$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa File: 3191e88d-746d-41d2-84db-9fc65334e5a8.roa (raw, json) Hash identifier: 9Q7tv1pfl2++DZ33VtLquw0JbBSr8+OSMg/6FcLD/oc= Subject key identifier: 33:33:F0:F6:91:F5:AC:6A:AF:FB:02:C4:B8:66:FB:06:2A:2C:AE:36 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4322F2D2A12A2E38EBE666022A765DB6EC5BD3F7 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa Signing time: Tue 21 Oct 2025 12:20:01 +0000 ROA not before: Tue 21 Oct 2025 12:20:01 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:100::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:22:f2:d2:a1:2a:2e:38:eb:e6:66:02:2a:76:5d:b6:ec:5b:d3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:20:01 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=b7d482de87f22f0ded5e730c40688e74070177ac0ece689a0e90119acc99d380, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:58:a0:37:97:5e:dd:79:9a:d3:cc:a7:ac: ea:09:5b:5d:b0:15:19:e5:01:64:45:b3:52:51:24: 5d:97:3c:a1:18:6e:b5:ec:02:7e:c8:8c:ac:8d:8e: 4f:ad:f4:28:3f:67:e7:1d:da:dd:17:07:da:42:a5: 2e:b6:4c:54:ac:78:ad:3f:63:cb:fc:43:df:d8:6d: a3:fa:e6:68:10:93:57:1c:4a:da:9b:fa:84:30:1a: 61:32:20:c9:f7:25:0e:bb:b0:e9:e0:92:a3:dd:e8: fe:20:38:e5:b1:83:b0:4b:22:2f:db:2c:7a:f3:75: e2:55:68:aa:af:33:9e:ba:0d:45:40:7f:d0:f3:bc: f2:cf:2b:1c:48:83:5d:bd:da:ce:4e:cd:25:73:84: 3d:73:e6:e8:8f:04:ee:0f:a8:8c:d5:94:e3:5c:59: b2:cb:7a:c8:c8:90:c5:c4:99:3b:98:e9:1a:4a:ed: 42:f3:96:31:4f:62:22:ad:f6:60:49:07:bf:57:fc: 10:de:c5:f3:30:00:a1:e0:17:5f:f6:22:57:8e:0c: 02:97:74:27:b2:3b:bd:de:9d:fa:d4:55:c2:e8:14: 70:77:11:26:a1:91:c5:51:a8:c0:4a:53:2a:84:99: fa:90:db:d9:fd:b9:ed:8d:aa:93:72:0e:a0:7e:a8: 75:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:33:F0:F6:91:F5:AC:6A:AF:FB:02:C4:B8:66:FB:06:2A:2C:AE:36 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:100::/42 Signature Algorithm: sha256WithRSAEncryption 55:01:a8:e6:29:a8:f2:4a:f5:ce:76:5b:40:40:f6:0f:43:ab: d0:62:48:a3:e6:df:a1:22:74:31:25:bd:0f:7f:84:26:d0:cd: 28:1e:f3:6e:43:70:1c:79:33:0a:4a:5b:a7:f3:e5:ed:fe:92: db:3c:80:cd:55:54:35:ce:96:2b:63:66:8f:18:df:b8:95:2f: cc:41:35:1f:d6:86:58:54:3c:53:e1:e4:68:b7:a1:ac:ed:34: e9:08:ff:fb:b2:57:14:6b:2e:63:bf:ba:26:67:39:03:b4:53: f0:55:6d:7e:a4:0b:ba:9f:3f:57:bc:60:ab:01:7c:b5:cd:ec: bf:04:6f:b3:25:8c:bf:8c:f4:93:75:b8:16:9a:22:e0:24:50: 28:b9:46:6b:35:ea:a4:d7:c1:11:02:80:a6:63:f4:39:a0:87: f2:0e:d3:15:de:02:5e:f9:48:f6:7c:01:f7:81:ad:c9:90:94: 16:fe:b3:7b:86:09:53:a4:a5:9e:42:28:74:7f:52:0b:f3:b1: f4:6d:2e:dc:27:bd:43:47:ee:48:bf:95:8e:30:c6:10:ad:28: 82:71:f9:bd:2b:e8:58:b5:1f:37:50:9f:65:c1:89:02:67:6c: 74:74:1e:81:d4:de:9a:51:63:c9:aa:34:be:24:8c:47:e8:28: 6f:38:fb:ed -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQyLy0qEqLjjr5mYCKnZdtuxb0/cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIyMDAxWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2Q0ODJkZTg3ZjIyZjBkZWQ1ZTczMGM0MDY4OGU3NDA3 MDE3N2FjMGVjZTY4OWEwZTkwMTE5YWNjOTlkMzgwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWwVigN5de3Xma08ynrOoJW12wFRnlAWRFs1JRJF2XPKEY brXsAn7IjKyNjk+t9Cg/Z+cd2t0XB9pCpS62TFSseK0/Y8v8Q9/YbaP65mgQk1cc Stqb+oQwGmEyIMn3JQ67sOngkqPd6P4gOOWxg7BLIi/bLHrzdeJVaKqvM566DUVA f9DzvPLPKxxIg1292s5OzSVzhD1z5uiPBO4PqIzVlONcWbLLesjIkMXEmTuY6RpK 7ULzljFPYiKt9mBJB79X/BDexfMwAKHgF1/2IleODAKXdCeyO73enfrUVcLoFHB3 ESahkcVRqMBKUyqEmfqQ29n9ue2NqpNyDqB+qHXBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMzPw9pH1rGqv+wLEuGb7BiosrjYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzMxOTFlODhkLTc0NmQtNDFkMi04NGRiLTlmYzY1MzM0ZTVhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmBZzAAQAwDQYJKoZIhvcNAQELBQADggEBAFUBqOYpqPJK9c52W0BA9g9D q9BiSKPm36EidDElvQ9/hCbQzSge825DcBx5MwpKW6fz5e3+kts8gM1VVDXOlitj Zo8Y37iVL8xBNR/WhlhUPFPh5Gi3oaztNOkI//uyVxRrLmO/uiZnOQO0U/BVbX6k C7qfP1e8YKsBfLXN7L8Eb7MljL+M9JN1uBaaIuAkUCi5Rms16qTXwRECgKZj9Dmg h/IO0xXeAl75SPZ8AfeBrcmQlBb+s3uGCVOkpZ5CKHR/UgvzsfRtLtwnvUNH7ki/ lY4wxhCtKIJx+b0r6Fi1HzdQn2XBiQJnbHR0HoHU3ppRY8mqNL4kjEfoKG84++0= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:39 2025 by rpki-client