$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3a0985e-b817-4645-8cab-d98885ddb36e.roa File: c3a0985e-b817-4645-8cab-d98885ddb36e.roa (raw, json) Hash identifier: cZm95A1INGeV2iFjwIM8Bdix6JR+8CbJBrDav41cxkM= Subject key identifier: D6:28:16:FE:7A:90:DA:38:4D:CA:96:0E:D4:89:E9:F2:76:06:96:CD Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 04D80E23E722EE81D2A17261D4D265A6D1F1766D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3a0985e-b817-4645-8cab-d98885ddb36e.roa Signing time: Fri 26 Sep 2025 17:52:06 +0000 ROA not before: Fri 26 Sep 2025 17:52:06 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:546::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d8:0e:23:e7:22:ee:81:d2:a1:72:61:d4:d2:65:a6:d1:f1:76:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 26 17:52:06 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=a39f04ddb69290cab58a172070f669cf04b304a85b16e86874aec5f05b3a8c65, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:38:f7:9a:ea:14:19:d7:ec:2e:1a:e8:3f: f4:3a:f4:ed:04:4a:7f:b3:3b:69:e0:1c:51:5b:98: d2:03:01:24:3f:bf:dd:2a:7c:1f:12:0e:d0:c4:94: 3b:be:3c:3b:0b:1a:6b:81:9e:77:98:11:9c:26:43: 6f:96:93:20:b3:f7:40:a2:ae:f2:1a:a8:2b:d5:3b: 20:77:25:8d:11:53:27:0c:6a:35:16:18:84:14:38: a4:59:72:8c:ff:13:98:d5:46:18:e1:8b:2b:1c:13: e5:58:ae:19:c5:90:c5:8d:f2:d5:72:33:08:f3:14: 51:8f:00:00:e6:8d:9d:46:ee:a9:67:db:42:ff:54: 0e:e6:ac:8d:1b:34:54:44:75:99:0d:ea:57:08:03: 5c:c7:fa:18:31:76:39:20:23:d2:b7:85:a8:fa:bd: 1d:c9:cc:2f:1a:2b:35:70:93:74:9c:53:09:de:9c: 1a:7a:df:9c:e3:34:42:7d:fb:8b:85:73:32:38:eb: 88:5d:db:b1:81:9c:9f:26:fe:81:19:1f:eb:b4:4d: 4e:84:ec:0e:66:d9:c5:14:ea:36:bd:90:8d:c8:a7: e1:07:8f:45:e5:de:fa:1f:54:0b:b4:ba:5a:1f:77: 69:56:ab:5f:e5:50:f8:66:ed:ae:12:4f:33:ca:d3: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:28:16:FE:7A:90:DA:38:4D:CA:96:0E:D4:89:E9:F2:76:06:96:CD X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3a0985e-b817-4645-8cab-d98885ddb36e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:546::/48 Signature Algorithm: sha256WithRSAEncryption 6b:ff:30:68:22:bc:07:c8:12:3e:10:61:ef:f8:86:49:52:99: 60:ed:9d:48:ef:fb:e2:aa:cd:21:cf:ab:50:f3:2c:e6:d5:a9: 4c:7e:e8:44:8f:a7:af:12:d3:1a:af:37:c3:7c:c3:ed:54:11: e5:ff:2c:12:5b:3f:08:1a:a2:e3:a0:b5:06:b9:b3:a3:bc:72: 53:fd:3e:11:c6:44:62:62:9d:72:25:df:fc:c9:7d:10:57:39: 47:9b:31:ac:dc:7a:42:ea:08:e1:88:0e:4c:47:67:4d:c0:02: 79:d2:78:b3:83:77:cc:d9:f4:55:1f:e1:21:ea:b2:b1:85:8f: 8e:97:1e:4c:9f:4b:0a:7e:79:09:81:47:79:9c:77:29:f8:d1: bf:c3:7c:4c:26:b2:5a:c2:35:8f:ad:d4:32:cc:c1:b3:68:fb: bd:94:eb:69:0d:d1:b4:87:43:f6:ea:f7:b3:2f:5f:1e:d9:64: 8e:74:3d:72:2f:4d:b0:6e:d2:31:2a:d5:89:06:f4:b4:26:7b: ca:03:62:1f:98:bc:b9:4b:d3:30:64:f9:c5:15:52:1d:50:01: 8b:ba:32:c7:a1:c1:56:03:d3:9e:61:3c:d1:b7:8d:14:4a:30: 30:3b:32:fb:a3:1a:b2:9e:af:89:2f:0a:c3:2d:c6:2d:03:dd: 1a:ca:48:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBNgOI+ci7oHSoXJh1NJlptHxdm0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTI2MTc1MjA2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzlmMDRkZGI2OTI5MGNhYjU4YTE3MjA3MGY2NjljZjA0 YjMwNGE4NWIxNmU4Njg3NGFlYzVmMDViM2E4YzY1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3cTj3muoUGdfsLhroP/Q69O0ESn+zO2ngHFFbmNIDASQ/ v90qfB8SDtDElDu+PDsLGmuBnneYEZwmQ2+WkyCz90CirvIaqCvVOyB3JY0RUycM ajUWGIQUOKRZcoz/E5jVRhjhiyscE+VYrhnFkMWN8tVyMwjzFFGPAADmjZ1G7qln 20L/VA7mrI0bNFREdZkN6lcIA1zH+hgxdjkgI9K3haj6vR3JzC8aKzVwk3ScUwne nBp635zjNEJ9+4uFczI464hd27GBnJ8m/oEZH+u0TU6E7A5m2cUU6ja9kI3Ip+EH j0Xl3vofVAu0ulofd2lWq1/lUPhm7a4STzPK05D1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1igW/nqQ2jhNypYO1Inp8nYGls0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2MzYTA5ODVlLWI4MTctNDY0NS04Y2FiLWQ5ODg4NWRkYjM2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUYwDQYJKoZIhvcNAQELBQADggEBAGv/MGgivAfIEj4QYe/4hklS mWDtnUjv++KqzSHPq1DzLObVqUx+6ESPp68S0xqvN8N8w+1UEeX/LBJbPwgaouOg tQa5s6O8clP9PhHGRGJinXIl3/zJfRBXOUebMazcekLqCOGIDkxHZ03AAnnSeLOD d8zZ9FUf4SHqsrGFj46XHkyfSwp+eQmBR3mcdyn40b/DfEwmslrCNY+t1DLMwbNo +72U62kN0bSHQ/bq97MvXx7ZZI50PXIvTbBu0jEq1YkG9LQme8oDYh+YvLlL0zBk +cUVUh1QAYu6MsehwVYD055hPNG3jRRKMDA7MvujGrKer4kvCsMtxi0D3RrKSNE= -----END CERTIFICATE-----Generated at Wed Oct 8 21:35:55 2025 by rpki-client