$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3500b8ef-7be2-4b73-a003-e1ded8f81352.roa File: 3500b8ef-7be2-4b73-a003-e1ded8f81352.roa (raw, json) Hash identifier: OF136sdsLRJz4gwgwvJ9sg5m9PQb7sy/3WSmW6lcALE= Subject key identifier: 58:76:F2:42:40:9B:F6:E3:76:61:1B:59:98:32:9D:16:2D:EF:44:8A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5ACC9F222D5504CEE7BBA71901818CF453FA4C05 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3500b8ef-7be2-4b73-a003-e1ded8f81352.roa Signing time: Tue 21 Oct 2025 12:30:10 +0000 ROA not before: Tue 21 Oct 2025 12:30:10 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:2110::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cc:9f:22:2d:55:04:ce:e7:bb:a7:19:01:81:8c:f4:53:fa:4c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:30:10 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=481abc976201df8fbf0bdff464741f1988792f90f86ba7f637cf9469c02a83b1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:2d:cd:41:11:ab:b8:41:e0:f2:86:bb:63:ec: a8:6f:f8:cb:21:be:49:78:91:95:8b:03:d7:8a:f9: 81:de:ba:15:fc:13:6d:df:08:f7:4b:28:ad:23:54: 07:33:96:e4:68:13:a5:fb:2e:11:8a:3a:02:c5:0f: 26:58:ce:20:f6:f2:5e:5f:a8:cb:2f:ef:9a:39:6c: 75:79:03:31:c7:a9:ea:94:69:bf:5d:80:64:6d:61: 08:e5:f2:4a:51:a7:b9:93:53:61:e2:7f:f6:3b:88: 5a:08:06:ec:4d:22:67:ad:5c:54:55:cd:db:70:41: 43:f4:7a:98:38:11:08:54:93:2c:37:d8:da:ab:45: 5a:97:b8:ff:c2:d0:4f:90:04:1c:77:bd:56:64:88: 4c:1e:0c:8f:64:7d:f9:2f:d1:af:b1:5d:b5:86:80: 72:51:b7:d6:a8:85:aa:b6:64:5e:8c:fb:57:7c:94: 56:32:2f:56:71:89:8e:78:b5:3a:47:c6:06:44:0c: 08:30:7f:32:14:8e:56:4c:54:10:68:db:fa:51:bb: 83:d1:58:a8:b3:09:e2:ea:6d:2e:e3:1d:fa:0f:cb: 73:1c:52:4d:e7:e4:26:2e:f7:ac:96:37:93:d9:cd: 46:13:f9:6f:c6:7d:20:67:f2:c4:53:62:af:78:ef: 80:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:76:F2:42:40:9B:F6:E3:76:61:1B:59:98:32:9D:16:2D:EF:44:8A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3500b8ef-7be2-4b73-a003-e1ded8f81352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:2110::/44 Signature Algorithm: sha256WithRSAEncryption 72:34:c3:7a:21:e3:9d:7f:2d:f1:46:72:e1:b8:c0:03:e2:0c: e5:33:da:07:a1:e0:1c:e9:00:f1:d0:38:69:29:f0:8b:c5:71: 5a:2e:a7:26:2b:41:1b:9f:c4:da:c4:d9:3b:37:3b:e4:ae:d4: 32:de:54:6a:84:1e:80:41:fa:75:99:7d:76:81:0e:97:e0:64: f1:9f:5a:03:60:17:a2:00:45:0c:5e:a3:c3:fb:49:dc:18:e5: 80:44:41:fd:03:02:93:44:0a:0a:fb:f4:09:1b:64:0c:b8:ea: bb:a8:f5:76:62:87:51:64:e2:a1:89:97:45:1a:e3:82:4f:a3: 2c:00:30:96:52:d7:b2:59:55:ae:b2:d4:a6:bd:4b:e8:3c:62: 46:af:bc:f7:23:1f:12:dc:02:1a:8a:36:8b:4f:2b:85:9f:dc: 8e:be:d5:32:34:e6:f4:41:ac:04:65:16:1f:63:8b:c9:6d:23: c6:05:8b:9c:0f:6f:c8:74:ae:ba:c3:9b:be:1f:1f:eb:9b:6a: 01:96:2d:4f:28:3b:3f:53:ca:cb:fc:43:71:4b:ac:23:4b:8e: bf:95:de:36:9d:74:2a:2b:e5:da:6a:d2:8c:25:b3:b2:7e:47: 3a:66:6a:5f:90:9f:de:5c:52:32:18:11:1d:76:0c:8c:f0:56: 1b:f2:70:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWsyfIi1VBM7nu6cZAYGM9FP6TAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIzMDEwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODFhYmM5NzYyMDFkZjhmYmYwYmRmZjQ2NDc0MWYxOTg4 NzkyZjkwZjg2YmE3ZjYzN2NmOTQ2OWMwMmE4M2IxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5Lc1BEau4QeDyhrtj7Khv+Mshvkl4kZWLA9eK+YHeuhX8 E23fCPdLKK0jVAczluRoE6X7LhGKOgLFDyZYziD28l5fqMsv75o5bHV5AzHHqeqU ab9dgGRtYQjl8kpRp7mTU2Hif/Y7iFoIBuxNImetXFRVzdtwQUP0epg4EQhUkyw3 2NqrRVqXuP/C0E+QBBx3vVZkiEweDI9kffkv0a+xXbWGgHJRt9aohaq2ZF6M+1d8 lFYyL1ZxiY54tTpHxgZEDAgwfzIUjlZMVBBo2/pRu4PRWKizCeLqbS7jHfoPy3Mc Uk3n5CYu96yWN5PZzUYT+W/GfSBn8sRTYq9474BLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWHbyQkCb9uN2YRtZmDKdFi3vRIowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM1MDBiOGVmLTdiZTItNGI3My1hMDAzLWUxZGVkOGY4MTM1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzAIRAwDQYJKoZIhvcNAQELBQADggEBAHI0w3oh451/LfFGcuG4wAPi DOUz2geh4BzpAPHQOGkp8IvFcVoupyYrQRufxNrE2Ts3O+Su1DLeVGqEHoBB+nWZ fXaBDpfgZPGfWgNgF6IARQxeo8P7SdwY5YBEQf0DApNECgr79AkbZAy46ruo9XZi h1Fk4qGJl0Ua44JPoywAMJZS17JZVa6y1Ka9S+g8YkavvPcjHxLcAhqKNotPK4Wf 3I6+1TI05vRBrARlFh9ji8ltI8YFi5wPb8h0rrrDm74fH+ubagGWLU8oOz9Tysv8 Q3FLrCNLjr+V3jaddCor5dpq0owls7J+Rzpmal+Qn95cUjIYER12DIzwVhvycOI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:22 2025 by rpki-client