$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b15c61b5-30c1-450b-842d-8b951168014c.roa File: b15c61b5-30c1-450b-842d-8b951168014c.roa (raw, json) Hash identifier: F5uWfh6H4dsIOepZP1B5ovjRrl51Tuqf2c13WeUWXD0= Subject key identifier: B6:2F:C6:9D:11:C5:7B:8C:70:49:01:9C:6A:A0:86:FE:46:CB:B0:69 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4867C4189DEF79C8692BE8263F53CA8E7F5078A4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b15c61b5-30c1-450b-842d-8b951168014c.roa Signing time: Tue 04 Nov 2025 16:41:07 +0000 ROA not before: Tue 04 Nov 2025 16:41:07 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:67:c4:18:9d:ef:79:c8:69:2b:e8:26:3f:53:ca:8e:7f:50:78:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:41:07 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=1f4aaef5ec99bc310783c5ae8c017a7db5174f50e26c86bbd36236555ecf7afb, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:37:f0:33:21:d0:e5:28:41:65:eb:60:54:84: 83:0e:ac:4b:85:19:39:44:37:f9:7b:5e:39:19:c1: c6:d2:aa:68:d5:91:db:4b:66:1a:c7:46:13:9c:e6: 51:0e:bd:c2:4a:2b:a3:d2:67:d8:3a:a8:58:d3:20: da:fb:22:6a:54:1c:7a:7f:d2:42:49:49:0a:d7:84: 00:e6:e7:dc:2d:3e:f7:ef:f0:5a:31:49:23:37:58: 6d:84:0d:8f:e3:79:23:ea:9a:92:f7:c8:5f:ef:01: 6d:89:9a:3e:67:95:2a:2d:2f:70:26:e4:f8:69:b4: 6f:41:e9:ed:0f:d6:54:2d:5d:48:32:c5:64:14:a2: 00:3f:94:94:2a:62:4e:a8:8a:5c:b9:89:27:46:df: b2:b3:d0:3f:76:a8:bb:6c:be:84:c1:be:ad:03:46: ee:43:e0:a1:bc:58:76:37:e2:9f:73:df:fe:20:54: ec:8d:0e:7b:98:73:a5:41:be:7c:a2:3e:cd:fd:ac: d6:d4:e1:20:2d:3b:8d:41:dd:99:cb:52:37:4e:04: d3:85:e5:d7:95:36:93:37:44:c4:2d:18:31:f8:26: a5:8c:c3:7d:f3:be:20:2a:ba:90:c9:29:c3:76:b9: 57:4f:a6:e6:c5:5c:13:a9:8e:24:24:67:d7:cf:89: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2F:C6:9D:11:C5:7B:8C:70:49:01:9C:6A:A0:86:FE:46:CB:B0:69 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b15c61b5-30c1-450b-842d-8b951168014c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c07::/48 Signature Algorithm: sha256WithRSAEncryption 97:fc:62:0d:8b:94:38:ad:60:25:22:60:a3:0e:8b:49:fc:87: 90:54:7c:9a:5b:80:c2:b9:76:fb:42:31:17:e3:68:31:81:b3: b3:f8:79:06:56:ca:52:e0:e9:69:ba:b2:fe:38:66:33:59:86: f0:48:64:8c:77:e2:d2:7b:58:3a:df:de:21:97:5e:c8:c8:0d: 4f:ee:85:98:ab:19:42:3d:b5:9a:d4:38:26:d0:83:af:42:26: 6d:65:b3:8f:79:b3:72:28:c7:e8:ba:08:20:97:43:36:80:27: 71:83:ee:fb:a8:ff:e0:5b:56:ed:22:e0:d0:eb:40:6e:f5:95: f6:ec:da:51:25:8d:5e:03:7e:3c:5b:9b:fd:92:e1:22:b6:6f: 8e:29:9b:80:95:48:96:e2:e3:de:3a:0a:ba:70:01:24:27:6b: e5:04:d4:bb:c6:a1:92:0b:76:cd:59:d8:fa:fd:f4:82:12:6e: 6e:d5:82:92:35:03:4d:70:20:ab:57:bd:e5:bb:56:55:31:c2: 8f:93:ba:65:83:6d:19:df:6d:2e:81:b7:7c:90:c7:0f:5d:8f: 07:a8:e1:1e:98:6e:38:86:65:f6:91:fd:89:27:a5:3b:19:94: d9:56:5f:e0:bf:e3:ac:ef:a2:cc:04:70:14:f4:30:f0:cd:e4: aa:63:84:a4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSGfEGJ3vechpK+gmP1PKjn9QeKQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY0MTA3WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjRhYWVmNWVjOTliYzMxMDc4M2M1YWU4YzAxN2E3ZGI1 MTc0ZjUwZTI2Yzg2YmJkMzYyMzY1NTVlY2Y3YWZiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRN/AzIdDlKEFl62BUhIMOrEuFGTlEN/l7XjkZwcbSqmjV kdtLZhrHRhOc5lEOvcJKK6PSZ9g6qFjTINr7ImpUHHp/0kJJSQrXhADm59wtPvfv 8FoxSSM3WG2EDY/jeSPqmpL3yF/vAW2Jmj5nlSotL3Am5PhptG9B6e0P1lQtXUgy xWQUogA/lJQqYk6oily5iSdG37Kz0D92qLtsvoTBvq0DRu5D4KG8WHY34p9z3/4g VOyNDnuYc6VBvnyiPs39rNbU4SAtO41B3ZnLUjdOBNOF5deVNpM3RMQtGDH4JqWM w33zviAqupDJKcN2uVdPpubFXBOpjiQkZ9fPiWfJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUti/GnRHFe4xwSQGcaqCG/kbLsGkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IxNWM2MWI1LTMwYzEtNDUwYi04NDJkLThiOTUxMTY4MDE0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAcwDQYJKoZIhvcNAQELBQADggEBAJf8Yg2LlDitYCUiYKMOi0n8 h5BUfJpbgMK5dvtCMRfjaDGBs7P4eQZWylLg6Wm6sv44ZjNZhvBIZIx34tJ7WDrf 3iGXXsjIDU/uhZirGUI9tZrUOCbQg69CJm1ls495s3Iox+i6CCCXQzaAJ3GD7vuo /+BbVu0i4NDrQG71lfbs2lEljV4Dfjxbm/2S4SK2b44pm4CVSJbi4946CrpwASQn a+UE1LvGoZILds1Z2Pr99IISbm7VgpI1A01wIKtXveW7VlUxwo+TumWDbRnfbS6B t3yQxw9djweo4R6YbjiGZfaR/YknpTsZlNlWX+C/46zvoswEcBT0MPDN5KpjhKQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:40 2025 by rpki-client