$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/63541871-4b7b-4ccb-a81e-3eaa437846d3.roa File: 63541871-4b7b-4ccb-a81e-3eaa437846d3.roa (raw, json) Hash identifier: 3+fP9n1bh6ltj/l0yEva6APshVfzbTGalFb12tJsZ1c= Subject key identifier: 21:CB:A3:7C:5F:F4:89:07:31:B2:02:1D:9A:29:E7:E4:D2:5B:3F:3A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 153339D3A59E0EC1245FD43A9882BA1D314B52CE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/63541871-4b7b-4ccb-a81e-3eaa437846d3.roa Signing time: Tue 04 Nov 2025 16:51:04 +0000 ROA not before: Tue 04 Nov 2025 16:51:04 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:33:39:d3:a5:9e:0e:c1:24:5f:d4:3a:98:82:ba:1d:31:4b:52:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:51:04 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=fd59494a3bef818689f09f65e5e0981aef33f051618f8a5ddf4ec97557682d3a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:79:da:1e:3d:89:db:23:df:c6:3f:d9:ed: 7c:ef:57:e5:47:ff:0f:88:e6:9b:b7:43:4a:99:ac: 4f:b6:a9:e9:c1:29:6d:d7:1f:ec:29:a0:45:e5:72: bf:e5:77:90:42:94:e7:b2:93:2c:67:ef:63:8a:25: ba:e7:01:10:3b:81:fb:7d:65:cc:ab:89:35:de:e7: de:17:b1:8b:1e:6e:3d:27:22:ea:fe:18:1e:ce:f9: d1:a2:a4:de:c4:01:93:14:03:71:b5:df:73:2c:b3: 4a:20:4e:0c:ee:e0:f1:42:f7:ab:18:26:4b:c8:38: ca:a2:ac:2a:5b:0d:5d:9d:f8:6b:b8:93:f7:26:df: 1b:61:47:92:a8:0b:78:47:f1:98:cf:fb:ce:96:be: f6:1f:84:42:ce:50:21:a3:20:66:89:24:a9:aa:15: 33:da:ab:4c:fe:76:e7:81:34:c0:fa:0a:23:08:1f: 19:4a:75:ff:7d:7f:9f:01:df:c1:2d:9e:41:72:85: 28:15:f2:fd:65:85:fa:d0:30:39:fc:7e:f1:33:32: 2c:be:c6:56:66:0b:31:5b:c1:17:01:1a:89:10:35: de:a8:e2:92:e6:9f:e5:81:93:f9:5e:a4:6f:16:d0: 4f:ee:04:69:b3:7f:a0:99:e9:3a:d5:da:41:3e:8d: b0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CB:A3:7C:5F:F4:89:07:31:B2:02:1D:9A:29:E7:E4:D2:5B:3F:3A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/63541871-4b7b-4ccb-a81e-3eaa437846d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c04::/48 Signature Algorithm: sha256WithRSAEncryption 86:9b:ef:4c:13:04:3e:3d:81:2d:1e:bd:e1:38:4d:d1:91:82: 78:28:57:24:a6:20:d8:cb:23:e9:8c:5f:06:c0:7b:5b:6c:4d: 5e:1a:2b:56:0b:be:6d:02:00:c3:49:54:89:87:6c:00:6c:c4: 5b:70:a6:f8:a7:5d:b2:9d:a3:23:d1:48:1c:13:f2:39:5c:53: d2:43:56:9d:c0:91:ff:49:75:aa:1f:22:53:5d:4a:bc:3d:6a: 41:2f:58:91:ec:99:46:f3:87:94:49:27:c7:31:f4:80:63:c5: 2e:46:58:c2:d4:fd:63:f0:75:f4:35:23:92:a3:6a:6b:e3:30: 96:c9:2c:99:cd:32:ac:65:f8:da:cc:ee:70:21:5e:ee:b1:d0: 78:4e:4e:31:46:07:43:31:eb:46:ce:87:00:9b:39:c5:d5:72: ab:8b:ea:9d:fa:c6:52:a9:da:55:53:4e:5a:05:9d:1a:fa:4f: f5:2d:1d:b1:10:7b:6d:4a:2f:38:75:8d:73:ef:d1:88:e1:3e: 95:62:a0:ec:da:47:5d:3e:5b:e1:df:1f:54:b5:89:2d:ad:54: 56:63:ba:82:5d:2f:ce:9f:19:fb:9f:ed:1c:ee:54:58:40:8d: 73:2e:b9:6c:0b:49:ab:98:72:ce:6c:81:a8:b0:20:78:6b:e9: da:6b:46:c9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFTM506WeDsEkX9Q6mIK6HTFLUs4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY1MTA0WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDU5NDk0YTNiZWY4MTg2ODlmMDlmNjVlNWUwOTgxYWVm MzNmMDUxNjE4ZjhhNWRkZjRlYzk3NTU3NjgyZDNhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRNXnaHj2J2yPfxj/Z7XzvV+VH/w+I5pu3Q0qZrE+2qenB KW3XH+wpoEXlcr/ld5BClOeykyxn72OKJbrnARA7gft9ZcyriTXe594XsYsebj0n Iur+GB7O+dGipN7EAZMUA3G133Mss0ogTgzu4PFC96sYJkvIOMqirCpbDV2d+Gu4 k/cm3xthR5KoC3hH8ZjP+86WvvYfhELOUCGjIGaJJKmqFTPaq0z+dueBNMD6CiMI HxlKdf99f58B38EtnkFyhSgV8v1lhfrQMDn8fvEzMiy+xlZmCzFbwRcBGokQNd6o 4pLmn+WBk/lepG8W0E/uBGmzf6CZ6TrV2kE+jbCNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIcujfF/0iQcxsgIdminn5NJbPzowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzYzNTQxODcxLTRiN2ItNGNjYi1hODFlLTNlYWE0Mzc4NDZkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAQwDQYJKoZIhvcNAQELBQADggEBAIab70wTBD49gS0eveE4TdGR gngoVySmINjLI+mMXwbAe1tsTV4aK1YLvm0CAMNJVImHbABsxFtwpvinXbKdoyPR SBwT8jlcU9JDVp3Akf9JdaofIlNdSrw9akEvWJHsmUbzh5RJJ8cx9IBjxS5GWMLU /WPwdfQ1I5KjamvjMJbJLJnNMqxl+NrM7nAhXu6x0HhOTjFGB0Mx60bOhwCbOcXV cquL6p36xlKp2lVTTloFnRr6T/UtHbEQe21KLzh1jXPv0YjhPpVioOzaR10+W+Hf H1S1iS2tVFZjuoJdL86fGfuf7RzuVFhAjXMuuWwLSauYcs5sgaiwIHhr6dprRsk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:15:34 2025 by rpki-client