$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa File: 3983d9b9-cb06-4315-b0e8-52b47d039b39.roa (raw, json) Hash identifier: /6rDrqPgxJhhd/ifmtXc0c9v09mDX58eAR/Ljmji59I= Subject key identifier: 39:4C:BD:24:32:7E:6F:E6:AA:AE:5F:AC:FF:B9:63:BB:F5:32:47:DA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 04DB5DCACC3D87D9BED77A026F16D65278988369 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa Signing time: Mon 06 Oct 2025 17:13:48 +0000 ROA not before: Mon 06 Oct 2025 17:13:48 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:db:5d:ca:cc:3d:87:d9:be:d7:7a:02:6f:16:d6:52:78:98:83:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:13:48 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=0c183a11efeba1f545b6b1a8f04567648aeda237440e2a33fe4726392ce095d6, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:53:25:58:53:ae:42:65:ca:38:23:20:8b: 52:91:52:5b:48:b2:fd:be:76:9d:10:38:62:53:d7: 65:82:94:96:71:01:a6:cd:84:07:6b:1d:21:7a:6c: b2:64:29:c2:15:ed:20:74:1d:dd:28:1b:7a:5f:44: 0d:a4:81:5b:79:46:d7:ee:d8:a8:85:8d:24:9d:ab: a3:09:75:50:ad:01:c8:0e:59:e2:41:02:26:32:62: 9b:ad:31:25:45:03:f3:b1:65:41:35:55:a5:61:b3: fe:55:55:c1:2e:7d:8d:d1:03:45:bf:ed:4a:a4:8a: 38:81:0d:83:fc:64:b0:ee:1a:f5:28:25:76:b0:a5: 37:f2:0e:5f:f0:27:3a:58:d7:11:1c:40:e8:1f:6a: bf:bc:02:15:44:01:68:be:49:8a:28:a5:14:3d:4e: 08:b9:7e:5f:cf:87:ca:ea:93:2d:b7:21:33:15:20: 8d:e4:4a:3b:c9:db:e0:bf:9c:4c:fb:97:1c:62:fc: 32:f2:f5:53:8c:60:68:88:9b:a4:96:d3:bc:dd:0f: 87:0c:0a:32:79:2c:27:87:42:42:12:eb:50:b5:13: 12:81:20:26:06:9d:28:a2:2f:c6:1e:50:da:17:d1: 45:a9:88:41:0a:0c:b4:c4:d6:ed:72:ca:b6:4c:2f: 97:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4C:BD:24:32:7E:6F:E6:AA:AE:5F:AC:FF:B9:63:BB:F5:32:47:DA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0d::/48 Signature Algorithm: sha256WithRSAEncryption 6f:ef:a4:1b:27:74:1a:87:b8:c7:e9:87:11:4f:b9:87:d5:f0: b0:fd:3b:9e:0a:20:82:ae:fc:b0:40:0b:c1:7b:78:24:d8:28: 1d:81:ca:8c:36:ad:12:af:2a:70:a8:89:e9:8f:08:f4:46:99: 2d:62:a3:c5:f3:6d:4f:bc:a6:d0:fc:c5:40:37:51:00:6c:6a: 16:cb:64:51:7d:96:18:c7:59:79:7f:b5:b4:48:40:93:aa:e1: a2:aa:c6:71:ce:52:2d:64:cb:ae:40:2a:27:12:fc:c9:0a:41: f7:c9:c4:63:83:91:8d:e8:ff:c8:ed:71:d6:17:43:07:3f:e8: f9:6e:0a:2f:f9:87:9e:53:fe:74:5d:58:4b:fb:37:f1:b6:5c: 52:69:20:ba:f9:30:78:12:c8:ff:bd:5e:9f:9c:05:85:d1:b5: c7:b0:73:d7:da:b0:05:12:e1:d3:ae:0a:67:df:d1:bc:3a:19: ba:09:c7:a0:b8:f6:2b:5a:31:f3:e2:f4:56:e4:c5:9a:50:37: 54:8d:3d:6c:e7:1e:c5:e5:43:11:41:03:4d:6d:91:f9:ab:32: f2:b0:68:ce:c9:e1:ed:48:5a:6c:34:35:0e:3c:b4:e8:c3:b7: 3e:09:fa:fb:a4:67:05:95:6d:42:9e:26:e7:ed:6d:fd:52:cc: 9e:10:d1:77 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBNtdysw9h9m+13oCbxbWUniYg2kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMzQ4WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzE4M2ExMWVmZWJhMWY1NDViNmIxYThmMDQ1Njc2NDhh ZWRhMjM3NDQwZTJhMzNmZTQ3MjYzOTJjZTA5NWQ2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsxVMlWFOuQmXKOCMgi1KRUltIsv2+dp0QOGJT12WClJZx AabNhAdrHSF6bLJkKcIV7SB0Hd0oG3pfRA2kgVt5Rtfu2KiFjSSdq6MJdVCtAcgO WeJBAiYyYputMSVFA/OxZUE1VaVhs/5VVcEufY3RA0W/7UqkijiBDYP8ZLDuGvUo JXawpTfyDl/wJzpY1xEcQOgfar+8AhVEAWi+SYoopRQ9Tgi5fl/Ph8rqky23ITMV II3kSjvJ2+C/nEz7lxxi/DLy9VOMYGiIm6SW07zdD4cMCjJ5LCeHQkIS61C1ExKB ICYGnSiiL8YeUNoX0UWpiEEKDLTE1u1yyrZML5dDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOUy9JDJ+b+aqrl+s/7lju/UyR9owHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM5ODNkOWI5LWNiMDYtNDMxNS1iMGU4LTUyYjQ3ZDAzOWIzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA0wDQYJKoZIhvcNAQELBQADggEBAG/vpBsndBqHuMfphxFPuYfV 8LD9O54KIIKu/LBAC8F7eCTYKB2Byow2rRKvKnCoiemPCPRGmS1io8XzbU+8ptD8 xUA3UQBsahbLZFF9lhjHWXl/tbRIQJOq4aKqxnHOUi1ky65AKicS/MkKQffJxGOD kY3o/8jtcdYXQwc/6PluCi/5h55T/nRdWEv7N/G2XFJpILr5MHgSyP+9Xp+cBYXR tcewc9fasAUS4dOuCmff0bw6GboJx6C49itaMfPi9FbkxZpQN1SNPWznHsXlQxFB A01tkfmrMvKwaM7J4e1IWmw0NQ48tOjDtz4J+vukZwWVbUKeJuftbf1SzJ4Q0Xc= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:02 2025 by rpki-client