$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e449fb2-dbbe-4faa-b83a-72c5be4f2790.roa File: 0e449fb2-dbbe-4faa-b83a-72c5be4f2790.roa (raw, json) Hash identifier: OgzFylSxCero2XMbUlOtD7kve0anFdCfqkv+GsQGRAk= Subject key identifier: 9F:D8:19:34:49:28:A4:6E:30:48:72:46:0D:2D:72:9F:B3:08:60:0F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1E0A2DDF45D642022CE0EF4EAD5BF7AB6C978AA1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e449fb2-dbbe-4faa-b83a-72c5be4f2790.roa Signing time: Tue 21 Oct 2025 12:20:04 +0000 ROA not before: Tue 21 Oct 2025 12:20:04 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:310::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0a:2d:df:45:d6:42:02:2c:e0:ef:4e:ad:5b:f7:ab:6c:97:8a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:20:04 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=cfb7ef8cbdd568d552f5a4e78315b62d70ef372a005ddde411da5fe98befec79, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:71:11:a2:b7:82:72:25:a0:09:39:a4:4d:0b: 6e:22:8b:56:07:71:77:39:07:56:7e:c3:45:a8:fd: 72:32:01:8f:39:eb:63:b4:ac:6e:85:1c:f3:00:5f: ec:7f:f5:99:0f:2d:02:57:0b:1c:bc:93:d7:03:9f: 75:d1:c0:2c:32:aa:f9:dd:09:79:01:e5:81:53:3a: 6a:98:cb:9f:10:53:dd:84:1e:7f:4b:1b:9f:a2:f6: 3e:80:58:b2:ab:0b:37:a2:6f:e3:82:09:d3:b4:00: 44:fb:db:e1:9a:e3:28:63:2c:cc:d7:4e:c2:ea:22: d4:14:b7:6c:e8:e1:29:4a:00:a6:6a:ce:43:75:e6: 0a:98:1e:31:70:85:da:13:03:5a:74:1a:de:e5:a4: df:dc:f8:13:22:ec:90:1b:85:7f:05:38:3c:d5:35: 28:f9:7b:bd:72:d5:92:24:2b:cf:cf:d8:2c:79:7b: 51:35:fd:86:03:eb:53:7e:c3:41:aa:aa:3a:15:fd: 23:06:5c:42:a8:28:0f:3b:ed:42:a4:31:ac:6f:0d: fc:ed:08:a8:d2:b4:b6:82:63:4d:17:f3:fd:b4:19: c4:a8:1e:72:4c:5d:56:a5:0b:23:25:c7:b3:f1:b3: 6a:98:77:b4:3c:1d:78:68:58:bd:97:c6:38:e5:8e: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D8:19:34:49:28:A4:6E:30:48:72:46:0D:2D:72:9F:B3:08:60:0F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e449fb2-dbbe-4faa-b83a-72c5be4f2790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:310::/48 Signature Algorithm: sha256WithRSAEncryption 5a:d9:f9:e7:ea:aa:cc:4d:6e:3a:15:0a:57:d6:d0:13:c0:4f: 31:13:89:6a:85:16:20:35:2a:19:fe:69:1d:9f:8b:ae:dd:ee: a7:ae:36:6a:bc:08:a1:2e:bd:cc:05:6e:2b:43:6f:1f:a9:ec: df:fd:2b:f3:b2:6a:ac:c5:85:40:22:31:c0:1f:58:2f:d9:9d: 14:9b:08:9f:a1:71:4b:66:dc:7e:44:f0:85:29:77:2c:13:fa: bf:91:d8:fb:da:84:34:f5:b8:07:29:12:05:d2:87:ba:12:f3: 1f:d4:59:62:b4:c6:42:12:f7:9d:1d:b7:1f:7e:85:ee:2e:46: 74:a9:5d:ee:5b:1a:9c:07:c4:db:f1:78:f9:8d:f0:e4:af:4c: 01:9a:4d:c7:70:f1:4e:11:69:f3:6d:7d:ec:03:bf:96:be:be: 63:18:9d:ab:45:1c:08:d2:15:da:4a:77:25:7b:ee:4f:0f:97: 21:5c:85:d9:89:af:7b:51:fe:6b:d5:e9:26:04:90:76:10:41: c6:ac:71:65:e2:53:66:ca:84:57:48:b5:90:cc:f8:c6:ed:37: 9a:7c:fb:ac:62:d9:7a:9a:f3:05:db:d2:93:69:2b:c2:30:23: 64:f5:50:a5:c9:aa:09:91:af:fc:bf:96:03:d2:3f:f7:51:c5: 75:b8:a8:9d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHgot30XWQgIs4O9OrVv3q2yXiqEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIyMDA0WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmI3ZWY4Y2JkZDU2OGQ1NTJmNWE0ZTc4MzE1YjYyZDcw ZWYzNzJhMDA1ZGRkZTQxMWRhNWZlOThiZWZlYzc5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRcRGit4JyJaAJOaRNC24ii1YHcXc5B1Z+w0Wo/XIyAY85 62O0rG6FHPMAX+x/9ZkPLQJXCxy8k9cDn3XRwCwyqvndCXkB5YFTOmqYy58QU92E Hn9LG5+i9j6AWLKrCzeib+OCCdO0AET72+Ga4yhjLMzXTsLqItQUt2zo4SlKAKZq zkN15gqYHjFwhdoTA1p0Gt7lpN/c+BMi7JAbhX8FODzVNSj5e71y1ZIkK8/P2Cx5 e1E1/YYD61N+w0GqqjoV/SMGXEKoKA877UKkMaxvDfztCKjStLaCY00X8/20GcSo HnJMXValCyMlx7Pxs2qYd7Q8HXhoWL2XxjjljiyrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUn9gZNEkopG4wSHJGDS1yn7MIYA8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzBlNDQ5ZmIyLWRiYmUtNGZhYS1iODNhLTcyYzViZTRmMjc5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAxAwDQYJKoZIhvcNAQELBQADggEBAFrZ+efqqsxNbjoVClfW0BPA TzETiWqFFiA1Khn+aR2fi67d7qeuNmq8CKEuvcwFbitDbx+p7N/9K/OyaqzFhUAi McAfWC/ZnRSbCJ+hcUtm3H5E8IUpdywT+r+R2PvahDT1uAcpEgXSh7oS8x/UWWK0 xkIS950dtx9+he4uRnSpXe5bGpwHxNvxePmN8OSvTAGaTcdw8U4RafNtfewDv5a+ vmMYnatFHAjSFdpKdyV77k8PlyFchdmJr3tR/mvV6SYEkHYQQcascWXiU2bKhFdI tZDM+MbtN5p8+6xi2Xqa8wXb0pNpK8IwI2T1UKXJqgmRr/y/lgPSP/dRxXW4qJ0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:17:02 2025 by rpki-client