$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c989c04a-7b52-4ce5-a0dc-f32498c5affd.roa File: c989c04a-7b52-4ce5-a0dc-f32498c5affd.roa (raw, json) Hash identifier: FHbGzHIbhcltVvYh/GBYka2CVNazPBgRnqy2MrOekF4= Subject key identifier: 9C:C8:DE:87:AB:D5:23:30:54:7F:5E:F2:B0:B5:B5:91:4B:9E:8F:1C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 50C42B28B248889B856856B660F55EDE7865FFB2 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c989c04a-7b52-4ce5-a0dc-f32498c5affd.roa Signing time: Tue 21 Oct 2025 12:40:19 +0000 ROA not before: Tue 21 Oct 2025 12:40:19 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:62b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c4:2b:28:b2:48:88:9b:85:68:56:b6:60:f5:5e:de:78:65:ff:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:40:19 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=06f3019442e43dc839521b9fa2cbb0c02141fc8fa7b6fb24a936b1f1e4c03d57, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:81:33:c4:b1:85:6e:53:7d:13:13:4d:39:8c: 94:b0:cd:85:4f:76:36:8b:01:0b:f9:82:a6:07:db: 0a:ad:60:eb:b9:03:27:80:98:8d:71:51:2c:13:96: 22:98:9b:9b:2e:65:92:80:3c:2f:1e:7f:f5:23:ed: 20:f4:12:0c:39:5b:ff:4c:49:ed:d8:8e:dd:3b:af: 50:07:23:8d:58:19:2d:92:ff:fa:55:1f:be:b6:e0: f1:3f:d0:a0:96:cc:b3:e1:2d:dc:62:88:97:93:41: b2:bf:4f:b8:ef:15:c7:d9:07:c4:3b:d3:ce:3e:82: 02:9f:19:6e:fd:b4:db:be:7b:ef:15:cd:5c:43:b9: 6f:bf:10:c3:b9:dd:4f:6a:a4:22:29:47:9f:ec:81: e4:5b:f3:85:27:53:30:63:c1:42:cf:49:c8:f0:5d: 03:2d:5c:6a:fa:c9:81:be:9a:15:b3:66:db:6a:20: 80:8b:e3:de:52:73:eb:92:44:6f:8c:95:c1:d8:f9: 14:b9:3d:6b:6d:0f:3e:64:d2:11:a1:59:02:69:b5: 13:cd:50:21:c6:eb:54:bf:80:33:77:71:48:2a:7d: c1:e1:7d:f4:e4:c4:1d:c7:18:07:29:88:d9:28:21: cd:17:15:d5:96:ca:20:22:64:da:b5:5d:47:c2:15: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C8:DE:87:AB:D5:23:30:54:7F:5E:F2:B0:B5:B5:91:4B:9E:8F:1C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c989c04a-7b52-4ce5-a0dc-f32498c5affd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:62b::/48 Signature Algorithm: sha256WithRSAEncryption 63:83:cb:b1:ef:6c:0c:87:e2:d7:0b:3e:43:7b:aa:7e:08:93: 92:f7:fd:16:ff:05:9c:2e:21:4c:f4:79:b1:7e:f3:92:7f:94: 0a:ba:43:50:90:67:d9:9a:38:96:fe:f2:93:8d:18:f4:12:72: 24:aa:33:d9:b0:66:2d:49:6c:cc:a4:80:28:04:e5:72:73:27: 4f:ca:16:72:d4:4e:f3:c0:3c:06:6d:8d:8f:1a:13:7d:bf:b6: 7c:6b:ae:18:2d:f3:8d:88:f0:e2:6c:22:38:95:bc:ea:9c:7e: 6e:a8:56:17:7f:dc:59:e4:a3:62:ba:7a:fd:e7:c1:3a:21:0b: 39:a8:5d:91:c4:ff:01:25:1a:47:27:83:45:4f:a9:e2:86:09: d3:d9:1f:80:88:fc:fd:53:aa:e9:0f:9b:5b:f1:22:88:f0:9d: 45:73:07:4e:12:f0:fa:53:ba:98:6d:94:d8:4b:7f:f5:52:9a: 26:9e:e0:d5:3c:bf:02:41:43:de:ac:78:3d:8f:03:4d:98:f4: b5:d7:a2:28:be:99:8a:1c:f4:2f:35:9b:2a:92:5f:51:90:30: a7:dc:0c:47:0a:07:00:54:22:35:f4:19:34:69:d6:52:6a:8a: 1f:9b:6e:7a:f4:94:ee:73:ee:86:1b:0e:f2:64:87:97:e5:92: 37:76:17:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUMQrKLJIiJuFaFa2YPVe3nhl/7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTI0MDE5WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNmYzMDE5NDQyZTQzZGM4Mzk1MjFiOWZhMmNiYjBjMDIx NDFmYzhmYTdiNmZiMjRhOTM2YjFmMWU0YzAzZDU3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbgTPEsYVuU30TE005jJSwzYVPdjaLAQv5gqYH2wqtYOu5 AyeAmI1xUSwTliKYm5suZZKAPC8ef/Uj7SD0Egw5W/9MSe3Yjt07r1AHI41YGS2S //pVH7624PE/0KCWzLPhLdxiiJeTQbK/T7jvFcfZB8Q7084+ggKfGW79tNu+e+8V zVxDuW+/EMO53U9qpCIpR5/sgeRb84UnUzBjwULPScjwXQMtXGr6yYG+mhWzZttq IICL495Sc+uSRG+MlcHY+RS5PWttDz5k0hGhWQJptRPNUCHG61S/gDN3cUgqfcHh ffTkxB3HGAcpiNkoIc0XFdWWyiAiZNq1XUfCFRlZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnMjeh6vVIzBUf17ysLW1kUuejxwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2M5ODljMDRhLTdiNTItNGNlNS1hMGRjLWYzMjQ5OGM1YWZmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABiswDQYJKoZIhvcNAQELBQADggEBAGODy7HvbAyH4tcLPkN7qn4I k5L3/Rb/BZwuIUz0ebF+85J/lAq6Q1CQZ9maOJb+8pONGPQSciSqM9mwZi1JbMyk gCgE5XJzJ0/KFnLUTvPAPAZtjY8aE32/tnxrrhgt842I8OJsIjiVvOqcfm6oVhd/ 3Fnko2K6ev3nwTohCzmoXZHE/wElGkcng0VPqeKGCdPZH4CI/P1TqukPm1vxIojw nUVzB04S8PpTuphtlNhLf/VSmiae4NU8vwJBQ96seD2PA02Y9LXXoii+mYoc9C81 myqSX1GQMKfcDEcKBwBUIjX0GTRp1lJqih+bbnr0lO5z7oYbDvJkh5flkjd2FwY= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:43 2025 by rpki-client