$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8eb2ef72-1951-4670-8ba4-4f5f7aebc2f4.roa File: 8eb2ef72-1951-4670-8ba4-4f5f7aebc2f4.roa (raw, json) Hash identifier: KnND14SYNnS7r5/KXBx2Bjrt/u66omD8wjYgEr1YWiA= Subject key identifier: 7A:32:67:2A:11:51:13:E8:9C:37:C6:D5:D5:C3:09:24:3C:CE:6B:2D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 77856EAE16655A164529FDF927B2D9AF66CD667E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8eb2ef72-1951-4670-8ba4-4f5f7aebc2f4.roa Signing time: Tue 21 Oct 2025 12:20:09 +0000 ROA not before: Tue 21 Oct 2025 12:20:09 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:545::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:85:6e:ae:16:65:5a:16:45:29:fd:f9:27:b2:d9:af:66:cd:66:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:20:09 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=da1b3f36189667d9b6aa9d6d9dec04b51ce1569d35c06b7ff45629754174549a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:ca:28:94:90:fc:ae:6a:3d:4d:18:80:d3: ff:1f:81:ce:28:c1:73:0e:d6:1e:e1:d4:6b:67:d1: ce:46:53:c5:c2:b3:97:44:a0:0a:19:7c:32:cd:b3: a9:35:05:71:a9:20:38:3b:26:f0:9a:1b:de:b0:11: ce:75:24:9c:7f:64:1a:b5:fd:69:93:75:a4:98:cf: ea:d6:ef:31:a8:e8:74:02:ee:20:a1:0a:31:03:ce: 47:8c:00:4f:f8:28:3e:dd:c8:aa:20:89:33:7d:30: 91:81:06:4e:dd:b6:0a:54:82:64:b9:19:71:e7:df: 93:b3:30:d3:f3:92:0f:2a:7b:98:3a:c7:cd:a0:2d: 04:83:52:ea:93:ca:7d:a4:ef:e8:e5:9d:5d:33:ba: a2:9a:48:a1:da:a5:04:28:df:c7:e8:d4:23:56:1a: 19:9f:45:68:64:a4:57:73:20:56:fb:45:3c:2e:99: 5c:b8:8f:2c:d6:39:86:30:fa:57:3f:b8:c9:0d:73: bc:1b:04:38:f2:59:03:49:71:09:0c:ba:91:91:27: 2a:98:ca:8b:53:d5:61:63:1d:cb:c7:6f:91:da:1b: e5:9f:db:38:43:a4:97:9a:36:54:76:60:05:33:47: 48:ee:38:dc:2f:32:25:18:ec:55:4e:6b:54:83:84: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:32:67:2A:11:51:13:E8:9C:37:C6:D5:D5:C3:09:24:3C:CE:6B:2D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8eb2ef72-1951-4670-8ba4-4f5f7aebc2f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:545::/48 Signature Algorithm: sha256WithRSAEncryption 5a:d5:60:91:74:cd:f3:04:a4:6a:62:3f:c4:51:94:f2:7a:fc: 28:d0:ae:fb:d6:df:ae:69:95:79:84:8a:24:67:8d:94:ca:d7: 8e:a0:3a:70:d4:2e:85:82:0e:04:94:d4:20:5a:3f:8e:e6:83: e8:b2:82:35:20:4e:5c:d7:bc:d1:01:8a:dc:c9:d0:56:67:8c: 5a:27:f6:2b:c3:84:b4:1e:f4:51:1d:46:7b:61:ce:b9:6b:2a: e0:87:36:c5:f9:27:d8:9f:a4:4b:9f:a6:b5:c4:69:4b:9a:90: 32:b0:15:03:2a:02:8d:fc:c6:79:e2:29:59:75:61:19:2a:bb: 83:9c:e7:17:5c:7f:70:97:6c:70:ef:51:eb:0e:fc:ea:a2:9f: 06:1e:68:19:cd:57:5e:40:97:32:b6:60:75:83:28:b5:cb:c8: 05:26:73:7f:8f:a1:a4:ca:46:ad:77:73:c8:bd:e5:9f:e4:45: 26:28:75:88:d2:28:3d:f0:38:d1:63:23:3d:1a:0d:13:c6:f1: ca:8d:20:2e:9f:33:df:8e:ca:fa:d9:7c:bf:ac:d2:a5:94:ed: 06:5c:1c:3a:c0:64:57:7d:21:66:22:30:b9:f1:a0:fc:14:f6: 02:6e:6e:f7:39:e9:1e:4b:26:08:c2:94:ca:6c:0a:12:43:1c: c0:98:0d:3c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd4VurhZlWhZFKf35J7LZr2bNZn4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIyMDA5WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTFiM2YzNjE4OTY2N2Q5YjZhYTlkNmQ5ZGVjMDRiNTFj ZTE1NjlkMzVjMDZiN2ZmNDU2Mjk3NTQxNzQ1NDlhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzHsoolJD8rmo9TRiA0/8fgc4owXMO1h7h1Gtn0c5GU8XC s5dEoAoZfDLNs6k1BXGpIDg7JvCaG96wEc51JJx/ZBq1/WmTdaSYz+rW7zGo6HQC 7iChCjEDzkeMAE/4KD7dyKogiTN9MJGBBk7dtgpUgmS5GXHn35OzMNPzkg8qe5g6 x82gLQSDUuqTyn2k7+jlnV0zuqKaSKHapQQo38fo1CNWGhmfRWhkpFdzIFb7RTwu mVy4jyzWOYYw+lc/uMkNc7wbBDjyWQNJcQkMupGRJyqYyotT1WFjHcvHb5HaG+Wf 2zhDpJeaNlR2YAUzR0juONwvMiUY7FVOa1SDhLJpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUejJnKhFRE+icN8bV1cMJJDzOay0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzhlYjJlZjcyLTE5NTEtNDY3MC04YmE0LTRmNWY3YWViYzJmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUUwDQYJKoZIhvcNAQELBQADggEBAFrVYJF0zfMEpGpiP8RRlPJ6 /CjQrvvW365plXmEiiRnjZTK146gOnDULoWCDgSU1CBaP47mg+iygjUgTlzXvNEB itzJ0FZnjFon9ivDhLQe9FEdRnthzrlrKuCHNsX5J9ifpEufprXEaUuakDKwFQMq Ao38xnniKVl1YRkqu4Oc5xdcf3CXbHDvUesO/OqinwYeaBnNV15AlzK2YHWDKLXL yAUmc3+PoaTKRq13c8i95Z/kRSYodYjSKD3wONFjIz0aDRPG8cqNIC6fM9+OyvrZ fL+s0qWU7QZcHDrAZFd9IWYiMLnxoPwU9gJubvc56R5LJgjClMpsChJDHMCYDTw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:50 2025 by rpki-client