$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa File: bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa (raw, json) Hash identifier: I5dAUnoCSZhA+89f1K57Bjrf53Qu+5FLpAcnizGPDlo= Subject key identifier: E1:A8:00:71:B3:03:90:1D:11:24:DF:EA:B7:D2:5F:F7:CE:D4:49:5B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4500FD9958D7A8472E243B1369D281A8159A9B6D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa Signing time: Fri 26 Sep 2025 17:50:18 +0000 ROA not before: Fri 26 Sep 2025 17:50:18 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:398::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:00:fd:99:58:d7:a8:47:2e:24:3b:13:69:d2:81:a8:15:9a:9b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:50:18 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=05b97cfc87affea6893b74eda08c3aa653d38dde9a1f9cf650b1aa32aeb49cee, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:42:45:da:41:02:1b:ca:60:f3:7c:51:bd:30: c0:f9:21:78:93:e8:0c:d7:90:24:ae:71:1f:4b:dc: 6d:6b:be:03:7c:41:89:18:59:5d:2b:42:75:32:c5: d8:d3:62:1e:65:e3:1d:e6:4a:75:e7:c6:e9:e9:b1: 2c:0f:9f:67:ce:57:81:65:97:63:a4:0d:75:3e:e1: f9:54:8a:6e:3c:29:b6:bd:e7:c5:d3:5a:e7:68:2d: b7:bc:9f:c5:69:b9:bc:79:5c:20:fc:6c:d3:03:ce: 8d:0f:a0:3e:80:ee:fa:d4:04:99:db:f7:41:73:ef: 0d:42:ec:61:a6:ed:40:a0:f3:c8:22:8c:4a:ef:10: d0:50:80:56:f0:6d:7a:7d:5f:b9:92:5d:ef:96:eb: 10:69:37:cd:36:5f:cb:42:50:a6:92:57:67:af:6c: 35:3b:12:ef:ff:ce:e6:b0:51:45:b3:45:41:e6:7d: c7:bd:2c:ea:69:16:04:32:74:35:1b:56:97:eb:00: 14:fa:4d:57:2d:be:7e:ef:86:c6:7d:6e:2c:d0:c7: 40:35:e9:39:30:28:ea:49:8b:7f:e1:f6:8e:9e:b8: 52:fe:95:9d:99:e7:2d:e2:31:43:01:fa:f5:7e:5d: 0f:ab:f7:67:8a:6c:6f:5e:68:d9:11:d9:37:0a:23: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A8:00:71:B3:03:90:1D:11:24:DF:EA:B7:D2:5F:F7:CE:D4:49:5B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9c1d0b-d9ec-4455-97bd-0d6a4062a922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:398::/48 Signature Algorithm: sha256WithRSAEncryption 2e:e0:5e:fd:b1:e2:71:af:57:20:b9:de:16:6d:dd:41:b0:49: d9:be:ac:be:0e:8c:bd:84:ba:55:c2:e2:9f:2a:23:e2:18:ce: c2:a6:a1:df:88:61:0d:27:59:53:30:55:7d:af:e8:8d:d8:3e: 19:ad:1c:42:bc:10:2b:9e:9a:53:4a:4a:a8:b1:41:97:8d:71: 0d:92:2e:f6:05:17:63:13:dd:c2:e8:32:25:00:0e:70:9f:42: fa:b2:cd:4e:4b:70:38:f3:50:2a:46:7c:a6:40:5e:9c:9b:6e: a1:38:48:70:4c:1f:2f:25:4b:9f:3f:75:90:23:4e:8c:9f:52: 07:53:47:fb:97:73:62:d1:d7:8e:12:78:af:56:b2:08:08:42: 6d:6c:ef:51:cf:f0:67:46:44:8e:44:66:b5:74:c9:ba:f6:12: 36:1c:ee:57:fa:16:9b:2a:fe:af:4c:88:12:83:2f:b2:4e:e5: ce:64:7d:d8:a4:75:33:7c:3a:94:0e:f2:75:eb:d0:eb:b4:af: 5e:b4:f1:18:38:45:f7:8f:4c:77:bc:5f:18:76:7b:56:7b:0c: f3:bb:fa:41:6a:b8:cf:61:c6:41:9d:43:06:cf:52:a9:09:2d: fb:1d:c2:70:48:0a:61:6e:fd:53:8f:d1:b2:1f:b2:a8:60:7b: 56:50:3f:fb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURQD9mVjXqEcuJDsTadKBqBWam20wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MDE4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNWI5N2NmYzg3YWZmZWE2ODkzYjc0ZWRhMDhjM2FhNjUz ZDM4ZGRlOWExZjljZjY1MGIxYWEzMmFlYjQ5Y2VlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuQkXaQQIbymDzfFG9MMD5IXiT6AzXkCSucR9L3G1rvgN8 QYkYWV0rQnUyxdjTYh5l4x3mSnXnxunpsSwPn2fOV4Fll2OkDXU+4flUim48Kba9 58XTWudoLbe8n8Vpubx5XCD8bNMDzo0PoD6A7vrUBJnb90Fz7w1C7GGm7UCg88gi jErvENBQgFbwbXp9X7mSXe+W6xBpN802X8tCUKaSV2evbDU7Eu//zuawUUWzRUHm fce9LOppFgQydDUbVpfrABT6TVctvn7vhsZ9bizQx0A16TkwKOpJi3/h9o6euFL+ lZ2Z5y3iMUMB+vV+XQ+r92eKbG9eaNkR2TcKI6A5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4agAcbMDkB0RJN/qt9Jf987USVswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JjOWMxZDBiLWQ5ZWMtNDQ1NS05N2JkLTBkNmE0MDYyYTkyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5gwDQYJKoZIhvcNAQELBQADggEBAC7gXv2x4nGvVyC53hZt3UGw Sdm+rL4OjL2EulXC4p8qI+IYzsKmod+IYQ0nWVMwVX2v6I3YPhmtHEK8ECuemlNK SqixQZeNcQ2SLvYFF2MT3cLoMiUADnCfQvqyzU5LcDjzUCpGfKZAXpybbqE4SHBM Hy8lS58/dZAjToyfUgdTR/uXc2LR144SeK9WsggIQm1s71HP8GdGRI5EZrV0ybr2 EjYc7lf6Fpsq/q9MiBKDL7JO5c5kfdikdTN8OpQO8nXr0Ou0r1608Rg4RfePTHe8 Xxh2e1Z7DPO7+kFquM9hxkGdQwbPUqkJLfsdwnBICmFu/VOP0bIfsqhge1ZQP/s= -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:58 2025 by rpki-client