$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/03f5a9d6-dd97-47b4-808d-4536aea7c03e.roa File: 03f5a9d6-dd97-47b4-808d-4536aea7c03e.roa (raw, json) Hash identifier: /2MTCgXasl6n4dDoLjEzgSuIMocdBg8LpheuedXTJiA= Subject key identifier: F9:59:26:8F:29:BE:25:99:C4:C7:01:4B:95:66:CD:F5:C0:11:FF:2D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7AAAAC1B752EFBEE1576BA745C5F6A6FDDAE477B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/03f5a9d6-dd97-47b4-808d-4536aea7c03e.roa Signing time: Mon 06 Oct 2025 17:13:49 +0000 ROA not before: Mon 06 Oct 2025 17:13:49 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:aa:ac:1b:75:2e:fb:ee:15:76:ba:74:5c:5f:6a:6f:dd:ae:47:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:13:49 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=de38a3d6b089b62fca1b968c0037c8d80490ba97a291ea9a32028e1dfc60a18c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:46:96:5d:01:d4:7a:f5:63:8b:5f:51:98:40: 11:79:9d:47:1c:2e:ec:f6:9d:53:a4:f6:ab:67:bf: 3d:4b:6a:72:5d:1f:94:45:a5:e8:4d:55:bf:b1:7b: ea:bc:31:a9:84:80:fb:01:c4:71:09:86:40:3f:9e: e5:76:d1:46:49:71:62:b2:cf:63:e2:ad:77:85:9a: 1a:cb:cf:05:a6:46:88:60:91:5f:c6:af:c2:26:f5: fe:1c:cf:9b:3e:35:a4:2b:a8:bf:85:87:b2:e1:08: 37:60:4a:5e:1d:9a:4a:c4:99:62:3d:44:1a:93:08: 0a:76:d5:93:0a:eb:63:19:1e:a2:ee:18:71:9d:cb: f0:e1:52:01:b4:2c:60:6a:6e:db:6d:e6:7f:17:14: 65:38:a3:fb:02:f6:74:d3:2e:ec:bc:03:08:4d:91: 6f:67:f0:d8:c7:58:99:78:9c:de:25:f3:ff:7f:f2: c8:f8:42:e7:59:f9:95:4f:c5:b8:de:95:a9:fb:38: 81:99:ba:1a:45:6b:76:a5:bf:7e:60:12:d7:95:97: 20:0d:e5:ee:b7:61:48:3e:d4:c7:d2:82:a9:24:64: ca:ed:1a:dc:98:c1:26:4d:a1:99:e1:35:ff:68:b8: ec:ef:ef:4f:52:f1:09:0b:e9:3f:43:1d:4f:8f:be: d1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:59:26:8F:29:BE:25:99:C4:C7:01:4B:95:66:CD:F5:C0:11:FF:2D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/03f5a9d6-dd97-47b4-808d-4536aea7c03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0d::/48 Signature Algorithm: sha256WithRSAEncryption 9e:43:a9:5d:93:4c:18:3c:09:71:93:d2:56:d6:97:50:ec:f0: b7:2e:f7:6a:ca:16:34:a1:d1:b7:5b:4d:45:15:81:07:ee:0a: b0:43:b2:23:b7:c5:3e:06:8d:ca:c9:45:38:7e:61:58:c7:1b: 99:4c:9c:f1:4b:3d:91:73:91:e3:8b:51:8e:8b:30:ef:89:d3: 5a:f5:b5:ba:73:e8:15:d6:1c:c2:65:e3:25:0a:30:71:91:fa: d9:24:b1:a1:f6:b5:ed:53:19:ce:cf:a9:73:d3:bc:bd:b1:40: 95:3e:0f:50:a4:d9:f2:8d:7d:6f:64:c1:57:2a:c2:aa:9a:6c: 50:f1:f4:9f:b6:6e:ac:eb:b5:1d:34:32:6a:03:55:66:b9:cb: 5a:04:73:2f:ee:e7:55:24:c0:59:ad:58:79:07:b4:50:e9:5d: d1:9a:1c:58:47:23:d4:fd:cf:6d:7f:74:1f:8d:60:e6:76:a0: cb:80:b4:bc:4a:0d:5e:6b:2c:9c:c3:ec:b7:fe:60:94:10:bf: bf:05:84:16:3b:88:8f:73:85:03:f6:dd:08:61:d6:29:89:7c: c3:f1:25:fc:a3:e4:a6:9c:62:64:88:f4:94:35:99:01:bd:14: 26:45:3d:c4:c3:40:24:77:35:31:9c:1d:8b:19:15:c1:b7:a4: 3d:30:c8:44 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeqqsG3Uu++4Vdrp0XF9qb92uR3swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMzQ5WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTM4YTNkNmIwODliNjJmY2ExYjk2OGMwMDM3YzhkODA0 OTBiYTk3YTI5MWVhOWEzMjAyOGUxZGZjNjBhMThjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTRpZdAdR69WOLX1GYQBF5nUccLuz2nVOk9qtnvz1LanJd H5RFpehNVb+xe+q8MamEgPsBxHEJhkA/nuV20UZJcWKyz2PirXeFmhrLzwWmRohg kV/Gr8Im9f4cz5s+NaQrqL+Fh7LhCDdgSl4dmkrEmWI9RBqTCAp21ZMK62MZHqLu GHGdy/DhUgG0LGBqbttt5n8XFGU4o/sC9nTTLuy8AwhNkW9n8NjHWJl4nN4l8/9/ 8sj4QudZ+ZVPxbjelan7OIGZuhpFa3alv35gEteVlyAN5e63YUg+1MfSgqkkZMrt GtyYwSZNoZnhNf9ouOzv709S8QkL6T9DHU+PvtFJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+Vkmjym+JZnExwFLlWbN9cAR/y0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzAzZjVhOWQ2LWRkOTctNDdiNC04MDhkLTQ1MzZhZWE3YzAzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA0wDQYJKoZIhvcNAQELBQADggEBAJ5DqV2TTBg8CXGT0lbWl1Ds 8Lcu92rKFjSh0bdbTUUVgQfuCrBDsiO3xT4GjcrJRTh+YVjHG5lMnPFLPZFzkeOL UY6LMO+J01r1tbpz6BXWHMJl4yUKMHGR+tkksaH2te1TGc7PqXPTvL2xQJU+D1Ck 2fKNfW9kwVcqwqqabFDx9J+2bqzrtR00MmoDVWa5y1oEcy/u51UkwFmtWHkHtFDp XdGaHFhHI9T9z21/dB+NYOZ2oMuAtLxKDV5rLJzD7Lf+YJQQv78FhBY7iI9zhQP2 3Qhh1imJfMPxJfyj5KacYmSI9JQ1mQG9FCZFPcTDQCR3NTGcHYsZFcG3pD0wyEQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:09 2025 by rpki-client