$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa File: 54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa (raw, json) Hash identifier: j0Xy8QwFAEtzJUG5xoKZnUryEXr8x2Dzfo22mo1UwnY= Subject key identifier: 41:70:C8:BE:52:C2:DF:F8:72:E2:98:11:89:F6:48:9E:BD:28:BE:86 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 491F1FD4432750B1F02D80F81951B7D9E3D29F2B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa Signing time: Tue 21 Oct 2025 12:20:13 +0000 ROA not before: Tue 21 Oct 2025 12:20:13 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:611::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1f:1f:d4:43:27:50:b1:f0:2d:80:f8:19:51:b7:d9:e3:d2:9f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:20:13 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=570fcf57126e364d01a5cefc5b23b066b437dffd7a4f30889847cd6d2975f05b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c2:19:0b:bb:19:53:59:a9:41:2e:f2:6e:c3: 83:f0:1d:4c:81:00:4c:62:31:0a:4b:d8:f6:0a:bf: d8:8d:7a:9d:aa:49:5d:ed:0b:51:fe:d1:ef:3a:6a: 67:44:89:71:d6:97:22:a9:8a:66:ba:ee:88:43:0b: db:a1:d0:60:02:a0:9f:90:f1:09:27:43:9e:53:24: d1:b8:39:aa:d0:04:2c:f9:23:0e:3b:f8:33:37:84: 0b:97:a0:b3:92:06:42:49:5d:f7:78:c1:59:e6:6f: ab:12:43:b8:26:8f:6b:04:25:ab:57:3e:ed:b1:4f: 86:fa:0c:03:a6:64:01:c0:66:aa:da:ba:41:04:dc: 6e:2b:00:3c:14:d9:25:9d:24:76:92:6c:22:dc:0f: 03:8d:e8:d4:39:72:4b:56:9f:32:64:cb:1e:75:d8: 78:27:e2:69:22:96:63:51:40:96:b6:e1:ab:43:42: e5:4f:d5:92:f1:1c:cd:5c:7f:40:a7:5c:79:d9:97: 8f:c5:35:b1:e0:3f:5f:7c:e7:38:2b:e2:a6:fa:dd: 95:95:fa:0c:a7:6d:8f:02:64:6f:fc:04:68:71:be: e7:67:f5:43:f5:61:ea:bc:25:49:98:a1:50:b6:4b: 5a:9b:ca:b2:16:b3:ab:80:79:51:b4:ef:45:5a:9f: 27:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:70:C8:BE:52:C2:DF:F8:72:E2:98:11:89:F6:48:9E:BD:28:BE:86 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/54bcbd50-5916-4677-a6b1-6477b8b14aaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:611::/48 Signature Algorithm: sha256WithRSAEncryption 15:03:63:14:58:b1:bd:e8:55:f9:bb:b4:b7:f0:4a:b1:22:19: b2:a9:77:41:4c:fc:e5:f9:fa:4e:7d:c6:ad:d4:ea:93:9c:ea: 98:4e:10:26:02:17:a1:1a:98:74:15:ab:2f:8a:6b:36:37:19: 57:72:0c:e3:29:9d:0e:4e:16:8c:c7:2e:c3:0f:b5:57:84:e1: 08:da:40:72:88:06:ad:49:d8:c8:7d:fa:89:cf:9d:7b:22:a2: 6e:75:5b:85:32:41:96:be:de:16:ae:a2:7c:67:1a:c9:8b:e0: 60:7b:24:e9:a4:11:49:80:c1:7a:fe:86:1c:b5:48:c9:55:20: f4:77:66:5a:21:d2:b7:2b:86:25:61:53:08:d0:2a:39:f4:fd: 5e:09:bd:aa:58:2d:0f:fe:9b:73:35:f3:86:31:56:84:b2:70: cf:26:8c:c1:c8:52:02:f6:16:bf:5c:da:0b:3e:46:3f:c4:a0: a5:52:c2:0f:2c:c2:a4:fd:5e:78:88:28:dd:51:27:a6:dd:f2: 6a:27:aa:2a:2a:e9:7a:fa:ad:75:b3:96:84:b4:1d:4c:ab:dc: 1a:cb:4e:33:e3:a9:75:13:15:b6:85:fa:37:0d:04:6d:0f:e7: 06:ef:85:f6:e1:26:e3:fe:55:b0:5e:38:a7:10:04:cc:75:d4: 82:1e:23:89 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSR8f1EMnULHwLYD4GVG32ePSnyswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIyMDEzWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzBmY2Y1NzEyNmUzNjRkMDFhNWNlZmM1YjIzYjA2NmI0 MzdkZmZkN2E0ZjMwODg5ODQ3Y2Q2ZDI5NzVmMDViMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXwhkLuxlTWalBLvJuw4PwHUyBAExiMQpL2PYKv9iNep2q SV3tC1H+0e86amdEiXHWlyKpima67ohDC9uh0GACoJ+Q8QknQ55TJNG4OarQBCz5 Iw47+DM3hAuXoLOSBkJJXfd4wVnmb6sSQ7gmj2sEJatXPu2xT4b6DAOmZAHAZqra ukEE3G4rADwU2SWdJHaSbCLcDwON6NQ5cktWnzJkyx512Hgn4mkilmNRQJa24atD QuVP1ZLxHM1cf0CnXHnZl4/FNbHgP1985zgr4qb63ZWV+gynbY8CZG/8BGhxvudn 9UP1Yeq8JUmYoVC2S1qbyrIWs6uAeVG070VanydlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQXDIvlLC3/hy4pgRifZInr0ovoYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU0YmNiZDUwLTU5MTYtNDY3Ny1hNmIxLTY0NzdiOGIxNGFhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhEwDQYJKoZIhvcNAQELBQADggEBABUDYxRYsb3oVfm7tLfwSrEi GbKpd0FM/OX5+k59xq3U6pOc6phOECYCF6EamHQVqy+KazY3GVdyDOMpnQ5OFozH LsMPtVeE4QjaQHKIBq1J2Mh9+onPnXsiom51W4UyQZa+3hauonxnGsmL4GB7JOmk EUmAwXr+hhy1SMlVIPR3Zloh0rcrhiVhUwjQKjn0/V4JvapYLQ/+m3M184YxVoSy cM8mjMHIUgL2Fr9c2gs+Rj/EoKVSwg8swqT9XniIKN1RJ6bd8monqioq6Xr6rXWz loS0HUyr3BrLTjPjqXUTFbaF+jcNBG0P5wbvhfbhJuP+VbBeOKcQBMx11IIeI4k= -----END CERTIFICATE-----Generated at Sun Oct 26 13:06:03 2025 by rpki-client