$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bdcaa906-63fd-4cc3-bf7a-252f4f2c9ad4.roa File: bdcaa906-63fd-4cc3-bf7a-252f4f2c9ad4.roa (raw, json) Hash identifier: hhwLB4aNs9JCE0gPstdh5gYVHq1m5x3BN+Qcg0BW2gM= Subject key identifier: 68:F8:76:5E:51:73:F8:AF:D1:11:FE:59:5F:0A:03:E7:E2:A5:B3:DC Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2DDA04AA166EF26C5DB7D36D011FAEDB173A35C2 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bdcaa906-63fd-4cc3-bf7a-252f4f2c9ad4.roa Signing time: Fri 17 Oct 2025 20:00:36 +0000 ROA not before: Fri 17 Oct 2025 20:00:36 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:d70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:da:04:aa:16:6e:f2:6c:5d:b7:d3:6d:01:1f:ae:db:17:3a:35:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 17 20:00:36 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=eb2a027e3cfd7f7ce5407a7e4ccd17153aa1c7efc0cdd7d9c81106028252bc88, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:01:45:9a:8a:4e:94:93:b6:07:c8:1e:eb:f3: 43:91:e9:84:80:59:22:65:bd:bf:e3:5d:e3:ab:15: 72:55:65:e2:46:bb:fd:42:66:d4:99:e9:1f:ed:fa: 8f:17:6e:13:b8:11:cb:05:65:db:fa:94:4b:8e:ab: 00:64:97:b6:04:bb:20:c5:c2:19:e9:8f:9c:32:a6: ac:7d:52:ad:36:81:00:8b:64:e9:7c:0d:f1:1f:bb: fa:ed:d6:86:bb:0d:b6:6e:71:61:16:6a:a4:ce:69: a2:e6:71:9c:98:14:06:fc:61:ca:41:b2:0c:88:a9: 0e:61:e2:4f:5b:c0:ed:44:ba:97:92:38:d1:02:29: 51:b5:92:13:f0:c7:12:e8:7a:c8:07:4c:d8:f7:3b: 17:db:f6:86:dc:53:79:89:27:af:fa:83:12:cd:3e: e5:d7:d9:e8:55:c6:5c:91:d5:cd:31:60:90:ec:3a: a8:45:51:7e:fd:28:09:43:8d:65:2c:71:68:f8:e4: 03:55:ca:01:57:d6:be:2d:ad:6f:30:85:0c:ef:c5: ad:bd:95:65:89:ce:54:bf:98:e0:b7:13:f1:79:3f: e0:a2:ba:1d:2f:11:c1:18:6d:66:52:a1:ac:bf:de: ca:46:b8:94:2a:08:82:ad:e7:4f:64:2d:ef:93:3d: 3b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F8:76:5E:51:73:F8:AF:D1:11:FE:59:5F:0A:03:E7:E2:A5:B3:DC X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bdcaa906-63fd-4cc3-bf7a-252f4f2c9ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:d70::/44 Signature Algorithm: sha256WithRSAEncryption 74:73:b0:1d:47:bd:bf:a4:d3:ed:ee:00:aa:4c:41:d5:fb:72: c9:76:63:81:d7:d8:a0:b6:3b:de:34:73:04:86:35:0a:f1:47: 11:ac:db:ec:85:98:4b:56:f8:b6:51:d5:14:66:89:f8:42:db: 86:7d:f7:31:9d:3d:03:b8:fc:5b:a0:6c:66:96:da:22:98:04: 69:6d:60:4a:b3:38:22:d2:a8:6f:25:35:f1:b0:7c:bb:c5:a9: 63:c3:aa:ec:d0:65:13:5d:aa:01:df:d1:17:da:96:e9:86:cc: ba:98:7f:d0:30:0a:77:c4:da:ca:7d:bc:ce:9d:e6:0e:8c:3b: ee:99:d2:b1:c9:fc:9b:ba:bd:0a:54:96:f0:a1:ac:eb:37:33: 25:e8:b9:dd:c7:16:ba:f0:be:95:2f:c8:96:bd:b5:4a:6f:ec: f7:17:1c:2e:32:3d:17:ed:d3:75:50:c7:68:29:23:b0:56:ba: 42:47:d0:c5:15:f2:e0:7f:74:6c:e8:17:2b:ed:7e:87:51:dc: 8b:f1:24:e7:ac:79:5a:e9:8a:62:33:98:d6:c1:6c:30:f5:fd: 0d:6f:31:4b:ec:32:1b:ef:6a:d3:33:3d:b9:ad:56:72:34:6c: 3b:63:5c:f5:2e:03:1c:72:9f:6b:41:9c:f3:2e:29:f5:ed:e7: 00:a9:ab:92 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULdoEqhZu8mxdt9NtAR+u2xc6NcIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDE3MjAwMDM2WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjJhMDI3ZTNjZmQ3ZjdjZTU0MDdhN2U0Y2NkMTcxNTNh YTFjN2VmYzBjZGQ3ZDljODExMDYwMjgyNTJiYzg4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXAUWaik6Uk7YHyB7r80OR6YSAWSJlvb/jXeOrFXJVZeJG u/1CZtSZ6R/t+o8XbhO4EcsFZdv6lEuOqwBkl7YEuyDFwhnpj5wypqx9Uq02gQCL ZOl8DfEfu/rt1oa7DbZucWEWaqTOaaLmcZyYFAb8YcpBsgyIqQ5h4k9bwO1EupeS ONECKVG1khPwxxLoesgHTNj3Oxfb9obcU3mJJ6/6gxLNPuXX2ehVxlyR1c0xYJDs OqhFUX79KAlDjWUscWj45ANVygFX1r4trW8whQzvxa29lWWJzlS/mOC3E/F5P+Ci uh0vEcEYbWZSoay/3spGuJQqCIKt509kLe+TPTvvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaPh2XlFz+K/REf5ZXwoD5+Kls9wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JkY2FhOTA2LTYzZmQtNGNjMy1iZjdhLTI1MmY0ZjJjOWFkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADXAwDQYJKoZIhvcNAQELBQADggEBAHRzsB1Hvb+k0+3uAKpMQdX7 csl2Y4HX2KC2O940cwSGNQrxRxGs2+yFmEtW+LZR1RRmifhC24Z99zGdPQO4/Fug bGaW2iKYBGltYEqzOCLSqG8lNfGwfLvFqWPDquzQZRNdqgHf0RfalumGzLqYf9Aw CnfE2sp9vM6d5g6MO+6Z0rHJ/Ju6vQpUlvChrOs3MyXoud3HFrrwvpUvyJa9tUpv 7PcXHC4yPRft03VQx2gpI7BWukJH0MUV8uB/dGzoFyvtfodR3IvxJOeseVrpimIz mNbBbDD1/Q1vMUvsMhvvatMzPbmtVnI0bDtjXPUuAxxyn2tBnPMuKfXt5wCpq5I= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:48 2025 by rpki-client