$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b15c61b5-30c1-450b-842d-8b951168014c.roa File: b15c61b5-30c1-450b-842d-8b951168014c.roa (raw, json) Hash identifier: 7SfLc3h+atu7R6kvTCrKdy8i408Xk8l79as2C8RtR0o= Subject key identifier: 58:D2:8F:44:63:0F:21:CA:3B:BC:4D:6C:5C:F5:01:C6:4C:E9:D1:83 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 645AEE54F3ABE463D384062024E6ECC7CD483FFC Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b15c61b5-30c1-450b-842d-8b951168014c.roa Signing time: Mon 06 Oct 2025 17:13:18 +0000 ROA not before: Mon 06 Oct 2025 17:13:18 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5a:ee:54:f3:ab:e4:63:d3:84:06:20:24:e6:ec:c7:cd:48:3f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:13:18 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=903999ad6905035723a05858c9c3d4cc394800e608bbfffbf47cef768d68b846, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:d0:87:e7:77:55:3e:5a:06:df:64:61:bf: 63:29:52:2c:a8:39:05:59:2c:0c:32:5b:9d:78:d1: 5b:5a:8f:85:e2:18:56:8b:56:ae:f6:dd:02:f7:55: 45:89:b7:e1:fa:13:8a:4f:32:9b:58:16:8d:07:91: 52:26:0d:3e:c0:65:b0:34:61:30:ea:39:a5:77:7e: 8d:5a:d8:25:c5:cd:71:58:ed:b8:13:21:bd:67:f8: 50:6a:83:b6:c6:a1:8a:be:be:22:6d:4a:26:34:32: e7:22:b9:f6:df:10:9b:a7:70:13:bb:f8:3a:a8:44: a1:b8:67:83:cc:fb:2f:87:f9:bb:fd:e1:d3:ba:77: 13:63:71:c9:45:d4:87:12:f2:82:00:82:d5:d5:05: 31:2f:cf:d6:b9:ff:a5:a6:ca:78:b1:bc:f8:bc:8d: 5b:1b:f6:fb:4a:0c:82:95:e7:f5:c9:1d:de:4e:8d: fa:7e:96:0b:01:83:d3:a2:f4:45:61:ca:ea:76:03: b4:2e:77:09:52:f0:8c:a9:55:27:26:88:7c:b0:35: ae:fa:31:e4:94:6b:78:ac:ec:6d:0c:7a:d9:fe:a0: b7:79:e4:b1:43:d5:6c:29:8e:e4:f1:ad:31:54:92: 15:c2:92:36:db:77:60:d7:cd:2e:d0:4c:66:92:cb: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D2:8F:44:63:0F:21:CA:3B:BC:4D:6C:5C:F5:01:C6:4C:E9:D1:83 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b15c61b5-30c1-450b-842d-8b951168014c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c07::/48 Signature Algorithm: sha256WithRSAEncryption a1:e3:63:00:0c:bc:58:0e:ee:fa:46:bf:92:07:e5:f4:b0:3c: ad:30:2b:8c:0b:aa:c5:ca:6a:7f:ff:09:f6:2d:ba:1b:60:64: 41:53:3c:20:a2:98:10:8e:80:2c:d2:2c:3c:1f:95:d6:dd:ec: da:33:95:32:76:15:2f:3f:b3:d6:5d:21:c9:0e:18:31:30:0d: 18:97:73:fe:7d:64:0f:ef:5f:f8:23:68:33:bb:75:c2:e9:1e: 62:bf:7c:7c:7a:14:81:bc:db:d6:d7:47:4f:93:80:8c:c5:61: 22:a7:f7:25:5d:66:8b:16:f7:3e:5b:a1:1d:9b:51:41:36:7e: f5:5a:e3:85:31:40:ba:72:6d:eb:2b:36:82:94:2e:88:87:f7: 6e:8c:49:40:08:90:32:34:ce:05:18:a0:f8:2f:3d:d2:68:c9: dd:cd:82:a7:4e:be:a9:ba:77:37:96:2f:a7:2d:36:3c:7c:38: 14:26:fb:92:56:b0:22:69:bf:56:85:a1:14:a6:69:c9:da:6f: de:96:62:8d:b1:80:cf:c2:8b:4a:00:d0:bb:c5:cf:d8:2b:66: e1:20:b1:97:ec:11:c5:e7:7d:b1:a4:f5:81:bc:13:5d:6d:db: 60:b9:f3:56:21:4b:c1:44:34:47:07:15:0a:46:da:e5:7d:cc: 91:92:66:e7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZFruVPOr5GPThAYgJObsx81IP/wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMzE4WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDM5OTlhZDY5MDUwMzU3MjNhMDU4NThjOWMzZDRjYzM5 NDgwMGU2MDhiYmZmZmJmNDdjZWY3NjhkNjhiODQ2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKF9CH53dVPloG32Rhv2MpUiyoOQVZLAwyW5140Vtaj4Xi GFaLVq723QL3VUWJt+H6E4pPMptYFo0HkVImDT7AZbA0YTDqOaV3fo1a2CXFzXFY 7bgTIb1n+FBqg7bGoYq+viJtSiY0MuciufbfEJuncBO7+DqoRKG4Z4PM+y+H+bv9 4dO6dxNjcclF1IcS8oIAgtXVBTEvz9a5/6WmynixvPi8jVsb9vtKDIKV5/XJHd5O jfp+lgsBg9Oi9EVhyup2A7QudwlS8IypVScmiHywNa76MeSUa3is7G0Metn+oLd5 5LFD1WwpjuTxrTFUkhXCkjbbd2DXzS7QTGaSy/8VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWNKPRGMPIco7vE1sXPUBxkzp0YMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IxNWM2MWI1LTMwYzEtNDUwYi04NDJkLThiOTUxMTY4MDE0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAcwDQYJKoZIhvcNAQELBQADggEBAKHjYwAMvFgO7vpGv5IH5fSw PK0wK4wLqsXKan//CfYtuhtgZEFTPCCimBCOgCzSLDwfldbd7NozlTJ2FS8/s9Zd IckOGDEwDRiXc/59ZA/vX/gjaDO7dcLpHmK/fHx6FIG829bXR0+TgIzFYSKn9yVd ZosW9z5boR2bUUE2fvVa44UxQLpybesrNoKULoiH926MSUAIkDI0zgUYoPgvPdJo yd3NgqdOvqm6dzeWL6ctNjx8OBQm+5JWsCJpv1aFoRSmacnab96WYo2xgM/Ci0oA 0LvFz9grZuEgsZfsEcXnfbGk9YG8E11t22C581YhS8FENEcHFQpG2uV9zJGSZuc= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:41 2025 by rpki-client