$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b07256c3-b97b-471b-a0c0-0d299c636138.roa File: b07256c3-b97b-471b-a0c0-0d299c636138.roa (raw, json) Hash identifier: pMaEcBHrKucMKQioKZbeBuks1uPpuXtvMw4P2hiJmcY= Subject key identifier: AF:E7:19:EC:95:06:9B:1F:56:26:1D:9F:D7:A1:7E:13:CA:AD:81:79 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 63A901A0201FCC0808562F24B8C4853DD52904EC Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b07256c3-b97b-471b-a0c0-0d299c636138.roa Signing time: Tue 04 Nov 2025 16:50:16 +0000 ROA not before: Tue 04 Nov 2025 16:50:16 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a9:01:a0:20:1f:cc:08:08:56:2f:24:b8:c4:85:3d:d5:29:04:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:50:16 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=83693b4ed55f8422e3c6f1761ea6ac7556a8760a6346f647e3eaee1e88d2b61e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:87:9e:5e:ca:d3:3b:02:54:17:d0:0d:19:06: b0:1b:74:25:d1:7f:da:5d:8c:75:81:50:8e:a9:96: 2b:3c:89:69:2b:a4:03:db:81:17:ac:b3:7d:7f:0f: da:8b:6b:38:31:ab:c4:60:d8:a9:c3:e4:39:ee:55: d4:5b:d8:d7:ef:81:62:ed:44:26:33:9f:63:ab:b6: a9:4d:2d:e3:97:ec:57:5f:d7:1c:fa:31:38:e2:30: b1:3f:fd:c0:35:67:37:a9:ea:ab:60:27:68:24:b8: b2:ce:b9:bf:cd:58:bb:0d:04:b8:bd:74:3f:83:45: 4a:52:33:74:33:3f:20:70:21:1e:f5:34:c8:51:9a: ac:eb:5b:5f:7a:e8:56:b3:9e:05:2a:4d:42:7e:2a: 6a:6c:e3:1f:f6:f0:e1:76:34:eb:9f:de:dd:73:fb: 38:c8:5b:79:13:c3:ea:16:57:4c:b5:bd:b2:ad:99: 6d:6b:d4:80:a4:ab:9b:13:da:ca:a2:dc:d7:90:13: 4e:d7:50:ec:b6:b4:9b:fd:e1:3e:71:37:d8:81:2f: 56:5a:23:69:b0:f1:41:72:4f:e5:16:1f:82:e9:90: 7a:e4:92:0b:64:3f:3b:c9:e6:5c:9b:92:83:d8:8c: 39:2e:01:d6:a8:3e:50:a9:20:cc:76:78:51:04:8c: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E7:19:EC:95:06:9B:1F:56:26:1D:9F:D7:A1:7E:13:CA:AD:81:79 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b07256c3-b97b-471b-a0c0-0d299c636138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c08::/48 Signature Algorithm: sha256WithRSAEncryption 3c:3e:4a:38:d8:b2:82:58:9e:77:95:0b:8c:8e:25:4a:9e:c1: 2f:27:ab:0b:7e:93:3f:49:2c:82:c5:8d:e7:00:fb:cc:4f:48: 2f:12:0a:36:93:c7:c7:59:20:02:be:53:cd:7b:39:81:dc:8a: 7c:55:a5:1e:18:cc:90:84:e6:b9:3d:2d:77:4b:35:f8:72:98: 3a:32:16:0b:77:08:82:63:4a:fc:62:24:43:0a:f2:ee:77:5a: 50:5d:1a:4e:47:e7:43:b0:6f:8f:b2:ce:80:d6:4c:1b:fe:0a: 12:13:09:d0:95:5a:fb:57:6f:47:7f:1d:0e:fd:b8:ac:8b:ac: 1b:e0:f7:38:14:9f:d9:6c:3e:83:bf:4d:ed:d7:98:5f:a2:b0: 1f:da:b3:2b:7a:b4:95:b7:7a:61:19:97:d5:94:7b:3f:7a:d8: fb:b6:23:7e:e6:3c:d2:9b:60:53:e2:14:b0:0b:9a:0e:58:8c: ec:ef:79:0f:7c:87:b6:2a:c4:ab:d6:76:bf:b4:94:1f:39:7c: be:f0:2e:45:28:f5:65:86:22:d8:39:f5:52:b9:04:f1:21:99: ef:d1:16:d4:99:52:eb:69:cd:d3:ab:50:90:f6:27:c8:52:a3: d6:c5:59:bb:f4:95:f5:24:76:4e:57:39:9c:c9:7c:df:2f:5d: 16:12:16:71 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY6kBoCAfzAgIVi8kuMSFPdUpBOwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY1MDE2WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzY5M2I0ZWQ1NWY4NDIyZTNjNmYxNzYxZWE2YWM3NTU2 YTg3NjBhNjM0NmY2NDdlM2VhZWUxZTg4ZDJiNjFlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5h55eytM7AlQX0A0ZBrAbdCXRf9pdjHWBUI6plis8iWkr pAPbgRess31/D9qLazgxq8Rg2KnD5DnuVdRb2NfvgWLtRCYzn2OrtqlNLeOX7Fdf 1xz6MTjiMLE//cA1Zzep6qtgJ2gkuLLOub/NWLsNBLi9dD+DRUpSM3QzPyBwIR71 NMhRmqzrW1966FazngUqTUJ+Kmps4x/28OF2NOuf3t1z+zjIW3kTw+oWV0y1vbKt mW1r1ICkq5sT2sqi3NeQE07XUOy2tJv94T5xN9iBL1ZaI2mw8UFyT+UWH4LpkHrk kgtkPzvJ5lybkoPYjDkuAdaoPlCpIMx2eFEEjMERAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUr+cZ7JUGmx9WJh2f16F+E8qtgXkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IwNzI1NmMzLWI5N2ItNDcxYi1hMGMwLTBkMjk5YzYzNjEzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAgwDQYJKoZIhvcNAQELBQADggEBADw+SjjYsoJYnneVC4yOJUqe wS8nqwt+kz9JLILFjecA+8xPSC8SCjaTx8dZIAK+U817OYHcinxVpR4YzJCE5rk9 LXdLNfhymDoyFgt3CIJjSvxiJEMK8u53WlBdGk5H50Owb4+yzoDWTBv+ChITCdCV WvtXb0d/HQ79uKyLrBvg9zgUn9lsPoO/Te3XmF+isB/asyt6tJW3emEZl9WUez96 2Pu2I37mPNKbYFPiFLALmg5YjOzveQ98h7YqxKvWdr+0lB85fL7wLkUo9WWGItg5 9VK5BPEhme/RFtSZUutpzdOrUJD2J8hSo9bFWbv0lfUkdk5XOZzJfN8vXRYSFnE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:08:26 2025 by rpki-client