$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6fc3cbe3-6357-4d28-877e-72c4dd85c50e.roa File: 6fc3cbe3-6357-4d28-877e-72c4dd85c50e.roa (raw, json) Hash identifier: 8t7BSB6zFehXbjuKUS6+Qqzu5FtTHjlIvyTgRNVBzok= Subject key identifier: CB:56:AC:EC:60:76:AC:54:AA:FB:65:76:88:3F:23:9D:83:71:87:CF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 438EBE7C43A4516A081FD42FA0A88B3A1222F716 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6fc3cbe3-6357-4d28-877e-72c4dd85c50e.roa Signing time: Mon 29 Sep 2025 15:23:37 +0000 ROA not before: Mon 29 Sep 2025 15:23:37 +0000 ROA not after: Mon 03 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:3b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8e:be:7c:43:a4:51:6a:08:1f:d4:2f:a0:a8:8b:3a:12:22:f7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 29 15:23:37 2025 GMT Not After : Nov 3 23:59:59 2025 GMT Subject: serialNumber=d93467fe14b8cf6e6229075da301bf1ddc32b277f60098f59b5a2805f40206a8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2e:32:93:5c:7b:61:2a:b4:3a:d2:b2:ad:d3: ad:2e:e2:58:4d:ad:e8:b1:b8:fa:7b:eb:41:fa:71: 08:86:cb:85:fe:25:76:4b:83:a5:20:ab:b0:db:b8: 09:5d:90:fe:dc:dd:21:57:68:85:50:7c:6f:a3:84: 68:d5:6b:5c:7b:fc:85:1a:53:bf:e3:74:e1:c1:ab: 4a:58:67:62:18:3a:64:02:c2:99:68:61:67:28:87: fe:f9:69:51:ce:5f:bd:76:67:64:1e:50:ce:b8:76: 1e:10:9b:5b:f9:55:1d:9f:f8:cb:57:41:e4:c0:f8: 14:20:ff:56:3a:a1:1b:72:a2:b0:41:82:ae:2f:87: db:5e:2f:2a:8f:59:66:21:84:85:4e:7b:d5:e7:f2: 7e:54:de:40:d9:a7:9b:37:49:bf:75:a8:44:1b:74: 21:ce:f0:16:e0:de:10:7f:08:bf:c8:64:ed:c0:e5: dc:2d:ce:1b:e0:00:f0:86:38:99:6e:ce:72:d4:d9: 66:74:c3:19:17:e2:9d:19:db:4c:00:26:e4:36:c2: 30:aa:49:4d:ce:1d:ad:1d:10:1c:a9:99:00:d4:b8: 9d:10:5d:7a:f5:3b:d7:5d:f2:b9:76:15:b5:28:e7: f7:9f:14:91:37:29:59:06:d8:82:62:88:87:49:72: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:56:AC:EC:60:76:AC:54:AA:FB:65:76:88:3F:23:9D:83:71:87:CF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6fc3cbe3-6357-4d28-877e-72c4dd85c50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3b3::/48 Signature Algorithm: sha256WithRSAEncryption 06:93:a4:ce:50:f7:a9:fa:b2:90:1e:a4:70:fa:af:f7:9e:61: 38:dc:c7:38:27:7c:e2:47:3b:23:53:57:7c:46:b6:31:97:d8: 2e:19:bd:8d:25:81:8a:25:cb:c8:36:a1:d8:49:66:f2:4f:75: f2:4a:d2:3a:b9:c1:71:55:76:bb:1b:ce:8d:ea:7f:94:9e:e4: a0:f1:e9:48:4b:10:4f:72:46:ce:f6:51:03:a2:01:ae:52:6c: 47:9a:30:7e:8b:7e:2d:db:d2:a7:25:46:dd:37:d4:34:4c:f6: 8d:f1:26:6c:59:b0:b4:89:6e:af:bc:78:f7:31:9e:56:b9:6d: 2d:73:48:7b:41:b6:97:7f:e7:d0:23:c8:bf:eb:bc:5a:68:b9: 8a:6d:1b:66:cd:bf:84:94:90:25:fc:82:42:45:fc:60:fe:c7: 87:7c:1d:ac:e7:38:38:6a:f6:5f:c3:10:39:d3:66:2f:c6:f0: 66:3e:fe:ab:bb:5c:fc:55:29:f1:b3:75:b2:17:84:6a:34:01: 86:86:4a:fe:2d:d3:5d:8b:4f:51:d4:2b:ff:b8:bd:88:36:ea: 99:28:99:de:1e:34:1f:9f:d4:03:9c:2a:e9:5e:d6:b2:a9:84: 2d:63:d6:24:5c:ac:cc:36:8b:af:8e:07:8c:70:2d:a4:fa:d5: 0c:e5:75:6f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ46+fEOkUWoIH9QvoKiLOhIi9xYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI5MTUyMzM3WhcNMjUxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTM0NjdmZTE0YjhjZjZlNjIyOTA3NWRhMzAxYmYxZGRj MzJiMjc3ZjYwMDk4ZjU5YjVhMjgwNWY0MDIwNmE4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeLjKTXHthKrQ60rKt060u4lhNreixuPp760H6cQiGy4X+ JXZLg6Ugq7DbuAldkP7c3SFXaIVQfG+jhGjVa1x7/IUaU7/jdOHBq0pYZ2IYOmQC wploYWcoh/75aVHOX712Z2QeUM64dh4Qm1v5VR2f+MtXQeTA+BQg/1Y6oRtyorBB gq4vh9teLyqPWWYhhIVOe9Xn8n5U3kDZp5s3Sb91qEQbdCHO8Bbg3hB/CL/IZO3A 5dwtzhvgAPCGOJluznLU2WZ0wxkX4p0Z20wAJuQ2wjCqSU3OHa0dEBypmQDUuJ0Q XXr1O9dd8rl2FbUo5/efFJE3KVkG2IJiiIdJcpQlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUy1as7GB2rFSq+2V2iD8jnYNxh88wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzZmYzNjYmUzLTYzNTctNGQyOC04NzdlLTcyYzRkZDg1YzUwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA7MwDQYJKoZIhvcNAQELBQADggEBAAaTpM5Q96n6spAepHD6r/ee YTjcxzgnfOJHOyNTV3xGtjGX2C4ZvY0lgYoly8g2odhJZvJPdfJK0jq5wXFVdrsb zo3qf5Se5KDx6UhLEE9yRs72UQOiAa5SbEeaMH6Lfi3b0qclRt031DRM9o3xJmxZ sLSJbq+8ePcxnla5bS1zSHtBtpd/59AjyL/rvFpouYptG2bNv4SUkCX8gkJF/GD+ x4d8HaznODhq9l/DEDnTZi/G8GY+/qu7XPxVKfGzdbIXhGo0AYaGSv4t012LT1HU K/+4vYg26pkomd4eNB+f1AOcKule1rKphC1j1iRcrMw2i6+OB4xwLaT61QzldW8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:53 2025 by rpki-client