$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dc95307b-87b9-475f-8acf-824b845b46f4.roa File: dc95307b-87b9-475f-8acf-824b845b46f4.roa (raw, json) Hash identifier: xqWylVxGuCHfLi6cZy/AvAIrm0Lnpec2hFXimBGuWe8= Subject key identifier: AC:B5:CB:40:6C:2A:FC:FF:51:7E:59:21:2E:16:DB:B9:FD:E8:53:BA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 45AE0437473BE8A8AF8522CFBA7979FD588C4D38 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dc95307b-87b9-475f-8acf-824b845b46f4.roa Signing time: Tue 21 Oct 2025 12:30:23 +0000 ROA not before: Tue 21 Oct 2025 12:30:23 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:610::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ae:04:37:47:3b:e8:a8:af:85:22:cf:ba:79:79:fd:58:8c:4d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:30:23 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=43f221e499af0f5413241f009a9eba54d4d71d7d85a60466dc2766043f1ce8d8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7f:6b:0b:04:70:b0:0b:84:00:c7:04:0c:a2: a1:f4:64:cb:7b:76:31:28:eb:f8:2d:45:16:12:2c: f0:9a:4a:5d:21:47:57:5b:12:9a:a9:0e:da:b7:f7: 49:da:2f:71:0a:e9:fa:c2:f5:e3:11:d9:99:d5:08: 21:9d:9d:4c:4d:11:e5:81:ef:bb:e5:d6:f9:6f:bb: 82:fb:65:c5:aa:28:8c:64:98:1d:6d:b5:5b:cc:5f: ad:fd:ba:cb:68:74:7f:e4:15:82:10:82:9f:2c:44: 5f:53:16:7e:8a:ad:b2:f3:6c:f1:5a:bd:b8:43:02: de:b4:c2:52:0e:80:78:6f:4f:fd:ea:05:00:65:1a: 77:6b:a4:93:87:e6:ff:33:2c:26:fb:63:75:6f:f0: 82:21:16:af:d3:0a:39:3c:20:3f:89:15:36:bf:52: 73:7e:44:ed:12:2b:10:e7:72:3d:ba:bd:14:70:05: 7c:0a:4e:56:9e:64:fc:bc:ca:76:bb:85:b5:d1:ad: 84:ef:28:dd:ef:4c:4b:40:3e:ed:cd:4f:9e:6f:bc: 2c:85:d1:04:61:5b:e1:60:01:fa:37:1c:e4:aa:67: 2e:4d:62:b6:0d:47:2e:6b:13:3b:43:13:a2:f8:f5: 09:20:24:c1:79:85:26:f9:0a:32:94:c2:35:94:a4: d5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B5:CB:40:6C:2A:FC:FF:51:7E:59:21:2E:16:DB:B9:FD:E8:53:BA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dc95307b-87b9-475f-8acf-824b845b46f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:610::/48 Signature Algorithm: sha256WithRSAEncryption 59:95:8e:3d:ff:35:ba:46:57:88:5e:87:cb:c1:db:00:7e:7e: 06:07:ac:19:32:76:b8:2a:94:84:8b:de:e7:42:00:c5:09:7d: 68:64:f1:d0:49:a9:9e:4e:6f:46:91:2e:27:b7:ce:7e:2b:ac: e4:b8:7f:86:0a:f5:2f:f7:3b:b6:c3:0c:65:11:fb:e3:ae:98: 32:a6:0b:c4:ac:d4:7b:0b:fe:bd:7e:2e:76:d0:e8:e7:d3:1f: e4:35:66:3b:a9:78:a3:73:de:8f:be:00:eb:5c:0e:45:b0:d4: ed:3b:dd:73:d1:21:00:e6:2f:ad:bd:06:fe:c9:f7:b1:80:b3: 6f:7e:db:c3:db:f5:63:c3:1c:d4:f8:07:78:a1:f5:a9:b9:a4: ef:c5:30:ec:50:df:c4:51:ee:6f:c1:9e:07:21:cc:3e:7d:cf: 9d:fb:28:75:05:f3:06:cc:b6:86:7a:ab:89:65:a6:57:be:5c: b0:80:d9:d8:98:4e:f6:b2:8b:ab:07:0f:4b:23:38:67:71:2a: 0f:c8:4d:a0:23:3a:ae:93:1b:db:7d:a1:aa:01:8a:de:c8:cb: 15:34:d8:a4:ed:b7:87:64:4e:ee:c1:78:d3:81:fe:5f:72:7b: 34:0f:25:c6:12:00:c3:0e:0e:e2:dd:03:5f:84:a9:8b:f8:05: 44:a2:ca:b8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURa4EN0c76KivhSLPunl5/ViMTTgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIzMDIzWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0M2YyMjFlNDk5YWYwZjU0MTMyNDFmMDA5YTllYmE1NGQ0 ZDcxZDdkODVhNjA0NjZkYzI3NjYwNDNmMWNlOGQ4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwf2sLBHCwC4QAxwQMoqH0ZMt7djEo6/gtRRYSLPCaSl0h R1dbEpqpDtq390naL3EK6frC9eMR2ZnVCCGdnUxNEeWB77vl1vlvu4L7ZcWqKIxk mB1ttVvMX639ustodH/kFYIQgp8sRF9TFn6KrbLzbPFavbhDAt60wlIOgHhvT/3q BQBlGndrpJOH5v8zLCb7Y3Vv8IIhFq/TCjk8ID+JFTa/UnN+RO0SKxDncj26vRRw BXwKTlaeZPy8yna7hbXRrYTvKN3vTEtAPu3NT55vvCyF0QRhW+FgAfo3HOSqZy5N YrYNRy5rEztDE6L49QkgJMF5hSb5CjKUwjWUpNXvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrLXLQGwq/P9RflkhLhbbuf3oU7owHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2RjOTUzMDdiLTg3YjktNDc1Zi04YWNmLTgyNGI4NDViNDZmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhAwDQYJKoZIhvcNAQELBQADggEBAFmVjj3/NbpGV4heh8vB2wB+ fgYHrBkydrgqlISL3udCAMUJfWhk8dBJqZ5Ob0aRLie3zn4rrOS4f4YK9S/3O7bD DGUR++OumDKmC8Ss1HsL/r1+LnbQ6OfTH+Q1ZjupeKNz3o++AOtcDkWw1O073XPR IQDmL629Bv7J97GAs29+28Pb9WPDHNT4B3ih9am5pO/FMOxQ38RR7m/BngchzD59 z537KHUF8wbMtoZ6q4llple+XLCA2diYTvayi6sHD0sjOGdxKg/ITaAjOq6TG9t9 oaoBit7IyxU02KTtt4dkTu7BeNOB/l9yezQPJcYSAMMODuLdA1+EqYv4BUSiyrg= -----END CERTIFICATE-----Generated at Tue Nov 4 14:09:21 2025 by rpki-client