$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e3c66b01-c8b4-4cf4-a54f-8356d3d956ed.roa File: e3c66b01-c8b4-4cf4-a54f-8356d3d956ed.roa (raw, json) Hash identifier: K4jGs2mmRYarnIS/CNsDVbVzuyktSCkEFvTokcA13zg= Subject key identifier: 71:0A:08:81:47:A6:A9:3A:D6:26:64:F0:FA:6E:C5:FC:26:6B:6F:E6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 29C2A40D8D113641574ED980F5C204AFD1428DBB Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e3c66b01-c8b4-4cf4-a54f-8356d3d956ed.roa Signing time: Tue 04 Nov 2025 16:41:24 +0000 ROA not before: Tue 04 Nov 2025 16:41:24 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c2:a4:0d:8d:11:36:41:57:4e:d9:80:f5:c2:04:af:d1:42:8d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:41:24 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=1393d7f044d6fa5d76f54960e26111d9694e3d368d73a832589294505fd19368, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:91:cd:ac:dd:6e:12:58:16:2c:6d:41:ce:6d: ef:aa:7d:cf:c3:ca:14:9b:2c:0a:dc:c0:6a:a4:9f: bd:a6:31:7a:ec:c8:eb:6e:af:7c:65:7e:b8:f2:76: af:79:b6:a9:52:47:a6:bf:9d:fb:27:98:f7:09:75: 3c:43:34:5b:91:e8:f9:62:d5:fa:47:0f:4f:f2:50: 8f:fa:8a:0f:09:10:a9:8c:81:8f:4a:f6:ae:21:7d: a3:88:65:2c:f1:30:b0:ca:b7:08:97:2f:bb:f3:34: 6d:ee:91:75:e0:bd:70:ac:bd:e9:00:32:49:ca:87: 6a:4f:b1:f8:57:1c:39:9b:52:1a:e4:28:fe:8f:9e: 92:2f:da:e3:22:2d:5f:31:51:f1:fc:e1:22:57:71: 32:75:79:85:72:bf:49:10:97:8b:19:5f:50:69:6e: e4:e0:aa:79:65:59:df:38:ab:8b:71:0a:d2:22:f0: 67:63:0b:47:4a:31:82:67:13:dc:3f:f9:39:94:e5: 9e:86:ed:6f:d9:3b:ee:28:8c:d9:0f:74:75:e3:2f: 7b:17:86:69:87:cb:4e:2b:65:dd:54:47:3f:14:aa: b2:2c:fa:42:10:bf:4f:77:63:b6:bf:1d:72:5d:c0: 12:e7:4d:ae:74:08:3f:c7:24:ce:38:b7:48:19:0f: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0A:08:81:47:A6:A9:3A:D6:26:64:F0:FA:6E:C5:FC:26:6B:6F:E6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e3c66b01-c8b4-4cf4-a54f-8356d3d956ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0f::/48 Signature Algorithm: sha256WithRSAEncryption 71:c7:c2:97:74:95:80:84:0e:2a:1c:39:ac:9f:e8:0c:43:2a: 7e:7d:c5:72:7e:38:16:c0:2a:72:be:4e:9f:0c:e3:1c:15:5d: 15:6a:b3:08:f0:68:3c:80:c3:3a:89:ff:a7:16:c4:87:ac:34: 75:fd:7a:9c:a8:12:11:5a:16:d5:1e:77:17:58:46:17:0a:7b: 27:3f:14:a4:a7:50:6d:41:c1:79:b5:2f:99:25:41:53:ee:67: 44:67:08:b8:2c:3f:9e:a3:23:19:40:42:ac:88:ac:9d:df:9d: 38:1d:1f:7f:97:58:62:1a:9a:bc:95:58:b8:f0:21:38:92:eb: 34:c1:3e:60:7f:cb:a4:de:20:72:cb:59:51:38:7b:ba:af:54: ed:88:89:d4:1e:68:61:91:2a:ac:0b:3b:5d:9a:ef:f2:5b:d1: 6a:a8:95:d5:83:14:ed:49:8a:62:90:22:2a:f8:33:15:48:38: 5d:3b:98:07:bb:2e:64:15:92:98:1b:32:bb:65:a9:02:19:6c: da:5a:0d:38:24:19:1f:28:db:f7:bc:5f:ac:0a:c0:29:da:99: 94:b8:17:70:d2:c4:ba:b3:10:da:f8:6f:c9:af:9f:73:f6:58: 4b:e8:bd:6f:41:a9:d8:c9:d1:52:d5:e2:5c:0f:e2:5a:eb:56: d8:e3:02:17 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKcKkDY0RNkFXTtmA9cIEr9FCjbswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY0MTI0WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzkzZDdmMDQ0ZDZmYTVkNzZmNTQ5NjBlMjYxMTFkOTY5 NGUzZDM2OGQ3M2E4MzI1ODkyOTQ1MDVmZDE5MzY4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1kc2s3W4SWBYsbUHObe+qfc/DyhSbLArcwGqkn72mMXrs yOtur3xlfrjydq95tqlSR6a/nfsnmPcJdTxDNFuR6Pli1fpHD0/yUI/6ig8JEKmM gY9K9q4hfaOIZSzxMLDKtwiXL7vzNG3ukXXgvXCsvekAMknKh2pPsfhXHDmbUhrk KP6PnpIv2uMiLV8xUfH84SJXcTJ1eYVyv0kQl4sZX1BpbuTgqnllWd84q4txCtIi 8GdjC0dKMYJnE9w/+TmU5Z6G7W/ZO+4ojNkPdHXjL3sXhmmHy04rZd1URz8UqrIs +kIQv093Y7a/HXJdwBLnTa50CD/HJM44t0gZD5QlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcQoIgUemqTrWJmTw+m7F/CZrb+YwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2UzYzY2YjAxLWM4YjQtNGNmNC1hNTRmLTgzNTZkM2Q5NTZlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA8wDQYJKoZIhvcNAQELBQADggEBAHHHwpd0lYCEDiocOayf6AxD Kn59xXJ+OBbAKnK+Tp8M4xwVXRVqswjwaDyAwzqJ/6cWxIesNHX9epyoEhFaFtUe dxdYRhcKeyc/FKSnUG1BwXm1L5klQVPuZ0RnCLgsP56jIxlAQqyIrJ3fnTgdH3+X WGIamryVWLjwITiS6zTBPmB/y6TeIHLLWVE4e7qvVO2IidQeaGGRKqwLO12a7/Jb 0WqoldWDFO1JimKQIir4MxVIOF07mAe7LmQVkpgbMrtlqQIZbNpaDTgkGR8o2/e8 X6wKwCnamZS4F3DSxLqzENr4b8mvn3P2WEvovW9BqdjJ0VLV4lwP4lrrVtjjAhc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:46:53 2025 by rpki-client