$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0b8d065e-bd01-4340-853a-c0b5b836446c.roa File: 0b8d065e-bd01-4340-853a-c0b5b836446c.roa (raw, json) Hash identifier: Yl8kFKXHTBO4EjAUcGnw7GPtXUdzza3ElJmLw9CjYOw= Subject key identifier: C0:0E:FC:F2:84:EF:63:39:94:A3:11:9B:AD:7D:A3:69:AE:29:1E:A4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 742B511D9544A9878AEA2F65736404C67582961F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0b8d065e-bd01-4340-853a-c0b5b836446c.roa Signing time: Sat 25 Oct 2025 00:00:21 +0000 ROA not before: Sat 25 Oct 2025 00:00:21 +0000 ROA not after: Sat 29 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c50::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2b:51:1d:95:44:a9:87:8a:ea:2f:65:73:64:04:c6:75:82:96:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 25 00:00:21 2025 GMT Not After : Nov 29 23:59:59 2025 GMT Subject: serialNumber=982a747b11f0aac5472aa8cb57c1972081314b011822ce7dd3c587180da5e3e5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:27:71:15:d2:a8:2b:fa:5b:a6:3c:d0:6d: 0e:16:39:58:b4:e9:d8:09:48:68:b2:3c:d4:a8:fe: f9:cb:e5:7c:67:95:9e:c1:d5:48:76:bf:3c:f6:31: 10:09:86:16:26:67:2d:3a:df:a0:ef:0d:b0:a1:61: 0f:14:34:14:af:b4:a3:30:51:14:50:4b:b6:bc:89: 2b:b9:c3:3d:4a:d1:f9:db:f1:f3:75:db:0b:f6:72: 75:26:86:6f:5d:5b:d2:83:74:2a:ef:11:5b:d6:dd: 56:c6:9f:27:68:78:90:f5:f7:e6:26:7a:d1:37:26: 57:48:34:6d:b2:27:39:d2:fd:98:95:ef:bd:f2:af: e4:cb:3b:be:c0:7e:31:00:66:e4:94:4a:c8:c9:69: f2:6f:99:32:fb:e5:4b:1c:3d:28:4d:96:a8:b2:62: f6:d1:5d:fe:57:c6:bf:e0:12:38:76:5f:4c:90:e6: 4b:71:bd:d6:2a:23:5f:02:3e:83:59:51:7f:ee:3e: bc:cc:92:ac:97:a1:b5:34:fe:73:2a:e0:11:7a:1e: 43:5b:5e:06:1a:85:e3:0f:6f:00:8a:b0:6e:44:62: 11:e2:8a:47:28:bc:87:b8:b7:d0:de:4c:71:b8:96: 04:9f:4f:b3:87:bb:da:2c:1d:95:7a:39:fe:4b:d1: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0E:FC:F2:84:EF:63:39:94:A3:11:9B:AD:7D:A3:69:AE:29:1E:A4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0b8d065e-bd01-4340-853a-c0b5b836446c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c50::/44 Signature Algorithm: sha256WithRSAEncryption a7:d5:b3:0c:31:a1:8a:57:90:f8:1b:a2:d1:f8:b1:bd:3f:58: 33:86:fc:d1:49:8a:f3:90:27:7a:17:bd:e3:10:83:83:15:5c: b2:21:c1:36:9d:38:30:34:05:c1:d7:f6:af:84:94:70:92:c5: cf:d7:25:1c:8c:cf:f8:e1:3c:e1:38:a2:0f:f7:71:9b:ca:ce: 10:64:9a:5c:79:c8:98:cc:97:b7:74:14:c0:94:ba:2c:1c:f7: f5:5b:f2:1c:5c:6b:ad:f8:ff:6e:54:19:d5:4d:99:60:46:34: 06:c5:85:eb:79:49:30:77:e3:18:a8:e4:de:c1:9f:74:2a:1e: b3:01:a4:62:b7:c3:66:8f:43:b9:f2:11:04:43:2c:1b:79:2b: 6a:95:a0:fe:38:50:f2:bf:a6:9b:a8:38:92:a9:59:87:c8:8b: b5:78:fe:33:4e:89:bf:5d:93:c0:e0:f8:b1:4b:d4:50:c2:98: 20:95:b8:24:6c:a0:fb:2e:a0:a5:a4:3c:27:0f:27:47:44:50: 7e:b8:5c:75:6a:8e:78:68:ab:6f:f8:ac:bd:8e:90:fa:77:ee: 4c:b6:08:cc:e0:b8:53:9d:14:fc:63:f7:37:4a:f5:57:94:10: 2c:c1:ec:a1:a3:83:bf:f8:84:fa:b3:ca:cf:b1:fa:28:a2:2b: a3:65:55:19 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdCtRHZVEqYeK6i9lc2QExnWClh8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDI1MDAwMDIxWhcNMjUxMTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODJhNzQ3YjExZjBhYWM1NDcyYWE4Y2I1N2MxOTcyMDgx MzE0YjAxMTgyMmNlN2RkM2M1ODcxODBkYTVlM2U1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp+CdxFdKoK/pbpjzQbQ4WOVi06dgJSGiyPNSo/vnL5Xxn lZ7B1Uh2vzz2MRAJhhYmZy0636DvDbChYQ8UNBSvtKMwURRQS7a8iSu5wz1K0fnb 8fN12wv2cnUmhm9dW9KDdCrvEVvW3VbGnydoeJD19+YmetE3JldING2yJznS/ZiV 773yr+TLO77AfjEAZuSUSsjJafJvmTL75UscPShNlqiyYvbRXf5Xxr/gEjh2X0yQ 5ktxvdYqI18CPoNZUX/uPrzMkqyXobU0/nMq4BF6HkNbXgYaheMPbwCKsG5EYhHi ikcovIe4t9DeTHG4lgSfT7OHu9osHZV6Of5L0eljAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwA788oTvYzmUoxGbrX2jaa4pHqQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzBiOGQwNjVlLWJkMDEtNDM0MC04NTNhLWMwYjViODM2NDQ2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADFAwDQYJKoZIhvcNAQELBQADggEBAKfVswwxoYpXkPgbotH4sb0/ WDOG/NFJivOQJ3oXveMQg4MVXLIhwTadODA0BcHX9q+ElHCSxc/XJRyMz/jhPOE4 og/3cZvKzhBkmlx5yJjMl7d0FMCUuiwc9/Vb8hxca634/25UGdVNmWBGNAbFhet5 STB34xio5N7Bn3QqHrMBpGK3w2aPQ7nyEQRDLBt5K2qVoP44UPK/ppuoOJKpWYfI i7V4/jNOib9dk8Dg+LFL1FDCmCCVuCRsoPsuoKWkPCcPJ0dEUH64XHVqjnhoq2/4 rL2OkPp37ky2CMzguFOdFPxj9zdK9VeUECzB7KGjg7/4hPqzys+x+iiiK6NlVRk= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:46 2025 by rpki-client