$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa File: 0934543e-90db-4ba0-9848-455452e0c367.roa (raw, json) Hash identifier: ptApimrz1P3IN9ecwwA6S2Nq7Xdg7R3MaGV6BQBSjtg= Subject key identifier: 50:66:C7:7D:A5:7E:74:66:BC:BC:B1:A2:51:83:B6:D8:78:96:09:0B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4A26B4ED2BA6B48A3D7BF852AEA8FAA735B2859F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa Signing time: Fri 31 Oct 2025 01:30:17 +0000 ROA not before: Fri 31 Oct 2025 01:30:17 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:26:b4:ed:2b:a6:b4:8a:3d:7b:f8:52:ae:a8:fa:a7:35:b2:85:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 31 01:30:17 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0ee4372d0f7177dde1fc9fac3e15019826c9bba51b47aa513ed5c136f134c426, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:4e:86:e7:1c:bc:c7:e2:04:2a:02:12:a3: e7:96:f5:fb:24:94:40:20:43:06:42:05:d1:89:8b: 6d:7c:a3:a2:2f:49:90:ac:4e:7f:34:15:63:75:6f: a5:0b:aa:82:c7:24:78:fd:d1:48:84:80:0b:a8:7a: 06:d5:67:0d:2d:13:84:79:44:cd:35:41:4b:f5:4f: 8f:63:52:9a:9c:5c:ff:48:8d:69:f0:96:ba:d3:01: 00:62:72:f3:4e:06:ad:2f:a6:4d:d2:ee:21:eb:77: db:03:29:f8:1d:d6:83:91:e5:4c:d8:89:48:97:ac: 6b:d0:81:3d:78:1d:e1:07:12:0d:e8:42:22:f5:6a: b3:a8:ac:3a:31:e2:0c:26:b7:e8:e0:17:37:ca:fb: 7b:3a:22:38:39:0d:ae:6f:53:16:17:c3:f9:37:bc: be:36:01:8a:b3:09:dd:6f:a3:b6:2d:56:50:20:b7: bf:dc:db:8b:75:1e:96:14:2d:72:b4:2a:36:a1:a1: 81:3a:54:5d:de:76:a6:64:e4:5c:db:47:67:d3:fe: 7c:b9:db:76:ff:cf:08:4d:ae:8d:cc:f6:c4:dc:62: 50:e6:a1:21:03:1a:25:08:a5:74:36:7c:40:e1:1a: 0b:8c:5b:bd:04:05:22:30:0f:48:64:99:86:d3:9f: 0e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:66:C7:7D:A5:7E:74:66:BC:BC:B1:A2:51:83:B6:D8:78:96:09:0B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c02::/48 Signature Algorithm: sha256WithRSAEncryption 93:ab:54:d0:08:0e:a5:94:21:66:b4:fe:57:03:b4:5f:6c:d2: f8:6b:71:17:41:4f:c7:c1:8f:b7:bc:ca:13:a1:3c:ee:51:cb: 4d:0c:c8:3f:a0:d4:3f:73:be:09:f4:98:5e:18:69:5e:6d:4a: 42:c6:87:13:83:c1:7f:82:15:89:08:c1:d1:4d:92:1b:2b:a9: 92:9b:56:59:08:e8:51:d0:c5:ae:b8:46:4a:b7:e9:31:c2:fb: d7:5c:5a:e7:eb:a1:8f:6a:e6:dc:94:95:df:1a:96:4e:51:69: af:f7:3a:97:41:ef:72:6d:b7:59:10:65:55:bf:f6:e9:78:7c: d2:22:7e:c9:78:ea:e8:37:28:78:cf:8d:fc:f4:c8:25:b4:f6: ef:70:f9:6b:2b:1c:c3:d1:00:33:c8:0f:52:46:f6:a0:69:a7: fc:c2:44:fe:17:0f:e5:f5:05:c7:63:51:22:e0:d3:52:67:0e: ab:76:39:2b:b5:4b:ba:8a:95:97:ab:5c:6f:49:27:a0:53:45: fb:4f:14:d9:4e:4c:a9:51:fb:c5:e9:2f:5e:25:8c:ab:34:2f: 21:cf:98:44:b3:89:ae:e2:30:88:27:20:df:e2:80:ec:87:2a: 9d:44:d2:b3:b1:ba:28:47:3d:43:0a:d8:e4:5a:a7:74:0c:2e: de:0f:15:02 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSia07SumtIo9e/hSrqj6pzWyhZ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDMxMDEzMDE3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWU0MzcyZDBmNzE3N2RkZTFmYzlmYWMzZTE1MDE5ODI2 YzliYmE1MWI0N2FhNTEzZWQ1YzEzNmYxMzRjNDI2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjO06G5xy8x+IEKgISo+eW9fsklEAgQwZCBdGJi218o6Iv SZCsTn80FWN1b6ULqoLHJHj90UiEgAuoegbVZw0tE4R5RM01QUv1T49jUpqcXP9I jWnwlrrTAQBicvNOBq0vpk3S7iHrd9sDKfgd1oOR5UzYiUiXrGvQgT14HeEHEg3o QiL1arOorDox4gwmt+jgFzfK+3s6Ijg5Da5vUxYXw/k3vL42AYqzCd1vo7YtVlAg t7/c24t1HpYULXK0KjahoYE6VF3edqZk5FzbR2fT/ny523b/zwhNro3M9sTcYlDm oSEDGiUIpXQ2fEDhGguMW70EBSIwD0hkmYbTnw49AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUGbHfaV+dGa8vLGiUYO22HiWCQswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA5MzQ1NDNlLTkwZGItNGJhMC05ODQ4LTQ1NTQ1MmUwYzM2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAIwDQYJKoZIhvcNAQELBQADggEBAJOrVNAIDqWUIWa0/lcDtF9s 0vhrcRdBT8fBj7e8yhOhPO5Ry00MyD+g1D9zvgn0mF4YaV5tSkLGhxODwX+CFYkI wdFNkhsrqZKbVlkI6FHQxa64Rkq36THC+9dcWufroY9q5tyUld8alk5Raa/3OpdB 73Jtt1kQZVW/9ul4fNIifsl46ug3KHjPjfz0yCW09u9w+WsrHMPRADPID1JG9qBp p/zCRP4XD+X1BcdjUSLg01JnDqt2OSu1S7qKlZerXG9JJ6BTRftPFNlOTKlR+8Xp L14ljKs0LyHPmESzia7iMIgnIN/igOyHKp1E0rOxuihHPUMK2ORap3QMLt4PFQI= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:35 2025 by rpki-client