$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/34aa606e-0ded-49e0-8124-2799643cf271.roa File: 34aa606e-0ded-49e0-8124-2799643cf271.roa (raw, json) Hash identifier: vLI3TaVWjcOvrEUQLVelatuyBamSgmoQ/Pa9xlmcHSg= Subject key identifier: 8B:7D:63:A3:EB:6D:99:52:11:FE:C7:2A:53:6B:BD:72:69:73:16:39 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 04F249096DEB7CC4497F12520E502FAC31302D79 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/34aa606e-0ded-49e0-8124-2799643cf271.roa Signing time: Tue 21 Oct 2025 12:30:18 +0000 ROA not before: Tue 21 Oct 2025 12:30:18 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f2:49:09:6d:eb:7c:c4:49:7f:12:52:0e:50:2f:ac:31:30:2d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:30:18 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=209cffe39c1d0ccd91eb6021fa9cc8d2f163d5e24bce220a4d81f177eca926e0, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:ee:77:1a:45:c9:54:88:fd:09:76:eb:ff: 6d:03:4c:3e:ac:26:da:8d:6e:07:4a:d4:67:b8:a8: ab:b8:21:4a:db:6c:80:fa:74:70:c3:39:0d:6c:d1: 8b:c5:8f:bc:55:34:fc:82:16:e9:7e:28:1b:cc:b2: 14:9f:9f:1a:af:1a:a7:31:97:67:e4:e2:39:c1:c3: 62:f3:53:04:e2:2b:ca:e8:d5:10:fe:ed:f5:70:d2: d0:dd:ca:f7:a0:7d:a6:49:24:90:f8:88:20:18:dd: aa:d5:6e:5f:41:8a:b4:2c:3f:6a:a5:cb:a1:26:7a: e8:af:a9:6f:d3:3b:0f:64:a1:1b:62:e7:07:97:68: e4:ff:e8:ea:64:7a:46:b7:62:2f:b0:f0:ff:31:bd: a8:27:01:91:4d:27:6e:16:74:29:60:9e:7d:69:0b: 0b:bc:d9:d0:82:64:1e:a7:58:db:a8:13:e1:2a:24: c5:b3:36:2f:2c:c0:0a:cf:ad:f2:4a:58:b3:fc:34: 2f:af:cc:b0:1d:97:03:9e:c8:6a:1e:3c:da:54:5b: a6:0f:28:19:88:86:f7:61:4b:4c:7c:ad:a3:9d:2d: 1f:1a:f5:a3:a0:11:10:72:25:88:93:0e:80:cf:16: bc:75:ba:20:d8:0d:c1:f0:50:9a:65:54:c7:f8:da: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7D:63:A3:EB:6D:99:52:11:FE:C7:2A:53:6B:BD:72:69:73:16:39 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/34aa606e-0ded-49e0-8124-2799643cf271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:399::/48 Signature Algorithm: sha256WithRSAEncryption 6c:10:05:3d:07:20:28:00:50:02:21:b5:a8:ad:d8:a0:a2:3a: 83:89:77:e6:9b:ed:17:f3:11:0e:d2:97:ad:ff:e5:42:77:45: 08:6d:bd:6a:8c:be:b2:f9:fb:78:0f:3f:33:64:2b:ca:59:97: 2d:7d:54:73:b9:28:71:59:a9:38:5e:e9:3e:21:86:64:81:fd: 74:39:eb:a2:b5:6d:21:9e:b0:3d:ae:0c:22:4a:28:76:5e:b7: 5c:53:a2:47:3e:34:10:05:50:2a:92:87:83:c4:6e:8b:ac:32: 7e:80:b0:ea:46:fd:3b:90:ee:41:d4:36:23:cb:b9:49:9c:63: 96:f6:49:4d:c1:ad:6a:38:4e:b2:e5:4b:0b:39:fa:6c:cd:af: 8f:a4:fb:4e:0d:7b:e4:a0:6b:18:b7:e4:1c:a4:b8:2d:44:7c: e4:21:5b:63:f6:c5:0e:36:fe:bb:89:c4:b7:a1:4b:c1:ce:66: aa:d5:1d:17:ef:ac:60:1b:e4:90:09:cc:d2:d2:c2:61:0e:f2: f9:c6:7f:9c:99:cd:88:11:46:5b:42:cc:60:0c:a6:6a:31:65: 5d:b4:b2:86:76:7e:2c:91:82:51:f9:c7:4d:3f:a0:91:27:e0: 3e:31:45:a9:c1:1b:24:3e:f7:da:4e:a8:ac:54:91:52:fa:92: 84:de:b0:7a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBPJJCW3rfMRJfxJSDlAvrDEwLXkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIzMDE4WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDljZmZlMzljMWQwY2NkOTFlYjYwMjFmYTljYzhkMmYx NjNkNWUyNGJjZTIyMGE0ZDgxZjE3N2VjYTkyNmUwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWue53GkXJVIj9CXbr/20DTD6sJtqNbgdK1Ge4qKu4IUrb bID6dHDDOQ1s0YvFj7xVNPyCFul+KBvMshSfnxqvGqcxl2fk4jnBw2LzUwTiK8ro 1RD+7fVw0tDdyvegfaZJJJD4iCAY3arVbl9BirQsP2qly6EmeuivqW/TOw9koRti 5weXaOT/6Opkeka3Yi+w8P8xvagnAZFNJ24WdClgnn1pCwu82dCCZB6nWNuoE+Eq JMWzNi8swArPrfJKWLP8NC+vzLAdlwOeyGoePNpUW6YPKBmIhvdhS0x8raOdLR8a 9aOgERByJYiTDoDPFrx1uiDYDcHwUJplVMf42sJzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUi31jo+ttmVIR/scqU2u9cmlzFjkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM0YWE2MDZlLTBkZWQtNDllMC04MTI0LTI3OTk2NDNjZjI3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5kwDQYJKoZIhvcNAQELBQADggEBAGwQBT0HICgAUAIhtait2KCi OoOJd+ab7RfzEQ7Sl63/5UJ3RQhtvWqMvrL5+3gPPzNkK8pZly19VHO5KHFZqThe 6T4hhmSB/XQ566K1bSGesD2uDCJKKHZet1xTokc+NBAFUCqSh4PEbousMn6AsOpG /TuQ7kHUNiPLuUmcY5b2SU3BrWo4TrLlSws5+mzNr4+k+04Ne+Sgaxi35BykuC1E fOQhW2P2xQ42/ruJxLehS8HOZqrVHRfvrGAb5JAJzNLSwmEO8vnGf5yZzYgRRltC zGAMpmoxZV20soZ2fiyRglH5x00/oJEn4D4xRanBGyQ+99pOqKxUkVL6koTesHo= -----END CERTIFICATE-----Generated at Sun Oct 26 07:51:01 2025 by rpki-client