$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b972e918-8dd0-4057-aaa2-47ee5f32c314.roa File: b972e918-8dd0-4057-aaa2-47ee5f32c314.roa (raw, json) Hash identifier: 6DdGEHu1GAGXbi1MwnIuzUN8HsT6iWUPnMH7OmiUgy0= Subject key identifier: 45:42:8F:24:87:7D:71:25:0C:C1:04:7E:D3:9F:FF:FA:B5:22:8D:50 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3591E3A73D1A5426F420A909F0F3AEF957144D0A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b972e918-8dd0-4057-aaa2-47ee5f32c314.roa Signing time: Fri 26 Sep 2025 17:51:42 +0000 ROA not before: Fri 26 Sep 2025 17:51:42 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:385::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:91:e3:a7:3d:1a:54:26:f4:20:a9:09:f0:f3:ae:f9:57:14:4d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:51:42 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=ec7316c20f022033f1d7d3155a80621bf60186e76d4d39be47c18cdc6113dc5b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:fe:58:6a:76:8f:dd:42:79:39:00:d6:0d: b2:ab:b9:83:68:6d:20:d0:f8:44:87:c7:a3:e9:5d: 3d:d5:ed:d6:b7:b6:a8:89:e1:d1:ec:28:35:13:4b: 7a:2e:36:f5:04:b8:e3:3a:a0:3e:9e:a9:55:80:5e: 76:67:e4:78:2b:5a:30:cd:51:4f:b3:ca:59:ce:bf: 22:8f:af:09:fe:1a:86:21:70:92:73:c2:95:f8:0f: 3f:e6:da:03:32:16:51:f1:53:18:a8:8e:7c:fe:d6: 41:3f:9a:f2:52:fd:9f:b8:6d:5a:b3:c1:21:4e:52: 63:70:4f:b0:b3:bd:60:be:01:0b:42:ca:fb:41:a6: 53:55:3b:10:6a:ee:67:2c:94:e9:ca:a7:90:77:65: 41:31:c0:19:ae:fe:e9:c3:58:3c:9d:e9:e3:b7:9c: da:d0:f9:7c:1f:d2:a4:c3:90:93:2a:86:fb:00:e5: f1:e3:39:3c:1b:fc:67:e9:ea:90:8a:26:b3:94:87: cb:27:b2:fb:8d:79:0f:ce:b7:b8:9f:f0:c0:72:8c: 18:e0:32:bc:26:01:46:2d:71:eb:0b:33:5e:2d:7f: 43:0f:a1:ce:1b:24:cd:df:81:f3:95:73:b4:d9:96: 93:d5:39:06:e2:5e:06:34:e7:ce:8a:9f:1e:82:b6: d9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:42:8F:24:87:7D:71:25:0C:C1:04:7E:D3:9F:FF:FA:B5:22:8D:50 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b972e918-8dd0-4057-aaa2-47ee5f32c314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:385::/48 Signature Algorithm: sha256WithRSAEncryption 93:b0:38:26:3e:bf:b3:4f:7c:e3:88:1c:a6:55:b6:4e:50:54: f2:6d:9a:f6:e8:bd:f8:8e:0c:98:f2:0b:e5:43:21:59:1d:7c: 7a:0f:52:d4:5d:e1:01:7f:d3:87:b5:0b:f6:39:f4:70:82:d0: e4:74:e0:af:c6:1f:ec:67:41:28:92:8d:4e:58:74:0b:2f:d5: ec:7c:03:23:26:ab:de:f8:0a:5b:29:c3:92:e1:b8:96:44:81: 5f:b5:77:5f:28:bf:4d:c7:97:0b:2f:c7:95:98:43:50:54:82: 60:2f:f1:02:35:bf:6d:6d:f1:a3:f7:0e:cf:ef:73:67:62:7a: 21:17:d9:ab:b2:7a:09:d6:2d:fb:a3:13:29:5e:31:74:a0:e8: 63:43:92:3d:84:2d:f0:1d:3d:e6:b4:1d:5a:30:b9:68:35:82: d7:54:49:36:6b:7c:72:81:b2:54:4d:3e:9a:6b:e5:68:4c:1c: 2e:78:44:ce:aa:cd:89:8c:10:62:b8:69:27:2c:ad:00:62:4d: 2e:11:2f:2d:6f:f7:09:a0:54:5f:c3:59:09:57:56:3e:88:7e: a7:0c:0f:5a:e6:29:bf:2e:81:42:b5:db:e5:5a:b8:27:e0:e3: 4e:2c:24:e0:13:4f:12:22:0a:c4:78:2a:59:1e:43:ed:11:68: a8:0d:7a:05 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNZHjpz0aVCb0IKkJ8POu+VcUTQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MTQyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzczMTZjMjBmMDIyMDMzZjFkN2QzMTU1YTgwNjIxYmY2 MDE4NmU3NmQ0ZDM5YmU0N2MxOGNkYzYxMTNkYzViMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCViv5YanaP3UJ5OQDWDbKruYNobSDQ+ESHx6PpXT3V7da3 tqiJ4dHsKDUTS3ouNvUEuOM6oD6eqVWAXnZn5HgrWjDNUU+zylnOvyKPrwn+GoYh cJJzwpX4Dz/m2gMyFlHxUxiojnz+1kE/mvJS/Z+4bVqzwSFOUmNwT7CzvWC+AQtC yvtBplNVOxBq7mcslOnKp5B3ZUExwBmu/unDWDyd6eO3nNrQ+Xwf0qTDkJMqhvsA 5fHjOTwb/Gfp6pCKJrOUh8snsvuNeQ/Ot7if8MByjBjgMrwmAUYtcesLM14tf0MP oc4bJM3fgfOVc7TZlpPVOQbiXgY0586Knx6Cttn/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURUKPJId9cSUMwQR+05//+rUijVAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2I5NzJlOTE4LThkZDAtNDA1Ny1hYWEyLTQ3ZWU1ZjMyYzMxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4UwDQYJKoZIhvcNAQELBQADggEBAJOwOCY+v7NPfOOIHKZVtk5Q VPJtmvbovfiODJjyC+VDIVkdfHoPUtRd4QF/04e1C/Y59HCC0OR04K/GH+xnQSiS jU5YdAsv1ex8AyMmq974Clspw5LhuJZEgV+1d18ov03Hlwsvx5WYQ1BUgmAv8QI1 v21t8aP3Ds/vc2dieiEX2auyegnWLfujEyleMXSg6GNDkj2ELfAdPea0HVowuWg1 gtdUSTZrfHKBslRNPppr5WhMHC54RM6qzYmMEGK4aScsrQBiTS4RLy1v9wmgVF/D WQlXVj6IfqcMD1rmKb8ugUK12+VauCfg404sJOATTxIiCsR4KlkeQ+0RaKgNegU= -----END CERTIFICATE-----Generated at Wed Oct 8 21:31:02 2025 by rpki-client