$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa File: bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa (raw, json) Hash identifier: hICUlHQFkgiDL7c40a5a/tvkup8BVMB8Bzbf71YPeyI= Subject key identifier: 0F:F6:95:E4:B0:3A:FE:0D:7F:C0:47:69:AC:A3:81:DE:3E:38:D1:B8 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2194F20001FE6BD591A64849A83C19380A861C2C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa Signing time: Tue 21 Oct 2025 12:20:08 +0000 ROA not before: Tue 21 Oct 2025 12:20:08 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:94:f2:00:01:fe:6b:d5:91:a6:48:49:a8:3c:19:38:0a:86:1c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:20:08 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=1f1fe3d688b09eb680a24215b22a84794d7dd1288f3f1e194c69da12451eb3b7, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4a:2e:38:c3:4c:df:ab:ba:ce:09:48:55:a9: 13:fb:b0:63:11:f1:bd:c4:b8:95:85:af:4d:9d:3b: 75:33:29:66:4d:19:e6:d5:10:bf:03:84:1d:60:f3: 8b:46:30:15:f3:90:f4:e3:a6:dd:d8:c5:c4:c3:1b: 88:d3:02:74:13:a1:54:33:70:7b:d7:ca:fb:0d:7a: 57:4e:66:d0:fc:b0:d2:a7:71:37:6f:04:f5:be:29: c8:21:22:a0:29:4a:19:a8:f6:5f:8d:15:7b:5e:51: 4e:6a:b4:1b:9b:f4:d1:20:e3:fe:8e:29:71:53:55: f5:34:54:f7:16:bf:f9:a3:2e:34:28:96:58:ec:77: e5:8f:ad:e8:70:81:f9:6d:64:50:c7:cb:df:34:4d: 7f:ce:8d:05:89:02:8f:05:61:08:d8:ba:c6:d8:6a: e2:45:88:19:5b:1a:e1:1d:28:59:b8:f2:58:f0:86: d6:c8:70:70:e2:e9:93:09:25:53:68:59:cb:67:15: 0c:b7:85:20:14:39:6c:2f:2c:7d:6e:6c:be:b9:d7: 20:3b:33:2b:0e:f3:d0:01:dc:bf:35:87:b9:3e:ab: 04:ff:00:b8:fa:65:55:64:55:b4:48:14:78:4c:b4: ab:6e:68:20:f0:f3:2c:48:fa:1f:c3:c4:95:b8:95: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F6:95:E4:B0:3A:FE:0D:7F:C0:47:69:AC:A3:81:DE:3E:38:D1:B8 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bebb117a-44dd-4b3f-87f0-24ff3ef65338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3a7::/48 Signature Algorithm: sha256WithRSAEncryption 9b:ee:f1:60:ff:7b:1c:e4:4c:57:8b:f3:78:8f:1f:6a:93:81: cb:ed:5b:f6:cc:58:e3:21:07:81:2a:19:e1:02:f2:26:25:b3: ef:60:fb:f6:49:d4:93:15:2f:a6:4b:1b:c9:ce:84:8c:58:ce: 43:e4:cd:e1:60:cb:af:2c:f8:08:c4:0e:ba:77:2b:cd:e8:f4: 4f:89:18:be:cb:ba:d2:94:14:95:34:29:2f:e5:4a:a3:46:1e: 05:06:73:29:84:28:14:ee:3e:58:81:2e:2a:83:b8:f5:ef:8d: 44:d9:2b:b6:ce:46:80:7c:39:da:4b:d3:2f:a6:bf:7b:57:13: 5f:ee:1b:21:9d:42:2d:95:c6:99:ae:39:c9:32:89:f5:8d:cb: cc:4c:a2:0a:57:c8:cc:d0:da:00:94:ef:7b:40:3b:1b:7b:02: 6a:25:f8:c6:c6:65:38:4a:56:42:10:af:2a:88:dd:60:38:88: d9:3c:57:d0:98:86:e8:46:c3:96:4c:52:f9:ca:30:15:c5:14: 72:5d:96:01:76:56:d3:4f:00:80:90:a1:df:1c:4f:02:fa:e6: 98:df:ff:f1:54:0a:a5:92:0e:01:f1:89:fd:b4:f8:30:58:b6: 3e:b6:51:19:e7:13:80:98:f9:e7:01:3a:65:13:cb:c3:d2:85: 51:b4:a3:84 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIZTyAAH+a9WRpkhJqDwZOAqGHCwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIyMDA4WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjFmZTNkNjg4YjA5ZWI2ODBhMjQyMTViMjJhODQ3OTRk N2RkMTI4OGYzZjFlMTk0YzY5ZGExMjQ1MWViM2I3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgSi44w0zfq7rOCUhVqRP7sGMR8b3EuJWFr02dO3UzKWZN GebVEL8DhB1g84tGMBXzkPTjpt3YxcTDG4jTAnQToVQzcHvXyvsNeldOZtD8sNKn cTdvBPW+KcghIqApShmo9l+NFXteUU5qtBub9NEg4/6OKXFTVfU0VPcWv/mjLjQo lljsd+WPrehwgfltZFDHy980TX/OjQWJAo8FYQjYusbYauJFiBlbGuEdKFm48ljw htbIcHDi6ZMJJVNoWctnFQy3hSAUOWwvLH1ubL651yA7MysO89AB3L81h7k+qwT/ ALj6ZVVkVbRIFHhMtKtuaCDw8yxI+h/DxJW4lTC3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUD/aV5LA6/g1/wEdprKOB3j440bgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JlYmIxMTdhLTQ0ZGQtNGIzZi04N2YwLTI0ZmYzZWY2NTMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA6cwDQYJKoZIhvcNAQELBQADggEBAJvu8WD/exzkTFeL83iPH2qT gcvtW/bMWOMhB4EqGeEC8iYls+9g+/ZJ1JMVL6ZLG8nOhIxYzkPkzeFgy68s+AjE Drp3K83o9E+JGL7LutKUFJU0KS/lSqNGHgUGcymEKBTuPliBLiqDuPXvjUTZK7bO RoB8OdpL0y+mv3tXE1/uGyGdQi2VxpmuOckyifWNy8xMogpXyMzQ2gCU73tAOxt7 Amol+MbGZThKVkIQryqI3WA4iNk8V9CYhuhGw5ZMUvnKMBXFFHJdlgF2VtNPAICQ od8cTwL65pjf//FUCqWSDgHxif20+DBYtj62URnnE4CY+ecBOmUTy8PShVG0o4Q= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:44 2025 by rpki-client