$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f9d2b65b-e2b3-4af8-9a51-2135ee046801.roa File: f9d2b65b-e2b3-4af8-9a51-2135ee046801.roa (raw, json) Hash identifier: 4Wvp9e+qlqU1qiSGTTcVg18ZQtL19MRqrBcoedbpeQo= Subject key identifier: 0C:6B:BE:AD:5C:D4:A4:66:43:0D:73:C1:15:E9:94:D6:A6:E1:8B:BC Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 15966AA6436300272D7839771A254C36D7EE5A17 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f9d2b65b-e2b3-4af8-9a51-2135ee046801.roa Signing time: Tue 04 Nov 2025 16:50:45 +0000 ROA not before: Tue 04 Nov 2025 16:50:45 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:96:6a:a6:43:63:00:27:2d:78:39:77:1a:25:4c:36:d7:ee:5a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:50:45 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=1f596f4ae43055fcb9f26b53cedeae6e200f05d3dc0d1d31ee9729d1fd8ab38f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:58:04:49:de:fa:9e:36:7e:82:01:ff:ae:f1: 4f:ec:d5:f2:47:60:84:36:78:f8:97:ac:7b:e5:92: 82:19:44:7a:8e:b0:ea:34:af:5a:01:fe:ae:40:69: 76:c5:fb:91:04:e7:d3:75:1c:77:72:33:3d:2a:dc: 8c:5c:e4:a1:7d:ae:db:92:9e:bc:28:9b:73:5a:da: 6c:8e:35:30:44:6f:75:10:39:3c:ba:4a:2c:7d:8e: ea:56:2d:58:37:30:93:a9:e7:1a:89:3d:19:d2:e0: 7a:de:fd:4d:0c:2a:dd:62:2b:d4:f1:dd:cc:34:b4: b8:f5:c3:4e:45:72:d9:87:27:0c:05:f6:10:64:fb: 54:8d:23:75:d4:9e:58:15:d2:fc:eb:34:74:7b:ec: ca:36:9f:ec:4d:36:6c:c2:ae:4a:dd:9b:41:80:a6: 38:f5:1b:8e:13:cf:68:83:c5:6d:e6:c7:41:e1:b2: 1b:b0:de:81:bd:47:70:25:d7:d8:14:8a:65:a3:80: 84:97:bd:27:6a:e6:58:9f:a5:90:d3:bc:b2:9c:fa: d3:a3:05:45:47:53:59:dc:15:de:ed:50:00:db:16: 2c:a6:19:de:cf:0a:9a:5f:75:85:3e:91:b2:98:2e: 9c:27:20:ce:76:fb:a5:bd:3a:06:30:ef:49:c3:87: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6B:BE:AD:5C:D4:A4:66:43:0D:73:C1:15:E9:94:D6:A6:E1:8B:BC X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f9d2b65b-e2b3-4af8-9a51-2135ee046801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c13::/48 Signature Algorithm: sha256WithRSAEncryption 97:e1:04:11:18:20:ef:04:cc:c5:a1:05:cd:22:e0:51:08:fb: 93:7d:12:f5:60:76:b7:c0:3f:a7:5c:68:70:64:f0:6e:56:43: ee:63:f9:08:02:0e:f4:3c:b5:00:f3:09:5b:b4:c6:55:3c:98: 6f:47:27:98:31:d2:21:84:3a:60:b1:aa:9a:85:27:4d:03:9f: 8b:3d:35:7d:22:8a:0b:dc:65:76:73:73:55:e6:10:50:c9:c3: 17:d5:8d:40:9c:6a:4e:22:13:5e:97:1f:92:63:75:27:69:f0: e6:88:91:95:a6:66:ed:11:1c:50:9e:c3:89:e2:1d:f7:3f:a5: 6a:d8:cf:0b:b5:76:b3:4a:3c:f5:92:4c:df:a5:26:2d:8f:ff: d5:75:7c:d9:70:a7:98:3c:98:c8:cf:6d:47:68:84:ae:c3:af: e8:4c:93:3c:9f:2d:35:7f:a3:92:5e:a5:68:60:00:5f:b6:b1: ba:bd:f7:31:c4:67:02:43:b7:16:13:06:8f:92:03:fa:6d:16: d9:76:a2:be:45:d5:9e:a4:5e:c4:0c:bd:d0:88:01:39:7f:53: 71:3c:aa:91:6e:ce:01:dc:79:fd:2a:41:6e:88:b1:dc:e4:8e: c3:92:4f:28:39:09:f5:53:94:d6:4d:0e:d6:22:59:f3:6a:e8: 90:24:91:23 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFZZqpkNjACcteDl3GiVMNtfuWhcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY1MDQ1WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjU5NmY0YWU0MzA1NWZjYjlmMjZiNTNjZWRlYWU2ZTIw MGYwNWQzZGMwZDFkMzFlZTk3MjlkMWZkOGFiMzhmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbWARJ3vqeNn6CAf+u8U/s1fJHYIQ2ePiXrHvlkoIZRHqO sOo0r1oB/q5AaXbF+5EE59N1HHdyMz0q3Ixc5KF9rtuSnrwom3Na2myONTBEb3UQ OTy6Six9jupWLVg3MJOp5xqJPRnS4Hre/U0MKt1iK9Tx3cw0tLj1w05FctmHJwwF 9hBk+1SNI3XUnlgV0vzrNHR77Mo2n+xNNmzCrkrdm0GApjj1G44Tz2iDxW3mx0Hh shuw3oG9R3Al19gUimWjgISXvSdq5lifpZDTvLKc+tOjBUVHU1ncFd7tUADbFiym Gd7PCppfdYU+kbKYLpwnIM52+6W9OgYw70nDhzQ5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDGu+rVzUpGZDDXPBFemU1qbhi7wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y5ZDJiNjViLWUyYjMtNGFmOC05YTUxLTIxMzVlZTA0NjgwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBMwDQYJKoZIhvcNAQELBQADggEBAJfhBBEYIO8EzMWhBc0i4FEI +5N9EvVgdrfAP6dcaHBk8G5WQ+5j+QgCDvQ8tQDzCVu0xlU8mG9HJ5gx0iGEOmCx qpqFJ00Dn4s9NX0iigvcZXZzc1XmEFDJwxfVjUCcak4iE16XH5JjdSdp8OaIkZWm Zu0RHFCew4niHfc/pWrYzwu1drNKPPWSTN+lJi2P/9V1fNlwp5g8mMjPbUdohK7D r+hMkzyfLTV/o5JepWhgAF+2sbq99zHEZwJDtxYTBo+SA/ptFtl2or5F1Z6kXsQM vdCIATl/U3E8qpFuzgHcef0qQW6IsdzkjsOSTyg5CfVTlNZNDtYiWfNq6JAkkSM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:12 2025 by rpki-client