$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa File: 4dac6043-34e0-4357-a5ac-4587a0261982.roa (raw, json) Hash identifier: Pi/IQ+cb/4NtRxYF1EOx11cfGAXpORnNqaSgSpMSEH8= Subject key identifier: 9A:9D:C3:EF:87:C4:32:31:77:C5:33:8E:8E:A5:D9:3D:A2:6F:94:C9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3631BFD08B3CEEB6DC3D68C7BEEF925974A2D75B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa Signing time: Fri 26 Sep 2025 17:51:47 +0000 ROA not before: Fri 26 Sep 2025 17:51:47 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:396::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:31:bf:d0:8b:3c:ee:b6:dc:3d:68:c7:be:ef:92:59:74:a2:d7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:51:47 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=ea503b3446f30f6f9d1598b18293e0b3dac5433a70eb544dd93f72d8ec4c08ab, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:3a:57:8f:ee:c5:36:9c:59:ed:21:da:b0: 45:2a:ed:dc:fd:e6:80:1d:57:7b:a9:90:c3:06:3a: 01:29:02:0f:35:2d:66:4b:37:fa:2a:4e:de:2a:a1: 89:4a:87:82:33:d7:f9:1f:e1:65:ab:ae:4d:fa:2b: a5:be:06:06:12:5d:f8:2d:ed:58:55:8f:28:55:22: ed:14:0a:8c:1e:28:95:54:68:6c:97:28:fc:d2:cf: 87:06:30:a4:87:c5:89:88:b6:72:24:f6:c6:28:63: f3:2a:14:9b:3a:f0:d4:fd:ca:42:ca:42:72:a5:9e: 8e:5b:fa:eb:fd:2a:37:59:9d:94:6e:95:2c:6f:8e: f7:93:be:8e:e9:cf:03:00:4b:7d:e0:fc:89:0e:40: c1:e3:c5:d1:33:e5:ec:83:bb:e8:c0:ba:44:aa:a8: 3b:d0:df:f1:92:b7:b8:ef:39:17:da:32:d1:bc:ea: 4a:5a:03:5f:90:a3:1e:83:e7:67:2b:7e:b4:d1:f9: f1:53:e7:4a:a3:5c:c3:b9:41:7c:75:d8:2a:b6:c8: 94:cd:bc:2b:49:81:0b:2d:0e:da:19:b0:3c:46:b8: 94:1b:f7:de:45:a8:09:59:73:26:99:93:61:3e:20: f6:72:38:66:20:ab:ec:ee:65:36:7a:02:30:d5:ae: 66:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9D:C3:EF:87:C4:32:31:77:C5:33:8E:8E:A5:D9:3D:A2:6F:94:C9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:396::/48 Signature Algorithm: sha256WithRSAEncryption 1c:8a:b6:eb:9e:44:5e:a0:01:f0:87:96:bb:60:81:b4:50:d8: e3:4f:67:8d:9b:09:02:63:e2:b9:91:90:2f:25:8d:29:45:b8: fd:61:b4:fe:15:5b:a7:ed:3d:15:36:a7:22:7c:94:2c:92:16: b9:a2:c9:cf:7d:15:cb:82:1e:bc:93:0d:db:31:77:d4:21:18: 5f:da:e4:85:cf:7e:74:34:5d:d3:0f:d2:04:ec:df:6b:5a:fe: 4a:f9:18:09:80:7e:83:1d:6c:0f:e1:b6:4a:cb:9a:a1:ce:7a: ae:e6:43:09:db:ff:63:c3:f0:5b:ac:2a:2f:53:2a:8d:84:20: 3b:3c:47:88:36:cb:93:a3:3c:90:e2:68:c9:a8:71:d8:79:b5: be:60:d6:4d:2e:09:f7:e0:8a:af:cc:c7:81:8c:b0:3c:3c:39: aa:03:d9:75:84:9e:a6:27:18:8f:11:b6:5b:bb:f5:5e:8d:03: 44:31:37:b4:f1:f0:99:49:b8:1f:79:5a:4b:57:bd:08:eb:83: 1e:64:53:ed:4b:5d:9c:5c:28:5e:89:29:a6:75:29:55:d9:ea: 1a:09:5d:19:e9:c7:88:80:04:d4:b5:8f:77:5f:6f:c3:b6:c4: 12:69:4d:e6:2f:62:4b:d3:aa:c6:ca:f1:95:fa:68:bc:3a:c2: 91:f5:26:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNjG/0Is87rbcPWjHvu+SWXSi11swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MTQ3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTUwM2IzNDQ2ZjMwZjZmOWQxNTk4YjE4MjkzZTBiM2Rh YzU0MzNhNzBlYjU0NGRkOTNmNzJkOGVjNGMwOGFiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWcDpXj+7FNpxZ7SHasEUq7dz95oAdV3upkMMGOgEpAg81 LWZLN/oqTt4qoYlKh4Iz1/kf4WWrrk36K6W+BgYSXfgt7VhVjyhVIu0UCoweKJVU aGyXKPzSz4cGMKSHxYmItnIk9sYoY/MqFJs68NT9ykLKQnKlno5b+uv9KjdZnZRu lSxvjveTvo7pzwMAS33g/IkOQMHjxdEz5eyDu+jAukSqqDvQ3/GSt7jvORfaMtG8 6kpaA1+Qox6D52crfrTR+fFT50qjXMO5QXx12Cq2yJTNvCtJgQstDtoZsDxGuJQb 995FqAlZcyaZk2E+IPZyOGYgq+zuZTZ6AjDVrmZ/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmp3D74fEMjF3xTOOjqXZPaJvlMkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRkYWM2MDQzLTM0ZTAtNDM1Ny1hNWFjLTQ1ODdhMDI2MTk4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5YwDQYJKoZIhvcNAQELBQADggEBAByKtuueRF6gAfCHlrtggbRQ 2ONPZ42bCQJj4rmRkC8ljSlFuP1htP4VW6ftPRU2pyJ8lCySFrmiyc99FcuCHryT Ddsxd9QhGF/a5IXPfnQ0XdMP0gTs32ta/kr5GAmAfoMdbA/htkrLmqHOeq7mQwnb /2PD8FusKi9TKo2EIDs8R4g2y5OjPJDiaMmocdh5tb5g1k0uCffgiq/Mx4GMsDw8 OaoD2XWEnqYnGI8Rtlu79V6NA0QxN7Tx8JlJuB95WktXvQjrgx5kU+1LXZxcKF6J KaZ1KVXZ6hoJXRnpx4iABNS1j3dfb8O2xBJpTeYvYkvTqsbK8ZX6aLw6wpH1JkI= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:59 2025 by rpki-client