$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa File: 0ec55b55-70d8-4c9a-a949-98332400c54c.roa (raw, json) Hash identifier: GTohV0LbsQI9eWq3y8WgwkJNNGzk1O6SAqRkeJyX7U4= Subject key identifier: A3:73:D6:EE:00:BB:2E:BD:1A:40:AD:F1:1E:B9:DF:7F:5E:59:6C:26 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 424C50D9288A3407DB2B06DBDA7DC528EDD52E1A Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa Signing time: Tue 21 Oct 2025 00:10:02 +0000 ROA not before: Tue 21 Oct 2025 00:10:02 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4c:50:d9:28:8a:34:07:db:2b:06:db:da:7d:c5:28:ed:d5:2e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Oct 21 00:10:02 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=e9bdf857f25a2f3eb9a0521218bac603aa2598713ae91fed7878d14d1fa10d2a, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:03:d2:70:9a:99:76:08:ea:8d:28:9a:e7: 78:2d:d7:35:66:eb:35:23:ba:c5:48:ed:63:11:c8: bf:c5:61:b3:a2:5d:fb:f4:0b:33:6e:40:36:f2:0b: 87:8a:c0:68:ea:53:ff:f3:c8:dd:ed:ed:c9:0e:11: e3:54:27:c4:ab:57:ca:d8:bf:21:aa:f6:a9:47:d2: 01:0f:89:64:90:15:73:70:24:f1:43:28:cd:f5:96: 53:ca:4e:b3:be:30:1e:28:ef:ae:1f:3f:9e:0d:f5: 03:db:2c:7b:b7:11:ae:7b:2a:5d:34:3d:d5:b5:4a: 6c:46:2f:88:71:90:c8:83:ad:69:3d:d5:8b:ee:cf: bd:37:04:e6:99:08:b7:be:a7:aa:62:c7:28:73:9b: 49:e7:61:25:cc:2d:35:27:69:be:d4:f8:ad:18:a7: 53:f0:88:9d:1b:fd:39:48:7e:00:40:b1:a8:34:06: af:1f:9d:62:62:16:aa:77:b9:a5:4a:78:50:46:eb: 0b:30:97:7b:4d:ca:54:73:49:c3:a6:76:8e:9e:31: 44:67:6e:88:e0:15:91:6c:d2:ba:7d:4d:f6:b9:9f: 0c:29:75:47:6e:9a:6f:cb:0f:17:da:16:99:1a:5e: 83:de:3a:0e:38:f4:81:16:d6:22:23:da:b9:50:fb: a6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:73:D6:EE:00:BB:2E:BD:1A:40:AD:F1:1E:B9:DF:7F:5E:59:6C:26 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/48 Signature Algorithm: sha256WithRSAEncryption 52:e4:45:40:86:a2:1c:bb:c5:ec:84:aa:38:76:7f:13:65:90: 80:e6:58:ed:cc:35:14:df:39:aa:4a:ee:20:64:15:cb:12:bb: d3:2c:36:24:f8:67:2e:e1:4f:82:d6:02:67:aa:e7:3e:09:7e: 0c:5c:77:00:c5:71:6b:e0:09:4c:b5:33:61:d5:e7:f5:f9:5b: ad:0d:11:1a:6d:db:2c:d3:dc:c2:42:8c:95:fa:42:70:52:2d: ac:e9:7c:07:b8:99:f9:84:ca:c2:de:6f:7e:a3:b9:37:b2:c0: 6b:b9:42:1d:b7:c2:35:8c:81:f2:3b:a1:f6:5f:74:0c:1a:63: 66:12:4a:a2:65:7d:81:5b:e6:8b:c6:a4:80:0d:8d:ff:8b:f9: 09:48:9e:a2:bc:4c:d1:48:fa:61:1f:1e:70:5d:c0:6e:b0:0f: 19:12:31:2d:41:26:89:ad:a4:a9:66:41:55:0b:b6:24:22:f0: 11:f9:51:42:cc:ad:84:ac:6c:6c:9a:24:e6:36:77:57:82:9a: 49:68:65:7f:ad:c5:4b:d6:46:1f:a0:7a:28:20:2c:c0:cb:59: 49:2a:47:a1:de:d6:b1:f0:0d:ea:35:53:b5:d0:6c:de:1d:2e: 5c:a3:f7:8b:ca:48:3f:38:5e:2f:1b:12:15:53:02:e2:cb:57: 81:fb:5f:cd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQkxQ2SiKNAfbKwbb2n3FKO3VLhowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUxMDIxMDAxMDAyWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOWJkZjg1N2YyNWEyZjNlYjlhMDUyMTIxOGJhYzYwM2Fh MjU5ODcxM2FlOTFmZWQ3ODc4ZDE0ZDFmYTEwZDJhMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC53APScJqZdgjqjSia53gt1zVm6zUjusVI7WMRyL/FYbOi Xfv0CzNuQDbyC4eKwGjqU//zyN3t7ckOEeNUJ8SrV8rYvyGq9qlH0gEPiWSQFXNw JPFDKM31llPKTrO+MB4o764fP54N9QPbLHu3Ea57Kl00PdW1SmxGL4hxkMiDrWk9 1Yvuz703BOaZCLe+p6pixyhzm0nnYSXMLTUnab7U+K0Yp1PwiJ0b/TlIfgBAsag0 Bq8fnWJiFqp3uaVKeFBG6wswl3tNylRzScOmdo6eMURnbojgFZFs0rp9Tfa5nwwp dUdumm/LDxfaFpkaXoPeOg449IEW1iIj2rlQ+6bnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUo3PW7gC7Lr0aQK3xHrnff15ZbCYwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzBlYzU1YjU1LTcwZDgtNGM5YS1hOTQ5LTk4MzMyNDAwYzU0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAFLkRUCGohy7xeyEqjh2fxNl kIDmWO3MNRTfOapK7iBkFcsSu9MsNiT4Zy7hT4LWAmeq5z4JfgxcdwDFcWvgCUy1 M2HV5/X5W60NERpt2yzT3MJCjJX6QnBSLazpfAe4mfmEysLeb36juTeywGu5Qh23 wjWMgfI7ofZfdAwaY2YSSqJlfYFb5ovGpIANjf+L+QlInqK8TNFI+mEfHnBdwG6w DxkSMS1BJomtpKlmQVULtiQi8BH5UULMrYSsbGyaJOY2d1eCmkloZX+txUvWRh+g eiggLMDLWUkqR6He1rHwDeo1U7XQbN4dLlyj94vKSD84Xi8bEhVTAuLLV4H7X80= -----END CERTIFICATE-----Generated at Wed Nov 5 12:55:33 2025 by rpki-client