$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/567362d1-833e-45e0-b9dc-1e63b72d5baf.roa File: 567362d1-833e-45e0-b9dc-1e63b72d5baf.roa (raw, json) Hash identifier: KPSw/aS86Q2qDmOWgt7ekJ6TZl2Vh+lD9OvDF7iXYqg= Subject key identifier: FC:5A:A5:9C:46:78:96:0E:37:68:8F:4F:49:D2:39:A8:E2:CF:57:F6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 135B3BEFDCA7DAD812AC6DFB88FA4AA0C23715AA Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/567362d1-833e-45e0-b9dc-1e63b72d5baf.roa Signing time: Fri 31 Oct 2025 01:30:34 +0000 ROA not before: Fri 31 Oct 2025 01:30:34 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:f001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5b:3b:ef:dc:a7:da:d8:12:ac:6d:fb:88:fa:4a:a0:c2:37:15:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 31 01:30:34 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=6ef70f2e8f6b792fdf731456a6ff97e979244cdc8c683328bb3ac6e65a324482, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:e1:ad:4c:f2:50:aa:db:bf:c2:32:d8:41: 01:75:e4:d3:af:53:ed:1e:fa:1d:1e:5d:57:0f:17: bf:e1:4f:58:85:8f:1e:82:d0:6a:85:fd:e9:06:c6: 02:0c:82:b7:86:c2:2c:65:07:2d:e9:cf:ef:69:2e: 4e:de:e9:f9:ae:1b:9a:b3:87:73:18:f2:62:3f:a9: 55:7b:85:6f:89:11:c5:f8:76:28:d3:cd:95:9d:f9: ad:12:fc:c2:63:2a:67:84:6a:c5:ad:50:c7:af:a5: 15:ac:a6:08:6b:50:6b:2a:7d:8e:1b:68:f1:a4:7c: 5f:5d:15:c0:35:a1:b0:3c:28:b9:ad:1d:43:b7:af: 0c:ed:5f:eb:89:44:ab:68:2e:e4:67:ad:ce:8e:df: 09:7c:e0:a9:f4:38:83:4d:0f:ad:7b:44:a7:c3:f0: e3:d3:a6:f3:8c:a1:f7:55:77:57:c1:a6:97:da:c9: 90:14:06:cd:b8:40:e1:e2:d7:72:56:67:ac:4b:b9: 09:2b:13:6e:aa:a6:d8:e6:44:af:6b:da:aa:5f:13: 83:c7:a8:4e:d3:b8:b5:a5:68:56:5e:2b:18:bf:06: 09:a0:46:e8:ac:5f:3d:c7:8b:25:1f:91:f8:30:f1: 07:40:0a:ce:2f:a6:e1:20:55:17:0e:97:d4:4c:5c: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5A:A5:9C:46:78:96:0E:37:68:8F:4F:49:D2:39:A8:E2:CF:57:F6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/567362d1-833e-45e0-b9dc-1e63b72d5baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f001::/48 Signature Algorithm: sha256WithRSAEncryption 33:68:d5:cb:d1:9e:31:92:16:cc:59:50:3e:76:c7:d1:72:68: 5c:d6:98:a9:5e:11:4c:75:ea:31:57:e7:5e:22:32:06:25:a2: cf:f3:5c:b4:73:de:82:9a:ba:ef:1b:92:51:03:6c:d5:65:5f: 0e:0c:f6:6f:57:cc:77:44:1f:e2:2e:29:36:9a:0a:1a:26:76: 98:a9:b9:08:8f:db:de:9e:5f:07:10:e6:77:45:b5:21:9e:45: 83:26:b8:ac:d0:39:1d:04:9e:1c:58:ff:0c:82:dc:53:d6:e2: 0f:5d:60:81:ce:0b:29:56:62:c5:9d:b4:c1:f6:0d:03:b1:0a: 0e:5d:a2:55:5a:21:09:c5:bc:87:d5:37:63:f5:38:05:a8:b7: 0c:c5:4e:fc:aa:49:db:21:1c:d4:ad:59:eb:ef:15:09:a2:85: 6d:53:5c:23:27:ae:63:0a:cb:51:69:94:1d:ce:6a:ea:e3:75: 6f:c6:48:b8:6c:6a:aa:6b:11:07:af:fa:30:58:50:f8:c7:9b: 18:82:32:f0:37:5a:4c:d4:12:8e:a1:a9:3c:7f:1e:86:aa:d9: 65:c5:83:2b:a7:57:37:34:66:f1:51:6b:90:0a:d9:15:90:df: e1:ff:15:c2:b0:9c:2d:8c:86:e6:ca:de:f7:94:ab:1f:dd:b5: f3:59:4b:bc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE1s779yn2tgSrG37iPpKoMI3FaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDMxMDEzMDM0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZWY3MGYyZThmNmI3OTJmZGY3MzE0NTZhNmZmOTdlOTc5 MjQ0Y2RjOGM2ODMzMjhiYjNhYzZlNjVhMzI0NDgyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDuOGtTPJQqtu/wjLYQQF15NOvU+0e+h0eXVcPF7/hT1iF jx6C0GqF/ekGxgIMgreGwixlBy3pz+9pLk7e6fmuG5qzh3MY8mI/qVV7hW+JEcX4 dijTzZWd+a0S/MJjKmeEasWtUMevpRWspghrUGsqfY4baPGkfF9dFcA1obA8KLmt HUO3rwztX+uJRKtoLuRnrc6O3wl84Kn0OINND617RKfD8OPTpvOMofdVd1fBppfa yZAUBs24QOHi13JWZ6xLuQkrE26qptjmRK9r2qpfE4PHqE7TuLWlaFZeKxi/Bgmg RuisXz3HiyUfkfgw8QdACs4vpuEgVRcOl9RMXJ3fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/FqlnEZ4lg43aI9PSdI5qOLPV/YwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU2NzM2MmQxLTgzM2UtNDVlMC1iOWRjLTFlNjNiNzJkNWJhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8AEwDQYJKoZIhvcNAQELBQADggEBADNo1cvRnjGSFsxZUD52x9Fy aFzWmKleEUx16jFX514iMgYlos/zXLRz3oKauu8bklEDbNVlXw4M9m9XzHdEH+Iu KTaaChomdpipuQiP296eXwcQ5ndFtSGeRYMmuKzQOR0EnhxY/wyC3FPW4g9dYIHO CylWYsWdtMH2DQOxCg5dolVaIQnFvIfVN2P1OAWotwzFTvyqSdshHNStWevvFQmi hW1TXCMnrmMKy1FplB3OaurjdW/GSLhsaqprEQev+jBYUPjHmxiCMvA3WkzUEo6h qTx/Hoaq2WXFgyunVzc0ZvFRa5AK2RWQ3+H/FcKwnC2MhubK3veUqx/dtfNZS7w= -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:33 2025 by rpki-client