$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8606154f-31dd-423a-a436-9da1712c8bc8.roa File: 8606154f-31dd-423a-a436-9da1712c8bc8.roa (raw, json) Hash identifier: Vcu1A2eajHUnEEViLz2Y5zbs9jTtvnzAw0gvfeFTRCM= Subject key identifier: FC:FD:FB:03:93:5A:2A:9E:FE:7E:57:5A:3D:A3:2B:B6:39:80:09:97 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1FD3A9DFB5412AF2D5F7B4D69937CF9BBBBE824D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8606154f-31dd-423a-a436-9da1712c8bc8.roa Signing time: Fri 31 Oct 2025 01:30:32 +0000 ROA not before: Fri 31 Oct 2025 01:30:32 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d3:a9:df:b5:41:2a:f2:d5:f7:b4:d6:99:37:cf:9b:bb:be:82:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 31 01:30:32 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=4271c558e66542495866d40984912210db6bdc88b43b8d7afed0fbb32e8fbe4a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:a4:c5:89:6e:98:04:42:e6:ae:de:0e:55: 91:c8:f5:ee:0c:b6:14:f7:82:af:ea:b1:5d:46:ea: 4b:cf:e1:bd:d5:10:43:14:2a:ea:5d:48:b9:90:f2: fd:1a:80:b6:d6:6f:e3:39:9b:a3:c4:03:c3:9e:b1: f2:12:c7:9f:8b:ff:4d:5c:8b:82:89:3d:d5:06:07: 18:04:e9:b4:27:b2:ed:70:40:1e:f7:5c:a5:96:d4: 8c:ce:a8:32:24:c2:d8:dc:e6:0b:23:34:c1:c8:84: 46:69:d4:e7:cf:04:53:52:2f:7c:14:29:96:57:1f: be:d4:95:71:60:99:3b:08:05:e1:4c:ca:1c:1b:e5: b2:f3:83:13:92:e6:90:4a:0d:70:f3:00:4f:67:63: fc:3d:32:e8:a8:80:40:df:1f:fc:86:9c:9a:06:6e: 48:b6:c2:02:64:c3:54:29:3e:3c:cb:73:a5:9b:db: 41:4e:60:84:b5:0a:f0:ab:6e:18:4b:40:96:5d:cd: f8:4c:1d:13:5d:a9:d8:14:e1:0c:1f:3b:fe:94:39: 1e:8e:a7:cc:e7:ae:b2:52:5c:02:ad:39:4d:1e:1c: 71:95:46:4a:9e:59:34:05:14:35:39:46:fa:88:1c: 1d:8c:52:23:3d:f8:85:75:c7:ab:61:c3:c7:1b:e5: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FD:FB:03:93:5A:2A:9E:FE:7E:57:5A:3D:A3:2B:B6:39:80:09:97 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8606154f-31dd-423a-a436-9da1712c8bc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1b::/48 Signature Algorithm: sha256WithRSAEncryption 6f:84:a7:e9:db:a2:a4:38:64:ad:47:2b:ee:d6:ef:05:21:17: 05:f4:5d:6e:04:3b:83:f8:63:98:38:1f:d5:fa:5a:ff:a9:f2: 83:1a:40:31:0b:af:25:5d:88:51:25:f6:31:67:6e:53:73:4f: 4c:13:f4:69:67:a6:bd:83:0e:59:d7:09:24:d4:f3:bd:a1:92: b8:fa:8c:e5:07:8e:6f:6f:37:06:ca:e6:da:7c:29:ca:60:79: c9:8c:ba:c6:8f:2f:b8:5a:be:4f:ec:95:9c:f1:46:60:8b:5e: ea:33:0a:36:b7:3f:c9:a2:19:ab:f9:5d:98:28:f1:7f:25:a3: d5:ea:ed:41:86:bb:3d:03:5c:89:8f:06:e6:95:2b:3e:dc:4a: 42:8e:f7:32:cf:29:fc:cb:8e:f4:44:20:94:67:6c:18:b1:a0: 47:8e:7d:1f:66:f4:0f:53:d9:d3:c3:07:1c:ce:f5:e8:b8:57: c1:b8:b8:b1:6e:db:36:34:b5:0b:66:2a:d0:d0:f4:da:ab:21: 26:2d:5a:b7:2c:eb:60:e1:fc:c5:43:91:8e:f1:d4:39:96:fc: 52:62:8c:f1:24:90:24:ef:1a:ec:c1:ed:d9:eb:5f:11:26:ff: 49:0b:e9:aa:c0:86:ab:43:59:50:e1:d0:c7:a2:89:da:29:18: 9b:ef:d1:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUH9Op37VBKvLV97TWmTfPm7u+gk0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDMxMDEzMDMyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjcxYzU1OGU2NjU0MjQ5NTg2NmQ0MDk4NDkxMjIxMGRi NmJkYzg4YjQzYjhkN2FmZWQwZmJiMzJlOGZiZTRhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzXaTFiW6YBELmrt4OVZHI9e4MthT3gq/qsV1G6kvP4b3V EEMUKupdSLmQ8v0agLbWb+M5m6PEA8OesfISx5+L/01ci4KJPdUGBxgE6bQnsu1w QB73XKWW1IzOqDIkwtjc5gsjNMHIhEZp1OfPBFNSL3wUKZZXH77UlXFgmTsIBeFM yhwb5bLzgxOS5pBKDXDzAE9nY/w9MuiogEDfH/yGnJoGbki2wgJkw1QpPjzLc6Wb 20FOYIS1CvCrbhhLQJZdzfhMHRNdqdgU4QwfO/6UOR6Op8znrrJSXAKtOU0eHHGV RkqeWTQFFDU5RvqIHB2MUiM9+IV1x6thw8cb5ReDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/P37A5NaKp7+fldaPaMrtjmACZcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg2MDYxNTRmLTMxZGQtNDIzYS1hNDM2LTlkYTE3MTJjOGJjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBswDQYJKoZIhvcNAQELBQADggEBAG+Ep+nboqQ4ZK1HK+7W7wUh FwX0XW4EO4P4Y5g4H9X6Wv+p8oMaQDELryVdiFEl9jFnblNzT0wT9Glnpr2DDlnX CSTU872hkrj6jOUHjm9vNwbK5tp8KcpgecmMusaPL7havk/slZzxRmCLXuozCja3 P8miGav5XZgo8X8lo9Xq7UGGuz0DXImPBuaVKz7cSkKO9zLPKfzLjvREIJRnbBix oEeOfR9m9A9T2dPDBxzO9ei4V8G4uLFu2zY0tQtmKtDQ9NqrISYtWrcs62Dh/MVD kY7x1DmW/FJijPEkkCTvGuzB7dnrXxEm/0kL6arAhqtDWVDh0MeiidopGJvv0co= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:05 2025 by rpki-client