$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41ebc629-d0f5-46b1-91c9-800b5e69216f.roa File: 41ebc629-d0f5-46b1-91c9-800b5e69216f.roa (raw, json) Hash identifier: 5jY6637Gtuv+x5V/hQpHbHk9aOypTFAw3+VNA9fTPDI= Subject key identifier: FF:FD:D9:90:C3:16:E8:99:A9:36:3E:45:8D:BA:62:A9:82:7E:AD:49 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 50BB0A3A80B59D8014F366BFF3C96142FE239ECB Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41ebc629-d0f5-46b1-91c9-800b5e69216f.roa Signing time: Fri 31 Oct 2025 01:30:26 +0000 ROA not before: Fri 31 Oct 2025 01:30:26 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bb:0a:3a:80:b5:9d:80:14:f3:66:bf:f3:c9:61:42:fe:23:9e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 31 01:30:26 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=697d203e7040725e786f3cc8f44b286e27b8b092366c36c02917ff366cc58575, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:a5:fa:5e:8f:52:7f:80:95:2e:88:49:04: 30:23:91:8f:0e:5f:2d:a1:7c:a4:56:c9:d8:00:20: 3b:57:1f:cd:97:11:56:84:e3:1f:22:01:20:15:37: 4f:26:1d:21:84:36:3b:5c:34:b2:42:7d:cf:53:2a: 1d:81:05:5e:1d:ef:bd:78:61:f8:5c:d2:68:c7:be: a6:7d:a9:cf:59:2d:4a:96:f9:05:09:4d:4a:4a:9c: f7:19:76:17:68:7f:08:49:9f:ab:36:4c:89:12:53: 06:46:db:ae:96:1a:14:80:31:17:a1:94:fd:b7:5c: 4a:dc:00:96:6e:74:c7:f1:1e:33:b1:d6:1e:90:48: 0d:a0:91:50:8b:bf:eb:6b:4e:e2:53:f5:93:5b:c7: c6:28:bf:74:87:94:6b:97:12:6c:91:10:cb:91:3a: 56:94:1f:c9:e5:52:9a:4f:3a:f7:93:cf:70:ef:e0: 2c:f6:d9:d4:b8:fa:05:06:13:cd:7b:5d:d9:8c:b6: a6:79:88:db:90:16:75:8a:f0:00:23:06:99:dc:f4: 1d:7b:3e:82:89:c7:bc:5a:30:1f:2c:81:b6:be:c3: 63:e3:e4:70:9d:ae:a3:eb:c4:c1:d2:d0:7d:c9:03: c8:71:6f:be:d9:75:fd:81:9d:58:23:29:93:09:34: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FD:D9:90:C3:16:E8:99:A9:36:3E:45:8D:BA:62:A9:82:7E:AD:49 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41ebc629-d0f5-46b1-91c9-800b5e69216f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c15::/48 Signature Algorithm: sha256WithRSAEncryption 56:bd:0f:9e:16:2e:2f:f8:8c:6e:7d:eb:c3:ae:13:9b:6d:9d: 99:eb:b2:25:3f:c5:fd:46:7a:10:01:0b:6c:85:e6:46:28:da: af:15:1e:49:6c:e3:24:1b:2f:5b:3c:a9:19:88:5f:ae:26:74: 25:ba:ae:ad:7d:34:db:c6:c1:d3:37:a0:ef:98:f0:4a:c0:17: b8:03:68:03:26:3c:1b:8b:90:fc:11:b7:16:22:dd:a4:50:f6: 36:6d:1e:e0:f3:c3:f4:d0:d7:e1:a8:89:cb:41:72:aa:8f:3f: ab:1d:9a:e9:1f:d9:fb:2a:aa:c7:76:38:47:bf:4a:a8:4d:56: be:48:e2:e0:72:f5:d3:2c:82:d5:b1:8f:01:32:b7:c7:17:65: 98:3a:65:dd:1e:44:75:80:64:7e:cc:5f:6f:f1:db:ea:a4:5a: f9:02:f1:ca:a9:91:81:fb:84:b3:bc:5e:b9:1c:3b:01:93:0f: 07:59:88:46:74:2b:6c:80:e5:23:48:d1:b9:d0:03:fa:fb:c6: 96:61:02:16:49:13:d3:f9:10:99:44:af:cf:d0:03:01:d7:32: 10:9e:42:c3:98:c5:8c:b3:32:88:4e:08:5e:6f:7b:ab:08:4b: 61:d9:7a:21:e5:2c:a1:21:a5:7e:f9:83:5d:a7:a7:13:53:a9: e1:e5:b6:e6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUULsKOoC1nYAU82a/88lhQv4jnsswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDMxMDEzMDI2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTdkMjAzZTcwNDA3MjVlNzg2ZjNjYzhmNDRiMjg2ZTI3 YjhiMDkyMzY2YzM2YzAyOTE3ZmYzNjZjYzU4NTc1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6naX6Xo9Sf4CVLohJBDAjkY8OXy2hfKRWydgAIDtXH82X EVaE4x8iASAVN08mHSGENjtcNLJCfc9TKh2BBV4d7714Yfhc0mjHvqZ9qc9ZLUqW +QUJTUpKnPcZdhdofwhJn6s2TIkSUwZG266WGhSAMRehlP23XErcAJZudMfxHjOx 1h6QSA2gkVCLv+trTuJT9ZNbx8Yov3SHlGuXEmyREMuROlaUH8nlUppPOveTz3Dv 4Cz22dS4+gUGE817XdmMtqZ5iNuQFnWK8AAjBpnc9B17PoKJx7xaMB8sgba+w2Pj 5HCdrqPrxMHS0H3JA8hxb77Zdf2BnVgjKZMJNECFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU//3ZkMMW6JmpNj5FjbpiqYJ+rUkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQxZWJjNjI5LWQwZjUtNDZiMS05MWM5LTgwMGI1ZTY5MjE2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBUwDQYJKoZIhvcNAQELBQADggEBAFa9D54WLi/4jG5968OuE5tt nZnrsiU/xf1GehABC2yF5kYo2q8VHkls4yQbL1s8qRmIX64mdCW6rq19NNvGwdM3 oO+Y8ErAF7gDaAMmPBuLkPwRtxYi3aRQ9jZtHuDzw/TQ1+GoictBcqqPP6sdmukf 2fsqqsd2OEe/SqhNVr5I4uBy9dMsgtWxjwEyt8cXZZg6Zd0eRHWAZH7MX2/x2+qk WvkC8cqpkYH7hLO8XrkcOwGTDwdZiEZ0K2yA5SNI0bnQA/r7xpZhAhZJE9P5EJlE r8/QAwHXMhCeQsOYxYyzMohOCF5ve6sIS2HZeiHlLKEhpX75g12npxNTqeHltuY= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:33 2025 by rpki-client