$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ae85743c-c855-42b4-95ab-e8e4d2087c99.roa File: ae85743c-c855-42b4-95ab-e8e4d2087c99.roa (raw, json) Hash identifier: g0jCUTT46qPt1s34YXEOg6qOF06y7qg5tJd09tABhuU= Subject key identifier: 71:8A:B4:37:8B:95:31:D5:11:C1:72:2C:71:5F:AC:62:F5:A0:64:0E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1C7F4FD9AC5C5D1D89A3DC0930F162B4DF65208E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ae85743c-c855-42b4-95ab-e8e4d2087c99.roa Signing time: Tue 04 Nov 2025 16:50:10 +0000 ROA not before: Tue 04 Nov 2025 16:50:10 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:c0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7f:4f:d9:ac:5c:5d:1d:89:a3:dc:09:30:f1:62:b4:df:65:20:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:50:10 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=ec04cae150f9f994036712139df3609b971703403174389d23b24242d64bc774, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:02:51:c8:81:8f:83:fb:99:13:d9:93:73: 10:96:d7:b4:e6:6c:f8:b8:5c:f8:98:6f:ad:ab:b7: cf:2e:98:78:39:f3:e1:e6:e7:c0:a7:6a:d3:65:c8: f8:eb:f2:9b:ad:67:e0:de:3c:00:6c:02:dc:ff:26: 8f:b8:97:73:13:52:99:e4:f9:9f:7a:59:db:80:ec: e2:b6:e9:cf:45:d6:04:a9:0c:65:78:b7:44:ec:80: 17:d0:76:d7:3d:cd:ee:60:7d:90:3b:60:da:b4:24: b8:22:08:b1:b3:c6:18:e4:95:08:96:72:76:9f:8a: 30:54:ae:e7:f0:56:61:f6:81:10:e2:77:c6:1f:c5: 11:f1:16:4a:3c:a5:ca:05:58:cb:68:ea:cd:56:fc: 7b:51:6b:d2:e6:fb:40:bc:4f:7b:9c:dd:97:8b:87: 47:51:a6:dc:c1:35:e0:12:df:39:d1:f7:01:12:fa: 4d:f9:45:15:97:80:da:fd:8f:8b:bb:d2:af:52:49: 0a:f8:d9:d6:e1:89:28:0f:91:59:4e:43:19:b1:cc: e4:a4:40:cb:e3:b4:c6:b2:d9:c6:2f:74:85:b7:95: 86:d2:2e:64:d0:65:49:c2:54:68:63:e0:68:30:1e: 3f:a2:cc:f1:e2:45:ed:5c:75:4e:d0:ff:24:aa:31: a0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8A:B4:37:8B:95:31:D5:11:C1:72:2C:71:5F:AC:62:F5:A0:64:0E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ae85743c-c855-42b4-95ab-e8e4d2087c99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0d::/48 Signature Algorithm: sha256WithRSAEncryption 02:8e:5e:2f:3b:d9:cb:67:d0:aa:16:65:ce:dc:9d:54:49:0e: 29:1d:68:df:b4:26:f1:ad:19:02:df:ae:15:ea:f6:09:22:78: 15:4a:96:6c:ae:7b:98:9c:1f:c0:d5:46:b0:fb:49:4d:7c:75: 16:3e:fa:81:ab:fe:a6:53:a8:eb:d7:5a:dd:c1:20:f7:da:2a: ca:ca:5a:a5:d7:ab:16:ee:89:57:41:9e:a7:f7:c8:36:bc:fa: c6:37:fa:bc:21:33:f6:b5:c2:03:49:0a:90:d9:25:79:da:5e: 52:b6:75:af:f8:dd:bf:8d:89:b4:75:91:dc:46:21:84:2b:53: 9b:34:d7:ed:ea:da:a8:2e:69:6c:a8:32:a9:17:22:f1:43:f7: 1e:41:24:d4:9d:af:ac:79:b9:0e:dc:5b:69:34:bb:24:e2:b6: 01:43:d5:4d:2c:fe:b4:84:b9:aa:3a:79:17:ad:88:a5:ee:5f: fe:bd:db:3d:84:11:83:11:b2:a8:5d:33:b6:06:ce:2a:56:ce: e7:d8:9e:e5:bf:e2:2f:25:68:28:99:40:58:25:d6:f3:53:03: ca:de:78:27:d3:45:96:6f:5c:70:de:49:e1:2d:a4:e6:3c:81: 4e:df:9b:35:a5:bf:ff:4e:08:6e:af:6c:43:17:30:70:49:e9: a5:b1:cc:95 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHH9P2axcXR2Jo9wJMPFitN9lII4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY1MDEwWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzA0Y2FlMTUwZjlmOTk0MDM2NzEyMTM5ZGYzNjA5Yjk3 MTcwMzQwMzE3NDM4OWQyM2IyNDI0MmQ2NGJjNzc0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZ/gJRyIGPg/uZE9mTcxCW17TmbPi4XPiYb62rt88umHg5 8+Hm58CnatNlyPjr8putZ+DePABsAtz/Jo+4l3MTUpnk+Z96WduA7OK26c9F1gSp DGV4t0TsgBfQdtc9ze5gfZA7YNq0JLgiCLGzxhjklQiWcnafijBUrufwVmH2gRDi d8YfxRHxFko8pcoFWMto6s1W/HtRa9Lm+0C8T3uc3ZeLh0dRptzBNeAS3znR9wES +k35RRWXgNr9j4u70q9SSQr42dbhiSgPkVlOQxmxzOSkQMvjtMay2cYvdIW3lYbS LmTQZUnCVGhj4GgwHj+izPHiRe1cdU7Q/ySqMaA1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcYq0N4uVMdURwXIscV+sYvWgZA4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2FlODU3NDNjLWM4NTUtNDJiNC05NWFiLWU4ZTRkMjA4N2M5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA0wDQYJKoZIhvcNAQELBQADggEBAAKOXi872ctn0KoWZc7cnVRJ DikdaN+0JvGtGQLfrhXq9gkieBVKlmyue5icH8DVRrD7SU18dRY++oGr/qZTqOvX Wt3BIPfaKsrKWqXXqxbuiVdBnqf3yDa8+sY3+rwhM/a1wgNJCpDZJXnaXlK2da/4 3b+NibR1kdxGIYQrU5s01+3q2qguaWyoMqkXIvFD9x5BJNSdr6x5uQ7cW2k0uyTi tgFD1U0s/rSEuao6eRetiKXuX/692z2EEYMRsqhdM7YGzipWzufYnuW/4i8laCiZ QFgl1vNTA8reeCfTRZZvXHDeSeEtpOY8gU7fmzWlv/9OCG6vbEMXMHBJ6aWxzJU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:09:16 2025 by rpki-client