$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2526bb0-8744-452b-897e-b0ce9626682b.roa File: b2526bb0-8744-452b-897e-b0ce9626682b.roa (raw, json) Hash identifier: ZRarA2x9y69CLykZUnVYMKShCXAPuWOoHtGT5n4Jblk= Subject key identifier: 41:0F:77:89:B1:CD:6C:FE:65:79:46:D1:1E:6A:57:31:92:D9:D5:D9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 677B294F91B60CDEFC76FFC6DA1BA116604C7735 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2526bb0-8744-452b-897e-b0ce9626682b.roa Signing time: Fri 31 Oct 2025 01:30:23 +0000 ROA not before: Fri 31 Oct 2025 01:30:23 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7b:29:4f:91:b6:0c:de:fc:76:ff:c6:da:1b:a1:16:60:4c:77:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 31 01:30:23 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=079c84290e08f3cfeedf9a44cd96f7b838c363cf11a76f6d35c38d7b4cdca589, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7e:98:05:90:75:b6:a3:d8:ca:d8:84:63:a8: 8b:3a:9d:03:78:be:29:ed:e0:09:62:69:fe:22:80: 13:c5:c2:50:42:60:1f:a1:d6:5f:f9:0f:cc:8e:89: 73:7c:62:ec:88:f1:26:82:0b:eb:ba:6b:d1:19:07: 75:f0:24:48:a4:a3:08:30:b1:1a:5b:9a:fd:0d:b0: 36:d0:6c:f4:05:aa:e2:8d:61:c5:e6:b1:f2:f1:7f: 9b:f0:e5:f1:4a:a3:55:58:a3:93:16:b6:0d:11:0c: db:9c:05:f9:6b:80:76:fb:41:09:e9:1d:3c:2c:61: 0a:d9:f0:80:18:70:fd:04:55:51:f6:ff:33:03:ba: d4:ed:f0:dc:84:d3:0c:cd:8e:3c:9a:3b:9a:5e:63: 3e:4f:17:5b:af:16:43:84:94:ae:1f:64:0d:80:f0: 71:1a:2d:c8:4e:40:94:25:f2:4a:30:cc:99:9e:72: 0a:29:6b:1d:4a:d6:35:b6:30:da:5e:eb:ca:44:f5: 37:d7:0a:ea:02:22:34:d1:0e:1a:10:14:c3:73:43: 2f:10:99:45:6b:5e:ab:be:59:a8:3b:86:1d:13:cd: 56:39:55:c1:cd:2a:02:5e:ce:2e:6e:0b:c8:14:64: 53:71:6d:13:13:67:8f:5d:b6:3a:46:27:62:f0:dc: a6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0F:77:89:B1:CD:6C:FE:65:79:46:D1:1E:6A:57:31:92:D9:D5:D9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2526bb0-8744-452b-897e-b0ce9626682b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c11::/48 Signature Algorithm: sha256WithRSAEncryption 40:1a:74:bf:59:bb:8f:d5:3c:e7:34:34:93:ef:be:02:43:b2: dd:1a:62:74:15:13:dc:67:2e:2a:81:f3:ed:cb:e9:a6:f2:80: 35:6f:4e:1d:d8:b6:0f:d3:b0:85:a2:bc:68:50:e6:4b:7a:32: 6d:fd:67:17:7e:84:bf:76:2c:b0:35:1d:96:c7:59:34:11:0a: c4:82:4b:40:4e:a4:40:45:49:1a:a0:d1:b4:53:c5:30:3a:d1: 03:34:84:00:72:32:ec:7b:e6:f0:67:a7:ea:66:f4:2d:52:74: a6:1f:10:88:54:65:20:3f:ba:8d:76:d2:d1:e1:d0:24:28:e2: 28:fc:3a:7b:17:fe:04:8e:f5:ce:5a:14:68:86:a6:f7:a3:f5: 74:89:73:e0:e0:5b:4c:45:f2:bb:d3:0e:4f:46:84:2b:79:c9: 0f:4b:ba:eb:7c:53:59:36:85:ed:cf:9c:5c:f3:83:3e:1a:76: 57:ac:89:53:fd:6a:a0:21:b7:1a:4e:4d:bb:41:d4:a9:fb:aa: 8e:b3:6f:53:d6:35:da:52:6a:2b:2c:1d:b3:87:d2:ea:d1:da: 02:c1:67:d0:ab:1f:f6:60:76:c9:a0:66:b5:d3:96:6a:bb:e7: 19:73:02:84:8e:86:7d:4f:15:2f:b5:06:1a:c7:ba:21:26:d3: 6a:0a:17:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZ3spT5G2DN78dv/G2huhFmBMdzUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDMxMDEzMDIzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzljODQyOTBlMDhmM2NmZWVkZjlhNDRjZDk2ZjdiODM4 YzM2M2NmMTFhNzZmNmQzNWMzOGQ3YjRjZGNhNTg5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDyfpgFkHW2o9jK2IRjqIs6nQN4vint4Aliaf4igBPFwlBC YB+h1l/5D8yOiXN8YuyI8SaCC+u6a9EZB3XwJEikowgwsRpbmv0NsDbQbPQFquKN YcXmsfLxf5vw5fFKo1VYo5MWtg0RDNucBflrgHb7QQnpHTwsYQrZ8IAYcP0EVVH2 /zMDutTt8NyE0wzNjjyaO5peYz5PF1uvFkOElK4fZA2A8HEaLchOQJQl8kowzJme cgopax1K1jW2MNpe68pE9TfXCuoCIjTRDhoQFMNzQy8QmUVrXqu+Wag7hh0TzVY5 VcHNKgJezi5uC8gUZFNxbRMTZ49dtjpGJ2Lw3KZNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQQ93ibHNbP5leUbRHmpXMZLZ1dkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IyNTI2YmIwLTg3NDQtNDUyYi04OTdlLWIwY2U5NjI2NjgyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBEwDQYJKoZIhvcNAQELBQADggEBAEAadL9Zu4/VPOc0NJPvvgJD st0aYnQVE9xnLiqB8+3L6abygDVvTh3Ytg/TsIWivGhQ5kt6Mm39Zxd+hL92LLA1 HZbHWTQRCsSCS0BOpEBFSRqg0bRTxTA60QM0hAByMux75vBnp+pm9C1SdKYfEIhU ZSA/uo120tHh0CQo4ij8OnsX/gSO9c5aFGiGpvej9XSJc+DgW0xF8rvTDk9GhCt5 yQ9Luut8U1k2he3PnFzzgz4adlesiVP9aqAhtxpOTbtB1Kn7qo6zb1PWNdpSaiss HbOH0urR2gLBZ9CrH/ZgdsmgZrXTlmq75xlzAoSOhn1PFS+1BhrHuiEm02oKF30= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:08 2025 by rpki-client