$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa File: f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa (raw, json) Hash identifier: fZyqAwQj0n+TqANYX0BV4EoRn7g+hiKhLGoxtkBitQs= Subject key identifier: AF:61:A8:36:77:D4:91:3A:54:E1:1C:02:94:41:88:6C:31:8A:DE:F1 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 608A19F96D2E9F11C92AE2EBB97E09856ADFD429 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa Signing time: Tue 21 Oct 2025 12:20:06 +0000 ROA not before: Tue 21 Oct 2025 12:20:06 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:328::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:8a:19:f9:6d:2e:9f:11:c9:2a:e2:eb:b9:7e:09:85:6a:df:d4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:20:06 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=3640559ac33566808c56ae68b724e298fed1d6fdc4f6da53632ffa6aeb40a109, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:95:3a:01:01:c5:61:29:7e:de:0c:10:85: ae:5e:6e:8e:71:14:59:5b:80:2f:ab:65:fe:d2:dd: 60:cb:65:17:72:32:58:8d:ae:0f:42:78:31:82:c4: 71:a4:b3:5b:1a:61:54:00:33:e6:f7:23:1d:e9:b5: ad:28:6f:72:1c:1e:7d:ed:ed:32:42:fa:30:17:c2: b4:3a:20:19:d2:2d:ff:91:a7:94:7d:2b:65:86:c2: 9e:51:30:bf:7a:30:70:25:e3:f0:f7:e6:6a:4c:82: 39:ad:0e:ea:ff:c0:3a:52:00:d9:1e:f8:2c:cd:30: a2:24:26:74:cf:ec:93:09:11:2e:34:22:b2:ca:af: 67:d0:ce:21:a4:2b:e4:40:14:36:48:bb:bc:0e:bb: 15:c9:78:b8:4d:e6:74:e6:57:52:b4:c1:39:9d:da: b7:0a:58:42:3a:81:87:bc:07:eb:83:b9:c7:2e:f9: bc:bb:cd:71:16:b7:8f:e6:ec:aa:26:66:14:90:5b: c9:38:c6:64:dc:db:4c:39:83:6a:3c:7b:e9:23:bf: 72:7c:c5:05:99:1c:3b:49:81:d3:2f:e4:fb:93:44: 7d:64:0d:c5:43:dd:ea:fe:aa:45:35:01:9a:2b:30: c4:51:96:a0:ac:71:96:9b:e8:2f:05:c9:82:c6:05: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:61:A8:36:77:D4:91:3A:54:E1:1C:02:94:41:88:6C:31:8A:DE:F1 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:328::/48 Signature Algorithm: sha256WithRSAEncryption 27:78:71:cd:65:41:aa:00:88:12:18:6f:a4:a9:39:68:5e:77: 07:a1:ca:bf:8e:ba:7f:66:36:01:81:43:a5:d1:ad:1e:f5:93: 77:e3:6a:c6:e4:34:9d:c1:d5:89:56:04:b2:d6:20:79:29:03: 9c:c4:51:50:12:cf:ac:85:6b:67:65:b7:ce:f2:85:c3:d9:e9: 79:8d:f2:30:d4:c7:a7:8a:33:1e:bc:a7:08:0c:e4:27:5e:b1: 4e:1a:23:f9:43:85:78:14:4f:ce:b6:ef:0c:76:6f:bb:0a:33: f3:dd:0d:12:e3:c7:66:6d:e8:16:1a:ca:7a:06:39:59:05:48: f7:da:58:04:c6:a0:d5:99:9d:4c:5c:dd:09:41:aa:3e:d4:aa: af:f6:a6:af:83:00:94:1b:ed:cc:f7:ad:84:1f:70:61:64:bd: 4c:7a:92:28:c8:d4:8c:66:83:a8:bb:6c:fd:6a:ed:a9:fd:c9: 01:72:2a:fd:6e:be:52:6e:ab:18:71:1b:c6:cb:db:34:55:5d: ce:ef:3d:66:22:a3:5a:d9:cf:8a:5f:ac:95:d6:ab:21:9d:b3: 32:21:c8:5c:90:74:b8:22:03:e7:45:78:e3:c6:0a:63:2a:34: 90:3b:70:fe:07:b3:cf:58:14:9b:f8:e7:6f:b1:d6:a6:c7:b9: 1a:6d:ea:24 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYIoZ+W0unxHJKuLruX4JhWrf1CkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIyMDA2WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjQwNTU5YWMzMzU2NjgwOGM1NmFlNjhiNzI0ZTI5OGZl ZDFkNmZkYzRmNmRhNTM2MzJmZmE2YWViNDBhMTA5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmYZU6AQHFYSl+3gwQha5ebo5xFFlbgC+rZf7S3WDLZRdy MliNrg9CeDGCxHGks1saYVQAM+b3Ix3pta0ob3IcHn3t7TJC+jAXwrQ6IBnSLf+R p5R9K2WGwp5RML96MHAl4/D35mpMgjmtDur/wDpSANke+CzNMKIkJnTP7JMJES40 IrLKr2fQziGkK+RAFDZIu7wOuxXJeLhN5nTmV1K0wTmd2rcKWEI6gYe8B+uDuccu +by7zXEWt4/m7KomZhSQW8k4xmTc20w5g2o8e+kjv3J8xQWZHDtJgdMv5PuTRH1k DcVD3er+qkU1AZorMMRRlqCscZab6C8FyYLGBVLXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUr2GoNnfUkTpU4RwClEGIbDGK3vEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y3MGRjYmZhLTBhMjEtNGRjYi1iNzllLWJmZDdlZmExNjZiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAygwDQYJKoZIhvcNAQELBQADggEBACd4cc1lQaoAiBIYb6SpOWhe dwehyr+Oun9mNgGBQ6XRrR71k3fjasbkNJ3B1YlWBLLWIHkpA5zEUVASz6yFa2dl t87yhcPZ6XmN8jDUx6eKMx68pwgM5CdesU4aI/lDhXgUT8627wx2b7sKM/PdDRLj x2Zt6BYaynoGOVkFSPfaWATGoNWZnUxc3QlBqj7Uqq/2pq+DAJQb7cz3rYQfcGFk vUx6kijI1Ixmg6i7bP1q7an9yQFyKv1uvlJuqxhxG8bL2zRVXc7vPWYio1rZz4pf rJXWqyGdszIhyFyQdLgiA+dFeOPGCmMqNJA7cP4Hs89YFJv452+x1qbHuRpt6iQ= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:46 2025 by rpki-client