$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4d01c4d8-9b97-4ffe-b2ed-a588c1bef2af.roa File: 4d01c4d8-9b97-4ffe-b2ed-a588c1bef2af.roa (raw, json) Hash identifier: xWCfoIwfvysGcMQ6AWLzvooLxVcFZG2E2FWOEn99y7w= Subject key identifier: 01:0E:05:FA:20:52:B2:51:36:A6:56:83:F5:11:DF:4D:DA:3D:06:55 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 361EAB5FCC4847FB267FFFB19C4987B654597A62 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4d01c4d8-9b97-4ffe-b2ed-a588c1bef2af.roa Signing time: Tue 04 Nov 2025 16:40:23 +0000 ROA not before: Tue 04 Nov 2025 16:40:23 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c0e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1e:ab:5f:cc:48:47:fb:26:7f:ff:b1:9c:49:87:b6:54:59:7a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:40:23 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=158e3405ba5257480e4ee716b3e1f6ceb39b8e6fc9e6c52d0df2939909359be5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:61:7a:09:22:71:5b:a7:34:cb:5e:fb:fd: f4:f9:cd:af:4e:99:59:1e:9c:ca:03:a2:c7:ee:21: 87:12:2c:69:5a:08:72:7b:5e:55:1f:a4:b9:2b:94: 8b:eb:16:80:12:1c:20:06:ea:ae:dc:46:d8:27:1a: ec:b0:2e:e5:48:5b:de:6e:85:cc:05:64:c9:ab:67: 6a:f0:85:60:ff:ea:6f:c3:52:02:0c:a2:87:81:d2: ab:0c:7f:19:0c:40:1b:84:3f:07:24:c0:7f:25:e9: 03:2e:60:6e:a0:e5:f1:89:43:95:f5:52:e1:82:47: 50:6c:78:eb:a1:bc:ac:53:a0:35:f0:b2:35:aa:93: c4:90:a3:5a:01:40:c4:54:a6:51:87:c8:b9:43:26: 41:85:fb:de:c4:dc:6a:df:87:8a:72:32:04:e1:81: 10:a8:1e:fe:71:71:7b:e2:25:da:6e:5d:40:f4:15: aa:11:53:17:31:29:b2:7e:29:8c:52:31:ed:20:e5: f5:ab:b2:6d:2e:97:62:04:40:f9:87:0c:fb:b9:cb: 44:82:cf:bc:a1:22:e1:0a:9b:11:cb:37:3a:21:d7: 99:8a:ee:d4:19:9a:4f:32:ba:76:7c:c6:b4:d2:e2: 07:b6:4d:6a:8d:d0:04:53:f1:22:ce:80:b4:0f:f4: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0E:05:FA:20:52:B2:51:36:A6:56:83:F5:11:DF:4D:DA:3D:06:55 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4d01c4d8-9b97-4ffe-b2ed-a588c1bef2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0e::/48 Signature Algorithm: sha256WithRSAEncryption 6d:9d:96:80:cd:db:1f:1d:0e:c6:cb:83:a3:49:07:6d:4e:ba: 26:85:2d:9f:78:2e:d0:74:10:01:c8:d3:e9:93:a4:89:27:3f: e4:c7:7d:45:0c:14:1a:71:81:51:b1:91:df:5a:87:e1:2f:34: 73:90:9a:ea:5c:cc:6b:27:6e:1a:96:43:cb:a8:6e:cb:09:90: 17:f8:24:93:03:6f:31:58:8a:e1:20:a6:70:90:fc:8a:fe:64: d4:02:ce:45:9d:88:d9:e0:8b:9e:0a:f2:09:05:11:9b:58:c8: e7:2b:94:40:aa:fa:03:e9:bd:2d:fc:bb:56:2a:48:fe:cc:3b: 28:4f:ac:4f:6b:20:19:b1:2c:40:ec:26:91:ad:cc:c9:75:32: 9c:06:c4:19:93:21:00:c4:19:f5:23:e3:2a:b0:f0:ad:08:d1: 0f:bb:62:38:ae:9c:0d:80:66:f5:ce:e4:8b:43:54:84:e0:3f: 6b:b0:da:21:59:35:dd:78:f3:ac:62:4e:1f:d0:e2:c4:8d:8a: f0:95:81:21:d5:1b:61:6a:0f:ab:ba:48:db:e6:b8:04:85:70: 6f:eb:6c:92:a1:a4:57:55:ad:0a:02:06:c5:be:40:2a:8f:6b: c3:e3:f5:33:05:09:8b:d4:65:64:71:32:a2:12:1e:e4:f1:a7: 65:28:e5:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNh6rX8xIR/smf/+xnEmHtlRZemIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY0MDIzWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNThlMzQwNWJhNTI1NzQ4MGU0ZWU3MTZiM2UxZjZjZWIz OWI4ZTZmYzllNmM1MmQwZGYyOTM5OTA5MzU5YmU1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+/GF6CSJxW6c0y177/fT5za9OmVkenMoDosfuIYcSLGla CHJ7XlUfpLkrlIvrFoASHCAG6q7cRtgnGuywLuVIW95uhcwFZMmrZ2rwhWD/6m/D UgIMooeB0qsMfxkMQBuEPwckwH8l6QMuYG6g5fGJQ5X1UuGCR1BseOuhvKxToDXw sjWqk8SQo1oBQMRUplGHyLlDJkGF+97E3Grfh4pyMgThgRCoHv5xcXviJdpuXUD0 FaoRUxcxKbJ+KYxSMe0g5fWrsm0ul2IEQPmHDPu5y0SCz7yhIuEKmxHLNzoh15mK 7tQZmk8yunZ8xrTS4ge2TWqN0ART8SLOgLQP9PAnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAQ4F+iBSslE2plaD9RHfTdo9BlUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRkMDFjNGQ4LTliOTctNGZmZS1iMmVkLWE1ODhjMWJlZjJhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA4wDQYJKoZIhvcNAQELBQADggEBAG2dloDN2x8dDsbLg6NJB21O uiaFLZ94LtB0EAHI0+mTpIknP+THfUUMFBpxgVGxkd9ah+EvNHOQmupczGsnbhqW Q8uobssJkBf4JJMDbzFYiuEgpnCQ/Ir+ZNQCzkWdiNngi54K8gkFEZtYyOcrlECq +gPpvS38u1YqSP7MOyhPrE9rIBmxLEDsJpGtzMl1MpwGxBmTIQDEGfUj4yqw8K0I 0Q+7YjiunA2AZvXO5ItDVITgP2uw2iFZNd1486xiTh/Q4sSNivCVgSHVG2FqD6u6 SNvmuASFcG/rbJKhpFdVrQoCBsW+QCqPa8Pj9TMFCYvUZWRxMqISHuTxp2Uo5Wc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:10 2025 by rpki-client