$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e03a2ba-8092-4fc6-b569-a017ca83a323.roa File: 0e03a2ba-8092-4fc6-b569-a017ca83a323.roa (raw, json) Hash identifier: V/MJa899MRWpRzlOyINVVgC3Q1Q0gVp0saJxT/V7T4Y= Subject key identifier: A0:1A:0C:7F:AD:C5:9B:DC:BC:5F:B8:BA:41:24:EB:AF:D6:71:4F:9C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 01CBB2626E9EC0EA67419D7F2679D744639B219D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e03a2ba-8092-4fc6-b569-a017ca83a323.roa Signing time: Mon 06 Oct 2025 17:12:42 +0000 ROA not before: Mon 06 Oct 2025 17:12:42 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cb:b2:62:6e:9e:c0:ea:67:41:9d:7f:26:79:d7:44:63:9b:21:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:12:42 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=6dbd62007cebb5dd3e6f3ea0836d65291ec0e969fa867ef0bdc482f6647efcc4, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:be:62:f7:e3:54:67:ae:83:3d:50:b6:43:89: c5:95:99:1d:d0:54:cf:8e:79:d0:9a:14:24:ab:da: aa:7c:f4:c9:a2:d4:ca:69:fd:86:cd:b2:d5:c2:36: 7d:1a:be:c4:14:20:64:d0:76:f6:c8:97:19:f8:c6: 7a:bd:1f:1e:2c:46:4e:6f:8a:f7:07:c4:4c:06:3a: 8f:d9:c5:e0:ef:d4:82:cc:12:ba:a5:ae:83:3c:d1: 29:99:e4:68:32:24:6e:7f:71:63:0a:d6:ad:1f:fe: 98:c5:1a:d3:f5:e4:de:95:59:6f:df:0c:a8:c9:ca: 73:eb:0f:cf:de:ef:0e:cf:dc:2d:d2:5a:65:6a:a3: c0:0a:4f:d0:c6:e4:9e:d6:c1:58:de:90:6f:76:0b: ad:f1:52:fa:49:96:b1:a8:b0:bc:c6:93:ca:62:2a: a2:7f:38:99:ca:eb:2d:da:ed:53:5b:da:8f:26:2c: 23:d1:19:64:37:2f:3d:dc:46:61:92:ea:47:d5:48: 00:08:71:9d:de:35:15:03:4d:33:be:52:85:aa:c0: 14:5b:fc:74:da:63:60:15:06:47:3e:9d:1f:ea:1f: 32:3a:af:a9:61:7b:49:23:a2:91:5d:19:07:ea:26: 9a:6d:78:95:48:ef:f4:5d:9b:af:0e:03:84:df:8d: 64:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1A:0C:7F:AD:C5:9B:DC:BC:5F:B8:BA:41:24:EB:AF:D6:71:4F:9C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e03a2ba-8092-4fc6-b569-a017ca83a323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c02::/48 Signature Algorithm: sha256WithRSAEncryption 5b:fd:92:57:19:91:04:e1:43:0e:25:62:17:21:34:ca:e2:c4: 66:af:0e:c7:b1:95:6d:6c:37:11:1e:75:eb:34:1b:04:fa:a9: d9:e7:a4:48:f2:50:4d:5c:c0:37:32:d7:6d:e3:4e:73:8a:a8: ef:6e:73:fa:0d:11:14:6e:b4:7e:87:26:c8:5c:59:bd:95:c9: 9d:4b:e6:d0:95:1a:e6:bc:cf:6c:3c:0d:d1:d4:01:4b:a2:61: e2:5d:90:94:82:17:8c:f8:12:4c:38:3c:84:f8:d5:06:b1:79: 58:22:e2:ce:c5:a9:f3:92:f8:f9:bd:cd:cf:4e:cf:2b:9b:21: f9:1b:b4:a7:8b:4d:e1:44:b5:12:9c:23:10:b0:e1:5b:2e:61: ef:bd:95:4f:ed:ab:ec:f8:29:7c:4b:f8:37:b5:c1:67:10:81: 9d:8d:8b:b9:47:b8:cc:86:23:a1:e4:63:d3:c4:8a:5f:4f:58: 18:74:87:90:4b:ed:9b:f7:ff:ed:2c:18:73:90:48:07:eb:58: 15:80:0f:46:02:3f:09:10:52:6f:9f:28:2a:9a:14:36:44:d0: 57:67:e9:7a:e9:e9:05:2a:3d:f5:f9:b5:f1:41:5d:38:95:f9: ec:4b:45:1c:1a:9a:ed:cc:79:38:e0:04:60:aa:0a:f3:84:27: 43:f8:07:ab -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAcuyYm6ewOpnQZ1/JnnXRGObIZ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMjQyWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGJkNjIwMDdjZWJiNWRkM2U2ZjNlYTA4MzZkNjUyOTFl YzBlOTY5ZmE4NjdlZjBiZGM0ODJmNjY0N2VmY2M0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3vmL341RnroM9ULZDicWVmR3QVM+OedCaFCSr2qp89Mmi 1Mpp/YbNstXCNn0avsQUIGTQdvbIlxn4xnq9Hx4sRk5vivcHxEwGOo/ZxeDv1ILM ErqlroM80SmZ5GgyJG5/cWMK1q0f/pjFGtP15N6VWW/fDKjJynPrD8/e7w7P3C3S WmVqo8AKT9DG5J7WwVjekG92C63xUvpJlrGosLzGk8piKqJ/OJnK6y3a7VNb2o8m LCPRGWQ3Lz3cRmGS6kfVSAAIcZ3eNRUDTTO+UoWqwBRb/HTaY2AVBkc+nR/qHzI6 r6lhe0kjopFdGQfqJppteJVI7/Rdm68OA4TfjWQTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoBoMf63Fm9y8X7i6QSTrr9ZxT5wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzBlMDNhMmJhLTgwOTItNGZjNi1iNTY5LWEwMTdjYTgzYTMyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAIwDQYJKoZIhvcNAQELBQADggEBAFv9klcZkQThQw4lYhchNMri xGavDsexlW1sNxEedes0GwT6qdnnpEjyUE1cwDcy123jTnOKqO9uc/oNERRutH6H JshcWb2VyZ1L5tCVGua8z2w8DdHUAUuiYeJdkJSCF4z4Ekw4PIT41QaxeVgi4s7F qfOS+Pm9zc9OzyubIfkbtKeLTeFEtRKcIxCw4VsuYe+9lU/tq+z4KXxL+De1wWcQ gZ2Ni7lHuMyGI6HkY9PEil9PWBh0h5BL7Zv3/+0sGHOQSAfrWBWAD0YCPwkQUm+f KCqaFDZE0Fdn6Xrp6QUqPfX5tfFBXTiV+exLRRwamu3MeTjgBGCqCvOEJ0P4B6s= -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:36 2025 by rpki-client