$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa File: 84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa (raw, json) Hash identifier: sU8YxSimmwhmelUP2sDfjBHsUFdz92BHxV3Ln30fXLo= Subject key identifier: 0C:30:41:A6:A6:CF:D3:C7:CF:3F:CF:5A:03:72:21:F5:5F:03:22:7C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 471EBD077E4D9430D0C5E98605A7E1A0EF421BC0 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa Signing time: Tue 21 Oct 2025 12:20:16 +0000 ROA not before: Tue 21 Oct 2025 12:20:16 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c40::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:1e:bd:07:7e:4d:94:30:d0:c5:e9:86:05:a7:e1:a0:ef:42:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:20:16 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=36940975c9b4febf9bd67577bfb724b604f4c5b62f74892112a42f7e47eb4c7a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:e9:d2:0e:2c:a1:0a:f2:b9:2a:3c:c8:7a: ee:8f:e2:da:79:70:10:e1:27:94:be:50:e6:4e:4d: b2:3d:81:f1:15:f0:8f:94:2b:05:28:32:50:dc:fb: 01:7b:b6:51:3e:c4:ba:2a:6a:82:68:f7:4d:19:68: 6b:e7:73:e2:80:e1:a6:1f:76:26:76:16:68:cc:54: 46:36:7d:49:c0:8b:66:0a:e9:04:89:f7:4a:a5:7a: 77:5b:50:0e:b3:f1:0d:4b:bd:9f:b5:75:1e:1b:ca: ee:08:a8:fd:d3:d2:6c:81:49:25:a9:1f:a7:08:d6: eb:d5:ed:de:f2:05:e1:5d:15:41:5a:86:46:61:e6: 2f:30:19:28:b0:5a:45:d0:b0:b4:44:0e:c4:75:b5: 8e:c0:e8:5a:27:f3:52:5c:df:d9:a0:40:9f:dc:2c: 30:40:53:27:e3:3c:5a:86:8c:93:6c:63:f1:67:1e: 9e:f6:4a:af:e4:49:9d:62:f9:ae:73:16:18:39:ee: ca:93:bf:db:8c:8c:9c:28:32:ba:c2:21:09:60:43: 49:74:fd:6c:96:8f:3a:1a:16:cf:3c:73:e2:28:37: 70:48:8b:fc:19:87:29:25:a5:f5:69:80:7a:e9:49: 94:ec:1e:2c:69:4f:4e:93:61:d0:2b:cc:53:bd:f9: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:30:41:A6:A6:CF:D3:C7:CF:3F:CF:5A:03:72:21:F5:5F:03:22:7C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c40::/45 Signature Algorithm: sha256WithRSAEncryption 27:c3:d2:7b:66:b7:59:da:89:89:b9:d4:c6:89:bd:1f:4a:4d: 75:d3:ec:41:3f:2a:ad:2a:20:0c:fc:0c:85:89:8f:17:50:1c: 7f:ca:70:3b:63:e5:10:5d:bd:95:61:8d:46:86:8c:2e:0d:c9: 97:18:bf:7f:3d:22:4c:3a:94:1a:3c:cd:30:66:c4:04:fe:c0: 2f:2a:31:45:34:1d:8f:14:7f:fb:38:d5:2c:94:64:ec:5a:ce: 38:04:c4:52:79:86:b6:54:91:db:8f:60:4c:aa:14:92:84:9e: 31:48:31:b5:4e:1b:39:99:02:44:85:40:8e:34:41:e7:75:e9: 06:b0:1a:ff:95:af:13:43:ed:a2:d5:d8:54:9a:f9:02:4f:84: 4a:47:bf:69:4c:63:3d:b6:b3:f4:4b:08:23:61:2e:50:01:cc: 81:dd:b4:28:2f:3a:19:5d:f1:a2:7d:3f:da:91:3b:57:3e:69: 0e:78:1d:3f:46:07:b4:3a:3b:12:80:79:de:0a:9a:a2:6d:40: 8f:3b:ef:c7:20:3a:ca:05:d9:cc:54:72:55:d2:5c:41:83:58: 52:82:a6:24:27:ad:17:b2:6f:6a:a2:de:e9:8e:7b:43:c1:a3: 0b:d8:e9:a1:fe:25:d4:a8:be:2a:6e:11:db:20:7c:c7:68:4d: b3:fa:cd:fe -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURx69B35NlDDQxemGBafhoO9CG8AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIyMDE2WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjk0MDk3NWM5YjRmZWJmOWJkNjc1NzdiZmI3MjRiNjA0 ZjRjNWI2MmY3NDg5MjExMmE0MmY3ZTQ3ZWI0YzdhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp++nSDiyhCvK5KjzIeu6P4tp5cBDhJ5S+UOZOTbI9gfEV 8I+UKwUoMlDc+wF7tlE+xLoqaoJo900ZaGvnc+KA4aYfdiZ2FmjMVEY2fUnAi2YK 6QSJ90qlendbUA6z8Q1LvZ+1dR4byu4IqP3T0myBSSWpH6cI1uvV7d7yBeFdFUFa hkZh5i8wGSiwWkXQsLREDsR1tY7A6Fon81Jc39mgQJ/cLDBAUyfjPFqGjJNsY/Fn Hp72Sq/kSZ1i+a5zFhg57sqTv9uMjJwoMrrCIQlgQ0l0/WyWjzoaFs88c+IoN3BI i/wZhyklpfVpgHrpSZTsHixpT06TYdArzFO9+RUPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDDBBpqbP08fPP89aA3Ih9V8DInwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg0YWM3NzE0LWViYTUtNGY3ZC1hNWVlLTc5YjZlZWQ3N2I3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmBZzADEAwDQYJKoZIhvcNAQELBQADggEBACfD0ntmt1naiYm51MaJvR9K TXXT7EE/Kq0qIAz8DIWJjxdQHH/KcDtj5RBdvZVhjUaGjC4NyZcYv389Ikw6lBo8 zTBmxAT+wC8qMUU0HY8Uf/s41SyUZOxazjgExFJ5hrZUkduPYEyqFJKEnjFIMbVO GzmZAkSFQI40Qed16QawGv+VrxND7aLV2FSa+QJPhEpHv2lMYz22s/RLCCNhLlAB zIHdtCgvOhld8aJ9P9qRO1c+aQ54HT9GB7Q6OxKAed4KmqJtQI8778cgOsoF2cxU clXSXEGDWFKCpiQnrReyb2qi3umOe0PBowvY6aH+JdSovipuEdsgfMdoTbP6zf4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:16 2025 by rpki-client