$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86b03fee-2a6f-4c44-bcbd-7e59bccf1590.roa File: 86b03fee-2a6f-4c44-bcbd-7e59bccf1590.roa (raw, json) Hash identifier: nuu2Y2CjtQ+dotWYEQjj10dKWqssGb+J3Fc5IuVb5tA= Subject key identifier: 73:7C:84:38:23:17:2C:B2:A7:D8:21:76:3F:82:13:0B:AC:DD:A3:3A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0AC6B8444733BFEEAE5EECB5A9F9049A5617838F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86b03fee-2a6f-4c44-bcbd-7e59bccf1590.roa Signing time: Tue 04 Nov 2025 16:50:48 +0000 ROA not before: Tue 04 Nov 2025 16:50:48 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c6:b8:44:47:33:bf:ee:ae:5e:ec:b5:a9:f9:04:9a:56:17:83:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:50:48 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=4912e164a34f2b21c4ae4db5691ae47951f8d38f6b7b76914a27552c8396a840, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:64:24:b8:9a:8a:18:46:83:55:11:65:d3: 57:e4:3c:5a:cb:87:98:6a:42:cd:3b:0a:92:a1:6b: be:0e:ed:f0:b0:b3:5a:e5:6d:ca:1c:01:7c:21:9e: 31:b2:29:a4:a7:41:96:4a:19:97:38:46:9a:ef:6e: f8:0a:ae:3b:74:fc:d7:c1:b7:41:69:0c:27:a7:c2: cf:dc:28:8e:0a:e8:f7:68:af:3b:ca:49:0b:20:d1: 78:f1:00:80:54:09:db:fa:06:ac:46:88:b5:07:86: a2:e5:ae:2b:46:5f:74:6f:8b:99:49:90:41:72:57: 7b:36:0f:62:b9:e2:13:40:ef:9b:2c:43:be:0e:ec: 3d:03:ed:65:56:1b:7d:c8:67:db:b9:0e:28:80:c4: 5a:74:37:f3:06:26:84:46:f6:26:61:34:39:c0:33: 98:35:f4:42:28:02:53:03:f4:23:e9:97:6e:e8:f6: e2:e9:b7:68:40:00:f1:b8:c8:03:ee:8c:30:95:d7: f2:74:b1:d5:4c:28:f4:47:e0:1b:89:1b:66:5e:5b: 34:4c:fc:09:bd:62:07:a1:c3:33:91:ce:48:f8:c1: e8:cd:30:c8:2b:c2:1c:59:90:2a:37:63:e2:a0:0b: 94:cd:65:dc:67:82:94:c5:d1:fc:28:c0:f9:d8:f3: ef:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7C:84:38:23:17:2C:B2:A7:D8:21:76:3F:82:13:0B:AC:DD:A3:3A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86b03fee-2a6f-4c44-bcbd-7e59bccf1590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c20::/48 Signature Algorithm: sha256WithRSAEncryption 99:6b:89:4a:fd:5d:ac:13:5e:35:95:b9:ff:6d:23:20:a2:5d: f6:e7:ab:81:a0:80:e1:bd:ce:de:6e:74:a6:eb:72:9d:4a:9d: 86:3e:09:29:48:25:41:78:11:94:25:71:44:51:fd:63:10:8c: 5c:85:08:f0:f7:1e:3e:63:00:bb:13:c1:54:89:fa:78:0f:51: d5:df:24:6d:25:5b:b7:30:6e:1f:03:a0:4c:e4:c5:66:e3:7b: 29:1a:40:12:ec:52:d8:0f:d8:ba:10:4f:fd:b3:fb:f3:51:c4: 70:da:c1:d2:06:b7:ca:04:fd:3b:9c:a1:51:82:00:c2:cd:8a: be:7a:c1:45:04:5c:ea:d5:14:97:32:1f:21:51:74:ed:f2:dc: 20:db:99:73:30:11:3d:71:24:ec:d2:59:61:2c:0a:72:0b:cc: 15:60:2f:e7:f2:fb:3d:df:39:30:7d:25:f7:85:31:f6:8d:98: 6f:51:8e:5b:c1:25:c1:44:cc:c1:72:55:03:59:13:c6:88:ff: a8:94:1c:85:6b:00:30:48:59:dd:d2:00:23:4d:44:0f:96:62: 92:27:84:13:cf:82:15:b2:f6:a5:db:bf:c1:82:fa:3d:ec:a6: 44:e1:97:2a:9b:b7:e8:77:8b:7e:f5:d1:78:ed:c7:ae:24:98: bf:c5:7f:82 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCsa4REczv+6uXuy1qfkEmlYXg48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY1MDQ4WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTEyZTE2NGEzNGYyYjIxYzRhZTRkYjU2OTFhZTQ3OTUx ZjhkMzhmNmI3Yjc2OTE0YTI3NTUyYzgzOTZhODQwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIymQkuJqKGEaDVRFl01fkPFrLh5hqQs07CpKha74O7fCw s1rlbcocAXwhnjGyKaSnQZZKGZc4RprvbvgKrjt0/NfBt0FpDCenws/cKI4K6Pdo rzvKSQsg0XjxAIBUCdv6BqxGiLUHhqLlritGX3Rvi5lJkEFyV3s2D2K54hNA75ss Q74O7D0D7WVWG33IZ9u5DiiAxFp0N/MGJoRG9iZhNDnAM5g19EIoAlMD9CPpl27o 9uLpt2hAAPG4yAPujDCV1/J0sdVMKPRH4BuJG2ZeWzRM/Am9YgehwzORzkj4wejN MMgrwhxZkCo3Y+KgC5TNZdxngpTF0fwowPnY8+9VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUc3yEOCMXLLKn2CF2P4ITC6zdozowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg2YjAzZmVlLTJhNmYtNGM0NC1iY2JkLTdlNTliY2NmMTU5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADCAwDQYJKoZIhvcNAQELBQADggEBAJlriUr9XawTXjWVuf9tIyCi Xfbnq4GggOG9zt5udKbrcp1KnYY+CSlIJUF4EZQlcURR/WMQjFyFCPD3Hj5jALsT wVSJ+ngPUdXfJG0lW7cwbh8DoEzkxWbjeykaQBLsUtgP2LoQT/2z+/NRxHDawdIG t8oE/TucoVGCAMLNir56wUUEXOrVFJcyHyFRdO3y3CDbmXMwET1xJOzSWWEsCnIL zBVgL+fy+z3fOTB9JfeFMfaNmG9RjlvBJcFEzMFyVQNZE8aI/6iUHIVrADBIWd3S ACNNRA+WYpInhBPPghWy9qXbv8GC+j3spkThlyqbt+h3i3710Xjtx64kmL/Ff4I= -----END CERTIFICATE-----Generated at Wed Nov 5 07:09:13 2025 by rpki-client