$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8e34772-02dc-4583-ad8a-aa3c4a295798.roa File: c8e34772-02dc-4583-ad8a-aa3c4a295798.roa (raw, json) Hash identifier: NC7tinhHtDqN1TZ1ZhiwajBceBxCYoeywSASsV43U78= Subject key identifier: B9:BC:CD:75:6E:A5:A3:DF:21:77:5E:BB:AD:28:0F:BF:7F:8E:BB:9C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4EA8BEFABB465B7E8E52B1B64DF825E2B1DA231E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8e34772-02dc-4583-ad8a-aa3c4a295798.roa Signing time: Tue 21 Oct 2025 12:40:45 +0000 ROA not before: Tue 21 Oct 2025 12:40:45 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:30c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a8:be:fa:bb:46:5b:7e:8e:52:b1:b6:4d:f8:25:e2:b1:da:23:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:40:45 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=1da6bad70b18f6065405c157dabd606cd86155d8786d9e0ffc68b796d9142f5e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:6f:31:cb:83:7a:17:bb:ba:7e:33:ba:73: c4:11:d2:cd:9d:82:0f:ff:6b:fe:53:d4:b3:04:17: e0:1e:98:7c:77:05:3c:d4:f1:1b:2a:71:de:c6:cf: c3:0e:01:18:61:6b:b2:32:47:35:d5:05:73:6f:38: 60:b8:9b:01:90:eb:99:4f:70:4c:eb:36:23:bd:dd: fe:7d:fa:60:1e:b5:45:2c:d1:b0:69:bb:aa:35:a7: 06:07:84:3c:a5:cc:11:a5:a1:8e:69:02:13:7e:13: 06:98:81:a1:9c:d1:eb:91:3f:3c:96:35:43:03:fb: b5:50:ff:98:01:89:7a:3a:ad:03:1c:f0:69:f0:31: 24:e5:e9:6c:c8:19:99:9a:ee:ee:d1:c7:89:78:ed: e4:e3:72:be:2e:06:7a:98:b0:11:23:86:11:cf:1d: 38:37:8d:b7:2c:d5:9d:00:4d:2a:b2:4f:0e:d1:fb: a7:fb:0b:8e:e1:9c:b9:9a:08:10:3d:8c:47:d5:fd: de:32:38:78:9c:2f:b6:f3:2e:a8:f9:7c:3e:0a:2b: 82:e6:09:82:a3:9c:ae:42:cf:d1:f6:bd:90:01:d9: a0:b4:49:cf:1d:df:29:2d:67:c9:da:31:25:d3:8e: 97:20:a0:a3:1d:0e:aa:73:1d:a2:84:16:04:37:cb: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BC:CD:75:6E:A5:A3:DF:21:77:5E:BB:AD:28:0F:BF:7F:8E:BB:9C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c8e34772-02dc-4583-ad8a-aa3c4a295798.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30c::/48 Signature Algorithm: sha256WithRSAEncryption 1e:79:9a:c0:fd:fd:d7:c5:dc:90:1b:98:a3:4c:c8:05:31:4e: 9e:90:f2:05:4b:2c:e9:a6:12:95:97:16:79:cf:9a:38:df:c4: 22:3d:b8:c7:af:83:f3:d7:0e:5b:73:b0:0d:5c:ae:34:0e:1c: ae:44:b1:9c:1e:29:5b:07:4c:5e:b0:1e:24:71:62:d3:0b:5b: 61:c6:b1:51:f5:4c:65:46:bc:fc:55:26:e1:79:63:e4:f4:e1: 4d:22:f4:4e:06:34:c2:31:0d:d9:db:1a:1c:45:20:12:b3:cf: dd:ac:fb:3d:24:bc:d0:09:fc:ce:96:41:f4:db:a2:63:80:d4: 8d:99:a5:d8:71:d8:0c:65:86:3e:e5:4c:8b:95:d1:4c:da:32: e8:8c:3a:7a:a4:d1:1d:d1:08:80:59:fe:cf:20:4c:05:f7:3b: a0:f2:4d:db:ab:c3:54:d0:12:50:62:2c:1f:99:a2:39:d7:9f: 42:52:5a:af:22:48:e0:b7:0e:93:d1:97:01:1f:42:7d:0f:26: 83:24:c6:91:9a:9a:08:0d:81:98:37:32:ad:cb:44:74:81:09: fd:60:45:19:68:3c:a7:75:a0:85:a8:c4:bf:0a:b8:d8:0f:7f: c3:3c:a7:4e:08:ad:2b:0e:bd:54:a3:c9:06:93:9e:06:e7:56: f6:7c:30:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTqi++rtGW36OUrG2Tfgl4rHaIx4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTI0MDQ1WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGE2YmFkNzBiMThmNjA2NTQwNWMxNTdkYWJkNjA2Y2Q4 NjE1NWQ4Nzg2ZDllMGZmYzY4Yjc5NmQ5MTQyZjVlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7Sm8xy4N6F7u6fjO6c8QR0s2dgg//a/5T1LMEF+AemHx3 BTzU8Rsqcd7Gz8MOARhha7IyRzXVBXNvOGC4mwGQ65lPcEzrNiO93f59+mAetUUs 0bBpu6o1pwYHhDylzBGloY5pAhN+EwaYgaGc0euRPzyWNUMD+7VQ/5gBiXo6rQMc 8GnwMSTl6WzIGZma7u7Rx4l47eTjcr4uBnqYsBEjhhHPHTg3jbcs1Z0ATSqyTw7R +6f7C47hnLmaCBA9jEfV/d4yOHicL7bzLqj5fD4KK4LmCYKjnK5Cz9H2vZAB2aC0 Sc8d3yktZ8naMSXTjpcgoKMdDqpzHaKEFgQ3y78BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUubzNdW6lo98hd167rSgPv3+Ou5wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2M4ZTM0NzcyLTAyZGMtNDU4My1hZDhhLWFhM2M0YTI5NTc5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwwwDQYJKoZIhvcNAQELBQADggEBAB55msD9/dfF3JAbmKNMyAUx Tp6Q8gVLLOmmEpWXFnnPmjjfxCI9uMevg/PXDltzsA1crjQOHK5EsZweKVsHTF6w HiRxYtMLW2HGsVH1TGVGvPxVJuF5Y+T04U0i9E4GNMIxDdnbGhxFIBKzz92s+z0k vNAJ/M6WQfTbomOA1I2Zpdhx2Axlhj7lTIuV0UzaMuiMOnqk0R3RCIBZ/s8gTAX3 O6DyTdurw1TQElBiLB+ZojnXn0JSWq8iSOC3DpPRlwEfQn0PJoMkxpGamggNgZg3 Mq3LRHSBCf1gRRloPKd1oIWoxL8KuNgPf8M8p04IrSsOvVSjyQaTngbnVvZ8MNs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:04 2025 by rpki-client