$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa File: 0ec55b55-70d8-4c9a-a949-98332400c54c.roa (raw, json) Hash identifier: pqW7oMB5lBmkhjt+Rp/a55a80hOViB0mUZjJgn7Rie8= Subject key identifier: 6F:41:FD:65:38:E9:7B:D0:03:FD:41:E3:71:6A:1D:9B:B7:2F:8D:2E Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 77F749EF2556AB36FBD8265DFA65CB0378650FA4 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa Signing time: Fri 26 Sep 2025 00:50:23 +0000 ROA not before: Fri 26 Sep 2025 00:50:23 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f7:49:ef:25:56:ab:36:fb:d8:26:5d:fa:65:cb:03:78:65:0f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Sep 26 00:50:23 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=90ede68c09542c39893dcc97b92d86fd5710330619fe703968fcf71d69161727, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:43:10:f4:74:06:4a:7f:12:89:96:f5:f9: 14:a6:fb:46:0b:ae:09:cb:70:f6:84:72:83:8a:ac: bf:78:30:16:af:84:48:16:a9:87:5f:7f:37:24:ae: 0b:fd:73:bd:53:14:81:2b:05:fa:42:a7:d1:05:b4: 7f:95:18:66:c6:10:7b:85:b2:af:50:a9:51:51:c3: 10:05:5d:37:af:ae:9b:e2:d5:fd:11:5b:f0:e9:bc: 4e:94:6c:4a:6b:19:39:31:cb:e2:7f:7a:5b:50:d9: 8f:65:aa:0e:8a:39:61:1f:00:2a:7d:17:e9:3a:16: 1d:35:30:d0:11:a4:00:7e:47:bd:44:56:3d:31:0b: 13:97:1a:ad:da:9d:20:6a:60:a7:fd:93:17:91:0e: cd:f6:07:eb:aa:01:3e:51:1d:2b:c2:fc:ae:c8:41: e8:99:25:f4:5b:50:ee:51:dd:4f:cf:30:4d:0d:99: 1e:dc:0b:60:61:fb:24:75:45:d7:56:23:9c:bb:65: 45:97:2a:6c:78:d7:6c:2d:c2:82:ab:b7:80:b1:e5: c1:7f:73:73:8b:61:ce:6d:c9:09:93:fb:be:8e:6b: 45:47:8c:2b:b4:7b:3c:ce:18:30:37:65:dc:39:54: a7:c6:f6:f3:b7:eb:06:76:4f:a7:7a:f4:41:2f:a0: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:41:FD:65:38:E9:7B:D0:03:FD:41:E3:71:6A:1D:9B:B7:2F:8D:2E X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/48 Signature Algorithm: sha256WithRSAEncryption 58:eb:e9:e6:2c:0f:15:36:97:25:5e:45:51:38:f9:35:84:4b: 46:db:12:1c:2f:57:43:88:42:0e:a7:3f:2f:a3:18:24:fa:75: e3:4f:09:74:f2:63:cf:64:c9:4b:9d:73:61:fb:15:0e:45:2f: 29:e9:81:55:f1:11:b3:07:b4:0a:9f:ed:e7:78:0e:30:9b:37: 8b:0f:e6:f0:b9:10:fb:0f:44:a9:62:4d:2e:ba:68:31:8d:06: fb:a4:06:52:22:cc:30:92:e6:3c:8f:41:01:bd:79:c1:57:af: e1:84:9f:90:ea:a8:19:0e:77:e7:eb:63:fd:96:b1:79:4f:96: 34:63:45:c2:23:9b:00:83:14:e2:69:99:cb:55:a8:db:3a:89: 1f:4f:3e:a3:73:bb:b1:68:a3:1e:bd:c1:93:0f:a6:13:42:4e: 0d:ff:6f:e3:ad:61:74:1d:e9:19:49:82:88:97:05:d3:f4:6c: 0e:03:d1:08:07:17:a0:4a:ee:d4:61:49:b4:51:f9:9f:e4:ba: 28:1d:bb:87:3e:a4:78:45:67:c7:33:a2:15:8e:0d:58:4e:e6: 26:1a:84:d4:38:26:ec:00:f1:8d:a0:5a:59:d4:07:a1:86:2e: 03:8b:e9:c8:ac:ea:a5:1d:ec:2b:4d:78:1d:07:e0:fb:48:9f: 50:8f:f3:dd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd/dJ7yVWqzb72CZd+mXLA3hlD6QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwOTI2MDA1MDIzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MGVkZTY4YzA5NTQyYzM5ODkzZGNjOTdiOTJkODZmZDU3 MTAzMzA2MTlmZTcwMzk2OGZjZjcxZDY5MTYxNzI3MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP4EMQ9HQGSn8SiZb1+RSm+0YLrgnLcPaEcoOKrL94MBav hEgWqYdffzckrgv9c71TFIErBfpCp9EFtH+VGGbGEHuFsq9QqVFRwxAFXTevrpvi 1f0RW/DpvE6UbEprGTkxy+J/eltQ2Y9lqg6KOWEfACp9F+k6Fh01MNARpAB+R71E Vj0xCxOXGq3anSBqYKf9kxeRDs32B+uqAT5RHSvC/K7IQeiZJfRbUO5R3U/PME0N mR7cC2Bh+yR1RddWI5y7ZUWXKmx412wtwoKrt4Cx5cF/c3OLYc5tyQmT+76Oa0VH jCu0ezzOGDA3Zdw5VKfG9vO36wZ2T6d69EEvoCL1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUb0H9ZTjpe9AD/UHjcWodm7cvjS4wHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzBlYzU1YjU1LTcwZDgtNGM5YS1hOTQ5LTk4MzMyNDAwYzU0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAFjr6eYsDxU2lyVeRVE4+TWE S0bbEhwvV0OIQg6nPy+jGCT6deNPCXTyY89kyUudc2H7FQ5FLynpgVXxEbMHtAqf 7ed4DjCbN4sP5vC5EPsPRKliTS66aDGNBvukBlIizDCS5jyPQQG9ecFXr+GEn5Dq qBkOd+frY/2WsXlPljRjRcIjmwCDFOJpmctVqNs6iR9PPqNzu7Foox69wZMPphNC Tg3/b+OtYXQd6RlJgoiXBdP0bA4D0QgHF6BK7tRhSbRR+Z/kuigdu4c+pHhFZ8cz ohWODVhO5iYahNQ4JuwA8Y2gWlnUB6GGLgOL6cis6qUd7CtNeB0H4PtIn1CP890= -----END CERTIFICATE-----Generated at Mon Oct 20 18:01:06 2025 by rpki-client