$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4be413ac-e934-49e3-991f-a9e6650a7cd0.roa File: 4be413ac-e934-49e3-991f-a9e6650a7cd0.roa (raw, json) Hash identifier: g4qGxIh80aHSEwLsegjx77KV5a1SU9D3FjKK82jZzKk= Subject key identifier: DC:1A:B7:0A:F8:77:66:2E:55:89:FC:F1:C8:E7:49:36:DC:66:FF:AD Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7F5980B7A1C3B69F0C1E52C1F9110BE11C7ECF89 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4be413ac-e934-49e3-991f-a9e6650a7cd0.roa Signing time: Tue 04 Nov 2025 16:41:00 +0000 ROA not before: Tue 04 Nov 2025 16:41:00 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:59:80:b7:a1:c3:b6:9f:0c:1e:52:c1:f9:11:0b:e1:1c:7e:cf:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:41:00 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=635d6038b402c922e73c86177c819fa3d55e4d2a9d24fc6b15d190217de404c9, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:af:07:10:ba:71:6f:2f:3e:8b:a8:12:48: 92:80:0c:d4:ce:9a:1b:38:78:8d:27:2d:73:a4:b8: ca:1a:fe:37:e8:f6:21:8a:2c:f6:60:5d:da:de:eb: 39:f9:b1:fc:06:68:bc:80:a8:10:b6:1a:8e:6b:c2: 64:31:48:ab:a9:41:bd:db:44:d4:9b:5b:40:5c:34: a4:39:e3:04:20:e2:ae:95:3b:f7:80:e1:fc:57:35: 82:2b:6c:f4:b0:be:2a:79:47:e6:f7:a0:8d:0c:68: 95:da:09:98:d1:c0:99:81:77:e7:a3:f7:8a:97:c0: ce:26:27:df:7d:4d:04:22:34:91:5e:00:ec:f6:f2: 0e:29:e7:ad:b8:76:61:b4:55:df:ca:bb:d8:ac:2a: 1f:c0:65:c8:f8:3e:a7:ec:50:1a:6b:ad:bf:73:7f: 7a:c3:bd:e3:f0:df:4b:43:aa:37:7f:2d:13:16:e3: 44:47:8f:52:ac:8b:81:7c:e2:12:b3:0d:a6:e5:9e: 90:b7:94:3b:25:04:70:3d:67:12:62:0d:51:12:a6: 62:ba:56:c1:60:ea:41:35:a9:17:81:8c:f8:81:3f: 1f:ee:37:90:5c:d3:fe:02:df:cb:33:4f:5a:f4:33: 82:74:d8:18:0d:ff:58:67:70:a3:fe:9c:f4:ca:c1: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1A:B7:0A:F8:77:66:2E:55:89:FC:F1:C8:E7:49:36:DC:66:FF:AD X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4be413ac-e934-49e3-991f-a9e6650a7cd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c06::/48 Signature Algorithm: sha256WithRSAEncryption 39:f8:8f:15:ca:89:11:30:fe:66:66:cc:66:ee:03:94:73:14: 25:97:d2:70:92:73:43:34:e6:b8:4e:47:8f:b6:88:1e:87:ec: 44:52:56:cd:23:72:78:af:01:4e:ec:61:24:c7:51:d2:ab:95: a6:06:c8:d4:1d:9d:f0:39:d5:8b:1f:f5:8e:e7:92:0f:91:62: a1:d9:6d:75:39:7e:d3:98:33:d0:4f:f5:c5:45:5a:d8:db:73: 1c:69:7a:ad:59:d4:95:19:fa:bd:5e:ee:49:72:22:13:64:d2: b2:2b:76:fc:8c:f7:45:97:b9:92:30:3d:aa:86:d7:eb:75:65: 7f:04:4e:22:74:27:e1:7b:ea:c2:02:ef:1f:3a:b0:8c:79:a0: 38:97:d0:ec:2d:80:57:c4:4c:bd:fa:7e:fc:d6:a9:d3:74:30: 77:bf:62:62:55:53:e7:84:a0:21:3f:d7:38:3a:4a:e8:9b:07: 2f:11:49:96:31:d5:c8:8a:45:02:c2:b0:04:63:9d:0a:e8:d9: 46:1d:a0:9e:ed:6b:51:87:eb:e4:90:88:a2:5a:57:78:f9:fe: cb:31:34:02:a4:0e:c6:eb:1d:59:66:dd:a1:d5:04:cf:db:05: 95:40:f5:c5:55:f7:48:f3:d1:ab:cd:32:14:2a:87:82:29:5c: 90:a1:1e:ba -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUf1mAt6HDtp8MHlLB+REL4Rx+z4kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY0MTAwWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzVkNjAzOGI0MDJjOTIyZTczYzg2MTc3YzgxOWZhM2Q1 NWU0ZDJhOWQyNGZjNmIxNWQxOTAyMTdkZTQwNGM5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPNK8HELpxby8+i6gSSJKADNTOmhs4eI0nLXOkuMoa/jfo 9iGKLPZgXdre6zn5sfwGaLyAqBC2Go5rwmQxSKupQb3bRNSbW0BcNKQ54wQg4q6V O/eA4fxXNYIrbPSwvip5R+b3oI0MaJXaCZjRwJmBd+ej94qXwM4mJ999TQQiNJFe AOz28g4p5624dmG0Vd/Ku9isKh/AZcj4PqfsUBprrb9zf3rDvePw30tDqjd/LRMW 40RHj1Ksi4F84hKzDablnpC3lDslBHA9ZxJiDVESpmK6VsFg6kE1qReBjPiBPx/u N5Bc0/4C38szT1r0M4J02BgN/1hncKP+nPTKwd8XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3Bq3Cvh3Zi5VifzxyOdJNtxm/60wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRiZTQxM2FjLWU5MzQtNDllMy05OTFmLWE5ZTY2NTBhN2NkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAYwDQYJKoZIhvcNAQELBQADggEBADn4jxXKiREw/mZmzGbuA5Rz FCWX0nCSc0M05rhOR4+2iB6H7ERSVs0jcnivAU7sYSTHUdKrlaYGyNQdnfA51Ysf 9Y7nkg+RYqHZbXU5ftOYM9BP9cVFWtjbcxxpeq1Z1JUZ+r1e7klyIhNk0rIrdvyM 90WXuZIwPaqG1+t1ZX8ETiJ0J+F76sIC7x86sIx5oDiX0OwtgFfETL36fvzWqdN0 MHe/YmJVU+eEoCE/1zg6SuibBy8RSZYx1ciKRQLCsARjnQro2UYdoJ7ta1GH6+SQ iKJaV3j5/ssxNAKkDsbrHVlm3aHVBM/bBZVA9cVV90jz0avNMhQqh4IpXJChHro= -----END CERTIFICATE-----Generated at Wed Nov 5 07:09:07 2025 by rpki-client