$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa File: 57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa (raw, json) Hash identifier: asRO1xNW1hDTWiD3+qIiHqa8ZN1sqcv9SmtuIiuvQs4= Subject key identifier: 68:E9:76:E1:2F:5A:AB:59:88:09:9F:CF:0A:AE:89:6D:93:E1:27:F9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 023B97E6C8AA50349A9ADDF1B294634DB5D187C8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa Signing time: Tue 04 Nov 2025 16:41:10 +0000 ROA not before: Tue 04 Nov 2025 16:41:10 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3b:97:e6:c8:aa:50:34:9a:9a:dd:f1:b2:94:63:4d:b5:d1:87:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:41:10 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=728f273cac1d4a0d9c59e702bd7cd797e6e1e70c790e8df8381829f568404952, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:58:bf:31:82:a3:de:36:d5:31:68:ae:9b: 21:2b:38:32:52:aa:71:80:5f:24:83:54:2d:fc:d8: 53:bf:90:73:96:25:bd:1c:c2:b0:80:01:cf:d8:49: 05:5b:0d:25:e8:b9:1b:50:b9:48:cb:09:fe:83:87: 7e:90:b8:72:f0:6a:ec:ae:7a:4b:69:ef:0e:01:0e: 16:c9:b3:ee:1f:0d:37:d6:f7:ad:19:1e:d1:3c:62: 3c:31:9b:8b:e4:5e:a7:fc:21:99:f8:f4:44:8f:94: e5:7a:e4:f5:27:cd:de:04:50:c7:8b:56:fa:0d:c7: 8b:74:65:a6:41:d0:8d:8a:71:42:9e:e6:72:a2:4d: c5:15:53:26:60:3d:00:b9:36:70:ac:9b:b3:2e:10: c4:0f:83:4e:bb:f0:93:4f:5b:1d:0a:c4:4a:a8:73: b3:4c:93:3c:20:6e:b5:98:26:3a:7a:6c:91:9b:c8: 34:10:c4:d8:fc:11:62:99:d4:1e:74:48:d0:da:9e: d5:84:96:db:2b:10:85:bd:d8:ad:ec:7d:2f:66:4b: eb:10:5c:b1:2c:10:0c:f4:18:e2:2b:c2:a8:73:34: 79:45:75:fc:ea:24:a6:40:6f:92:a6:1f:a4:b5:af: db:14:4b:10:a9:29:3f:92:1a:db:4b:a2:d8:02:11: df:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E9:76:E1:2F:5A:AB:59:88:09:9F:CF:0A:AE:89:6D:93:E1:27:F9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c09::/48 Signature Algorithm: sha256WithRSAEncryption 26:03:77:c2:10:aa:fb:e7:ec:c8:70:47:f8:be:f5:d3:8f:46: f4:eb:09:ce:38:8a:0a:25:f5:60:0f:47:8e:08:f0:97:57:b1: 7f:25:9d:ba:24:57:f7:a7:e4:7d:86:a4:14:8e:de:7a:b6:ef: ef:44:e5:8f:fb:76:8f:1b:ca:80:d8:4b:97:da:6f:d2:2e:74: bd:2e:07:71:07:07:66:68:54:28:02:e4:d4:80:fd:7b:54:95: 53:4c:23:4d:10:7c:d8:7f:a0:7b:36:76:3a:f5:04:80:25:d3: 61:e1:85:b3:23:99:87:c0:69:f6:05:d3:d0:e6:a4:03:f6:4c: 87:3b:08:64:d1:86:55:3a:4e:62:35:57:d6:b6:ca:7f:0c:9a: e5:cf:78:95:c3:44:e0:d7:74:93:7e:01:63:88:d3:84:0e:de: e8:ba:7e:b9:0f:9e:79:18:28:99:3e:ce:08:75:f6:93:b5:c4: 33:74:41:4b:cd:4a:0b:0f:d4:80:dd:7b:0d:3c:0a:91:93:bc: 7c:96:97:fc:87:08:51:f8:f6:bd:36:5f:fb:59:c4:c9:2c:27: e9:c9:d1:67:0c:0e:ef:50:71:d0:15:e1:99:10:5b:5c:4b:1e: da:72:0b:da:ac:af:9d:1d:7f:77:a2:04:71:dd:b4:6d:3e:fd: f6:a2:e8:62 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAjuX5siqUDSamt3xspRjTbXRh8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY0MTEwWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjhmMjczY2FjMWQ0YTBkOWM1OWU3MDJiZDdjZDc5N2U2 ZTFlNzBjNzkwZThkZjgzODE4MjlmNTY4NDA0OTUyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoVFi/MYKj3jbVMWiumyErODJSqnGAXySDVC382FO/kHOW Jb0cwrCAAc/YSQVbDSXouRtQuUjLCf6Dh36QuHLwauyuektp7w4BDhbJs+4fDTfW 960ZHtE8Yjwxm4vkXqf8IZn49ESPlOV65PUnzd4EUMeLVvoNx4t0ZaZB0I2KcUKe 5nKiTcUVUyZgPQC5NnCsm7MuEMQPg0678JNPWx0KxEqoc7NMkzwgbrWYJjp6bJGb yDQQxNj8EWKZ1B50SNDantWEltsrEIW92K3sfS9mS+sQXLEsEAz0GOIrwqhzNHlF dfzqJKZAb5KmH6S1r9sUSxCpKT+SGttLotgCEd9dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaOl24S9aq1mICZ/PCq6JbZPhJ/kwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU3ZTc2ZTM2LTFiMWMtNDdmZS04OWUxLTE3ZmE3YTM5YzBhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAkwDQYJKoZIhvcNAQELBQADggEBACYDd8IQqvvn7MhwR/i+9dOP RvTrCc44igol9WAPR44I8JdXsX8lnbokV/en5H2GpBSO3nq27+9E5Y/7do8byoDY S5fab9IudL0uB3EHB2ZoVCgC5NSA/XtUlVNMI00QfNh/oHs2djr1BIAl02HhhbMj mYfAafYF09DmpAP2TIc7CGTRhlU6TmI1V9a2yn8MmuXPeJXDRODXdJN+AWOI04QO 3ui6frkPnnkYKJk+zgh19pO1xDN0QUvNSgsP1IDdew08CpGTvHyWl/yHCFH49r02 X/tZxMksJ+nJ0WcMDu9QcdAV4ZkQW1xLHtpyC9qsr50df3eiBHHdtG0+/fai6GI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:09:11 2025 by rpki-client