$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b642a109-e9c2-47d6-891e-b07342398a0e.roa File: b642a109-e9c2-47d6-891e-b07342398a0e.roa (raw, json) Hash identifier: zmyI/dxpvrNLtqg1k4yN2Ycat5ZBjfJmdrekFffVZMA= Subject key identifier: 27:29:52:B7:B1:3B:AD:04:73:DA:74:7B:56:17:80:F9:5D:96:3B:A1 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7CEB731536F466FB1B089C17ECE1E8F7A6FFBF15 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b642a109-e9c2-47d6-891e-b07342398a0e.roa Signing time: Fri 31 Oct 2025 01:30:30 +0000 ROA not before: Fri 31 Oct 2025 01:30:30 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:eb:73:15:36:f4:66:fb:1b:08:9c:17:ec:e1:e8:f7:a6:ff:bf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 31 01:30:30 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=21bceda456da6b5c76a39d9193b0918c76986264301d81da53824e5d30accab8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:81:98:8d:df:e4:68:c6:71:49:c6:47:94: 40:dd:d0:ee:79:e1:e1:9b:53:5f:8e:fc:b4:ae:87: 8f:ef:70:04:98:e9:4d:46:fc:a3:9d:77:60:4c:1d: c7:34:28:77:58:a9:91:68:bc:cc:fd:2c:c8:ac:e9: a8:7c:6b:69:c9:e8:91:5d:09:b9:c8:58:c7:7d:a6: 20:40:f9:05:65:96:bd:b5:64:61:99:c7:e6:c8:64: bc:95:c2:dd:1a:a0:78:ad:d3:6c:62:8e:ad:32:4c: 00:ed:eb:2c:f1:1b:c1:70:7b:5e:b7:cb:b1:d8:19: 6f:76:3b:4d:5e:a6:22:c7:b3:d2:32:17:0f:93:12: a0:9a:5b:ab:db:29:0e:91:65:42:c5:00:c5:9d:fc: f0:43:ec:c6:6e:ab:5d:02:9b:04:0b:31:1f:27:ca: a5:80:97:99:1d:b2:2d:f4:47:a0:5b:ee:ff:f9:e7: df:1a:ac:37:c9:e8:00:82:4c:e8:17:b8:90:66:40: 06:dd:35:f6:f9:c5:66:bb:0c:bf:0f:40:1f:90:8f: a0:26:2b:3d:e2:58:d6:89:76:65:c0:f2:55:b1:62: cc:ea:ab:46:8d:9b:d8:92:d7:0f:01:ec:15:11:5a: f5:db:94:e5:97:a9:8c:42:9f:47:5e:8a:b7:97:98: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:29:52:B7:B1:3B:AD:04:73:DA:74:7B:56:17:80:F9:5D:96:3B:A1 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b642a109-e9c2-47d6-891e-b07342398a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c17::/48 Signature Algorithm: sha256WithRSAEncryption 57:b2:ab:f0:05:3e:7e:2d:0c:c0:73:a0:d6:e4:17:b5:e7:1c: 1d:03:10:6b:3d:f0:bc:7e:c0:d2:cd:85:21:f7:76:78:4f:16: 72:70:1d:7d:43:06:25:ac:0b:b5:42:d1:9e:4a:dd:e0:e7:2f: 3f:b0:50:2e:dd:c6:6b:d2:23:19:9c:25:d7:99:35:93:de:15: 94:a7:4f:ef:32:6a:58:11:2f:6b:49:30:e2:0b:b0:39:ee:cb: 55:05:a6:a9:63:c5:7d:47:54:11:94:72:77:50:15:9c:6d:36: 7c:33:be:2f:42:03:e6:a5:78:07:a7:65:d8:da:35:b5:43:f8: 31:83:d3:32:83:71:29:21:ae:21:8b:95:f6:bf:5f:c4:dc:b2: 5d:d7:ed:d4:47:ee:d1:10:98:a0:0f:ca:bf:73:c3:ba:d8:1a: d2:0e:c2:ee:b9:e4:db:f5:e2:f6:88:e6:da:8b:64:43:2d:93: 3f:60:37:11:86:a7:04:7e:b2:82:21:67:d8:cf:7e:87:19:d6: f3:22:6b:89:8f:4c:96:cf:68:f4:21:1c:fe:04:54:65:af:00: 27:b4:a3:10:ca:71:b6:ca:7f:ee:06:3b:3a:a3:7a:85:5d:d1: d8:e0:8a:3b:a4:b8:43:18:0a:21:9a:62:96:2b:d6:2c:b0:75: 7d:b5:6f:e8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfOtzFTb0ZvsbCJwX7OHo96b/vxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDMxMDEzMDMwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMWJjZWRhNDU2ZGE2YjVjNzZhMzlkOTE5M2IwOTE4Yzc2 OTg2MjY0MzAxZDgxZGE1MzgyNGU1ZDMwYWNjYWI4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRv4GYjd/kaMZxScZHlEDd0O554eGbU1+O/LSuh4/vcASY 6U1G/KOdd2BMHcc0KHdYqZFovMz9LMis6ah8a2nJ6JFdCbnIWMd9piBA+QVllr21 ZGGZx+bIZLyVwt0aoHit02xijq0yTADt6yzxG8Fwe163y7HYGW92O01epiLHs9Iy Fw+TEqCaW6vbKQ6RZULFAMWd/PBD7MZuq10CmwQLMR8nyqWAl5kdsi30R6Bb7v/5 598arDfJ6ACCTOgXuJBmQAbdNfb5xWa7DL8PQB+Qj6AmKz3iWNaJdmXA8lWxYszq q0aNm9iS1w8B7BURWvXblOWXqYxCn0deireXmLKhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJylSt7E7rQRz2nR7VheA+V2WO6EwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2I2NDJhMTA5LWU5YzItNDdkNi04OTFlLWIwNzM0MjM5OGEwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBcwDQYJKoZIhvcNAQELBQADggEBAFeyq/AFPn4tDMBzoNbkF7Xn HB0DEGs98Lx+wNLNhSH3dnhPFnJwHX1DBiWsC7VC0Z5K3eDnLz+wUC7dxmvSIxmc JdeZNZPeFZSnT+8yalgRL2tJMOILsDnuy1UFpqljxX1HVBGUcndQFZxtNnwzvi9C A+aleAenZdjaNbVD+DGD0zKDcSkhriGLlfa/X8Tcsl3X7dRH7tEQmKAPyr9zw7rY GtIOwu655Nv14vaI5tqLZEMtkz9gNxGGpwR+soIhZ9jPfocZ1vMia4mPTJbPaPQh HP4EVGWvACe0oxDKcbbKf+4GOzqjeoVd0djgijukuEMYCiGaYpYr1iywdX21b+g= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:22 2025 by rpki-client