$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa File: a34a1cd9-a6e1-4f90-a908-a66252462eae.roa (raw, json) Hash identifier: +A73Jj1wtm/bC60mJfE4hFwK4iup1twxCQ+F/nRyaIo= Subject key identifier: CC:D4:39:42:D9:38:A9:EE:4C:C0:2B:DB:23:D8:A6:38:33:6C:BF:47 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 529C43EF60D33FF1B2A467CA31B41351C9CBDE8E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa Signing time: Mon 06 Oct 2025 17:20:02 +0000 ROA not before: Mon 06 Oct 2025 17:20:02 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9c:43:ef:60:d3:3f:f1:b2:a4:67:ca:31:b4:13:51:c9:cb:de:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:20:02 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=8fceef8e855a2c228af4d6e00f2b9cf46d1e2c375fbf188c12267819b08d0d45, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:0f:2b:ad:bf:71:39:65:46:9e:77:31:6a: e4:39:6d:7d:81:05:27:f9:28:36:40:de:9d:3b:b9: 09:e9:77:12:43:f9:4b:37:45:e5:d4:62:bf:9a:d0: f5:4b:fe:7f:c4:42:2c:d2:94:2d:d0:43:e3:1e:f2: 8e:7b:e5:10:bc:de:b8:8b:de:3c:f8:87:bf:b9:b4: 99:b0:01:a0:e3:ec:f1:d7:b2:60:b8:f6:96:39:72: 47:0a:4e:4c:83:73:46:55:de:04:ef:71:39:d1:7a: aa:5f:d6:60:39:91:9b:ed:0c:3d:14:07:9c:93:2d: 0f:1f:15:57:af:b0:95:1f:a1:b0:0f:76:7a:43:d0: c4:59:dc:b2:7b:c5:9f:13:67:02:2d:2a:ab:6b:fb: bc:13:3a:2e:96:4a:6d:69:d7:db:f8:db:c6:ea:e7: d2:da:b8:bd:33:06:8e:61:4e:61:d3:5a:b6:8e:18: d2:ae:8e:10:f1:80:78:02:52:36:31:ab:7c:ce:17: a2:f6:8a:4c:93:d6:2e:c8:97:d7:d2:7b:cd:92:32: bf:61:79:55:fb:19:8c:15:48:fe:25:55:06:3a:2a: ff:74:da:ca:21:eb:de:9f:fa:0c:77:66:84:bd:95: 60:b3:a2:0d:15:29:e4:98:bb:4e:83:c1:db:0d:d9: 3a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D4:39:42:D9:38:A9:EE:4C:C0:2B:DB:23:D8:A6:38:33:6C:BF:47 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c15::/48 Signature Algorithm: sha256WithRSAEncryption 35:37:2e:72:c5:ca:85:82:90:32:38:14:6c:09:07:64:fb:05: 05:8a:ff:81:0f:2f:d6:da:5e:06:d5:7f:2c:bc:36:fd:20:a4: cc:c5:74:73:ee:7d:dd:1d:b6:d9:bf:d1:15:54:09:ff:e4:3a: a1:b8:4c:26:f0:f0:86:cc:56:82:f1:fd:1a:7d:15:42:86:10: f2:3a:bd:9f:4d:21:3e:d6:a0:36:f1:e4:78:b6:5a:6c:76:23: 15:a5:90:f0:6a:c5:36:79:10:df:f9:b7:40:db:f1:c8:bd:1b: 38:2c:46:51:ef:e4:a7:2d:99:9f:62:2d:05:9b:84:84:47:b8: 21:b4:4e:42:59:7f:ed:1f:de:24:99:49:f7:22:de:52:cb:e8: 4f:f8:65:86:39:cd:5f:ad:93:6d:7e:f5:b2:1e:c2:e1:4e:bf: be:87:45:6d:7a:62:56:08:de:1c:cd:e8:ea:aa:32:81:3c:5f: 03:70:dc:85:5d:f5:bd:2a:e5:78:8f:aa:ec:27:41:e9:d1:1c: d2:ad:36:cd:ba:b3:64:09:9c:c3:cd:51:f8:8b:04:98:05:7d: 25:ce:1d:a0:9a:5a:23:27:64:a3:07:49:12:15:ae:51:05:70: 8e:c2:c9:0c:5b:30:aa:76:a2:d7:3d:79:eb:f1:b7:44:e5:18: ea:e8:f5:27 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUpxD72DTP/GypGfKMbQTUcnL3o4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcyMDAyWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZmNlZWY4ZTg1NWEyYzIyOGFmNGQ2ZTAwZjJiOWNmNDZk MWUyYzM3NWZiZjE4OGMxMjI2NzgxOWIwOGQwZDQ1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2nw8rrb9xOWVGnncxauQ5bX2BBSf5KDZA3p07uQnpdxJD +Us3ReXUYr+a0PVL/n/EQizSlC3QQ+Me8o575RC83riL3jz4h7+5tJmwAaDj7PHX smC49pY5ckcKTkyDc0ZV3gTvcTnReqpf1mA5kZvtDD0UB5yTLQ8fFVevsJUfobAP dnpD0MRZ3LJ7xZ8TZwItKqtr+7wTOi6WSm1p19v428bq59LauL0zBo5hTmHTWraO GNKujhDxgHgCUjYxq3zOF6L2ikyT1i7Il9fSe82SMr9heVX7GYwVSP4lVQY6Kv90 2soh696f+gx3ZoS9lWCzog0VKeSYu06DwdsN2TodAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzNQ5Qtk4qe5MwCvbI9imODNsv0cwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2EzNGExY2Q5LWE2ZTEtNGY5MC1hOTA4LWE2NjI1MjQ2MmVhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBUwDQYJKoZIhvcNAQELBQADggEBADU3LnLFyoWCkDI4FGwJB2T7 BQWK/4EPL9baXgbVfyy8Nv0gpMzFdHPufd0dttm/0RVUCf/kOqG4TCbw8IbMVoLx /Rp9FUKGEPI6vZ9NIT7WoDbx5Hi2Wmx2IxWlkPBqxTZ5EN/5t0Db8ci9GzgsRlHv 5KctmZ9iLQWbhIRHuCG0TkJZf+0f3iSZSfci3lLL6E/4ZYY5zV+tk21+9bIewuFO v76HRW16YlYI3hzN6OqqMoE8XwNw3IVd9b0q5XiPquwnQenRHNKtNs26s2QJnMPN UfiLBJgFfSXOHaCaWiMnZKMHSRIVrlEFcI7CyQxbMKp2otc9eevxt0TlGOro9Sc= -----END CERTIFICATE-----Generated at Wed Oct 8 21:19:38 2025 by rpki-client