$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f8f2f34c-4312-48d4-bd05-c1577ed6cfd6.roa File: f8f2f34c-4312-48d4-bd05-c1577ed6cfd6.roa (raw, json) Hash identifier: RdXsJj2zX9ygXV/8rg92bjE/OH8b0rZeF67snYqg78Q= Subject key identifier: A7:55:48:D6:EE:0A:23:2F:F5:85:A2:1F:3F:E2:8F:7D:51:B3:6C:09 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4559D919D824453FA856BBEE254C79C5A2302B80 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f8f2f34c-4312-48d4-bd05-c1577ed6cfd6.roa Signing time: Mon 06 Oct 2025 17:14:09 +0000 ROA not before: Mon 06 Oct 2025 17:14:09 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:59:d9:19:d8:24:45:3f:a8:56:bb:ee:25:4c:79:c5:a2:30:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:14:09 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=7ba5e9d61e4dbfc9cfe46f316bddc0e5742bcfe710015b697eafbe187a4372bd, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:25:a6:de:ff:f7:64:68:d1:90:02:97:0c: d5:4b:e6:4e:e7:88:3b:e6:f8:17:78:b2:59:c1:f3: 3b:22:7c:04:8d:3c:2c:48:84:de:7f:3e:97:cb:e9: e5:8e:9e:8c:7f:73:f5:fa:28:cf:b9:9b:38:3e:6b: 91:77:29:6b:d7:ab:ca:2f:a8:44:eb:dd:d8:64:bd: a3:a3:0d:d6:ad:f0:00:e3:31:b7:53:a4:37:b0:8d: f2:3d:d5:55:c6:c2:4b:24:4f:ad:dd:24:70:76:54: bb:6e:da:50:85:bd:04:c4:de:69:bc:ea:9b:a0:9d: 61:7c:4f:b3:b4:ed:f4:63:00:95:09:f1:64:fe:aa: 60:dc:20:ce:ea:08:f3:23:cf:8d:50:0c:fd:39:a9: 1c:86:06:34:ae:36:c2:03:74:ac:6e:9d:1b:9e:9c: 22:cc:f3:30:22:f3:38:df:3b:32:b8:af:68:a7:dc: 0c:3a:e7:3b:e9:13:71:ff:fc:ba:5e:6b:ea:f7:4d: d1:aa:50:40:eb:93:52:f7:1e:d2:0c:9b:a5:cd:e7: ca:e8:00:23:78:aa:52:e7:a4:28:9d:96:65:c3:06: 1d:3e:7d:1b:59:7b:dc:0e:d9:08:28:9b:aa:58:00: cd:96:b3:e9:73:a8:d7:3e:00:c1:15:b7:7a:49:44: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:55:48:D6:EE:0A:23:2F:F5:85:A2:1F:3F:E2:8F:7D:51:B3:6C:09 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f8f2f34c-4312-48d4-bd05-c1577ed6cfd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c14::/48 Signature Algorithm: sha256WithRSAEncryption 6a:64:fa:82:58:d5:54:5f:4f:cd:96:57:f5:bb:4c:18:a5:da: 7c:29:7a:b7:99:79:fb:6a:49:d1:1f:ba:43:78:4b:93:42:3b: 2f:da:70:b4:9a:d9:f1:30:5d:d9:4f:b5:09:66:47:6a:cf:ef: 53:9e:0a:14:ee:72:c3:47:3b:9b:db:6b:7d:ac:3f:45:61:4a: 84:25:0b:5e:93:0c:fc:0d:f3:7e:e9:3c:a8:1f:2f:bc:39:5f: b2:8a:c4:2e:a4:87:2d:a3:23:f3:f3:2d:39:b8:08:98:9c:9e: 05:c9:8b:4b:95:78:f6:17:66:91:aa:f9:12:28:62:b5:78:1b: a6:9d:e1:a3:d8:da:2d:67:a4:87:f2:d7:74:20:d5:c1:1b:99: 9a:ce:25:09:bc:3d:43:8e:89:d5:0b:2e:ce:4a:40:30:f2:81: 9b:3a:1f:bf:b3:f5:1f:4b:77:1b:7f:7b:c7:87:32:57:a1:8f: 57:12:49:47:c6:6a:af:c1:38:99:ab:95:84:0c:4c:9d:fb:d6: 3a:ae:91:bd:49:a3:1f:14:54:c4:18:70:34:6c:b6:c2:9a:fd: ef:59:62:04:28:ee:61:fb:46:74:cc:65:a1:e9:ef:ad:1d:52: a3:f0:ab:95:4b:ce:a2:16:13:16:19:ae:a9:0f:c5:bb:2a:f0: 9a:89:98:2c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURVnZGdgkRT+oVrvuJUx5xaIwK4AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxNDA5WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YmE1ZTlkNjFlNGRiZmM5Y2ZlNDZmMzE2YmRkYzBlNTc0 MmJjZmU3MTAwMTViNjk3ZWFmYmUxODdhNDM3MmJkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrgSWm3v/3ZGjRkAKXDNVL5k7niDvm+Bd4slnB8zsifASN PCxIhN5/PpfL6eWOnox/c/X6KM+5mzg+a5F3KWvXq8ovqETr3dhkvaOjDdat8ADj MbdTpDewjfI91VXGwkskT63dJHB2VLtu2lCFvQTE3mm86pugnWF8T7O07fRjAJUJ 8WT+qmDcIM7qCPMjz41QDP05qRyGBjSuNsIDdKxunRuenCLM8zAi8zjfOzK4r2in 3Aw65zvpE3H//Lpea+r3TdGqUEDrk1L3HtIMm6XN58roACN4qlLnpCidlmXDBh0+ fRtZe9wO2Qgom6pYAM2Ws+lzqNc+AMEVt3pJRE2zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUp1VI1u4KIy/1haIfP+KPfVGzbAkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y4ZjJmMzRjLTQzMTItNDhkNC1iZDA1LWMxNTc3ZWQ2Y2ZkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBQwDQYJKoZIhvcNAQELBQADggEBAGpk+oJY1VRfT82WV/W7TBil 2nwpereZeftqSdEfukN4S5NCOy/acLSa2fEwXdlPtQlmR2rP71OeChTucsNHO5vb a32sP0VhSoQlC16TDPwN837pPKgfL7w5X7KKxC6khy2jI/PzLTm4CJicngXJi0uV ePYXZpGq+RIoYrV4G6ad4aPY2i1npIfy13Qg1cEbmZrOJQm8PUOOidULLs5KQDDy gZs6H7+z9R9Ldxt/e8eHMlehj1cSSUfGaq/BOJmrlYQMTJ371jqukb1Jox8UVMQY cDRstsKa/e9ZYgQo7mH7RnTMZaHp760dUqPwq5VLzqIWExYZrqkPxbsq8JqJmCw= -----END CERTIFICATE-----Generated at Wed Oct 8 21:30:03 2025 by rpki-client