$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/65ea263d-892a-4498-ad3d-884b258d30d6.roa File: 65ea263d-892a-4498-ad3d-884b258d30d6.roa (raw, json) Hash identifier: TNu8/oUK2WVE9LbFLUZP2IOdcvxbjMkaVr/G/dMKkK4= Subject key identifier: 1F:06:14:72:E1:42:A0:8B:97:13:3D:84:16:B1:B6:41:ED:CC:CA:C3 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5B9E06B0DB6D9E51F51369212AA534EA3D6BB8FE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/65ea263d-892a-4498-ad3d-884b258d30d6.roa Signing time: Tue 04 Nov 2025 16:41:29 +0000 ROA not before: Tue 04 Nov 2025 16:41:29 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9e:06:b0:db:6d:9e:51:f5:13:69:21:2a:a5:34:ea:3d:6b:b8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:41:29 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=1f3a2fede70c1fd66ed92ce17450ed3727ec033a434ffe29f02532f10bed610d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:ed:e8:fb:0d:f7:f7:3f:81:61:73:77:30: 15:0a:83:5f:15:70:92:1c:a2:19:7d:83:74:24:89: 34:44:b5:ff:5a:88:21:4e:fd:ed:f7:7d:0f:43:68: a9:be:15:c1:66:88:b3:0b:cd:bb:c5:34:f7:71:20: 31:25:e1:6b:a1:57:08:35:09:b6:25:90:e1:88:ca: e3:3e:bb:14:e1:87:3c:24:7f:b8:8b:60:70:fa:e9: f8:66:5d:4a:3c:15:f1:c9:51:0d:9f:4f:dd:f8:8f: 11:c4:ab:2a:d2:ff:2c:5b:da:68:58:f5:8a:37:48: b3:33:66:e2:13:c5:6d:81:9b:fd:19:93:7d:dc:90: ba:49:2f:eb:03:14:b0:32:c9:95:38:62:9b:64:09: 93:c9:8c:07:e9:08:9f:59:b0:b6:bf:0b:14:41:b6: c0:9a:d5:08:9c:06:c4:90:df:b4:47:43:12:18:65: 82:fc:d6:25:44:29:7a:a1:72:93:64:d7:c9:88:50: e2:a5:98:66:f0:9a:b6:53:50:1d:9b:c5:6f:16:c0: 64:75:19:8a:0c:0c:3f:52:57:07:16:51:fc:6d:5c: ff:49:b0:0a:a9:3f:b5:43:51:58:bd:18:ef:3b:d9: d0:93:e8:1f:a5:10:aa:7b:ee:8c:87:71:39:16:0b: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:06:14:72:E1:42:A0:8B:97:13:3D:84:16:B1:B6:41:ED:CC:CA:C3 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/65ea263d-892a-4498-ad3d-884b258d30d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0c::/48 Signature Algorithm: sha256WithRSAEncryption 78:e8:31:7c:fb:e2:f1:2b:fc:d1:63:a1:b3:66:cf:cf:1d:13: bd:0a:0e:e3:81:39:ad:6e:de:ee:19:19:29:00:b2:cb:8a:79: 51:80:7e:05:a5:c3:2d:fb:95:3a:57:ce:b6:09:83:04:a5:e2: bc:b9:2a:13:c8:fa:56:3d:e5:ad:7f:9d:b3:f8:c3:15:e7:86: 96:3d:f4:17:bc:f6:7f:b7:13:e9:c1:0b:b1:35:82:1b:91:32: 02:aa:78:18:91:fa:1b:3b:83:a3:a9:5e:cd:c2:f2:b5:4f:75: 6f:c7:f8:18:1c:bc:89:2b:db:36:82:48:08:e5:79:d8:17:ae: 95:bd:f8:c5:17:36:bc:41:23:e1:9a:12:55:7b:a2:b5:69:dd: d3:11:f8:bd:5a:4a:3c:87:0d:5e:07:28:f0:b8:a6:d7:e3:ba: 02:9c:d5:ae:85:d7:70:c7:67:dd:95:23:13:27:be:f9:d4:01: 7b:9a:d4:e3:57:05:42:6d:f9:b6:0e:cb:e0:6b:ca:b0:e8:f1: 1c:75:28:fe:68:74:46:05:9d:78:92:95:8f:28:b2:94:65:c1: b5:e7:98:a2:07:52:fb:42:9e:f9:2a:06:8a:8c:d4:69:17:1e: e1:e4:b6:34:b8:34:3d:13:d7:e0:a9:b9:98:58:0a:51:11:df: 52:31:4a:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW54GsNttnlH1E2khKqU06j1ruP4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY0MTI5WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjNhMmZlZGU3MGMxZmQ2NmVkOTJjZTE3NDUwZWQzNzI3 ZWMwMzNhNDM0ZmZlMjlmMDI1MzJmMTBiZWQ2MTBkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh/+3o+w339z+BYXN3MBUKg18VcJIcohl9g3QkiTREtf9a iCFO/e33fQ9DaKm+FcFmiLMLzbvFNPdxIDEl4WuhVwg1CbYlkOGIyuM+uxThhzwk f7iLYHD66fhmXUo8FfHJUQ2fT934jxHEqyrS/yxb2mhY9Yo3SLMzZuITxW2Bm/0Z k33ckLpJL+sDFLAyyZU4YptkCZPJjAfpCJ9ZsLa/CxRBtsCa1QicBsSQ37RHQxIY ZYL81iVEKXqhcpNk18mIUOKlmGbwmrZTUB2bxW8WwGR1GYoMDD9SVwcWUfxtXP9J sAqpP7VDUVi9GO872dCT6B+lEKp77oyHcTkWCz+NAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHwYUcuFCoIuXEz2EFrG2Qe3MysMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzY1ZWEyNjNkLTg5MmEtNDQ5OC1hZDNkLTg4NGIyNThkMzBkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAwwDQYJKoZIhvcNAQELBQADggEBAHjoMXz74vEr/NFjobNmz88d E70KDuOBOa1u3u4ZGSkAssuKeVGAfgWlwy37lTpXzrYJgwSl4ry5KhPI+lY95a1/ nbP4wxXnhpY99Be89n+3E+nBC7E1ghuRMgKqeBiR+hs7g6OpXs3C8rVPdW/H+Bgc vIkr2zaCSAjledgXrpW9+MUXNrxBI+GaElV7orVp3dMR+L1aSjyHDV4HKPC4ptfj ugKc1a6F13DHZ92VIxMnvvnUAXua1ONXBUJt+bYOy+BryrDo8Rx1KP5odEYFnXiS lY8ospRlwbXnmKIHUvtCnvkqBoqM1GkXHuHktjS4ND0T1+CpuZhYClER31IxSlk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:17 2025 by rpki-client