$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c65fb944-4736-4fcb-995f-7e41be7b9d90.roa File: c65fb944-4736-4fcb-995f-7e41be7b9d90.roa (raw, json) Hash identifier: owWeCJcoOTIv7koLuTtAy9IRggJKHurdBe+JHnKZTXI= Subject key identifier: 92:47:73:9E:E8:59:1C:7F:C7:5D:A7:82:5A:0B:00:2B:A3:70:B0:0D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4BCD5EFAF63846C20706107E902579499E59C16B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c65fb944-4736-4fcb-995f-7e41be7b9d90.roa Signing time: Sat 25 Oct 2025 00:00:22 +0000 ROA not before: Sat 25 Oct 2025 00:00:22 +0000 ROA not after: Sat 29 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:cd:5e:fa:f6:38:46:c2:07:06:10:7e:90:25:79:49:9e:59:c1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 25 00:00:22 2025 GMT Not After : Nov 29 23:59:59 2025 GMT Subject: serialNumber=3a2bc812a9506129fdf516814c614371fae201b32b1b6f9612f03a2c2b7c98e3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:91:24:57:59:4a:fa:c8:a7:eb:ca:37:89: 6d:aa:df:d4:4b:11:7d:c5:c0:84:a3:97:81:5b:b7: 55:2b:3e:2d:a6:bb:a7:c0:d8:47:7d:5d:56:d8:29: a8:31:42:20:aa:ff:75:b6:4c:cc:b1:62:bc:6b:91: f5:fd:78:07:49:94:7c:bd:67:e2:81:8e:3f:e0:5a: 8a:ae:8d:44:9b:45:fa:19:ce:47:d6:41:bb:39:ab: a0:ab:2e:96:8a:78:d5:10:b9:5e:cc:b6:8d:1b:85: 6d:1f:e9:1d:ce:cd:40:fc:96:f9:35:bf:7f:66:6f: 22:84:cb:da:ac:eb:c8:a0:fa:69:37:f6:49:51:80: 57:dc:a0:7c:6f:24:18:c0:3f:0b:be:87:15:70:90: f1:2b:f5:9f:43:30:f5:70:d0:fd:9b:4e:aa:64:53: c2:b4:5a:86:cf:2f:72:7e:67:a6:00:dc:1d:8e:22: 66:2a:9a:aa:da:79:70:ab:fe:78:23:cd:1b:d9:13: 01:9c:40:f6:5a:e0:92:9d:6d:47:5a:50:70:65:aa: 92:68:b0:8b:01:4b:cf:7f:3b:c9:8c:25:b0:77:b3: 74:02:7a:75:fb:59:aa:0c:4d:19:a1:e5:5f:ad:fc: 75:f9:13:bf:d1:52:5b:f0:d2:7b:ce:92:1a:f4:12: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:47:73:9E:E8:59:1C:7F:C7:5D:A7:82:5A:0B:00:2B:A3:70:B0:0D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c65fb944-4736-4fcb-995f-7e41be7b9d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c60::/44 Signature Algorithm: sha256WithRSAEncryption 19:fd:e2:dc:e9:e4:b2:db:1b:ce:86:63:f3:02:06:5c:9a:a7: 9d:d2:4e:0a:95:ac:2e:9f:3b:7b:9e:99:80:a9:dc:d6:bc:94: 3b:f9:5a:5b:79:a0:ce:b9:67:11:dc:a9:0e:af:23:e7:3d:54: 5c:1e:49:d9:26:ec:20:ee:5e:36:59:00:b3:38:21:1f:46:bd: 8d:7e:56:11:5d:6b:1a:90:43:00:fc:0b:27:05:75:74:68:77: 96:28:f6:68:5e:69:c1:79:e0:ab:69:2f:54:1b:c8:8f:b9:75: dd:3e:64:e2:37:1b:40:a2:f6:fa:63:ab:ce:eb:8e:69:a7:fe: 6f:a9:44:d3:33:c1:5f:1f:8b:6f:aa:41:02:65:5a:24:e3:46: 97:d4:49:27:54:96:72:77:e7:0b:cb:4e:77:75:b7:dc:1d:a5: 5d:a5:3c:19:6f:1b:87:81:c1:05:09:4c:a1:3e:35:d1:32:8d: 1b:2b:9d:19:ec:8a:03:76:a9:d1:93:0f:73:03:21:de:dd:72: b1:45:59:f9:7c:32:12:35:e6:cf:ca:88:0d:79:19:31:3b:28: 1c:6c:cc:7b:3b:91:c1:b5:37:6e:d1:8c:0b:97:85:e7:21:ba: 44:69:cb:7a:64:ca:7b:6b:a1:2a:1e:20:9e:4d:02:4c:ca:77: d7:f6:e2:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS81e+vY4RsIHBhB+kCV5SZ5ZwWswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDI1MDAwMDIyWhcNMjUxMTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTJiYzgxMmE5NTA2MTI5ZmRmNTE2ODE0YzYxNDM3MWZh ZTIwMWIzMmIxYjZmOTYxMmYwM2EyYzJiN2M5OGUzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEFZEkV1lK+sin68o3iW2q39RLEX3FwISjl4Fbt1UrPi2m u6fA2Ed9XVbYKagxQiCq/3W2TMyxYrxrkfX9eAdJlHy9Z+KBjj/gWoqujUSbRfoZ zkfWQbs5q6CrLpaKeNUQuV7Mto0bhW0f6R3OzUD8lvk1v39mbyKEy9qs68ig+mk3 9klRgFfcoHxvJBjAPwu+hxVwkPEr9Z9DMPVw0P2bTqpkU8K0WobPL3J+Z6YA3B2O ImYqmqraeXCr/ngjzRvZEwGcQPZa4JKdbUdaUHBlqpJosIsBS89/O8mMJbB3s3QC enX7WaoMTRmh5V+t/HX5E7/RUlvw0nvOkhr0EoERAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkkdznuhZHH/HXaeCWgsAK6NwsA0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2M2NWZiOTQ0LTQ3MzYtNGZjYi05OTVmLTdlNDFiZTdiOWQ5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADGAwDQYJKoZIhvcNAQELBQADggEBABn94tzp5LLbG86GY/MCBlya p53STgqVrC6fO3uemYCp3Na8lDv5Wlt5oM65ZxHcqQ6vI+c9VFweSdkm7CDuXjZZ ALM4IR9GvY1+VhFdaxqQQwD8CycFdXRod5Yo9mheacF54KtpL1QbyI+5dd0+ZOI3 G0Ci9vpjq87rjmmn/m+pRNMzwV8fi2+qQQJlWiTjRpfUSSdUlnJ35wvLTnd1t9wd pV2lPBlvG4eBwQUJTKE+NdEyjRsrnRnsigN2qdGTD3MDId7dcrFFWfl8MhI15s/K iA15GTE7KBxszHs7kcG1N27RjAuXhechukRpy3pkyntroSoeIJ5NAkzKd9f24i4= -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:21 2025 by rpki-client