$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/011a2018-20b6-4386-aacf-19025e8dc9d2.roa File: 011a2018-20b6-4386-aacf-19025e8dc9d2.roa (raw, json) Hash identifier: dUDnBqItAOMzj9UupSFGhdPQosEqqW/Um2Knpdd+r6M= Subject key identifier: 06:90:E9:5B:BB:B6:AE:FA:42:65:12:BC:46:DC:93:87:33:BE:A7:F8 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 18EBC57C4EC6F9399D1DA99EEE1CE106BFCFB459 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/011a2018-20b6-4386-aacf-19025e8dc9d2.roa Signing time: Fri 26 Sep 2025 17:51:13 +0000 ROA not before: Fri 26 Sep 2025 17:51:13 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:30b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:eb:c5:7c:4e:c6:f9:39:9d:1d:a9:9e:ee:1c:e1:06:bf:cf:b4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:51:13 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=6fbcbc68b049e20952c7d4b1de2caf9669e45a50fdd1ca602dc3fc653a93881d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:dd:8c:d7:46:66:2a:c7:86:e8:f2:5e:b1: 48:19:2e:ba:c6:6c:7e:4e:71:32:72:9d:26:bb:2e: fd:4d:e4:c1:49:fe:db:b3:01:e1:46:85:26:e1:fb: 4d:0f:89:e5:f9:d0:e8:d1:95:a0:cd:3d:78:fa:c8: da:5f:aa:5f:8b:c3:aa:7c:49:14:d3:b1:7a:8f:1e: 8a:9e:dc:bd:a3:dc:a9:b8:bb:96:42:e9:47:df:ff: 44:c6:76:f2:a2:85:8a:67:b4:64:a1:90:87:4b:46: 39:18:51:fc:70:e9:a6:b3:5f:e2:18:07:3d:9a:57: 5e:ab:55:e6:c9:37:f3:72:1b:d2:ac:4b:ee:ec:10: a2:32:a7:8a:c7:36:ab:b6:69:0f:97:c9:eb:ce:cb: 17:e7:4f:88:0f:fa:a2:73:87:ff:a8:1e:b6:cf:d7: 28:f5:48:15:cf:57:45:08:d3:66:f3:c4:90:b6:de: af:5e:1e:24:7b:0f:ce:d0:3d:c5:bc:e3:de:4e:93: 8a:1d:ca:ff:df:ee:c7:92:02:ab:0d:cb:ac:06:da: 73:16:d7:cd:6c:a0:06:2a:02:59:eb:5c:3b:7a:12: 6c:3d:c1:66:11:16:10:39:62:48:a8:91:a2:b0:0e: 98:37:48:af:b1:f6:bf:6a:8e:50:54:71:bf:88:91: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:90:E9:5B:BB:B6:AE:FA:42:65:12:BC:46:DC:93:87:33:BE:A7:F8 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/011a2018-20b6-4386-aacf-19025e8dc9d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30b::/48 Signature Algorithm: sha256WithRSAEncryption 7c:31:4d:eb:8e:1e:1a:12:5f:a2:47:ba:3f:ed:65:91:3c:e0: 80:8b:a2:57:f9:27:9e:69:a3:b0:ab:97:fa:78:9b:f3:b4:96: 3a:dc:27:e1:3a:fc:d9:be:e3:a2:f3:62:f8:86:53:23:7f:f5: 59:b9:f6:18:64:93:27:db:dd:9d:81:aa:41:32:de:dd:9f:df: fd:78:b9:eb:f1:e6:e9:97:fa:14:4e:d0:01:3a:f9:a7:6b:1d: 36:aa:cc:b3:4a:0c:15:3f:d3:61:b5:be:cf:88:08:40:22:53: 24:ba:6c:63:04:fd:bd:a1:7a:4f:bb:22:7f:92:09:26:49:31: 4c:57:23:1a:73:7d:da:a5:76:c3:2a:1a:d5:ba:d6:29:ca:de: 67:da:0b:7b:5e:0a:83:13:ca:6c:fe:7f:67:6b:77:90:73:65: 89:bb:bf:33:d9:c9:c1:5d:2a:5a:ba:14:fa:2b:ed:93:ec:22: af:1e:4a:ac:2b:bb:87:a5:e3:9c:94:23:c5:e8:ea:b3:d2:39: 91:4d:94:35:b6:59:cd:2f:bf:be:ac:67:dc:43:f8:20:31:01: 02:9e:3d:09:c5:d5:95:1d:ae:bf:07:1c:5a:9b:ad:43:f0:03: 52:97:17:5a:7d:37:72:68:a6:47:e2:cd:4e:bc:1e:bb:24:d6: 73:22:3c:87 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGOvFfE7G+TmdHame7hzhBr/PtFkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MTEzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmJjYmM2OGIwNDllMjA5NTJjN2Q0YjFkZTJjYWY5NjY5 ZTQ1YTUwZmRkMWNhNjAyZGMzZmM2NTNhOTM4ODFkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAbd2M10ZmKseG6PJesUgZLrrGbH5OcTJynSa7Lv1N5MFJ /tuzAeFGhSbh+00PieX50OjRlaDNPXj6yNpfql+Lw6p8SRTTsXqPHoqe3L2j3Km4 u5ZC6Uff/0TGdvKihYpntGShkIdLRjkYUfxw6aazX+IYBz2aV16rVebJN/NyG9Ks S+7sEKIyp4rHNqu2aQ+XyevOyxfnT4gP+qJzh/+oHrbP1yj1SBXPV0UI02bzxJC2 3q9eHiR7D87QPcW8495Ok4odyv/f7seSAqsNy6wG2nMW181soAYqAlnrXDt6Emw9 wWYRFhA5YkiokaKwDpg3SK+x9r9qjlBUcb+IkR4lAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBpDpW7u2rvpCZRK8RtyThzO+p/gwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzAxMWEyMDE4LTIwYjYtNDM4Ni1hYWNmLTE5MDI1ZThkYzlkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwswDQYJKoZIhvcNAQELBQADggEBAHwxTeuOHhoSX6JHuj/tZZE8 4ICLolf5J55po7Crl/p4m/O0ljrcJ+E6/Nm+46LzYviGUyN/9Vm59hhkkyfb3Z2B qkEy3t2f3/14uevx5umX+hRO0AE6+adrHTaqzLNKDBU/02G1vs+ICEAiUyS6bGME /b2hek+7In+SCSZJMUxXIxpzfdqldsMqGtW61inK3mfaC3teCoMTymz+f2drd5Bz ZYm7vzPZycFdKlq6FPor7ZPsIq8eSqwru4el45yUI8Xo6rPSOZFNlDW2Wc0vv76s Z9xD+CAxAQKePQnF1ZUdrr8HHFqbrUPwA1KXF1p9N3JopkfizU68Hrsk1nMiPIc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:51 2025 by rpki-client