$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa File: f0f08d8e-64f4-4e2b-8f33-26427783e662.roa (raw, json) Hash identifier: ZErCgVkg6FP25PivqqxKTrLMKZPXvrv0qW0QDZUrB9w= Subject key identifier: 57:65:0B:2C:1E:07:B9:67:CD:32:E9:E1:01:7C:63:A9:F7:EC:18:85 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 615C46608873D46F72E0829F8FC84112E6C479FD Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa Signing time: Tue 21 Oct 2025 12:30:21 +0000 ROA not before: Tue 21 Oct 2025 12:30:21 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:54a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:5c:46:60:88:73:d4:6f:72:e0:82:9f:8f:c8:41:12:e6:c4:79:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:30:21 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=0af9b2feaadee74f6e585065d511465ecc6688697c198c9d3b0ffb252d08bed3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:3a:aa:a1:43:e3:82:0b:26:3a:82:1f:30: 4b:99:b4:39:e0:71:5d:19:3f:eb:c8:bb:56:88:6f: 0b:02:65:5b:b8:28:2b:63:25:7f:b9:b4:bf:35:3c: ab:d5:87:d2:84:b9:96:ce:51:99:54:57:4a:55:15: 3e:8d:f5:f8:9d:1d:2e:c5:cb:d0:d3:91:f5:4e:b1: fe:c2:44:fd:2d:64:dc:2c:75:14:85:69:db:3a:5d: b3:d5:e9:88:1f:36:31:ec:cc:57:e9:0d:74:1f:8f: 2b:1e:fe:a6:cd:11:db:c1:01:37:7b:b6:a7:c9:37: 49:50:06:86:a6:53:3b:7f:0c:a3:15:cb:74:3f:30: e9:53:66:10:e0:e4:f4:40:16:14:0d:2a:67:d8:10: 3f:e3:d3:ee:0b:97:ad:ae:0f:66:39:c3:26:c0:66: 07:74:f4:1e:fc:3f:a7:c6:69:3a:4d:4b:cd:aa:95: 34:38:8d:d6:1a:99:1b:06:a6:e5:d8:87:93:d5:27: 85:80:1d:09:3d:f7:29:c8:d4:9f:05:5e:f9:4a:8f: f8:6f:1b:60:d9:ed:a5:43:7d:e7:30:3d:ff:b1:91: b6:88:f4:86:68:47:b0:4f:f4:17:10:a7:1a:07:8d: 40:f6:63:d1:55:22:e5:13:38:a4:cd:e8:0d:5a:e1: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:65:0B:2C:1E:07:B9:67:CD:32:E9:E1:01:7C:63:A9:F7:EC:18:85 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54a::/48 Signature Algorithm: sha256WithRSAEncryption 4c:46:74:db:89:b5:b5:51:d6:96:2b:50:78:ca:2c:82:78:6f: a2:7c:f3:a1:db:80:84:85:23:fa:05:47:58:37:d9:17:2e:71: e1:45:5a:44:fe:2a:4f:0a:f0:93:a7:c5:15:b3:03:15:5b:ee: 26:c2:90:f6:3b:db:52:88:4a:bf:ad:29:99:49:1e:4a:13:a9: 52:64:21:5d:e0:69:2c:d6:8b:28:81:38:02:46:9a:bd:58:9f: 83:4e:36:4e:f7:28:31:2f:5c:65:ea:82:be:53:ad:ed:1c:c9: 50:fa:6f:95:fe:3e:97:71:8d:eb:7c:af:86:f9:d6:d1:0d:35: 3b:be:ea:80:b4:bf:c2:52:f4:8c:2b:80:3b:f9:33:d6:20:8d: c0:9b:7b:48:f0:aa:bf:e2:f2:17:ce:9d:e6:4b:77:4f:1e:79: bf:0e:6a:25:6a:73:a6:6a:15:16:15:37:72:91:69:04:0c:4e: b5:16:bf:66:26:1b:d8:28:1d:9b:e9:a2:41:2e:ff:e9:e1:b9: ba:52:7e:92:fb:2c:ff:19:dc:32:ee:53:50:3e:23:b9:d4:bf: 85:a0:df:ba:40:6d:f7:b0:ba:f2:ea:b1:24:31:08:9a:f2:63: ce:cf:17:66:aa:9e:9f:7d:4d:45:76:b8:97:b2:d0:39:46:b9: 38:c2:34:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYVxGYIhz1G9y4IKfj8hBEubEef0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIzMDIxWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWY5YjJmZWFhZGVlNzRmNmU1ODUwNjVkNTExNDY1ZWNj NjY4ODY5N2MxOThjOWQzYjBmZmIyNTJkMDhiZWQzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy/DqqoUPjggsmOoIfMEuZtDngcV0ZP+vIu1aIbwsCZVu4 KCtjJX+5tL81PKvVh9KEuZbOUZlUV0pVFT6N9fidHS7Fy9DTkfVOsf7CRP0tZNws dRSFads6XbPV6YgfNjHszFfpDXQfjyse/qbNEdvBATd7tqfJN0lQBoamUzt/DKMV y3Q/MOlTZhDg5PRAFhQNKmfYED/j0+4Ll62uD2Y5wybAZgd09B78P6fGaTpNS82q lTQ4jdYamRsGpuXYh5PVJ4WAHQk99ynI1J8FXvlKj/hvG2DZ7aVDfecwPf+xkbaI 9IZoR7BP9BcQpxoHjUD2Y9FVIuUTOKTN6A1a4ccxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUV2ULLB4HuWfNMunhAXxjqffsGIUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YwZjA4ZDhlLTY0ZjQtNGUyYi04ZjMzLTI2NDI3NzgzZTY2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUowDQYJKoZIhvcNAQELBQADggEBAExGdNuJtbVR1pYrUHjKLIJ4 b6J886HbgISFI/oFR1g32RcuceFFWkT+Kk8K8JOnxRWzAxVb7ibCkPY721KISr+t KZlJHkoTqVJkIV3gaSzWiyiBOAJGmr1Yn4NONk73KDEvXGXqgr5Tre0cyVD6b5X+ Ppdxjet8r4b51tENNTu+6oC0v8JS9IwrgDv5M9YgjcCbe0jwqr/i8hfOneZLd08e eb8OaiVqc6ZqFRYVN3KRaQQMTrUWv2YmG9goHZvpokEu/+nhubpSfpL7LP8Z3DLu U1A+I7nUv4Wg37pAbfewuvLqsSQxCJryY87PF2aqnp99TUV2uJey0DlGuTjCNFA= -----END CERTIFICATE-----Generated at Thu Oct 23 05:49:40 2025 by rpki-client