$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1d4aca1-5510-4be5-babc-a05cdabd7e4a.roa File: f1d4aca1-5510-4be5-babc-a05cdabd7e4a.roa (raw, json) Hash identifier: hnmYUfqjx378FoB9nWzF3MyxX66eOS9IU8jC7tqpBkQ= Subject key identifier: 33:B6:44:92:3F:CA:2D:41:7F:4F:1E:57:50:60:4A:87:B4:E5:70:42 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0EF436B76EE5816C367773F7571B1B193CCBFF5E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1d4aca1-5510-4be5-babc-a05cdabd7e4a.roa Signing time: Tue 04 Nov 2025 16:41:23 +0000 ROA not before: Tue 04 Nov 2025 16:41:23 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f4:36:b7:6e:e5:81:6c:36:77:73:f7:57:1b:1b:19:3c:cb:ff:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:41:23 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=fd7d05a7c8a464bc596d5628a4f0132c6564af5a57df16cf331f9719e3cdad3b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:64:20:66:6d:6b:37:d9:2e:5f:73:4c:6f: 1a:46:2d:f3:e0:0e:08:f0:70:d9:d9:36:23:bf:e6: ff:3f:20:42:97:b9:1e:f0:09:ce:13:80:0a:e0:dc: 1e:29:8b:6f:87:85:54:aa:3a:9e:84:84:60:e9:1b: 13:6f:76:65:8b:67:d7:4f:9b:df:dc:c5:3d:64:69: e7:d3:87:4e:04:bc:64:79:18:34:a1:84:47:cb:b5: 1a:a6:ac:17:f3:64:01:46:72:22:b4:3c:ff:86:2d: f3:cd:ea:6a:35:f9:35:43:8b:6f:26:56:a1:f8:0c: 68:34:a9:c3:92:f3:4c:3b:d4:71:0d:ef:ee:f0:8c: 5f:e3:38:c0:e7:dc:83:57:6e:9b:05:dd:3c:39:9f: 95:5e:9c:90:c9:04:a4:90:27:31:ce:ed:18:c0:a7: 5d:37:c1:53:88:7e:b6:86:30:74:8d:0b:ce:14:09: 9b:3a:a9:1f:67:57:5e:bc:91:67:0d:96:82:b9:e0: 2e:96:d7:f7:38:5f:f3:47:2f:ab:32:df:81:d5:89: dc:06:f5:06:ac:05:0a:9a:ef:34:a7:74:59:19:9a: 35:44:d5:b8:51:1d:98:72:f8:c7:4a:40:4e:45:d2: f7:8a:fa:f2:99:80:5b:d4:9e:eb:b3:d0:e2:bb:2c: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B6:44:92:3F:CA:2D:41:7F:4F:1E:57:50:60:4A:87:B4:E5:70:42 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1d4aca1-5510-4be5-babc-a05cdabd7e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0f::/48 Signature Algorithm: sha256WithRSAEncryption 6b:50:ee:cd:76:2b:72:47:6e:0c:d9:5f:a5:b3:5f:7a:5c:02: 58:26:15:25:55:03:b5:b9:f0:27:bb:83:e6:2e:c8:94:4c:03: 3a:ac:b5:a6:6b:de:45:34:da:f2:47:d3:8a:4f:a8:dd:6d:f7: 77:ab:fa:84:44:61:e1:a8:fa:58:29:fc:f2:bd:6f:9b:47:ea: 31:18:3d:48:e5:1a:49:60:5b:c2:4b:a6:02:b7:b0:9b:b1:01: 2a:05:82:79:ed:3f:fa:67:99:45:2b:ff:a8:fd:d8:87:51:65: 4b:25:c3:0c:12:be:4a:65:d9:e7:aa:5e:a5:aa:c8:62:19:45: 2f:83:9d:99:ed:60:6c:4a:cc:2b:64:42:8c:28:80:75:86:de: 1f:a2:fb:dc:d3:f4:cc:07:42:f3:e4:de:35:86:5c:ae:93:9f: 3d:85:3e:5f:a8:5b:c3:1f:78:52:e0:c8:c5:ee:e2:5a:1c:02: 4f:c6:ce:39:12:35:12:e8:b2:3e:c4:7b:7c:4b:46:04:42:85: 10:7e:c0:81:8c:b2:4b:86:a2:01:9f:b3:74:ca:22:d4:dd:fb: e9:f4:d2:9b:9c:d0:8e:07:7f:82:d8:cc:a3:fe:c5:ed:2c:da: 7a:05:03:c9:4f:af:c0:ea:7a:46:0c:23:7c:1e:1d:2a:13:2b: 4a:3e:30:f8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDvQ2t27lgWw2d3P3VxsbGTzL/14wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY0MTIzWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDdkMDVhN2M4YTQ2NGJjNTk2ZDU2MjhhNGYwMTMyYzY1 NjRhZjVhNTdkZjE2Y2YzMzFmOTcxOWUzY2RhZDNiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4YWQgZm1rN9kuX3NMbxpGLfPgDgjwcNnZNiO/5v8/IEKX uR7wCc4TgArg3B4pi2+HhVSqOp6EhGDpGxNvdmWLZ9dPm9/cxT1kaefTh04EvGR5 GDShhEfLtRqmrBfzZAFGciK0PP+GLfPN6mo1+TVDi28mVqH4DGg0qcOS80w71HEN 7+7wjF/jOMDn3INXbpsF3Tw5n5VenJDJBKSQJzHO7RjAp103wVOIfraGMHSNC84U CZs6qR9nV168kWcNloK54C6W1/c4X/NHL6sy34HVidwG9QasBQqa7zSndFkZmjVE 1bhRHZhy+MdKQE5F0veK+vKZgFvUnuuz0OK7LFjVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUM7ZEkj/KLUF/Tx5XUGBKh7TlcEIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YxZDRhY2ExLTU1MTAtNGJlNS1iYWJjLWEwNWNkYWJkN2U0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA8wDQYJKoZIhvcNAQELBQADggEBAGtQ7s12K3JHbgzZX6WzX3pc AlgmFSVVA7W58Ce7g+YuyJRMAzqstaZr3kU02vJH04pPqN1t93er+oREYeGo+lgp /PK9b5tH6jEYPUjlGklgW8JLpgK3sJuxASoFgnntP/pnmUUr/6j92IdRZUslwwwS vkpl2eeqXqWqyGIZRS+DnZntYGxKzCtkQowogHWG3h+i+9zT9MwHQvPk3jWGXK6T nz2FPl+oW8MfeFLgyMXu4locAk/GzjkSNRLosj7Ee3xLRgRChRB+wIGMskuGogGf s3TKItTd++n00puc0I4Hf4LYzKP+xe0s2noFA8lPr8DqekYMI3weHSoTK0o+MPg= -----END CERTIFICATE-----Generated at Wed Nov 5 21:46:19 2025 by rpki-client