$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa File: 1311a895-43fc-49eb-996b-222d911710a4.roa (raw, json) Hash identifier: 1su8n2VX3L3O9PWQQdN3Y1UMt7QTd1GAxJu2uingCwk= Subject key identifier: C5:42:B9:41:B6:4B:10:69:1A:68:17:CE:F2:D5:7B:2D:FC:49:6D:5E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 540220FCEC908BC5678F90D0B1BB400B57D3C109 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa Signing time: Fri 31 Oct 2025 01:30:13 +0000 ROA not before: Fri 31 Oct 2025 01:30:13 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:02:20:fc:ec:90:8b:c5:67:8f:90:d0:b1:bb:40:0b:57:d3:c1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 31 01:30:13 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f1777567f9d6f443f58f75f1936fd06a5dc5804fe1569b5ddd8d8a50fe03a3de, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4b:96:87:b6:b5:bd:c9:f4:7a:c6:cd:63:95: 6b:4e:4f:ac:b2:91:48:dc:3b:3f:f6:4b:08:3c:3c: 89:46:b0:62:33:76:50:b2:8e:a6:ad:47:25:27:22: 59:77:be:ff:c1:fc:da:78:a4:f9:3d:fd:0b:d5:b6: 26:5d:68:bb:21:a3:a2:83:18:2c:64:9a:d3:48:85: bb:e6:dd:8d:bb:29:2d:a7:8b:26:f8:df:a7:32:3b: 57:5d:6a:c7:ec:07:fb:dc:02:9d:fb:66:5c:7d:a5: ab:7a:41:a1:70:bd:9f:5c:b1:8c:0b:c9:95:ed:d6: 8e:49:33:13:75:d2:e7:88:04:a6:db:d2:28:b8:26: 3e:8b:4c:53:26:9d:39:00:37:dc:54:a8:a3:6e:e2: 2a:64:a7:dd:57:cc:c8:ce:d3:f7:ce:a9:4f:cf:96: b7:9c:9a:6d:ad:17:fb:9f:4a:fc:57:ef:82:fb:9e: ce:93:88:c2:76:d8:41:9d:32:f9:d7:ef:c4:43:d9: 91:fc:38:85:e7:f5:50:cc:2b:26:4d:31:12:7c:d6: 3b:19:cd:c2:0d:87:27:2e:d5:c1:f4:19:7e:d7:e9: 8d:36:b3:10:f0:0a:a9:bb:77:e8:56:6f:ad:b6:63: 5e:b1:77:ba:2c:2e:0a:b3:d7:53:ee:43:82:17:05: bb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:42:B9:41:B6:4B:10:69:1A:68:17:CE:F2:D5:7B:2D:FC:49:6D:5E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c00::/48 Signature Algorithm: sha256WithRSAEncryption 5a:0a:82:3a:dc:83:15:00:61:12:20:bf:7e:0c:62:76:ec:47: db:48:a0:ce:43:8d:83:a2:99:6e:e6:59:19:ee:12:4c:d6:9e: 74:94:bb:49:31:c4:d8:d9:93:19:3d:56:21:75:98:52:d6:7d: 98:32:72:8a:c7:a9:c5:e2:96:e3:4e:be:cd:1a:80:d0:64:e9: 83:93:fb:f3:1c:67:b9:e3:6f:b5:cf:11:1b:0f:d2:7b:03:4a: e6:6b:79:e0:7e:82:63:d6:99:17:ec:7c:16:eb:b3:f1:5e:54: ac:c8:f0:f3:3d:be:b9:91:d4:08:d3:28:18:69:12:3e:3e:b6: 8b:2f:86:f8:b0:76:63:b3:ef:0f:32:01:f8:79:fe:4d:59:4c: 2b:66:27:1b:5e:0d:f3:58:fd:aa:d8:42:78:bf:20:0d:8e:71: e5:e1:62:b0:2a:e9:5d:fc:d8:03:97:22:bc:42:7b:90:26:85: ea:9a:dd:f5:5d:f4:cc:74:46:ea:14:86:90:40:6a:21:0c:3f: 0f:84:f4:96:18:2f:5e:52:0b:c3:ad:3b:1f:38:8b:3c:55:57: 7e:8f:07:5f:f1:32:43:1f:60:ee:c6:2d:97:51:70:38:f6:a4: 99:aa:f9:83:43:f4:2c:5a:bb:a9:d5:a1:55:05:ed:ca:7a:75: d2:6d:7f:3d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVAIg/OyQi8Vnj5DQsbtAC1fTwQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDMxMDEzMDEzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTc3NzU2N2Y5ZDZmNDQzZjU4Zjc1ZjE5MzZmZDA2YTVk YzU4MDRmZTE1NjliNWRkZDhkOGE1MGZlMDNhM2RlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOS5aHtrW9yfR6xs1jlWtOT6yykUjcOz/2Swg8PIlGsGIz dlCyjqatRyUnIll3vv/B/Np4pPk9/QvVtiZdaLsho6KDGCxkmtNIhbvm3Y27KS2n iyb436cyO1ddasfsB/vcAp37Zlx9pat6QaFwvZ9csYwLyZXt1o5JMxN10ueIBKbb 0ii4Jj6LTFMmnTkAN9xUqKNu4ipkp91XzMjO0/fOqU/Plrecmm2tF/ufSvxX74L7 ns6TiMJ22EGdMvnX78RD2ZH8OIXn9VDMKyZNMRJ81jsZzcINhycu1cH0GX7X6Y02 sxDwCqm7d+hWb622Y16xd7osLgqz11PuQ4IXBbufAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxUK5QbZLEGkaaBfO8tV7LfxJbV4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzEzMTFhODk1LTQzZmMtNDllYi05OTZiLTIyMmQ5MTE3MTBhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAAwDQYJKoZIhvcNAQELBQADggEBAFoKgjrcgxUAYRIgv34MYnbs R9tIoM5DjYOimW7mWRnuEkzWnnSUu0kxxNjZkxk9ViF1mFLWfZgycorHqcXiluNO vs0agNBk6YOT+/McZ7njb7XPERsP0nsDSuZreeB+gmPWmRfsfBbrs/FeVKzI8PM9 vrmR1AjTKBhpEj4+tosvhviwdmOz7w8yAfh5/k1ZTCtmJxteDfNY/arYQni/IA2O ceXhYrAq6V382AOXIrxCe5Amheqa3fVd9Mx0RuoUhpBAaiEMPw+E9JYYL15SC8Ot Ox84izxVV36PB1/xMkMfYO7GLZdRcDj2pJmq+YND9Cxau6nVoVUF7cp6ddJtfz0= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:01 2025 by rpki-client