$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/24011dfd-46c4-4be5-8b52-f8dc7d0aab56.roa File: 24011dfd-46c4-4be5-8b52-f8dc7d0aab56.roa (raw, json) Hash identifier: 6mm0qjg0NQ7V1S+Kzecdy/XNQl6wR0J+pdZE+e+0ajc= Subject key identifier: F2:E6:6D:EE:94:79:93:D2:22:96:F5:B4:EC:C2:CF:92:DD:F4:9F:8F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 52CA5A59F5CA00E5259A9AC471E4395B436B45D2 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/24011dfd-46c4-4be5-8b52-f8dc7d0aab56.roa Signing time: Tue 21 Oct 2025 12:20:00 +0000 ROA not before: Tue 21 Oct 2025 12:20:00 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:100::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ca:5a:59:f5:ca:00:e5:25:9a:9a:c4:71:e4:39:5b:43:6b:45:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:20:00 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=d09ac0dd149cf964a1af2e4e0c14ca500dbebc4b05d31cfe41703e8a9e993cef, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:c9:f1:6f:04:3a:f2:74:a8:39:2a:bc:dd: ed:ec:17:20:1e:ea:d7:e3:aa:6f:a4:87:70:a3:2d: 4e:eb:93:d6:63:da:5e:a0:89:d7:01:4f:c0:a4:63: 1d:5e:9e:6f:ab:14:d5:c9:72:3e:fb:32:4a:99:7f: b0:bb:95:20:75:e6:1f:ff:f4:6c:ce:ba:2c:7e:3f: 7f:f9:4c:9b:c9:ba:04:17:9e:a4:4d:ee:7e:60:b5: 81:a1:82:a8:83:8b:1d:be:9c:9a:0b:9c:86:0e:85: 28:2a:2a:80:35:96:38:aa:34:54:f8:c1:94:92:61: 32:32:b8:ba:da:eb:76:b5:2c:59:9b:3f:84:a1:80: 1e:25:eb:46:f2:0a:1e:d2:ad:ff:23:2b:03:95:4a: 3a:da:95:d6:51:ee:b4:4f:fe:0d:70:5f:a8:6d:c8: 76:ff:41:f8:eb:02:4a:c7:19:24:f7:79:b9:e4:52: ff:51:30:e1:49:50:cd:e4:fa:09:83:e0:a2:b6:19: 5f:8c:5e:25:cd:f2:a3:a7:3c:65:de:cd:86:c4:ce: 8b:15:51:1d:68:43:d9:6a:34:5a:96:01:17:a0:fb: fc:66:9e:c0:0e:b3:ac:24:69:ca:11:41:eb:db:aa: ec:2f:ab:0d:96:b1:d2:bd:34:f2:f6:5f:d1:92:64: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E6:6D:EE:94:79:93:D2:22:96:F5:B4:EC:C2:CF:92:DD:F4:9F:8F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/24011dfd-46c4-4be5-8b52-f8dc7d0aab56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:100::/42 Signature Algorithm: sha256WithRSAEncryption 49:cf:a9:06:e5:ee:bf:6c:38:f9:16:46:97:89:7e:f6:9f:03: e6:7e:a9:09:16:d8:6c:90:83:92:af:c1:f5:6a:30:03:e8:d4: ba:a8:81:33:a4:9e:c1:31:87:18:aa:1a:5a:a8:b8:59:8c:0b: 39:33:ba:70:dc:1d:2d:93:4d:f1:a1:4c:0b:ae:85:4c:43:ea: 5b:ce:db:68:d0:fa:b1:85:5c:a3:97:10:f2:6b:f9:45:4e:10: d4:6f:a3:dc:20:88:8d:55:55:5d:71:5a:78:6e:7d:a2:76:3b: ca:41:01:c1:cf:fa:b9:cc:58:07:b6:da:84:9d:c2:9e:20:a1: 8a:1e:73:e2:1a:1e:34:36:c7:80:dc:12:d1:59:18:e9:f4:e0: 9f:ed:49:bc:57:ec:94:8b:07:38:33:a5:dc:ec:c9:47:f7:d5: fa:c3:52:3c:c8:14:4e:fe:fa:37:c3:b1:66:57:b9:9e:8d:a3: 8c:5f:8b:f4:ff:b9:f4:0a:f8:af:d4:5e:8c:f3:b0:bc:99:4b: e0:5d:ec:15:d4:f6:ad:8a:ab:67:2f:ed:44:23:82:3c:01:5f: f0:7d:b6:d5:c2:51:a1:5b:03:ff:9d:1c:62:79:a5:6a:53:df: c0:73:69:97:b1:34:bd:be:81:6c:aa:7e:20:34:65:53:04:20: d4:83:8d:8a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUspaWfXKAOUlmprEceQ5W0NrRdIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIyMDAwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDlhYzBkZDE0OWNmOTY0YTFhZjJlNGUwYzE0Y2E1MDBk YmViYzRiMDVkMzFjZmU0MTcwM2U4YTllOTkzY2VmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmWsnxbwQ68nSoOSq83e3sFyAe6tfjqm+kh3CjLU7rk9Zj 2l6gidcBT8CkYx1enm+rFNXJcj77MkqZf7C7lSB15h//9GzOuix+P3/5TJvJugQX nqRN7n5gtYGhgqiDix2+nJoLnIYOhSgqKoA1ljiqNFT4wZSSYTIyuLra63a1LFmb P4ShgB4l60byCh7Srf8jKwOVSjraldZR7rRP/g1wX6htyHb/QfjrAkrHGST3ebnk Uv9RMOFJUM3k+gmD4KK2GV+MXiXN8qOnPGXezYbEzosVUR1oQ9lqNFqWAReg+/xm nsAOs6wkacoRQevbquwvqw2WsdK9NPL2X9GSZFDBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8uZt7pR5k9IilvW07MLPkt30n48wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI0MDExZGZkLTQ2YzQtNGJlNS04YjUyLWY4ZGM3ZDBhYWI1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmBZzAAQAwDQYJKoZIhvcNAQELBQADggEBAEnPqQbl7r9sOPkWRpeJfvaf A+Z+qQkW2GyQg5KvwfVqMAPo1LqogTOknsExhxiqGlqouFmMCzkzunDcHS2TTfGh TAuuhUxD6lvO22jQ+rGFXKOXEPJr+UVOENRvo9wgiI1VVV1xWnhufaJ2O8pBAcHP +rnMWAe22oSdwp4goYoec+IaHjQ2x4DcEtFZGOn04J/tSbxX7JSLBzgzpdzsyUf3 1frDUjzIFE7++jfDsWZXuZ6No4xfi/T/ufQK+K/UXozzsLyZS+Bd7BXU9q2Kq2cv 7UQjgjwBX/B9ttXCUaFbA/+dHGJ5pWpT38BzaZexNL2+gWyqfiA0ZVMEINSDjYo= -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:43 2025 by rpki-client