$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e84c5f-0949-4ac6-a7bf-eed0697fd3a3.roa File: d4e84c5f-0949-4ac6-a7bf-eed0697fd3a3.roa (raw, json) Hash identifier: qd1Qr6ylUr3VfWolvWYp8kPwtqL4zKFtMaJwuB5VltI= Subject key identifier: BA:CB:D9:FF:88:21:63:07:F1:75:3D:E7:E5:0B:91:31:F4:BE:F2:96 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7C69F3DE969103EB757C52361B8669BB2A9B09C7 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e84c5f-0949-4ac6-a7bf-eed0697fd3a3.roa Signing time: Tue 21 Oct 2025 12:30:11 +0000 ROA not before: Tue 21 Oct 2025 12:30:11 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:306::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:69:f3:de:96:91:03:eb:75:7c:52:36:1b:86:69:bb:2a:9b:09:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:30:11 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=af63888aebc01625f6de898ac730b532e48ea3db84aa20491064e37e209b7855, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:d8:07:a4:78:66:0c:b3:7f:65:ba:d2:9f: 3d:c9:a3:4d:56:ce:9b:ab:5e:05:90:78:4b:73:97: 03:d5:a1:ec:1c:20:b4:5a:78:50:32:72:61:6d:f6: 40:ba:7b:6e:46:81:c3:7c:f9:2b:0c:e8:cc:e5:e0: f1:f3:59:78:40:7a:8b:40:76:16:5d:96:44:fb:cd: 26:dc:0c:c6:81:7a:2a:ff:69:8a:76:48:c1:fe:00: 38:1d:59:7f:48:43:df:36:76:a5:fb:08:e2:02:95: 4d:50:f9:8d:b3:e3:97:1c:9d:fd:5b:f4:89:49:09: 87:db:11:00:ec:bc:43:c2:01:0c:ee:70:f6:dc:63: c9:c1:53:88:5e:1e:9b:3b:ba:85:5e:b1:0f:eb:11: 7f:a6:a1:34:5f:99:72:8c:e1:b3:63:7b:2f:e0:bf: 37:a7:88:92:4d:a7:7a:ee:bd:33:53:34:39:76:e8: 3e:ad:69:bb:db:a6:24:2c:80:d8:72:eb:82:56:44: 70:dc:6e:f8:e4:e2:a4:7c:4f:8e:63:dd:43:5e:f5: ff:f1:45:96:51:fa:92:bc:12:5b:8e:4f:c5:fb:08: 88:26:67:23:b0:5a:9d:ac:23:ad:b8:52:aa:a7:22: 0e:75:87:d9:c0:2a:95:5d:c0:1f:be:a6:90:1f:1c: 93:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CB:D9:FF:88:21:63:07:F1:75:3D:E7:E5:0B:91:31:F4:BE:F2:96 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e84c5f-0949-4ac6-a7bf-eed0697fd3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:306::/48 Signature Algorithm: sha256WithRSAEncryption 7e:12:1b:d3:7e:cb:8c:49:36:de:cf:07:41:ba:6f:ef:26:98: 6c:ea:d4:24:07:ac:09:dc:3c:df:83:f8:75:bc:ab:cd:1f:16: 67:18:03:c7:2a:3e:71:4a:d7:da:6a:fe:b6:e4:19:ef:ac:1c: 96:9d:68:c8:26:f0:eb:bc:dd:a0:90:40:14:25:6b:f3:3a:aa: 39:8a:d4:fc:5c:a6:a2:f4:15:72:f6:24:c2:2e:50:41:02:34: c5:00:dc:24:9b:32:ab:32:d4:7d:39:50:f6:d9:ee:36:bd:1d: 0f:23:1d:da:48:a6:2b:21:30:97:5d:85:0d:e4:7f:89:89:a9: ef:05:f2:a2:96:9a:17:12:38:7d:a1:99:6c:03:69:b8:ec:c8: 71:48:3e:dd:3d:58:e9:e8:e3:b0:59:cc:7c:35:c3:40:93:bc: 1b:15:9b:21:f4:ae:05:78:1b:84:d3:a7:cb:74:57:80:35:30: 1c:78:27:a2:45:5d:a1:a7:bc:55:a7:f2:89:65:cc:0b:31:ac: 00:21:95:51:c4:ea:4f:81:07:77:43:e9:da:39:62:84:30:e9: 9b:73:0c:b3:44:d9:cb:b8:3f:a4:a0:6d:5d:b3:2c:7c:19:f7: 0f:55:58:fb:e4:f1:51:bf:f7:63:3d:65:e4:c9:0f:0a:42:2a: e4:79:29:ce -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfGnz3paRA+t1fFI2G4ZpuyqbCccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIzMDExWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjYzODg4YWViYzAxNjI1ZjZkZTg5OGFjNzMwYjUzMmU0 OGVhM2RiODRhYTIwNDkxMDY0ZTM3ZTIwOWI3ODU1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwC9gHpHhmDLN/ZbrSnz3Jo01WzpurXgWQeEtzlwPVoewc ILRaeFAycmFt9kC6e25GgcN8+SsM6Mzl4PHzWXhAeotAdhZdlkT7zSbcDMaBeir/ aYp2SMH+ADgdWX9IQ982dqX7COIClU1Q+Y2z45ccnf1b9IlJCYfbEQDsvEPCAQzu cPbcY8nBU4heHps7uoVesQ/rEX+moTRfmXKM4bNjey/gvzeniJJNp3ruvTNTNDl2 6D6tabvbpiQsgNhy64JWRHDcbvjk4qR8T45j3UNe9f/xRZZR+pK8EluOT8X7CIgm ZyOwWp2sI624UqqnIg51h9nAKpVdwB++ppAfHJM3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUusvZ/4ghYwfxdT3n5QuRMfS+8pYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q0ZTg0YzVmLTA5NDktNGFjNi1hN2JmLWVlZDA2OTdmZDNhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwYwDQYJKoZIhvcNAQELBQADggEBAH4SG9N+y4xJNt7PB0G6b+8m mGzq1CQHrAncPN+D+HW8q80fFmcYA8cqPnFK19pq/rbkGe+sHJadaMgm8Ou83aCQ QBQla/M6qjmK1PxcpqL0FXL2JMIuUEECNMUA3CSbMqsy1H05UPbZ7ja9HQ8jHdpI pishMJddhQ3kf4mJqe8F8qKWmhcSOH2hmWwDabjsyHFIPt09WOno47BZzHw1w0CT vBsVmyH0rgV4G4TTp8t0V4A1MBx4J6JFXaGnvFWn8ollzAsxrAAhlVHE6k+BB3dD 6do5YoQw6ZtzDLNE2cu4P6SgbV2zLHwZ9w9VWPvk8VG/92M9ZeTJDwpCKuR5Kc4= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:41 2025 by rpki-client