$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04f5a71b-93f6-4367-a363-e37651f9b3c2.roa File: 04f5a71b-93f6-4367-a363-e37651f9b3c2.roa (raw, json) Hash identifier: VMXV2BUdyVgHsSpbr1j8KFZSvjvRLDcXPVCKBKOKBk8= Subject key identifier: 38:D9:1E:07:69:66:FF:84:5F:AF:02:78:9B:86:DC:CA:34:6A:D4:12 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2A012D3E78F29B85C4CE032DC3B3FF6113895BA1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04f5a71b-93f6-4367-a363-e37651f9b3c2.roa Signing time: Mon 06 Oct 2025 17:13:54 +0000 ROA not before: Mon 06 Oct 2025 17:13:54 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:01:2d:3e:78:f2:9b:85:c4:ce:03:2d:c3:b3:ff:61:13:89:5b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:13:54 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=0b7ca4d5287fd5f4f9da72d46a838a81f29e4aa88187eac614e981beb18230fa, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:07:18:d6:23:1f:19:cb:01:5c:0f:53:7a: e2:24:c7:79:09:dc:e9:4e:48:f2:62:12:b2:81:f5: 0f:c6:d3:35:ab:b6:80:40:e4:d5:13:78:b1:04:1d: cc:f1:a9:0a:bb:fa:c3:7f:40:13:4b:7a:b9:ca:fc: 31:88:0f:00:aa:0d:91:90:87:82:5f:ca:c2:63:2f: b4:53:a4:f1:f7:b9:06:b1:d2:18:e6:d1:ad:5d:bf: 3b:a6:63:43:22:6a:fc:75:e5:f7:d5:85:af:fd:79: 36:73:5f:ab:1c:2d:66:71:44:f6:70:24:15:3a:12: ca:e6:8d:16:d0:5d:1b:ef:97:72:b8:68:34:49:d1: 04:f5:6b:20:63:65:2e:33:21:9d:da:7d:76:ba:be: a3:68:52:cb:c3:86:25:0d:6a:3e:43:d5:06:55:c8: 9d:f4:c2:58:8d:36:30:0d:5a:e8:65:bd:02:64:6e: 66:ea:49:45:58:27:82:64:72:f2:af:a5:57:16:a5: e7:35:43:d5:e7:d3:99:81:68:2b:01:4c:c9:89:2e: 1f:90:a3:d5:b3:46:6e:3b:58:8f:63:9f:15:9c:5e: e4:1e:78:9c:25:ed:4d:ef:64:6a:2e:14:66:51:e7: ea:30:22:6e:f3:0a:51:a1:4d:41:5d:ca:cb:e6:76: 55:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D9:1E:07:69:66:FF:84:5F:AF:02:78:9B:86:DC:CA:34:6A:D4:12 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04f5a71b-93f6-4367-a363-e37651f9b3c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0f::/48 Signature Algorithm: sha256WithRSAEncryption 7c:40:56:16:3d:01:0e:f9:99:58:4e:f4:49:ea:bc:7d:47:34: 97:3b:ea:46:e9:3e:4c:8c:2a:9c:75:b2:b6:54:25:11:82:f0: 13:bb:e6:63:f0:30:ec:2b:34:98:20:cc:9f:b7:08:ed:0c:42: 2e:5e:12:71:56:d4:df:6a:c6:c5:b8:f2:20:d6:4a:7f:b1:d2: c2:41:00:5b:f8:f4:59:6c:53:89:47:5c:ad:5a:7f:4d:25:fc: 85:db:d0:05:6a:c4:04:15:37:9c:b5:cf:81:49:76:9f:37:30: 70:7c:d2:ab:4f:a4:07:ef:28:36:26:8f:b1:0b:a4:8e:a6:bc: d9:86:f1:ad:0f:df:86:dd:a6:3b:5a:93:6e:ae:da:cd:60:9e: 76:21:06:a8:f1:b2:bb:42:f0:da:e7:0f:cc:2c:6d:df:f0:34: 3f:8a:44:15:61:e1:56:50:d0:bb:3d:7d:f0:7c:d3:d2:1d:ff: 12:d3:51:f6:ba:09:ea:d8:5d:62:0a:22:04:b7:a3:5e:d0:71: 59:61:da:5c:22:98:cd:24:70:72:fa:41:cf:d7:f4:dd:b2:87: f2:bb:22:b9:3e:8c:4f:4a:28:2a:c2:be:89:6c:ab:36:52:a4: c1:5e:f4:e1:57:08:1f:b1:43:31:07:ba:7c:68:66:69:3b:8e: 9d:83:d3:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKgEtPnjym4XEzgMtw7P/YROJW6EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMzU0WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjdjYTRkNTI4N2ZkNWY0ZjlkYTcyZDQ2YTgzOGE4MWYy OWU0YWE4ODE4N2VhYzYxNGU5ODFiZWIxODIzMGZhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChfAcY1iMfGcsBXA9TeuIkx3kJ3OlOSPJiErKB9Q/G0zWr toBA5NUTeLEEHczxqQq7+sN/QBNLernK/DGIDwCqDZGQh4JfysJjL7RTpPH3uQax 0hjm0a1dvzumY0Miavx15ffVha/9eTZzX6scLWZxRPZwJBU6EsrmjRbQXRvvl3K4 aDRJ0QT1ayBjZS4zIZ3afXa6vqNoUsvDhiUNaj5D1QZVyJ30wliNNjANWuhlvQJk bmbqSUVYJ4JkcvKvpVcWpec1Q9Xn05mBaCsBTMmJLh+Qo9WzRm47WI9jnxWcXuQe eJwl7U3vZGouFGZR5+owIm7zClGhTUFdysvmdlXxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUONkeB2lm/4RfrwJ4m4bcyjRq1BIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA0ZjVhNzFiLTkzZjYtNDM2Ny1hMzYzLWUzNzY1MWY5YjNjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA8wDQYJKoZIhvcNAQELBQADggEBAHxAVhY9AQ75mVhO9EnqvH1H NJc76kbpPkyMKpx1srZUJRGC8BO75mPwMOwrNJggzJ+3CO0MQi5eEnFW1N9qxsW4 8iDWSn+x0sJBAFv49FlsU4lHXK1af00l/IXb0AVqxAQVN5y1z4FJdp83MHB80qtP pAfvKDYmj7ELpI6mvNmG8a0P34bdpjtak26u2s1gnnYhBqjxsrtC8NrnD8wsbd/w ND+KRBVh4VZQ0Ls9ffB809Id/xLTUfa6CerYXWIKIgS3o17QcVlh2lwimM0kcHL6 Qc/X9N2yh/K7Irk+jE9KKCrCvolsqzZSpMFe9OFXCB+xQzEHunxoZmk7jp2D064= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:33 2025 by rpki-client