$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33cad6c3-e74e-478f-9b7a-5bae37505c27.roa File: 33cad6c3-e74e-478f-9b7a-5bae37505c27.roa (raw, json) Hash identifier: zVoFWRqRG1Jf/MnAPR5riAaEcJtY+UVxmVh7cdUnh8A= Subject key identifier: 52:5E:49:4A:10:62:CA:14:83:CD:C0:88:3D:D0:E2:C3:5F:37:CB:85 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7CAC1CD39A187735266740BBE7024D58B8AA1BE8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33cad6c3-e74e-478f-9b7a-5bae37505c27.roa Signing time: Tue 04 Nov 2025 16:51:07 +0000 ROA not before: Tue 04 Nov 2025 16:51:07 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ac:1c:d3:9a:18:77:35:26:67:40:bb:e7:02:4d:58:b8:aa:1b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:51:07 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=b2b9a6d41cb0f841d9593a45d9a6847ee19a67828a4e5bdbbfc07eb161ef2cdb, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:f7:2a:bf:ce:89:af:67:51:e1:4d:35:40: 61:3e:24:01:bb:3c:25:3c:5e:85:77:30:4a:c9:72: 23:c5:1e:eb:a8:89:80:12:6b:a6:09:bb:45:2e:b8: d0:ad:0c:f5:5f:39:c6:58:f6:16:d8:26:da:db:c5: 1c:f0:bd:f3:b0:a8:ca:12:5e:65:7c:aa:be:98:91: b3:ed:35:03:0c:7a:95:ce:54:1b:d3:49:56:7f:07: 31:46:8d:8a:fa:fa:a1:22:73:16:b2:3a:84:19:d9: 94:08:2e:3d:28:e4:e6:5f:b2:7b:35:d6:45:61:3f: c0:14:46:c2:a3:22:fa:d2:84:cd:a0:a2:a3:be:7a: fe:0c:60:16:d7:60:9e:90:03:df:22:93:10:c2:ee: 42:8c:0f:2c:ab:99:45:c7:e1:b4:9f:3c:85:fe:fe: 39:8b:b3:3c:e4:70:a4:d3:08:c9:80:4a:71:51:52: d4:24:af:3b:05:02:1c:fe:49:f3:56:74:9f:0e:72: 46:ff:99:73:dd:b4:67:71:6a:f8:5c:5d:a4:9a:66: 9a:70:f0:33:f8:f7:c6:5c:ed:50:4f:26:ed:93:3e: 1c:c6:9c:90:61:ba:5d:44:a9:9f:bf:ab:8a:99:10: 2f:0c:e7:1b:d8:d3:f8:e3:9a:82:48:e1:0a:32:0a: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5E:49:4A:10:62:CA:14:83:CD:C0:88:3D:D0:E2:C3:5F:37:CB:85 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33cad6c3-e74e-478f-9b7a-5bae37505c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c19::/48 Signature Algorithm: sha256WithRSAEncryption 5c:30:17:df:a3:e9:aa:c0:c7:2c:23:ca:5f:5c:4a:c1:61:da: 1c:8a:b7:a8:88:65:60:24:32:7e:88:76:62:b2:72:f4:c7:47: 5f:da:90:19:f1:27:36:d4:2a:3f:e8:77:17:49:08:21:21:43: b6:01:93:60:bd:b4:b1:37:8a:4f:c7:09:9f:6a:42:8e:f4:ef: c5:5b:75:4a:95:59:d3:ae:60:df:f0:bc:63:41:27:7e:34:54: 19:b0:60:c5:55:15:73:ad:73:ec:0d:94:51:eb:2f:be:75:07: 00:41:28:ba:82:ba:f9:5b:7a:69:17:73:76:a2:03:dc:8f:d9: 48:69:e7:89:2b:fe:3a:d5:e1:63:c6:60:3c:71:08:af:fa:b6: 7d:af:c2:26:2f:d6:52:13:c0:79:5a:b9:82:22:91:c1:2b:4d: 13:18:6f:06:e6:30:c2:54:15:ec:c9:8b:3c:86:82:da:7b:bb: f8:f4:06:c5:09:41:57:6a:71:ae:39:e9:4a:b7:b0:50:35:ca: 71:5e:34:08:32:f3:37:e3:8b:3b:df:b2:cc:02:08:fe:08:a4: 14:0e:9d:b0:6f:99:a5:36:77:7c:db:e1:f7:00:57:31:a8:2d: c3:ff:67:70:1c:fb:9a:07:86:92:18:cb:67:ea:70:dd:41:17: 50:64:d0:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfKwc05oYdzUmZ0C75wJNWLiqG+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY1MTA3WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmI5YTZkNDFjYjBmODQxZDk1OTNhNDVkOWE2ODQ3ZWUx OWE2NzgyOGE0ZTViZGJiZmMwN2ViMTYxZWYyY2RiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC84fcqv86Jr2dR4U01QGE+JAG7PCU8XoV3MErJciPFHuuo iYASa6YJu0UuuNCtDPVfOcZY9hbYJtrbxRzwvfOwqMoSXmV8qr6YkbPtNQMMepXO VBvTSVZ/BzFGjYr6+qEicxayOoQZ2ZQILj0o5OZfsns11kVhP8AURsKjIvrShM2g oqO+ev4MYBbXYJ6QA98ikxDC7kKMDyyrmUXH4bSfPIX+/jmLszzkcKTTCMmASnFR UtQkrzsFAhz+SfNWdJ8Ockb/mXPdtGdxavhcXaSaZppw8DP498Zc7VBPJu2TPhzG nJBhul1EqZ+/q4qZEC8M5xvY0/jjmoJI4QoyClKNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUl5JShBiyhSDzcCIPdDiw183y4UwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzMzY2FkNmMzLWU3NGUtNDc4Zi05YjdhLTViYWUzNzUwNWMyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBkwDQYJKoZIhvcNAQELBQADggEBAFwwF9+j6arAxywjyl9cSsFh 2hyKt6iIZWAkMn6IdmKycvTHR1/akBnxJzbUKj/odxdJCCEhQ7YBk2C9tLE3ik/H CZ9qQo7078VbdUqVWdOuYN/wvGNBJ340VBmwYMVVFXOtc+wNlFHrL751BwBBKLqC uvlbemkXc3aiA9yP2Uhp54kr/jrV4WPGYDxxCK/6tn2vwiYv1lITwHlauYIikcEr TRMYbwbmMMJUFezJizyGgtp7u/j0BsUJQVdqca456Uq3sFA1ynFeNAgy8zfjizvf sswCCP4IpBQOnbBvmaU2d3zb4fcAVzGoLcP/Z3Ac+5oHhpIYy2fqcN1BF1Bk0C4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:08:59 2025 by rpki-client