$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa File: d634cf95-850c-46d0-9812-120e229c9e7d.roa (raw, json) Hash identifier: aqu7h+WQKTPEaPrBxozc+u8bPGsE66uvINVCfqgfavs= Subject key identifier: AB:FA:46:8E:69:24:6C:43:C1:74:3A:C9:54:35:C7:ED:93:4C:D0:F1 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7C27189C7BE5F6DB5991BD6B16894255A84BAE9A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa Signing time: Tue 04 Nov 2025 16:41:02 +0000 ROA not before: Tue 04 Nov 2025 16:41:02 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:27:18:9c:7b:e5:f6:db:59:91:bd:6b:16:89:42:55:a8:4b:ae:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:41:02 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=1323250ffcd6de8788de72fc653f4b191aeeef20984b08377ffd525128251ddc, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:d1:c7:82:b1:5b:4f:64:41:58:51:ac:be: 45:43:66:8f:ed:ac:17:85:22:cb:28:c9:e1:5c:6e: e5:a6:dd:45:75:d2:03:6b:8a:8b:60:16:43:20:4d: db:cb:c3:82:01:d9:58:c9:0b:7e:19:be:89:05:f6: c7:58:cf:5e:3c:e8:db:b9:52:79:1b:94:e2:87:d6: 4a:ae:86:00:57:8b:17:3f:fa:56:b3:61:03:0d:e7: ab:0e:d7:16:d3:df:5d:a9:c7:a7:20:10:7e:3f:f0: 54:af:b8:d6:e3:9b:2b:46:ec:54:85:1f:ae:32:c3: 28:77:52:0c:16:df:0f:2d:61:22:28:38:5a:b0:e7: a8:f9:77:5c:1f:a3:ec:12:36:38:ce:52:87:4c:6a: e8:e9:d3:5b:ce:36:2b:46:f7:1f:17:58:e2:66:58: 33:3e:c5:eb:fc:0c:8c:b7:41:1c:3c:98:49:48:59: d8:86:31:96:72:33:91:f2:0d:6c:b3:e9:07:2e:46: 9c:62:be:31:1c:7b:2d:01:d3:9f:68:0c:ef:5f:4b: bd:b4:d4:5d:5a:92:0f:45:3b:96:22:b4:1a:30:93: 69:64:bc:6e:31:96:50:07:12:68:ca:6e:8b:9f:f6: 2c:a5:20:c9:e3:36:d0:8b:5a:7e:f0:0e:de:8e:b8: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FA:46:8E:69:24:6C:43:C1:74:3A:C9:54:35:C7:ED:93:4C:D0:F1 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d634cf95-850c-46d0-9812-120e229c9e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c06::/48 Signature Algorithm: sha256WithRSAEncryption 28:0c:2a:2d:95:d1:33:73:06:22:ae:ab:54:bf:0d:c1:41:4d: f4:75:68:bc:54:74:74:89:60:6a:1c:0d:db:a9:11:0d:d5:e1: df:a5:b6:73:42:f8:70:d5:f8:35:12:09:f2:51:96:ef:e6:44: c3:9a:61:a4:61:c0:91:76:2e:82:21:b5:9d:da:05:a9:f0:49: 49:d4:75:06:3a:b0:01:1d:3e:4d:ce:f4:bf:9e:cb:71:41:43: eb:69:88:ad:25:0d:64:63:94:c4:91:c1:96:cf:ac:bc:dd:75: 70:14:95:39:f2:0e:8b:fe:53:b6:3b:5d:d6:be:82:eb:20:a8: 55:57:f1:f2:90:69:45:de:99:bc:18:da:2b:56:1b:c2:4f:3d: c4:70:48:b6:67:58:38:c3:88:3f:01:6e:86:02:52:d8:f4:27: 12:b6:17:03:e2:74:24:eb:64:5d:49:67:86:95:a2:f9:73:5c: 34:8c:40:3a:e0:42:49:56:62:76:ba:bd:0a:0f:9d:48:e7:7e: 8f:3a:07:44:eb:53:45:d8:39:81:25:c0:a5:c2:a3:95:e4:5c: 30:d1:2e:4a:47:7d:b0:bc:81:09:a3:75:be:35:f8:12:99:de: 0e:15:95:97:3b:99:5d:75:27:de:cd:6c:ff:57:2e:cf:08:53: 35:39:99:74 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfCcYnHvl9ttZkb1rFolCVahLrpowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY0MTAyWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzIzMjUwZmZjZDZkZTg3ODhkZTcyZmM2NTNmNGIxOTFh ZWVlZjIwOTg0YjA4Mzc3ZmZkNTI1MTI4MjUxZGRjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC429HHgrFbT2RBWFGsvkVDZo/trBeFIssoyeFcbuWm3UV1 0gNriotgFkMgTdvLw4IB2VjJC34ZvokF9sdYz1486Nu5UnkblOKH1kquhgBXixc/ +lazYQMN56sO1xbT312px6cgEH4/8FSvuNbjmytG7FSFH64ywyh3UgwW3w8tYSIo OFqw56j5d1wfo+wSNjjOUodMaujp01vONitG9x8XWOJmWDM+xev8DIy3QRw8mElI WdiGMZZyM5HyDWyz6QcuRpxivjEcey0B059oDO9fS7201F1akg9FO5YitBowk2lk vG4xllAHEmjKbouf9iylIMnjNtCLWn7wDt6OuIXZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUq/pGjmkkbEPBdDrJVDXH7ZNM0PEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q2MzRjZjk1LTg1MGMtNDZkMC05ODEyLTEyMGUyMjljOWU3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAYwDQYJKoZIhvcNAQELBQADggEBACgMKi2V0TNzBiKuq1S/DcFB TfR1aLxUdHSJYGocDdupEQ3V4d+ltnNC+HDV+DUSCfJRlu/mRMOaYaRhwJF2LoIh tZ3aBanwSUnUdQY6sAEdPk3O9L+ey3FBQ+tpiK0lDWRjlMSRwZbPrLzddXAUlTny Dov+U7Y7Xda+gusgqFVX8fKQaUXembwY2itWG8JPPcRwSLZnWDjDiD8BboYCUtj0 JxK2FwPidCTrZF1JZ4aVovlzXDSMQDrgQklWYna6vQoPnUjnfo86B0TrU0XYOYEl wKXCo5XkXDDRLkpHfbC8gQmjdb41+BKZ3g4VlZc7mV11J97NbP9XLs8IUzU5mXQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:11:13 2025 by rpki-client