$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa File: e7607360-6fe5-44db-bbe5-edd1b127da54.roa (raw, json) Hash identifier: sLlbl98YvPm3SQ3zBTBttErdZB8lqFA+1bFe3m9gsjE= Subject key identifier: FF:01:AD:A3:9E:DE:EE:16:A0:8B:C6:D2:24:25:F7:26:0D:D7:E6:F8 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 56C0402E43AEC18365293F55802E334572A468D9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa Signing time: Tue 21 Oct 2025 12:20:17 +0000 ROA not before: Tue 21 Oct 2025 12:20:17 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:f03d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c0:40:2e:43:ae:c1:83:65:29:3f:55:80:2e:33:45:72:a4:68:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:20:17 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=9095222cc71d18080adfc60d943045575b64cb487932845096d7640a0110d9b5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e6:88:82:64:d3:8d:5b:be:ae:7e:ac:a1:77: f1:19:cc:c3:44:42:be:ae:df:53:3d:75:3a:3a:f6: 0e:5f:ab:8c:38:54:ba:de:dd:e9:a9:8d:b6:10:ee: 69:82:07:35:7a:cb:2a:b0:af:9a:6c:2c:cb:d0:b9: 24:3b:d7:cd:be:6e:67:98:fa:8f:fa:18:64:de:35: 92:ca:79:2d:8f:06:1e:57:2f:fc:25:71:8b:83:61: 60:72:ef:a6:a3:bf:e4:3a:11:1e:a1:1e:c7:d9:01: f3:54:55:f7:7f:e1:9b:c3:8c:f3:83:d2:6f:71:04: 69:b8:29:01:e9:71:34:11:34:be:e3:4f:e3:b0:3d: 2e:96:5c:c1:41:3a:d2:76:ad:d2:69:fc:44:4a:65: ab:21:e9:81:99:d8:cb:1e:95:5c:3b:cc:08:38:29: a6:c4:81:b8:46:49:3e:09:a5:68:64:53:d2:d2:5e: c3:1d:f2:30:5a:1c:75:22:c6:fd:06:03:cc:5c:f4: 69:ef:48:99:c8:60:24:50:72:bd:28:be:f5:05:f6: 42:d8:41:dd:17:9d:99:f4:31:f1:f6:bd:62:9c:59: 50:73:ab:25:32:f8:aa:79:96:02:b0:54:10:a6:72: 08:ae:50:b1:cd:c5:83:7c:71:b2:31:68:85:3f:4a: 53:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:01:AD:A3:9E:DE:EE:16:A0:8B:C6:D2:24:25:F7:26:0D:D7:E6:F8 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03d::/48 Signature Algorithm: sha256WithRSAEncryption 95:42:0b:58:1a:11:81:2f:eb:f6:ea:a3:8e:3f:55:b3:91:89: 22:eb:56:34:0a:a6:96:f7:68:58:7d:f0:7e:41:4b:a0:50:49: 02:e5:4b:e9:24:d3:56:58:ef:f0:19:f3:39:10:27:4d:5e:18: 10:a8:bf:dc:0a:09:7c:ef:17:fb:40:e9:ab:5e:9d:cb:92:70: b1:3a:be:2b:67:24:92:52:cf:d8:2f:4c:ee:ed:09:e9:bd:f4: c4:38:47:8f:da:fb:75:fc:66:2d:5e:15:46:3f:cb:80:06:b2: f8:49:db:3b:71:aa:c2:98:10:81:8b:51:79:20:87:c4:8c:7c: ca:8e:10:34:24:78:a4:bd:c8:9c:6a:63:03:c6:c8:e9:bf:e1: 08:55:18:b6:81:52:a9:0e:01:28:1f:aa:40:59:e8:78:7d:92: a7:ca:2a:c5:b8:5c:85:49:70:97:d6:2f:05:b2:4a:55:94:44: 87:69:1b:be:63:5b:d1:c8:70:e1:f2:7f:70:11:48:42:9a:a7: c5:b2:bd:e1:ec:25:a9:66:b2:c7:b3:50:7f:bf:2d:43:13:83: eb:97:2e:00:f0:65:8b:80:02:b7:7e:38:cf:df:22:26:aa:ca: e0:68:f8:e5:72:8b:5e:63:f1:08:5d:1a:b9:93:fa:d4:d8:e8: 1d:2d:41:de -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVsBALkOuwYNlKT9VgC4zRXKkaNkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIyMDE3WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDk1MjIyY2M3MWQxODA4MGFkZmM2MGQ5NDMwNDU1NzVi NjRjYjQ4NzkzMjg0NTA5NmQ3NjQwYTAxMTBkOWI1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd5oiCZNONW76ufqyhd/EZzMNEQr6u31M9dTo69g5fq4w4 VLre3empjbYQ7mmCBzV6yyqwr5psLMvQuSQ7182+bmeY+o/6GGTeNZLKeS2PBh5X L/wlcYuDYWBy76ajv+Q6ER6hHsfZAfNUVfd/4ZvDjPOD0m9xBGm4KQHpcTQRNL7j T+OwPS6WXMFBOtJ2rdJp/ERKZash6YGZ2MselVw7zAg4KabEgbhGST4JpWhkU9LS XsMd8jBaHHUixv0GA8xc9GnvSJnIYCRQcr0ovvUF9kLYQd0XnZn0MfH2vWKcWVBz qyUy+Kp5lgKwVBCmcgiuULHNxYN8cbIxaIU/SlPLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/wGto57e7hagi8bSJCX3Jg3X5vgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2U3NjA3MzYwLTZmZTUtNDRkYi1iYmU1LWVkZDFiMTI3ZGE1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D0wDQYJKoZIhvcNAQELBQADggEBAJVCC1gaEYEv6/bqo44/VbOR iSLrVjQKppb3aFh98H5BS6BQSQLlS+kk01ZY7/AZ8zkQJ01eGBCov9wKCXzvF/tA 6atencuScLE6vitnJJJSz9gvTO7tCem99MQ4R4/a+3X8Zi1eFUY/y4AGsvhJ2ztx qsKYEIGLUXkgh8SMfMqOEDQkeKS9yJxqYwPGyOm/4QhVGLaBUqkOASgfqkBZ6Hh9 kqfKKsW4XIVJcJfWLwWySlWURIdpG75jW9HIcOHyf3ARSEKap8WyveHsJalmssez UH+/LUMTg+uXLgDwZYuAArd+OM/fIiaqyuBo+OVyi15j8QhdGrmT+tTY6B0tQd4= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:42 2025 by rpki-client