$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4005978-7f1f-40b3-9bcb-9eee318ef003.roa File: d4005978-7f1f-40b3-9bcb-9eee318ef003.roa (raw, json) Hash identifier: XdfI/cGh5+JCgUNXqTcuZ65+4540XOPIEqVUMEYURGY= Subject key identifier: 5A:63:13:71:6F:9E:71:E2:76:59:61:15:A5:FD:1B:4D:44:25:AF:C0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 47D152D595F94CCF038B452E2F1924D76F833B56 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4005978-7f1f-40b3-9bcb-9eee318ef003.roa Signing time: Tue 23 Sep 2025 17:34:25 +0000 ROA not before: Tue 23 Sep 2025 17:34:25 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:d80::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d1:52:d5:95:f9:4c:cf:03:8b:45:2e:2f:19:24:d7:6f:83:3b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 23 17:34:25 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=c7b8ec503b04b2f0cf5f800c63fcee53e274073b4edc51aa8167d05a3ea6518a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d5:b5:b7:36:db:af:fd:02:b0:58:74:27:84: 1c:21:09:94:ab:c0:03:40:e5:d1:d3:17:32:a8:76: 82:fd:d2:03:e2:da:ad:c4:95:0b:b7:58:4f:dd:35: f4:1b:e6:b1:9f:c3:31:df:18:2b:27:af:fe:4c:47: 64:18:62:34:a7:0e:7b:05:59:39:2d:5c:8b:e5:b7: 7d:c1:aa:0e:7e:e1:3e:1f:c3:14:51:1f:d2:5e:a8: 1c:fa:eb:0f:77:8f:0f:1e:0b:13:f6:68:c1:9f:a6: 44:f4:ff:a9:db:34:40:d3:a9:14:55:3e:d6:2f:43: d7:3d:28:86:e2:6d:06:f0:9d:9e:cf:e6:00:68:32: 86:39:51:0b:f9:96:0a:12:f5:6a:4c:53:ca:b7:c1: 33:72:10:9d:c9:af:f6:58:b0:9b:5c:01:26:1b:67: ea:6f:76:f0:11:95:37:12:47:70:30:83:0c:fb:1a: d2:31:20:56:f1:ee:3d:02:d2:96:3e:35:37:11:e9: 2e:06:c7:25:41:e5:a5:76:6d:f3:b1:ea:99:5f:6f: a7:07:6a:7f:b6:a8:ec:e0:b4:4e:d2:ba:3f:fa:0b: c4:93:f3:45:f6:2c:47:aa:25:98:34:fc:97:40:03: de:5d:73:c5:9e:f5:e8:42:3b:ba:d3:5b:e7:12:8c: 64:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:63:13:71:6F:9E:71:E2:76:59:61:15:A5:FD:1B:4D:44:25:AF:C0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4005978-7f1f-40b3-9bcb-9eee318ef003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:d80::/43 Signature Algorithm: sha256WithRSAEncryption 31:9c:20:b9:92:5f:18:28:07:6f:f4:ce:3f:8b:61:be:17:53: ea:34:3c:7e:ee:bc:97:41:a2:d4:9d:aa:2d:5f:3e:55:ef:08: ab:7c:6d:fa:11:6b:71:23:4d:ba:c5:b6:71:47:9d:32:73:68: 1b:93:98:d5:0d:69:2f:0d:74:8c:14:65:5c:95:cf:bb:05:73: f6:5d:09:ed:c1:96:df:1b:a7:e8:33:6e:a6:59:1c:f7:de:03: ea:6a:62:8f:d1:32:01:36:45:ba:57:6a:5b:56:f3:bb:1c:63: 38:d5:b7:7e:cd:11:8a:04:77:75:4d:80:80:07:25:a1:2b:3a: c1:34:90:7a:d2:5d:73:90:b7:3a:28:d0:7c:b0:5b:4a:e6:e7: 63:98:ae:34:cc:1d:f4:bc:39:c8:5a:e4:40:df:e2:2f:19:47: 49:26:c8:13:a4:ec:f5:5a:ca:98:37:b6:5c:24:7d:b9:30:07: 9f:ee:69:25:6b:63:7c:f4:b5:a6:4d:d5:e3:84:a2:c9:0c:a3: b1:26:12:0a:27:f9:7c:19:1d:ba:c7:a7:eb:bf:44:73:a5:24: 30:30:44:4c:a9:b8:b3:00:bf:42:66:5d:44:76:78:e5:00:3f: 89:3f:fc:bf:20:c2:e2:dd:fc:4b:75:57:e7:5b:f2:67:36:56: c6:78:5e:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR9FS1ZX5TM8Di0UuLxkk12+DO1YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwOTIzMTczNDI1WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2I4ZWM1MDNiMDRiMmYwY2Y1ZjgwMGM2M2ZjZWU1M2Uy NzQwNzNiNGVkYzUxYWE4MTY3ZDA1YTNlYTY1MThhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD01bW3Ntuv/QKwWHQnhBwhCZSrwANA5dHTFzKodoL90gPi 2q3ElQu3WE/dNfQb5rGfwzHfGCsnr/5MR2QYYjSnDnsFWTktXIvlt33Bqg5+4T4f wxRRH9JeqBz66w93jw8eCxP2aMGfpkT0/6nbNEDTqRRVPtYvQ9c9KIbibQbwnZ7P 5gBoMoY5UQv5lgoS9WpMU8q3wTNyEJ3Jr/ZYsJtcASYbZ+pvdvARlTcSR3Awgwz7 GtIxIFbx7j0C0pY+NTcR6S4GxyVB5aV2bfOx6plfb6cHan+2qOzgtE7Suj/6C8ST 80X2LEeqJZg0/JdAA95dc8We9ehCO7rTW+cSjGQzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWmMTcW+eceJ2WWEVpf0bTUQlr8AwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q0MDA1OTc4LTdmMWYtNDBiMy05YmNiLTllZWUzMThlZjAwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmBZzADYAwDQYJKoZIhvcNAQELBQADggEBADGcILmSXxgoB2/0zj+LYb4X U+o0PH7uvJdBotSdqi1fPlXvCKt8bfoRa3EjTbrFtnFHnTJzaBuTmNUNaS8NdIwU ZVyVz7sFc/ZdCe3Blt8bp+gzbqZZHPfeA+pqYo/RMgE2RbpXaltW87scYzjVt37N EYoEd3VNgIAHJaErOsE0kHrSXXOQtzoo0HywW0rm52OYrjTMHfS8Ocha5EDf4i8Z R0kmyBOk7PVaypg3tlwkfbkwB5/uaSVrY3z0taZN1eOEoskMo7EmEgon+XwZHbrH p+u/RHOlJDAwREypuLMAv0JmXUR2eOUAP4k//L8gwuLd/Et1V+db8mc2VsZ4Xog= -----END CERTIFICATE-----Generated at Wed Oct 8 21:35:56 2025 by rpki-client