$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e52fa04b-f965-4052-87cb-6e539ccd0345.roa File: e52fa04b-f965-4052-87cb-6e539ccd0345.roa (raw, json) Hash identifier: Ryf1vNc2vxDiQrDBIIxHmEKIWkrKSaGeEERbNq7dwtk= Subject key identifier: 4B:46:DB:FA:D9:D0:AF:B6:06:39:87:47:53:8B:4E:61:82:C1:6F:F6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 35F241EEE9967D10038312C04BE55DBF819E1732 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e52fa04b-f965-4052-87cb-6e539ccd0345.roa Signing time: Mon 06 Oct 2025 17:20:23 +0000 ROA not before: Mon 06 Oct 2025 17:20:23 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f2:41:ee:e9:96:7d:10:03:83:12:c0:4b:e5:5d:bf:81:9e:17:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:20:23 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=f8060f1ac5d210473dd46bb5ef81e8b1f3d5373fb8f9f78d7d68528bcdf644e5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e9:95:ce:46:bc:82:fe:61:82:f0:79:5d:b8: 8e:5d:5d:55:68:0e:a9:b4:51:31:8e:c9:67:21:54: 73:a7:00:8b:d6:07:93:d8:60:89:55:14:ec:4f:1b: be:3c:0c:b9:36:72:e9:9c:ab:fe:b4:9a:37:a1:62: f1:f2:ba:0e:35:b1:a0:b5:f9:6b:b7:94:62:3e:ec: e3:20:54:df:b2:dd:75:e5:6d:67:1d:80:91:26:08: eb:38:08:9d:01:de:d2:b1:04:29:29:d6:f1:ba:f8: 81:c1:dd:37:5b:85:09:a9:41:a4:e3:fd:2f:e7:f1: d1:b9:14:b1:49:ea:eb:0c:0e:4b:df:06:e9:1c:9f: 69:e3:11:65:6f:dd:47:c3:42:ba:b8:45:6f:16:a8: 97:8a:0e:ee:b7:6a:dc:26:82:65:1e:14:7c:80:75: 26:c4:13:ea:b5:b6:46:cb:5e:c9:36:0a:fd:04:60: cf:97:88:b8:31:9a:a3:f8:42:de:d3:41:10:8d:18: 98:0a:f5:d5:5b:54:f3:7c:7c:a0:f8:fa:3f:aa:1b: 9d:d4:1f:87:6f:11:ed:e2:f1:54:2c:ce:c1:b8:77: 0c:93:a1:06:7c:50:02:72:c5:39:ae:fc:dc:c3:eb: b5:7d:14:f1:2c:af:ec:2f:0a:37:a2:cf:2d:43:6a: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:46:DB:FA:D9:D0:AF:B6:06:39:87:47:53:8B:4E:61:82:C1:6F:F6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e52fa04b-f965-4052-87cb-6e539ccd0345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1b::/48 Signature Algorithm: sha256WithRSAEncryption 71:68:4b:93:5f:81:57:48:b2:b8:b8:3a:ba:dd:6f:72:be:c1: 60:26:3e:22:fb:ce:34:10:63:46:66:24:30:67:04:da:c0:fa: e4:19:a1:3b:f9:46:46:8d:4a:79:4c:a0:fa:a7:b7:eb:87:da: 84:64:74:cc:3c:aa:15:ea:5a:bc:64:12:3f:ff:a3:52:7a:21: 05:b3:7f:91:f9:4e:fd:78:3c:f9:c9:25:82:52:08:b8:7c:6f: 68:2c:6f:77:cd:de:25:23:14:9b:de:cc:10:85:c3:97:ef:7f: 97:7c:6e:c2:2c:29:55:4d:8d:8e:18:e6:2e:dc:34:38:41:64: 4a:8e:19:a2:58:5c:2e:68:5d:23:d4:18:9f:82:e5:e9:6b:b6: f0:d7:9d:f6:2a:8e:df:71:40:d4:cd:df:d3:7d:58:d4:d5:56: c6:2a:8c:a9:b7:4b:45:db:78:e0:fa:fb:24:ac:a6:5c:97:d2: bd:4e:1d:e8:e8:78:46:e8:b3:37:b2:14:b8:be:16:a7:73:82: c5:82:34:ac:81:f4:c5:49:06:88:1e:98:4e:85:4b:90:d5:2b: 74:e8:ce:6a:12:00:85:87:17:48:fb:f1:72:54:5d:46:13:24: b5:c3:7e:d6:4a:1a:55:ea:a8:83:f7:0c:3c:49:d4:45:1e:72: 44:ae:dc:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNfJB7umWfRADgxLAS+Vdv4GeFzIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcyMDIzWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmODA2MGYxYWM1ZDIxMDQ3M2RkNDZiYjVlZjgxZThiMWYz ZDUzNzNmYjhmOWY3OGQ3ZDY4NTI4YmNkZjY0NGU1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQ6ZXORryC/mGC8HlduI5dXVVoDqm0UTGOyWchVHOnAIvW B5PYYIlVFOxPG748DLk2cumcq/60mjehYvHyug41saC1+Wu3lGI+7OMgVN+y3XXl bWcdgJEmCOs4CJ0B3tKxBCkp1vG6+IHB3TdbhQmpQaTj/S/n8dG5FLFJ6usMDkvf Bukcn2njEWVv3UfDQrq4RW8WqJeKDu63atwmgmUeFHyAdSbEE+q1tkbLXsk2Cv0E YM+XiLgxmqP4Qt7TQRCNGJgK9dVbVPN8fKD4+j+qG53UH4dvEe3i8VQszsG4dwyT oQZ8UAJyxTmu/NzD67V9FPEsr+wvCjeizy1DajmXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUS0bb+tnQr7YGOYdHU4tOYYLBb/YwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2U1MmZhMDRiLWY5NjUtNDA1Mi04N2NiLTZlNTM5Y2NkMDM0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBswDQYJKoZIhvcNAQELBQADggEBAHFoS5NfgVdIsri4Orrdb3K+ wWAmPiL7zjQQY0ZmJDBnBNrA+uQZoTv5RkaNSnlMoPqnt+uH2oRkdMw8qhXqWrxk Ej//o1J6IQWzf5H5Tv14PPnJJYJSCLh8b2gsb3fN3iUjFJvezBCFw5fvf5d8bsIs KVVNjY4Y5i7cNDhBZEqOGaJYXC5oXSPUGJ+C5elrtvDXnfYqjt9xQNTN39N9WNTV VsYqjKm3S0XbeOD6+ySsplyX0r1OHejoeEboszeyFLi+FqdzgsWCNKyB9MVJBoge mE6FS5DVK3TozmoSAIWHF0j78XJUXUYTJLXDftZKGlXqqIP3DDxJ1EUeckSu3BM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:34 2025 by rpki-client