$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa File: 2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa (raw, json) Hash identifier: gxws4vMk63oZENiRU/C1yNCcplYNbDwWTSvtvzRZyVY= Subject key identifier: EA:2D:15:03:B0:26:40:37:06:5C:42:5F:95:43:0F:BF:CA:51:AC:AA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5FE282E855F6F65280B72457095B00F94B59265E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa Signing time: Mon 06 Oct 2025 17:12:47 +0000 ROA not before: Mon 06 Oct 2025 17:12:47 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e2:82:e8:55:f6:f6:52:80:b7:24:57:09:5b:00:f9:4b:59:26:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:12:47 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=ad7d8bed0f185af5d65c3e9e70fef86999b6a2de176de9f6918b7060f14035d4, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:fd:86:f5:8c:7c:b5:7b:96:a6:bb:28:2e: e8:21:8d:4d:51:02:e6:fa:da:3f:94:4d:1a:53:63: d1:5d:1a:8e:00:a3:01:05:a1:ad:92:2f:31:8e:b9: d9:7d:86:a9:21:3e:70:53:df:d9:c7:f9:10:1a:a2: f5:a7:55:98:93:5a:85:9b:f4:fc:ec:a0:41:5e:4d: 24:bb:43:df:a4:d3:92:c3:26:31:ce:74:70:ce:a9: 91:ba:0d:62:00:6c:d2:14:84:99:14:99:46:5c:b3: 75:61:7c:6e:cf:4e:55:13:94:3d:cf:1c:59:e7:fc: 4d:25:1d:28:5b:6b:41:22:b9:84:50:6a:e1:dc:1f: 7c:01:ec:72:6c:44:c6:ed:50:40:ba:75:ae:f7:3f: 29:9f:76:f6:e7:9a:28:f5:6e:c7:b9:10:23:ab:47: 0b:2e:8b:22:ef:fe:86:50:d5:b1:28:12:c9:8f:fd: cd:8f:b8:10:c5:63:df:cb:9b:4f:70:6a:29:02:75: 6b:a4:54:27:15:94:c9:18:49:ad:13:17:93:61:ae: 60:78:f3:24:8c:47:e7:d2:1f:83:8f:dc:eb:55:6c: 7f:7d:9c:fd:ef:39:53:d0:65:17:d8:92:fb:9e:95: c4:88:9c:bd:99:33:65:02:8a:de:bf:4d:67:34:c2: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2D:15:03:B0:26:40:37:06:5C:42:5F:95:43:0F:BF:CA:51:AC:AA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c05::/48 Signature Algorithm: sha256WithRSAEncryption 13:82:e4:31:49:40:76:39:28:19:98:b0:c7:d3:b4:f8:af:d6: 44:25:be:c5:bd:91:d3:73:03:ef:03:ae:88:3d:6a:2f:d7:c0: 78:88:d4:5a:0c:15:86:75:31:3c:dd:ac:99:28:7e:76:99:76: 60:b2:cc:4f:d1:41:6a:2e:6c:91:e5:af:90:3c:c6:31:9c:73: 7a:8a:ce:a2:83:88:f9:01:ae:1b:a2:61:53:1b:03:49:53:8f: 0e:cf:eb:4b:db:13:09:5a:18:80:95:1b:ba:89:f9:36:39:e2: 43:be:9a:68:c7:6c:09:03:0a:1f:45:3c:f8:4e:58:fd:60:a5: ac:ac:9e:f1:bb:ee:1c:03:ec:3d:87:69:b7:cb:38:90:aa:31: 7a:17:a4:82:b9:9f:d9:f9:58:b6:1d:d1:97:1f:08:60:82:c7: 5d:e5:7c:c9:7f:de:bb:c7:45:ab:41:04:31:c8:52:fe:e2:6b: 63:6b:75:50:cb:c5:65:48:93:63:87:cb:62:29:27:f0:b1:8e: bd:2d:de:e5:8e:e0:54:55:1d:b8:6d:16:ee:96:a2:4a:77:10: 64:61:e2:9e:8d:12:d3:f5:0a:ca:3f:b0:c6:94:84:c6:a3:1f: 19:5b:fc:af:05:86:5c:6c:98:bf:a7:7b:4c:48:1a:be:99:90: a3:53:b8:aa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX+KC6FX29lKAtyRXCVsA+UtZJl4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMjQ3WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDdkOGJlZDBmMTg1YWY1ZDY1YzNlOWU3MGZlZjg2OTk5 YjZhMmRlMTc2ZGU5ZjY5MThiNzA2MGYxNDAzNWQ0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuKP2G9Yx8tXuWprsoLughjU1RAub62j+UTRpTY9FdGo4A owEFoa2SLzGOudl9hqkhPnBT39nH+RAaovWnVZiTWoWb9PzsoEFeTSS7Q9+k05LD JjHOdHDOqZG6DWIAbNIUhJkUmUZcs3VhfG7PTlUTlD3PHFnn/E0lHShba0EiuYRQ auHcH3wB7HJsRMbtUEC6da73Pymfdvbnmij1bse5ECOrRwsuiyLv/oZQ1bEoEsmP /c2PuBDFY9/Lm09waikCdWukVCcVlMkYSa0TF5NhrmB48ySMR+fSH4OP3OtVbH99 nP3vOVPQZRfYkvuelcSInL2ZM2UCit6/TWc0wiMlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6i0VA7AmQDcGXEJflUMPv8pRrKowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI2NzBiNGFkLWQ1ZmEtNGZmMS05OTZmLTNjMGFkNDA0NmI4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAUwDQYJKoZIhvcNAQELBQADggEBABOC5DFJQHY5KBmYsMfTtPiv 1kQlvsW9kdNzA+8Drog9ai/XwHiI1FoMFYZ1MTzdrJkofnaZdmCyzE/RQWoubJHl r5A8xjGcc3qKzqKDiPkBrhuiYVMbA0lTjw7P60vbEwlaGICVG7qJ+TY54kO+mmjH bAkDCh9FPPhOWP1gpaysnvG77hwD7D2HabfLOJCqMXoXpIK5n9n5WLYd0ZcfCGCC x13lfMl/3rvHRatBBDHIUv7ia2NrdVDLxWVIk2OHy2IpJ/Cxjr0t3uWO4FRVHbht Fu6Wokp3EGRh4p6NEtP1Cso/sMaUhMajHxlb/K8FhlxsmL+ne0xIGr6ZkKNTuKo= -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:57 2025 by rpki-client