$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa File: eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa (raw, json) Hash identifier: 2golEGyS75fQmtqPBpJLZ5J/puJsi0AFZ8T2sQq1Ax4= Subject key identifier: 10:29:36:45:A5:C7:2D:BD:FB:33:1E:A1:36:6B:30:CD:9E:0E:71:7E Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 527B96D4AF007B707BA6947B6CE55F97FE512045 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa Signing time: Sat 15 Nov 2025 00:50:42 +0000 ROA not before: Sat 15 Nov 2025 00:50:42 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7b:96:d4:af:00:7b:70:7b:a6:94:7b:6c:e5:5f:97:fe:51:20:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Nov 15 00:50:42 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=081a13982b0dceb6e3c7b55ca9eed6cd9b1c7acffce9990ef3538e03ed1010e7, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:16:96:d8:ad:6e:cb:a6:3a:5b:58:d7:d1: a6:7b:1b:ee:4c:46:54:3b:19:a0:5e:4f:c0:33:ee: 78:92:77:75:08:cc:5c:92:0e:10:90:b4:9c:f4:a7: 94:cd:d3:76:18:83:41:a4:a6:f0:20:e3:d7:82:69: f7:3e:ef:dd:0a:3e:33:d8:e4:2d:84:6e:4b:80:a8: a9:59:c6:65:66:b5:b6:32:e3:86:b0:51:d1:11:21: f6:82:75:95:bb:28:4e:2e:14:18:a8:da:88:b9:ab: 3d:1e:66:59:89:53:a3:3a:89:fc:89:7e:cb:4d:aa: 10:9d:b0:fb:33:f9:57:6e:62:bc:d6:b8:56:b6:36: f9:1a:6d:c9:66:8c:f3:19:77:51:18:3f:e3:1f:7b: 21:07:d2:00:86:b9:81:b7:31:08:0a:d4:4f:27:38: aa:fd:71:81:4e:61:b9:60:77:b2:f8:04:9b:f8:2d: 7c:79:4d:cc:22:b7:e5:25:02:04:c5:a8:59:cd:63: 2b:55:9c:ee:7e:28:9b:8b:86:5c:b9:f0:20:fe:5c: d3:19:bd:ad:a6:36:d3:1e:70:df:a3:85:fe:9f:92: 0b:fd:ae:16:16:3c:44:0d:c8:21:e1:42:1f:7c:db: 6f:08:45:dd:29:9c:bd:c7:4b:dc:a3:6e:c3:ae:0d: 18:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:29:36:45:A5:C7:2D:BD:FB:33:1E:A1:36:6B:30:CD:9E:0E:71:7E X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:50:73:08:1e:93:ba:4f:82:db:9d:bb:b5:f0:08:49:d1:37: 18:f3:c0:50:61:45:00:3b:59:0a:96:55:fa:b8:a5:88:4e:f8: b2:11:02:28:39:96:d9:40:f3:e2:76:08:0e:94:1b:ec:98:66: 39:ab:02:e6:18:b3:57:d1:1e:ec:ab:05:86:96:ce:12:ab:9a: b3:3d:ac:6d:26:e3:56:d2:8b:13:03:e6:16:8a:46:21:02:f3: 18:8a:79:c7:14:45:63:5c:79:84:c7:fa:58:c3:f8:71:ff:a1: 72:1d:a2:33:1e:3d:c8:64:e6:ec:94:59:64:d5:90:62:fe:c4: 0a:99:6b:2c:21:1c:b8:b8:b3:a9:e8:7c:b7:ae:c6:1e:e5:b0: ab:88:32:bb:fc:56:03:0a:f4:5d:fd:a0:f1:14:cc:25:f5:07: d7:2e:b3:95:01:ab:5e:f8:a1:d5:03:9b:8a:1d:6f:e5:c7:4e: 96:74:e8:c4:04:e2:14:9c:11:c7:8c:f1:66:d6:82:3f:70:ef: 5f:96:9c:38:48:4c:45:d6:b7:73:b6:67:72:95:7a:ef:f7:d9: 2e:74:17:d0:b6:68:5f:ba:06:8a:20:db:34:bf:c2:20:8f:40: 58:52:f4:31:c0:ca:34:f0:43:71:94:1e:57:0c:64:2b:d8:1a: 71:dd:12:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUnuW1K8Ae3B7ppR7bOVfl/5RIEUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUxMTE1MDA1MDQyWhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODFhMTM5ODJiMGRjZWI2ZTNjN2I1NWNhOWVlZDZjZDli MWM3YWNmZmNlOTk5MGVmMzUzOGUwM2VkMTAxMGU3MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt/haW2K1uy6Y6W1jX0aZ7G+5MRlQ7GaBeT8Az7niSd3UI zFySDhCQtJz0p5TN03YYg0GkpvAg49eCafc+790KPjPY5C2EbkuAqKlZxmVmtbYy 44awUdERIfaCdZW7KE4uFBio2oi5qz0eZlmJU6M6ifyJfstNqhCdsPsz+VduYrzW uFa2NvkabclmjPMZd1EYP+MfeyEH0gCGuYG3MQgK1E8nOKr9cYFOYblgd7L4BJv4 LXx5Tcwit+UlAgTFqFnNYytVnO5+KJuLhly58CD+XNMZva2mNtMecN+jhf6fkgv9 rhYWPEQNyCHhQh98228IRd0pnL3HS9yjbsOuDRibAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUECk2RaXHLb37Mx6hNmswzZ4OcX4wHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2VhYzUxOGVkLTBlMTEtNGZlNS05YTllLTUzYTA1ZGU2MGY3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANgfwAwDQYJKoZIhvcNAQELBQADggEBAIpQcwgek7pPgtudu7XwCEnRNxjz wFBhRQA7WQqWVfq4pYhO+LIRAig5ltlA8+J2CA6UG+yYZjmrAuYYs1fRHuyrBYaW zhKrmrM9rG0m41bSixMD5haKRiEC8xiKeccURWNceYTH+ljD+HH/oXIdojMePchk 5uyUWWTVkGL+xAqZaywhHLi4s6nofLeuxh7lsKuIMrv8VgMK9F39oPEUzCX1B9cu s5UBq174odUDm4odb+XHTpZ06MQE4hScEceM8WbWgj9w71+WnDhITEXWt3O2Z3KV eu/32S50F9C2aF+6Boog2zS/wiCPQFhS9DHAyjTwQ3GUHlcMZCvYGnHdEgE= -----END CERTIFICATE-----Generated at Sun Nov 16 10:15:44 2025 by rpki-client