQdoGHdtrXvqmvIiy4LvoH6jje9zD9zaihkTIt1vggErJbsQpbdHYU55AfZjVyYn mmFznGKBxUIoM+f3W5xsDOzx2vwafzKHnnRCJ3GvvzQwx3gfZpBSRWYhVeqHh3qB dMXd6Y5ZpWuFVV9V0zSBcUKKb+uMJh832qH/TnjHXv2wae3lqTliIh5NJ9HhmhY7 UUEJEBWKCfc8tGZlV0z9sy43zWHSbDf/U6g6bMeTo5tDlzzjuRx1AR37/uxVKVGC Hx6QbO59nXX/rbKsAyAFwAbAC2/2JWxjdgy9qlbZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYcGFWRxHr2muo3EmrC1jIXcBrLswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JiNzVmYzRiLTA2MjctNGM3OS1iNTkxLTMwOGVlZTM0NGU3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhAwDQYJKoZIhvcNAQELBQADggEBADXXJtfXyQe4UrA8y3EK+1YV OIQ6guKgMUEyerdiSiPG2nj8NxvOl4SaQxIxVJfwehp4b9rlsTzJeTotoN3wHBUT 322f0s4Ba24PvmtJW7bN1c6jBGVu33CX1rEzMBAohpu7BMcogGfjKnZ6ldId/v/m Lx02bNiqHkwCilOefNmU1TT9N2vCXh/9PGbPq3dzeEU522Sd2g5KKlJ8mwmaayBJ sBH3wNtxnfiFdXzspG4xaluB4BfvFbIUozZP/qdk1YfclAr+tbWvjVgouFCA3uE8 Dr3gZc1fBlg9EjdXQvaAMeCdmLHa4ediWgpfFBSB33oMJjhBto0vV8QVLWtpo34= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:45 2025 by rpki-client