$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/602ceb72-505c-4859-8c8f-a71c4016f28f.roa File: 602ceb72-505c-4859-8c8f-a71c4016f28f.roa (raw, json) Hash identifier: 0folpj3tfZKNgZKjwJyXTUpNYyDFQTRzQRCVQGinA+Y= Subject key identifier: AF:70:87:DD:DA:F6:3E:07:C2:7B:4F:A0:EB:6F:05:B4:F7:6E:AA:D0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3AD2DDF01059FCA7E708BF30E61C7DDA5622A85F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/602ceb72-505c-4859-8c8f-a71c4016f28f.roa Signing time: Tue 21 Oct 2025 12:20:10 +0000 ROA not before: Tue 21 Oct 2025 12:20:10 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:545::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d2:dd:f0:10:59:fc:a7:e7:08:bf:30:e6:1c:7d:da:56:22:a8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:20:10 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=7f0fcfdb9a2d922ff13e469c8b5460e626b78afcaa4526e5325a77a1524fac50, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:12:69:7f:4f:9d:3c:ec:50:f6:b3:3e:f8:23: f4:57:66:68:fd:32:41:15:21:ee:86:40:75:b9:cc: 4c:eb:db:11:fa:29:fc:cf:96:1e:2a:15:9c:00:fe: 45:05:e3:da:a7:6f:f9:ea:33:f6:d3:cc:1d:25:e6: a3:a5:10:90:25:89:d5:98:01:fb:bd:48:f4:dc:9d: ab:c3:88:80:43:74:ac:6f:0b:9e:50:b1:63:c8:4c: 50:35:f6:dc:0c:a3:fd:d0:b5:80:3e:ff:40:60:fc: 9c:85:53:fb:12:12:22:b4:59:83:a0:72:51:f2:7a: 14:8d:30:c2:fe:ec:96:69:9d:54:b2:00:61:d4:7a: 37:62:30:96:ee:2a:d7:d9:f7:03:a9:a9:15:6a:26: d5:7b:49:95:b6:e5:d3:01:3a:72:fd:22:03:41:69: d2:7f:80:47:ce:c4:fc:14:74:cb:eb:0b:f5:2d:24: 73:04:69:a8:7f:8a:cb:c0:15:d5:59:51:31:99:8f: bb:75:0f:4d:b4:29:26:89:84:a7:db:8e:0b:96:d5: b7:e0:59:84:0f:f6:1e:ab:6c:62:ac:03:73:c2:01: 89:a7:4a:d2:91:6b:45:36:53:03:46:1b:66:b8:4d: 4c:17:cb:6f:aa:50:91:07:51:45:6f:46:c5:27:19: 57:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:70:87:DD:DA:F6:3E:07:C2:7B:4F:A0:EB:6F:05:B4:F7:6E:AA:D0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/602ceb72-505c-4859-8c8f-a71c4016f28f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:545::/48 Signature Algorithm: sha256WithRSAEncryption 1b:04:49:e1:45:8c:40:e7:9f:41:06:4c:88:57:e6:93:59:2f: 7d:cd:03:67:c1:5a:89:a2:63:d0:0d:67:7d:13:1d:70:d6:92: 69:6d:f9:81:6d:1c:a4:19:13:76:3f:b8:08:98:a3:ea:b5:5a: e8:2c:e1:de:52:42:74:ef:45:45:cc:df:cf:d9:42:22:a6:46: 2b:cf:63:62:5b:73:1c:27:3e:61:0d:05:d3:b4:39:e8:ca:05: 92:52:7c:5d:43:36:47:2c:fa:76:70:9b:ff:29:1d:04:af:42: dd:7b:90:af:32:b6:aa:7c:43:fd:f1:2e:c8:83:cf:e0:cd:ff: 20:55:d2:08:1a:8e:74:fa:9b:33:5d:53:7c:86:8a:77:e3:d9: 8d:b9:c8:82:a2:fa:40:17:c5:13:5c:8e:91:b7:77:66:c2:2f: 44:4a:27:ac:67:ea:b7:70:82:aa:88:40:eb:0d:b2:31:42:68: 57:09:6b:db:7c:a8:ab:a4:90:9a:88:7a:94:9d:d7:82:06:4b: fc:5c:5e:fb:f2:73:c3:b7:fe:68:98:25:df:5f:21:87:43:ac: 18:26:9d:34:61:a5:0f:b8:aa:0b:b9:ff:df:02:37:a2:ba:4e: 92:9a:aa:88:1a:70:6a:c2:0a:db:37:88:a5:eb:8a:89:e1:f7: 18:29:d0:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOtLd8BBZ/KfnCL8w5hx92lYiqF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIyMDEwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjBmY2ZkYjlhMmQ5MjJmZjEzZTQ2OWM4YjU0NjBlNjI2 Yjc4YWZjYWE0NTI2ZTUzMjVhNzdhMTUyNGZhYzUwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpEml/T5087FD2sz74I/RXZmj9MkEVIe6GQHW5zEzr2xH6 KfzPlh4qFZwA/kUF49qnb/nqM/bTzB0l5qOlEJAlidWYAfu9SPTcnavDiIBDdKxv C55QsWPITFA19twMo/3QtYA+/0Bg/JyFU/sSEiK0WYOgclHyehSNMML+7JZpnVSy AGHUejdiMJbuKtfZ9wOpqRVqJtV7SZW25dMBOnL9IgNBadJ/gEfOxPwUdMvrC/Ut JHMEaah/isvAFdVZUTGZj7t1D020KSaJhKfbjguW1bfgWYQP9h6rbGKsA3PCAYmn StKRa0U2UwNGG2a4TUwXy2+qUJEHUUVvRsUnGVdJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUr3CH3dr2PgfCe0+g628FtPduqtAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzYwMmNlYjcyLTUwNWMtNDg1OS04YzhmLWE3MWM0MDE2ZjI4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUUwDQYJKoZIhvcNAQELBQADggEBABsESeFFjEDnn0EGTIhX5pNZ L33NA2fBWomiY9ANZ30THXDWkmlt+YFtHKQZE3Y/uAiYo+q1Wugs4d5SQnTvRUXM 38/ZQiKmRivPY2JbcxwnPmENBdO0OejKBZJSfF1DNkcs+nZwm/8pHQSvQt17kK8y tqp8Q/3xLsiDz+DN/yBV0ggajnT6mzNdU3yGinfj2Y25yIKi+kAXxRNcjpG3d2bC L0RKJ6xn6rdwgqqIQOsNsjFCaFcJa9t8qKukkJqIepSd14IGS/xcXvvyc8O3/miY Jd9fIYdDrBgmnTRhpQ+4qgu5/98CN6K6TpKaqogacGrCCts3iKXrionh9xgp0B8= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:41 2025 by rpki-client