$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/069c93d3-1d39-46e0-a625-f838202f98cb.roa File: 069c93d3-1d39-46e0-a625-f838202f98cb.roa (raw, json) Hash identifier: hqLdrfGLGsoGxcHnrsCDaONWfMgNOEOVpvatTWU0y/8= Subject key identifier: 6F:7E:EF:88:8E:E6:0B:41:6D:02:72:34:5F:05:83:E5:97:6B:4F:3B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 79F9B16A1EC9AC803178026644466BA27D947A2F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/069c93d3-1d39-46e0-a625-f838202f98cb.roa Signing time: Tue 21 Oct 2025 12:30:25 +0000 ROA not before: Tue 21 Oct 2025 12:30:25 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:627::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f9:b1:6a:1e:c9:ac:80:31:78:02:66:44:46:6b:a2:7d:94:7a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:30:25 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=0ec55340c315a641dcd019dbd166ee8ce770ddcb95309cbfe5264efc43347143, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:9f:22:49:08:9e:02:02:06:1f:7d:e7:3e: c0:d6:0b:62:26:c6:b1:76:35:bc:7f:08:18:06:6e: 8f:bd:d4:ef:79:d7:ae:ef:d1:6b:cf:95:d8:37:99: 7c:49:32:23:e0:fa:aa:6e:fb:32:ad:04:e0:a0:a0: 4a:26:7f:e0:f0:06:1d:c4:1f:c5:22:c8:87:4d:79: 0a:44:97:90:8d:c4:fb:9e:45:de:87:e7:86:d3:69: 60:0e:d4:f6:4f:39:aa:1b:3b:82:87:65:29:54:2c: 1f:18:84:0f:dc:d5:f8:7c:5e:4a:2a:e8:4d:61:80: 42:c8:df:c0:4a:46:a4:d5:50:8a:7d:ec:d1:89:5a: 01:d4:f6:8c:1b:c6:28:fd:7b:49:e0:51:d2:e9:70: b1:81:9a:0c:36:1e:a8:a2:f4:ad:61:a7:4a:b1:c7: aa:26:04:68:f7:be:8f:f2:19:c1:91:af:f0:b6:90: 1d:f1:d7:be:89:3d:5a:68:ff:53:7f:4c:4f:77:98: 1c:0b:90:c4:91:86:86:60:99:4f:b3:e3:71:29:bb: a6:a0:ae:ba:32:d7:5a:11:27:4f:90:60:67:58:d3: f2:3f:53:ce:6d:26:8c:2c:88:5f:43:ec:5f:27:59: aa:4e:86:1a:f6:31:17:b1:56:bf:1a:d7:04:c6:5a: b9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7E:EF:88:8E:E6:0B:41:6D:02:72:34:5F:05:83:E5:97:6B:4F:3B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/069c93d3-1d39-46e0-a625-f838202f98cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:627::/48 Signature Algorithm: sha256WithRSAEncryption 54:6f:ee:7a:13:37:63:6d:fa:09:40:96:ac:88:f9:94:95:cf: 3b:05:c2:36:dd:5e:7c:e6:99:85:ce:21:46:8e:23:14:7a:76: 30:16:fd:bb:d3:06:25:54:dd:84:2a:23:47:eb:2e:29:9b:4a: 58:53:3f:4a:de:60:ca:49:6e:c2:92:fc:da:5f:81:e6:47:d8: 58:da:fe:aa:de:09:25:98:f0:38:15:88:a3:a3:d2:0d:3e:15: 31:54:3d:83:55:69:33:b6:df:63:60:bf:a7:86:01:10:6a:c4: c8:08:30:40:3b:38:64:4b:78:1a:94:a8:19:a5:af:e4:e5:64: 7f:47:18:eb:2e:27:6b:7f:88:68:b8:40:bd:43:58:b2:5c:fe: 72:ec:0e:90:95:33:92:9c:b5:4c:aa:ab:2f:3d:64:20:15:ce: 3f:00:a1:7d:c8:a9:de:a2:51:97:30:60:3c:4e:d3:65:87:26: d4:e6:60:d6:0b:4f:15:4b:16:c5:11:6b:f9:07:b7:cc:f9:85: 5d:3b:28:f7:7c:8f:a6:58:f0:5c:d9:2b:cd:8e:0c:45:2f:a4: 0c:34:8a:25:fd:5b:06:66:af:a7:c4:ee:57:c2:e0:a9:c4:37: 34:6d:ee:05:cd:7f:87:ba:49:9b:04:5e:d3:a5:31:64:96:67: 0f:89:fa:c6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUefmxah7JrIAxeAJmREZron2Uei8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIzMDI1WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWM1NTM0MGMzMTVhNjQxZGNkMDE5ZGJkMTY2ZWU4Y2U3 NzBkZGNiOTUzMDljYmZlNTI2NGVmYzQzMzQ3MTQzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCORp8iSQieAgIGH33nPsDWC2ImxrF2Nbx/CBgGbo+91O95 167v0WvPldg3mXxJMiPg+qpu+zKtBOCgoEomf+DwBh3EH8UiyIdNeQpEl5CNxPue Rd6H54bTaWAO1PZPOaobO4KHZSlULB8YhA/c1fh8Xkoq6E1hgELI38BKRqTVUIp9 7NGJWgHU9owbxij9e0ngUdLpcLGBmgw2Hqii9K1hp0qxx6omBGj3vo/yGcGRr/C2 kB3x176JPVpo/1N/TE93mBwLkMSRhoZgmU+z43Epu6agrroy11oRJ0+QYGdY0/I/ U85tJowsiF9D7F8nWapOhhr2MRexVr8a1wTGWrl/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUb37viI7mC0FtAnI0XwWD5ZdrTzswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA2OWM5M2QzLTFkMzktNDZlMC1hNjI1LWY4MzgyMDJmOThjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABicwDQYJKoZIhvcNAQELBQADggEBAFRv7noTN2Nt+glAlqyI+ZSV zzsFwjbdXnzmmYXOIUaOIxR6djAW/bvTBiVU3YQqI0frLimbSlhTP0reYMpJbsKS /NpfgeZH2Fja/qreCSWY8DgViKOj0g0+FTFUPYNVaTO232Ngv6eGARBqxMgIMEA7 OGRLeBqUqBmlr+TlZH9HGOsuJ2t/iGi4QL1DWLJc/nLsDpCVM5KctUyqqy89ZCAV zj8AoX3Iqd6iUZcwYDxO02WHJtTmYNYLTxVLFsURa/kHt8z5hV07KPd8j6ZY8FzZ K82ODEUvpAw0iiX9WwZmr6fE7lfC4KnENzRt7gXNf4e6SZsEXtOlMWSWZw+J+sY= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:35 2025 by rpki-client