$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41bd3cf9-8613-4e24-ae61-0f8b0a979958.roa File: 41bd3cf9-8613-4e24-ae61-0f8b0a979958.roa (raw, json) Hash identifier: 8UGgrYOxMgtVZ4ZNu86qWW60ia6YMWXoVk0Xco6Kl0s= Subject key identifier: E1:90:D1:21:C7:64:20:0F:2C:29:73:0A:0C:45:1E:C9:8A:BF:98:89 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0966DCA1B300DA8F4A5AD7D91AA5070200A6CF44 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41bd3cf9-8613-4e24-ae61-0f8b0a979958.roa Signing time: Fri 31 Oct 2025 01:30:28 +0000 ROA not before: Fri 31 Oct 2025 01:30:28 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:66:dc:a1:b3:00:da:8f:4a:5a:d7:d9:1a:a5:07:02:00:a6:cf:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 31 01:30:28 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=bf0c926812481614ebdc6a9b454986e986ede7a78d066c9a6c1362ad5e034d7f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:12:0a:28:0e:dd:36:a8:dc:c5:24:fc:35: 03:53:c9:c9:1e:26:70:23:3c:54:08:9d:aa:22:64: f0:96:a5:a1:68:ae:4d:bc:d0:ae:29:3b:34:72:c3: 07:99:63:ce:4b:93:3c:02:01:44:1f:00:1e:ed:a7: 30:6c:5f:f1:4c:93:2e:c2:9a:0a:c3:e1:8e:fb:19: df:87:dc:42:5a:31:72:7d:19:58:14:ce:55:32:7c: 29:8e:32:2c:de:5e:a8:69:a6:10:33:ef:a5:e1:7e: e8:91:b9:d4:bc:c1:26:a7:54:f7:69:ef:42:da:d8: 06:b1:83:9f:4a:25:94:dd:c6:75:dc:e3:24:c2:93: 04:68:e2:48:d9:b6:6a:69:47:e0:df:52:c2:37:08: c8:85:bb:31:eb:af:7e:be:8f:b9:54:ac:e0:4a:b9: 95:37:f8:0f:bd:cb:87:10:69:3e:dd:7f:33:31:b9: a6:c2:18:96:dc:ae:1c:d0:07:b4:c7:2d:2e:43:0e: 5d:24:b1:79:cd:57:07:10:aa:8e:52:19:7b:bf:6d: 49:e6:d6:e2:5d:74:5d:34:23:00:56:8a:17:7d:ef: 63:d9:eb:99:76:50:fe:a6:9d:e1:06:a9:a6:bd:43: 0f:db:02:fe:49:91:33:c8:b2:4e:4c:9f:03:07:19: 7a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:90:D1:21:C7:64:20:0F:2C:29:73:0A:0C:45:1E:C9:8A:BF:98:89 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41bd3cf9-8613-4e24-ae61-0f8b0a979958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c16::/48 Signature Algorithm: sha256WithRSAEncryption ac:e1:86:69:b7:c1:42:ee:e4:df:cd:65:16:6e:7e:ab:36:d6: cf:17:42:24:ca:fc:49:80:f0:b8:e9:ca:3c:ee:0c:69:d5:0e: 8a:d5:b6:4c:25:4d:da:0b:7f:b0:d8:ca:91:ae:53:34:2e:b1: a6:44:6b:1f:77:ca:3a:a9:77:9e:0e:39:96:91:5b:a4:33:d1: 51:d2:bf:63:7c:14:c8:dc:aa:e2:c3:96:79:79:6d:bc:e6:c6: 55:44:79:5d:59:80:24:21:34:60:9b:be:d0:f3:c2:ce:0f:2c: 1d:d5:75:a9:bd:8f:9b:3d:a4:f6:28:a2:24:b1:9b:ef:74:26: 8f:cc:94:da:42:9f:36:98:1b:4c:ab:4e:91:da:00:ed:09:9f: 44:2f:20:52:34:e3:13:cd:2f:bf:43:24:54:6a:08:b3:5c:44: 28:b5:15:17:ac:38:a5:00:dd:59:89:a3:ba:54:08:32:32:e2: 55:ec:e6:b7:31:70:ec:5c:76:67:62:a6:17:87:ef:01:af:d2: 62:cb:b9:cb:e2:7f:dc:34:34:68:9a:2a:39:39:b7:a8:b0:6f: 27:4f:77:1b:2a:11:7a:5d:a9:2c:4d:d6:51:5c:46:64:28:3f: d2:f6:1d:c2:eb:e1:90:0b:46:c5:8d:b4:a9:e6:39:7f:e0:5d: fe:8f:83:2c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCWbcobMA2o9KWtfZGqUHAgCmz0QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDMxMDEzMDI4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjBjOTI2ODEyNDgxNjE0ZWJkYzZhOWI0NTQ5ODZlOTg2 ZWRlN2E3OGQwNjZjOWE2YzEzNjJhZDVlMDM0ZDdmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7XBIKKA7dNqjcxST8NQNTyckeJnAjPFQInaoiZPCWpaFo rk280K4pOzRywweZY85LkzwCAUQfAB7tpzBsX/FMky7CmgrD4Y77Gd+H3EJaMXJ9 GVgUzlUyfCmOMizeXqhpphAz76XhfuiRudS8wSanVPdp70La2Aaxg59KJZTdxnXc 4yTCkwRo4kjZtmppR+DfUsI3CMiFuzHrr36+j7lUrOBKuZU3+A+9y4cQaT7dfzMx uabCGJbcrhzQB7THLS5DDl0ksXnNVwcQqo5SGXu/bUnm1uJddF00IwBWihd972PZ 65l2UP6mneEGqaa9Qw/bAv5JkTPIsk5MnwMHGXo1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4ZDRIcdkIA8sKXMKDEUeyYq/mIkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQxYmQzY2Y5LTg2MTMtNGUyNC1hZTYxLTBmOGIwYTk3OTk1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBYwDQYJKoZIhvcNAQELBQADggEBAKzhhmm3wULu5N/NZRZufqs2 1s8XQiTK/EmA8LjpyjzuDGnVDorVtkwlTdoLf7DYypGuUzQusaZEax93yjqpd54O OZaRW6Qz0VHSv2N8FMjcquLDlnl5bbzmxlVEeV1ZgCQhNGCbvtDzws4PLB3Vdam9 j5s9pPYooiSxm+90Jo/MlNpCnzaYG0yrTpHaAO0Jn0QvIFI04xPNL79DJFRqCLNc RCi1FResOKUA3VmJo7pUCDIy4lXs5rcxcOxcdmdipheH7wGv0mLLucvif9w0NGia Kjk5t6iwbydPdxsqEXpdqSxN1lFcRmQoP9L2HcLr4ZALRsWNtKnmOX/gXf6Pgyw= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:25 2025 by rpki-client