$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/edc37404-046c-4a91-b819-7b616a86162f.roa File: edc37404-046c-4a91-b819-7b616a86162f.roa (raw, json) Hash identifier: E4JGCCxGCg76kbYx752//ahqGCw2sw1+25mpL7+2v+s= Subject key identifier: 79:C8:DF:D9:02:AB:50:4E:22:B8:DF:7C:80:16:46:CB:D0:6F:6A:FB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 07A54FF6F0C285BA74709A94E32A71FF01204BDF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/edc37404-046c-4a91-b819-7b616a86162f.roa Signing time: Mon 06 Oct 2025 17:14:08 +0000 ROA not before: Mon 06 Oct 2025 17:14:08 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a5:4f:f6:f0:c2:85:ba:74:70:9a:94:e3:2a:71:ff:01:20:4b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:14:08 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=f39322bed42425d5e9551f605d948fd6c348343d335aba6901a7a3e5896be96c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:a9:2f:fb:73:72:82:77:9e:9b:d5:39:3c: ac:54:22:9c:82:6c:68:d4:0f:23:e9:d9:d3:2c:c0: d6:57:31:24:0b:a8:7f:32:74:01:d2:43:5e:5b:41: f9:6f:7f:a5:35:8b:89:55:60:75:87:4c:c8:5e:14: e4:bd:ad:15:91:e3:5e:94:9a:b8:ea:7d:65:2b:ff: 51:e3:a8:91:98:db:2c:8b:84:dc:7f:e7:a7:ff:7f: b3:df:22:d1:b2:58:56:59:cf:1a:56:ea:f0:55:d6: 0c:1f:98:22:4f:6b:ff:3e:51:9e:ba:04:f2:94:7f: 9f:f4:2a:b6:04:8f:43:c8:19:60:00:7d:ad:50:75: 37:9d:6e:ca:a2:0a:d5:f0:70:18:8f:ac:2e:49:28: 3a:7e:df:33:8e:31:12:8c:77:0c:56:84:0f:71:b4: 86:1a:3e:8b:aa:85:87:e3:24:df:5d:6a:51:cd:c7: 7a:da:b1:85:8b:4b:03:17:82:b8:3b:e1:44:bc:5d: d0:83:81:1f:82:1c:25:02:d1:4f:ce:f6:93:3f:05: 87:f1:5c:16:89:e6:1c:f1:7d:a1:a7:ea:13:db:c5: 57:a5:d8:b0:2b:8f:2d:46:da:73:d2:df:27:f9:78: 64:f9:77:00:f4:f2:29:3e:b0:78:ae:15:e0:84:64: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C8:DF:D9:02:AB:50:4E:22:B8:DF:7C:80:16:46:CB:D0:6F:6A:FB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/edc37404-046c-4a91-b819-7b616a86162f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c13::/48 Signature Algorithm: sha256WithRSAEncryption 8c:59:33:e1:1f:d4:c3:ad:c2:b9:d7:97:58:ae:a5:ff:4d:e0: 15:7e:01:b9:b1:e7:bf:14:7e:42:d8:13:f6:72:5b:a2:64:bb: 34:5e:1f:52:50:9f:2e:5c:81:21:fe:45:ea:a6:ce:8d:b1:39: 52:14:4f:b1:35:c4:54:46:e0:28:80:4f:7a:b6:dc:b0:ce:12: f3:49:10:53:1e:fe:54:84:8e:8e:b7:10:28:55:01:d0:26:24: f4:0f:e5:32:4f:cd:42:ff:07:da:2f:bf:02:cc:ea:c4:59:9a: fc:c6:d0:38:e8:5c:94:31:12:74:6f:4e:7a:c2:70:6d:70:59: 30:ff:a6:15:3c:0a:9f:bb:5d:85:d3:ca:16:ba:44:98:87:c1: fc:3d:e1:35:35:0c:89:da:57:8d:38:c1:b8:24:8c:be:6f:f7: f5:0f:19:04:6f:05:8c:ba:6a:c7:3d:53:89:11:ed:14:b5:21: 1a:d8:35:fe:e8:e8:6c:b8:7c:d2:b7:ba:cd:e7:56:e3:05:58: c7:59:e7:fd:62:16:be:a5:90:03:e7:61:2b:7b:be:ca:76:5c: 6e:7e:9b:b0:c3:57:f6:b0:f2:91:54:03:61:80:d4:0a:ea:7b: 0e:9b:c4:5b:2c:e2:3f:80:42:00:68:3e:d9:9e:f7:e5:30:19: d2:0e:7b:b1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB6VP9vDChbp0cJqU4ypx/wEgS98wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxNDA4WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzkzMjJiZWQ0MjQyNWQ1ZTk1NTFmNjA1ZDk0OGZkNmMz NDgzNDNkMzM1YWJhNjkwMWE3YTNlNTg5NmJlOTZjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC68Kkv+3Nygneem9U5PKxUIpyCbGjUDyPp2dMswNZXMSQL qH8ydAHSQ15bQflvf6U1i4lVYHWHTMheFOS9rRWR416UmrjqfWUr/1HjqJGY2yyL hNx/56f/f7PfItGyWFZZzxpW6vBV1gwfmCJPa/8+UZ66BPKUf5/0KrYEj0PIGWAA fa1QdTedbsqiCtXwcBiPrC5JKDp+3zOOMRKMdwxWhA9xtIYaPouqhYfjJN9dalHN x3rasYWLSwMXgrg74US8XdCDgR+CHCUC0U/O9pM/BYfxXBaJ5hzxfaGn6hPbxVel 2LArjy1G2nPS3yf5eGT5dwD08ik+sHiuFeCEZOMfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUecjf2QKrUE4iuN98gBZGy9BvavswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2VkYzM3NDA0LTA0NmMtNGE5MS1iODE5LTdiNjE2YTg2MTYyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBMwDQYJKoZIhvcNAQELBQADggEBAIxZM+Ef1MOtwrnXl1iupf9N 4BV+Abmx578UfkLYE/ZyW6JkuzReH1JQny5cgSH+Reqmzo2xOVIUT7E1xFRG4CiA T3q23LDOEvNJEFMe/lSEjo63EChVAdAmJPQP5TJPzUL/B9ovvwLM6sRZmvzG0Djo XJQxEnRvTnrCcG1wWTD/phU8Cp+7XYXTyha6RJiHwfw94TU1DInaV404wbgkjL5v 9/UPGQRvBYy6asc9U4kR7RS1IRrYNf7o6Gy4fNK3us3nVuMFWMdZ5/1iFr6lkAPn YSt7vsp2XG5+m7DDV/aw8pFUA2GA1Arqew6bxFss4j+AQgBoPtme9+UwGdIOe7E= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:38 2025 by rpki-client