$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa File: bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa (raw, json) Hash identifier: 85BFHtyALASqIXwnpwpB8ZUAW664AwNgMiey4le4hdo= Subject key identifier: 6B:11:C9:F3:F4:D6:D3:B3:33:F8:69:6A:46:6E:99:30:B9:BC:45:37 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 740D1391F0C06C6073D6EBACA61352D07AD76FA1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa Signing time: Mon 06 Oct 2025 17:14:04 +0000 ROA not before: Mon 06 Oct 2025 17:14:04 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0d:13:91:f0:c0:6c:60:73:d6:eb:ac:a6:13:52:d0:7a:d7:6f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:14:04 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=5d56dd77859999e2440e6ac6a2172791cb6528baa484a2ec492dc4c58e0614d5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:33:4e:0e:25:36:60:25:35:b9:b1:43:9f: 60:8c:14:74:61:e5:57:7c:d2:8e:b7:30:02:40:9e: 70:ad:49:fa:63:c4:43:2f:64:5d:29:83:d7:57:9f: 7c:a7:f6:1e:ae:e6:51:8e:af:35:99:6a:32:89:2a: 10:97:d1:b4:57:48:9a:95:a6:41:6d:3f:7c:b5:67: 19:8f:4f:6b:3e:2c:11:82:90:25:7a:ab:ef:77:0b: 8b:7c:ac:a6:89:76:c3:3e:bd:22:28:7c:7a:27:0d: 03:e7:a3:e5:3b:e9:ba:11:0e:de:6d:bd:ad:d7:53: 43:4c:91:44:f0:d5:cc:d6:be:9c:84:3d:14:22:6b: dc:5d:c9:c6:e8:1a:9f:79:4a:fe:d0:93:df:63:61: 05:51:ef:c9:84:ab:d9:a8:c5:50:d0:51:50:f4:70: cc:79:d1:00:d1:b4:ef:b8:41:ac:ea:6b:aa:67:4a: a3:fa:e9:fd:63:74:a4:7c:32:1b:9a:d7:43:ff:a6: 07:0c:e4:d4:f5:be:04:6c:6e:ca:1e:43:3c:3a:19: a9:c1:d5:3a:9b:f5:95:b1:f7:7f:22:b5:c7:0e:68: 54:ce:98:d2:d2:bd:a4:12:b5:10:8c:ce:33:2c:fa: bd:bd:df:bf:f7:47:bb:ff:bf:c1:cb:28:db:73:a7: f2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:11:C9:F3:F4:D6:D3:B3:33:F8:69:6A:46:6E:99:30:B9:BC:45:37 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c11::/48 Signature Algorithm: sha256WithRSAEncryption 12:b5:74:38:dd:12:6c:df:c2:c3:dc:af:d8:8a:55:e6:43:13: a9:9c:d1:07:48:a2:5e:65:f6:c8:df:07:ab:78:aa:3e:bc:a2: ff:bc:3e:7d:25:6d:b9:ef:cf:7d:d6:15:ae:7d:b2:d0:1d:14: b6:df:35:5b:2e:72:c0:3c:67:1f:a5:75:21:96:1c:98:13:f0: 32:4e:49:f6:9b:17:bd:50:56:29:f4:70:97:90:4c:95:29:cc: dd:69:af:83:95:c3:6b:ff:14:dd:ca:2d:5b:46:db:38:d3:48: 0a:68:47:72:ec:5f:ff:c4:45:27:cc:f1:48:c7:9f:af:1c:88: 01:bc:61:3c:f2:9c:d2:0b:41:2b:9b:7c:61:16:48:d7:2a:7f: ae:dd:85:07:0a:77:ea:33:4f:70:47:e4:d3:f5:3d:c1:dc:07: df:83:58:f1:b9:a0:03:ba:44:54:7b:e4:c8:0b:1f:9c:cc:ac: a1:d2:0d:8b:0e:e5:be:17:e3:ed:f1:05:f8:af:3e:b8:b0:cb: 8d:db:22:93:f0:69:10:58:49:32:52:31:85:40:a1:76:92:50: 85:1f:5b:ae:36:8e:09:bb:cb:b4:65:ac:23:54:2d:07:4b:47: c6:68:18:79:fe:08:9e:66:60:9e:9a:37:d4:33:4b:2e:aa:c5: bb:a1:e5:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdA0TkfDAbGBz1uusphNS0HrXb6EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxNDA0WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDU2ZGQ3Nzg1OTk5OWUyNDQwZTZhYzZhMjE3Mjc5MWNi NjUyOGJhYTQ4NGEyZWM0OTJkYzRjNThlMDYxNGQ1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbpTNODiU2YCU1ubFDn2CMFHRh5Vd80o63MAJAnnCtSfpj xEMvZF0pg9dXn3yn9h6u5lGOrzWZajKJKhCX0bRXSJqVpkFtP3y1ZxmPT2s+LBGC kCV6q+93C4t8rKaJdsM+vSIofHonDQPno+U76boRDt5tva3XU0NMkUTw1czWvpyE PRQia9xdycboGp95Sv7Qk99jYQVR78mEq9moxVDQUVD0cMx50QDRtO+4Qazqa6pn SqP66f1jdKR8Mhua10P/pgcM5NT1vgRsbsoeQzw6GanB1Tqb9ZWx938itccOaFTO mNLSvaQStRCMzjMs+r2937/3R7v/v8HLKNtzp/JfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaxHJ8/TW07Mz+GlqRm6ZMLm8RTcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JjM2M1MGZjLTQ5OTMtNGMwZi04NzE4LWY2NmZjOGZjY2NlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBEwDQYJKoZIhvcNAQELBQADggEBABK1dDjdEmzfwsPcr9iKVeZD E6mc0QdIol5l9sjfB6t4qj68ov+8Pn0lbbnvz33WFa59stAdFLbfNVsucsA8Zx+l dSGWHJgT8DJOSfabF71QVin0cJeQTJUpzN1pr4OVw2v/FN3KLVtG2zjTSApoR3Ls X//ERSfM8UjHn68ciAG8YTzynNILQSubfGEWSNcqf67dhQcKd+ozT3BH5NP1PcHc B9+DWPG5oAO6RFR75MgLH5zMrKHSDYsO5b4X4+3xBfivPriwy43bIpPwaRBYSTJS MYVAoXaSUIUfW642jgm7y7RlrCNULQdLR8ZoGHn+CJ5mYJ6aN9QzSy6qxbuh5ds= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:08 2025 by rpki-client