$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0ee4b60d-d8c4-4e31-bdd5-41e4b336c3ee.roa File: 0ee4b60d-d8c4-4e31-bdd5-41e4b336c3ee.roa (raw, json) Hash identifier: NQHGjoF+OjhILHU8umr0ScvnaEFDRnFt1APWBTHoMIk= Subject key identifier: B4:87:79:F9:6E:81:D9:24:D3:04:60:06:80:C5:71:77:5E:F0:8F:C4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 73AF25522EBEB16295CF1A8F63E990EE81A175F3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0ee4b60d-d8c4-4e31-bdd5-41e4b336c3ee.roa Signing time: Tue 04 Nov 2025 16:41:02 +0000 ROA not before: Tue 04 Nov 2025 16:41:02 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:af:25:52:2e:be:b1:62:95:cf:1a:8f:63:e9:90:ee:81:a1:75:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:41:02 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=993c9228d19debe03cd56fed674c946ffc164d8345e26c19eb126d308b69213d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:56:45:99:51:86:9a:9c:a9:ae:6b:8c:d7: fb:d0:37:57:8a:f5:84:8e:3a:58:b8:d2:d1:ee:4d: d0:f5:cb:12:77:ac:56:64:35:77:6c:7d:c4:f6:38: 3e:ea:2a:dd:00:6f:88:4e:df:18:39:55:cf:84:fa: 42:12:22:1a:d1:33:1d:dd:6d:28:e9:9d:92:17:e9: 79:e1:d4:e5:5f:14:e9:d7:37:a7:4f:2e:ff:0e:fa: c1:8b:03:3c:36:14:bd:63:09:e7:f2:a8:26:af:d5: 0d:37:91:98:85:84:ac:5a:4e:3a:9d:32:c8:d4:1e: f2:61:5d:15:37:1e:98:42:a1:d6:c6:66:ca:8d:38: f8:00:db:24:88:72:d1:cf:5b:7e:df:d4:41:1f:89: 4d:fa:33:5a:94:7c:01:03:34:b6:2d:ae:86:8f:b0: a6:dd:63:dc:58:13:b2:eb:08:25:00:2d:93:fe:e7: 48:a9:5c:36:f0:b6:2d:d5:7f:55:d9:3d:40:7d:b0: dc:1f:eb:70:dd:1e:29:40:eb:5c:25:7c:cd:aa:ab: b1:91:5f:fc:90:71:fc:e3:c1:48:44:ac:4a:03:f1: f5:cd:f0:70:3a:7d:d2:da:38:02:82:36:9b:2d:d6: 8d:ec:45:da:da:74:4a:f8:8a:a1:7a:7e:0d:57:34: ab:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:87:79:F9:6E:81:D9:24:D3:04:60:06:80:C5:71:77:5E:F0:8F:C4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0ee4b60d-d8c4-4e31-bdd5-41e4b336c3ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c06::/48 Signature Algorithm: sha256WithRSAEncryption 37:ca:ca:75:1a:68:36:0b:7b:5f:32:32:01:f0:22:59:d1:78: 49:b3:d7:67:45:fb:70:37:9b:02:98:e4:41:66:65:f4:15:11: 68:be:68:77:0b:05:53:ba:33:33:4a:0c:05:11:ae:ca:b9:6b: f7:f0:d0:5a:3d:9e:4d:f8:d1:f7:c3:d1:26:50:69:46:6a:d4: 2d:3e:e7:f9:b6:29:7f:69:cd:48:77:96:b6:fd:84:9e:db:b2: d6:4a:8e:75:5d:89:95:39:3c:02:82:2e:7b:f8:aa:62:f7:d9: 80:a9:37:eb:70:55:a9:e6:b1:8a:12:1c:4e:17:41:d3:13:2f: f8:ce:54:c6:53:6a:c7:5e:6b:3d:ca:a1:17:da:5a:32:c4:2a: 95:83:c4:e5:5b:dd:12:e4:83:a3:40:be:4d:f4:ad:07:6c:0e: 4b:e0:99:41:62:4d:84:64:e8:e0:fd:4b:d4:92:81:8a:d0:ba: 1b:6a:23:ab:d9:22:c7:55:c0:ba:2a:7a:ac:65:13:f3:9c:27: ab:db:c0:2c:f8:a6:44:3c:fd:94:ac:b1:a8:52:ab:35:9a:e6: b1:8d:f8:54:13:37:eb:46:cb:d1:9d:9c:f9:ec:2f:d1:04:e2: 63:e4:2f:fc:b9:ea:b8:7d:9a:f4:62:9d:dd:d0:61:56:78:98: b5:3b:d5:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUc68lUi6+sWKVzxqPY+mQ7oGhdfMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY0MTAyWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OTNjOTIyOGQxOWRlYmUwM2NkNTZmZWQ2NzRjOTQ2ZmZj MTY0ZDgzNDVlMjZjMTllYjEyNmQzMDhiNjkyMTNkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgsFZFmVGGmpyprmuM1/vQN1eK9YSOOli40tHuTdD1yxJ3 rFZkNXdsfcT2OD7qKt0Ab4hO3xg5Vc+E+kISIhrRMx3dbSjpnZIX6Xnh1OVfFOnX N6dPLv8O+sGLAzw2FL1jCefyqCav1Q03kZiFhKxaTjqdMsjUHvJhXRU3HphCodbG ZsqNOPgA2ySIctHPW37f1EEfiU36M1qUfAEDNLYtroaPsKbdY9xYE7LrCCUALZP+ 50ipXDbwti3Vf1XZPUB9sNwf63DdHilA61wlfM2qq7GRX/yQcfzjwUhErEoD8fXN 8HA6fdLaOAKCNpst1o3sRdradEr4iqF6fg1XNKs3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtId5+W6B2STTBGAGgMVxd17wj8QwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzBlZTRiNjBkLWQ4YzQtNGUzMS1iZGQ1LTQxZTRiMzM2YzNlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAYwDQYJKoZIhvcNAQELBQADggEBADfKynUaaDYLe18yMgHwIlnR eEmz12dF+3A3mwKY5EFmZfQVEWi+aHcLBVO6MzNKDAURrsq5a/fw0Fo9nk340ffD 0SZQaUZq1C0+5/m2KX9pzUh3lrb9hJ7bstZKjnVdiZU5PAKCLnv4qmL32YCpN+tw VanmsYoSHE4XQdMTL/jOVMZTasdeaz3KoRfaWjLEKpWDxOVb3RLkg6NAvk30rQds DkvgmUFiTYRk6OD9S9SSgYrQuhtqI6vZIsdVwLoqeqxlE/OcJ6vbwCz4pkQ8/ZSs sahSqzWa5rGN+FQTN+tGy9GdnPnsL9EE4mPkL/y56rh9mvRind3QYVZ4mLU71eI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:40 2025 by rpki-client