$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa File: b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa (raw, json) Hash identifier: L9XVT4xeJs1N3Ok8qry8ZMTAJ9klJ00RpeFAxXB2HOY= Subject key identifier: FB:37:06:C1:80:E0:E3:B2:6B:BA:52:D1:EF:E0:64:60:43:16:11:06 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 32EA65E44C36F4C439BE1DBE22996BE9DB8198DB Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa Signing time: Fri 26 Sep 2025 17:51:42 +0000 ROA not before: Fri 26 Sep 2025 17:51:42 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:385::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ea:65:e4:4c:36:f4:c4:39:be:1d:be:22:99:6b:e9:db:81:98:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:51:42 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=69b56d5f3dc91fd87feb2675ff3c3e8dd71ddfacef3aeb2bd521d320dad16d27, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:93:c2:cc:63:3f:d0:ba:c0:6b:f9:ef:00: 45:b7:a4:d2:96:30:a8:0e:00:90:d4:2e:e2:b0:53: 6d:94:2f:92:0c:49:f1:3e:d2:05:6a:c1:6d:f4:a2: 96:32:d7:c6:59:f1:ce:cb:a0:a9:af:6a:e7:89:b8: 59:77:79:e5:73:51:63:d9:1f:4a:eb:2c:e2:a2:5c: 9f:c9:e1:76:19:0a:04:e4:fa:09:ca:21:c5:69:70: d3:db:96:a3:62:05:f4:aa:04:9c:72:4b:6a:d1:2c: 5a:47:4c:74:4d:aa:7f:93:c5:49:92:30:c9:5c:2c: 33:70:11:56:b4:4d:1c:96:93:ef:0e:ff:34:97:5f: 4d:64:b0:b2:6b:0a:22:eb:3f:7f:2f:1b:8c:15:24: 2d:4e:45:d4:0f:d8:a4:1a:9e:a3:14:b5:05:f9:90: 53:e7:55:fe:10:5a:35:ff:d1:12:6c:09:f0:fd:28: 22:ec:67:4f:c8:32:12:e2:5a:56:dc:8a:c1:ca:bf: d9:15:e4:45:e7:54:10:b7:8d:a2:fc:f2:f1:96:d7: 53:1f:6b:54:cd:25:1c:cf:38:6c:a3:19:ba:79:bc: c5:69:b7:2e:eb:bb:79:68:c9:7e:e1:87:b0:c8:0f: 88:a3:ab:45:79:0a:d1:84:d0:c2:82:c4:cd:3a:f9: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:37:06:C1:80:E0:E3:B2:6B:BA:52:D1:EF:E0:64:60:43:16:11:06 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:385::/48 Signature Algorithm: sha256WithRSAEncryption 52:af:5d:d3:a8:c5:f4:7e:9a:0a:7e:3e:59:b6:a5:ee:ae:fc: 13:5f:e9:f4:b1:ce:58:ea:d1:97:c5:b2:f9:57:c0:50:de:b6: fc:2e:d1:15:e4:00:4c:df:b4:18:3c:b1:c6:2a:14:ee:a0:87: 60:bb:70:8a:72:b7:07:f8:b7:18:24:52:6f:29:04:0a:99:ed: a1:ee:7c:91:ed:1c:72:7f:6f:dd:b9:3a:4f:a5:96:0a:0e:68: 22:8f:8e:8c:11:18:87:bd:68:62:e2:de:1b:c8:f9:a3:a0:ac: a4:80:36:f2:d9:f9:04:3e:35:ad:01:58:72:06:f3:30:53:43: a4:4e:52:e0:22:5e:62:be:2f:f0:b5:9f:84:d8:50:93:6d:3e: 84:8e:a2:77:0d:eb:00:b6:81:f5:13:01:2d:6e:e5:55:a2:f4: 42:2f:75:f5:a4:8d:39:f2:b0:c3:f9:d7:c9:76:9e:08:f5:41: 3c:f1:76:fb:70:64:31:fb:c1:e9:1a:3b:30:cf:85:49:ab:77: 7d:27:f1:d0:f2:ec:3b:3e:2f:ea:db:50:eb:0b:bd:be:62:16: 4b:aa:a0:20:5a:02:63:b0:57:70:b2:89:36:e8:7c:a9:cd:b4: 32:e9:08:cb:87:d1:58:15:55:b3:c7:05:a7:f8:3d:aa:6e:76: 68:7a:a4:de -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMupl5Ew29MQ5vh2+Iplr6duBmNswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MTQyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWI1NmQ1ZjNkYzkxZmQ4N2ZlYjI2NzVmZjNjM2U4ZGQ3 MWRkZmFjZWYzYWViMmJkNTIxZDMyMGRhZDE2ZDI3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDd0JPCzGM/0LrAa/nvAEW3pNKWMKgOAJDULuKwU22UL5IM SfE+0gVqwW30opYy18ZZ8c7LoKmvaueJuFl3eeVzUWPZH0rrLOKiXJ/J4XYZCgTk +gnKIcVpcNPblqNiBfSqBJxyS2rRLFpHTHRNqn+TxUmSMMlcLDNwEVa0TRyWk+8O /zSXX01ksLJrCiLrP38vG4wVJC1ORdQP2KQanqMUtQX5kFPnVf4QWjX/0RJsCfD9 KCLsZ0/IMhLiWlbcisHKv9kV5EXnVBC3jaL88vGW11Mfa1TNJRzPOGyjGbp5vMVp ty7ru3loyX7hh7DID4ijq0V5CtGE0MKCxM06+XrHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+zcGwYDg47JrulLR7+BkYEMWEQYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IzMTA5ZTk5LWYxZjQtNGMzYi1iNTBkLTJkOWE5MzUzM2ExMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4UwDQYJKoZIhvcNAQELBQADggEBAFKvXdOoxfR+mgp+Plm2pe6u /BNf6fSxzljq0ZfFsvlXwFDetvwu0RXkAEzftBg8scYqFO6gh2C7cIpytwf4txgk Um8pBAqZ7aHufJHtHHJ/b925Ok+llgoOaCKPjowRGIe9aGLi3hvI+aOgrKSANvLZ +QQ+Na0BWHIG8zBTQ6ROUuAiXmK+L/C1n4TYUJNtPoSOoncN6wC2gfUTAS1u5VWi 9EIvdfWkjTnysMP518l2ngj1QTzxdvtwZDH7wekaOzDPhUmrd30n8dDy7Ds+L+rb UOsLvb5iFkuqoCBaAmOwV3CyiTbofKnNtDLpCMuH0VgVVbPHBaf4Papudmh6pN4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:37:44 2025 by rpki-client