$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2133524a-1945-45c3-b339-b135ee710d9f.roa File: 2133524a-1945-45c3-b339-b135ee710d9f.roa (raw, json) Hash identifier: EsxiWFFOP3Y5cbYYqoqYWNsp2wut9J7LLm9T692rcEg= Subject key identifier: 9B:02:B8:80:64:8D:E6:8F:E4:D1:A3:10:C3:78:15:C9:BF:E9:68:75 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 438552050412C4A50A83F2AC7994B965BF3C432B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2133524a-1945-45c3-b339-b135ee710d9f.roa Signing time: Tue 21 Oct 2025 12:30:12 +0000 ROA not before: Tue 21 Oct 2025 12:30:12 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:308::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:85:52:05:04:12:c4:a5:0a:83:f2:ac:79:94:b9:65:bf:3c:43:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:30:12 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=84cf20c51fc77e381d580ea32529612054f7049e0aa99bd234f9525fc931453e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:c8:0d:21:be:92:fa:03:40:bb:2b:79:f1: 59:45:d2:0a:4a:4a:1f:87:10:48:9b:04:5c:f3:f0: 70:c5:c3:ee:a3:fb:fe:1f:bd:d1:ac:66:e5:6f:09: fb:f9:d6:d1:eb:a5:6c:d1:8a:74:55:d3:a8:a7:ca: f6:eb:a2:db:ff:08:1d:73:ef:c3:ae:1d:ab:17:da: 58:9b:4d:a2:9d:38:ae:1f:59:de:e1:e5:02:81:34: 3e:b9:4e:4e:4a:30:d1:d0:fa:39:3a:89:ca:04:e7: e0:00:85:60:45:44:1a:88:c6:97:ae:86:aa:8d:4d: 2b:4d:45:eb:84:cd:9e:9a:fb:e6:94:1e:e5:ec:b5: c8:d4:31:33:6d:6a:a8:ce:82:1e:bd:93:2a:6c:17: 16:11:08:54:9a:66:28:29:a8:1c:ec:36:b9:dd:68: c6:da:ac:5b:ab:ad:ae:60:dd:23:9e:34:25:3a:fc: 33:c3:d0:02:b0:a4:7f:b0:0c:b5:9f:4d:41:3f:b2: 8f:77:ca:5b:f4:93:4d:a9:ae:52:5d:32:4c:0a:82: 0e:e8:7b:d9:e9:a1:49:1a:f5:3c:00:2c:63:b0:34: f0:7c:f3:bd:84:b4:48:72:48:9f:fb:69:fc:48:42: 20:24:68:60:85:86:0f:6f:9d:51:e8:1e:60:b8:87: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:02:B8:80:64:8D:E6:8F:E4:D1:A3:10:C3:78:15:C9:BF:E9:68:75 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2133524a-1945-45c3-b339-b135ee710d9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:308::/48 Signature Algorithm: sha256WithRSAEncryption aa:8a:e5:cf:9a:68:5a:f1:59:36:89:5d:57:15:15:81:36:46: 1b:b0:98:dd:d7:d6:4b:c4:fc:33:60:f3:a9:d4:3a:b3:9a:8d: 56:7f:79:e5:2b:14:bc:8b:bb:ea:d5:89:4e:2f:da:5a:9f:b1: e9:42:b5:35:10:fb:3f:e6:c4:f9:87:ae:73:ce:c1:f9:e3:35: ae:db:31:48:73:ab:d0:56:c2:6e:5d:51:e9:91:ac:75:62:9d: 08:a8:f0:0a:7b:d6:70:92:1f:06:bb:fa:7e:08:8b:d3:f7:cc: ea:2f:78:7e:8b:e2:2c:ba:45:b5:66:3a:d4:d4:cb:a9:af:4a: 6f:6f:2b:46:62:9b:5e:48:ed:6f:77:f3:0e:cf:34:72:81:4d: a2:16:a9:0f:cd:dd:48:82:47:0c:87:e1:13:d1:66:c2:3f:e8: f3:17:8b:b8:48:63:f9:99:cb:5e:3d:c1:e8:2a:0e:98:e1:eb: 2c:b5:00:36:08:d3:a7:f2:fa:8a:a7:d7:3d:5d:fe:7d:df:9f: 05:8c:91:1a:b3:aa:a1:c5:ea:6a:15:15:ed:28:77:3d:76:8d: a9:25:64:7a:f6:00:44:bf:c9:00:5b:bb:b6:34:9a:ef:06:31: 48:8e:63:b4:09:d9:d9:b1:0e:d5:cf:1f:db:8b:b9:66:15:2a: ad:ee:6e:80 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ4VSBQQSxKUKg/KseZS5Zb88QyswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIzMDEyWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NGNmMjBjNTFmYzc3ZTM4MWQ1ODBlYTMyNTI5NjEyMDU0 ZjcwNDllMGFhOTliZDIzNGY5NTI1ZmM5MzE0NTNlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxQcgNIb6S+gNAuyt58VlF0gpKSh+HEEibBFzz8HDFw+6j +/4fvdGsZuVvCfv51tHrpWzRinRV06inyvbrotv/CB1z78OuHasX2libTaKdOK4f Wd7h5QKBND65Tk5KMNHQ+jk6icoE5+AAhWBFRBqIxpeuhqqNTStNReuEzZ6a++aU HuXstcjUMTNtaqjOgh69kypsFxYRCFSaZigpqBzsNrndaMbarFurra5g3SOeNCU6 /DPD0AKwpH+wDLWfTUE/so93ylv0k02prlJdMkwKgg7oe9npoUka9TwALGOwNPB8 872EtEhySJ/7afxIQiAkaGCFhg9vnVHoHmC4h3nJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmwK4gGSN5o/k0aMQw3gVyb/paHUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzIxMzM1MjRhLTE5NDUtNDVjMy1iMzM5LWIxMzVlZTcxMGQ5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwgwDQYJKoZIhvcNAQELBQADggEBAKqK5c+aaFrxWTaJXVcVFYE2 RhuwmN3X1kvE/DNg86nUOrOajVZ/eeUrFLyLu+rViU4v2lqfselCtTUQ+z/mxPmH rnPOwfnjNa7bMUhzq9BWwm5dUemRrHVinQio8Ap71nCSHwa7+n4Ii9P3zOoveH6L 4iy6RbVmOtTUy6mvSm9vK0Zim15I7W938w7PNHKBTaIWqQ/N3UiCRwyH4RPRZsI/ 6PMXi7hIY/mZy149wegqDpjh6yy1ADYI06fy+oqn1z1d/n3fnwWMkRqzqqHF6moV Fe0odz12jaklZHr2AES/yQBbu7Y0mu8GMUiOY7QJ2dmxDtXPH9uLuWYVKq3uboA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:41 2025 by rpki-client