$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f3f1b6a3-5a54-4834-be55-4536f3908ca9.roa File: f3f1b6a3-5a54-4834-be55-4536f3908ca9.roa (raw, json) Hash identifier: ntGXdJI08GdZZlwsAzZMoRTu0T0CXKOlyLL8kjwBZJU= Subject key identifier: 1E:54:9F:83:38:93:D3:B5:F7:DD:B3:83:EE:6E:3E:62:28:F6:AE:92 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7C6B40CB2E0B59BCB53DEAC79C9608666D0BF6C9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f3f1b6a3-5a54-4834-be55-4536f3908ca9.roa Signing time: Fri 31 Oct 2025 01:30:12 +0000 ROA not before: Fri 31 Oct 2025 01:30:12 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:648::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6b:40:cb:2e:0b:59:bc:b5:3d:ea:c7:9c:96:08:66:6d:0b:f6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 31 01:30:12 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c37fe780d622a50b37f7d93a18d2ad52dca597be01bf68f1ec822aaa77f93da1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:71:fa:ef:26:b9:fe:7d:2f:b7:df:10:10: 64:a5:a6:4f:f4:f8:50:af:a9:cd:89:40:75:eb:27: 0e:95:ac:34:cc:6a:7a:bd:bb:f9:89:ce:17:4e:59: cd:67:37:4c:11:21:c4:bc:10:73:4c:a0:11:f1:c5: 0b:77:57:23:d0:d7:0c:a2:a1:b7:94:b8:38:b1:27: 8f:ab:76:da:f3:fa:af:ae:ae:6a:60:46:8c:95:19: 74:78:4c:1b:e0:46:32:8d:82:48:3d:31:a0:d1:f6: 48:7f:ba:7f:32:7c:5b:e8:8f:e0:de:65:44:ae:3b: 97:50:d6:6b:30:4f:43:e6:64:b1:7d:e4:34:3a:0d: 4e:2c:cc:1c:80:c1:d6:65:be:15:64:20:90:90:05: 07:20:ad:ab:93:06:56:48:49:70:ae:bd:d5:76:8f: 1d:e0:fb:8e:3a:a4:3d:0a:cb:85:03:2b:2a:64:70: 82:30:42:7b:29:b6:9f:6a:ca:9a:cc:1c:e1:3e:f0: ae:34:2e:3d:8f:ad:5b:d6:76:4e:17:3c:04:a5:d6: 1a:d0:f1:3e:29:bd:74:15:31:c1:53:85:b2:37:86: 7f:dd:03:25:ad:09:6d:61:ef:c5:45:3a:a5:9b:9b: d3:2f:e6:cc:73:3b:84:03:1f:c2:a0:ef:ea:f2:bc: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:54:9F:83:38:93:D3:B5:F7:DD:B3:83:EE:6E:3E:62:28:F6:AE:92 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f3f1b6a3-5a54-4834-be55-4536f3908ca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:648::/48 Signature Algorithm: sha256WithRSAEncryption 97:7c:d6:da:68:71:b3:1c:0f:b1:7a:69:ca:ce:74:9d:8e:36: c0:f1:c1:b9:e5:90:b6:db:06:32:bb:28:a8:6e:d3:a2:df:91: 26:2d:15:89:f2:15:29:11:de:06:1a:0c:86:7d:59:d4:ab:b3: f7:ab:bc:a6:98:f3:ba:cd:1c:28:f6:1b:09:0b:38:95:9a:43: 20:ea:46:14:0b:4d:c6:e8:b3:64:f3:ca:a4:60:c9:98:4e:7c: 14:5f:e2:26:f2:26:a7:f5:51:49:0d:f1:b5:31:de:70:20:3f: fa:c6:85:61:6a:fa:af:10:0a:89:ba:e9:ff:5f:7f:2c:e3:be: fc:52:74:bc:24:3b:f1:c1:81:0d:29:54:19:ba:d9:0e:c8:1e: cb:fd:3a:67:01:17:45:1b:16:8b:05:7c:99:d2:64:81:c7:3f: c2:22:6b:87:79:1f:0d:d1:0c:67:84:f9:0f:ab:35:0f:43:58: b4:63:1d:a5:2a:f2:85:65:7f:de:0e:44:a2:dc:28:d9:d5:03: 2c:cb:01:94:f0:a1:13:31:25:72:22:e0:10:d7:6f:62:2d:ec: 54:59:72:82:7c:2c:51:d1:80:34:b1:7b:63:81:e6:dc:aa:2d: b8:a5:34:39:2d:26:38:e3:f5:0c:e6:a0:32:ba:9d:7b:86:d8: 5e:3b:fd:fb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfGtAyy4LWby1PerHnJYIZm0L9skwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDMxMDEzMDEyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzdmZTc4MGQ2MjJhNTBiMzdmN2Q5M2ExOGQyYWQ1MmRj YTU5N2JlMDFiZjY4ZjFlYzgyMmFhYTc3ZjkzZGExMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6j3H67ya5/n0vt98QEGSlpk/0+FCvqc2JQHXrJw6VrDTM anq9u/mJzhdOWc1nN0wRIcS8EHNMoBHxxQt3VyPQ1wyiobeUuDixJ4+rdtrz+q+u rmpgRoyVGXR4TBvgRjKNgkg9MaDR9kh/un8yfFvoj+DeZUSuO5dQ1mswT0PmZLF9 5DQ6DU4szByAwdZlvhVkIJCQBQcgrauTBlZISXCuvdV2jx3g+446pD0Ky4UDKypk cIIwQnsptp9qyprMHOE+8K40Lj2PrVvWdk4XPASl1hrQ8T4pvXQVMcFThbI3hn/d AyWtCW1h78VFOqWbm9Mv5sxzO4QDH8Kg7+ryvLnXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHlSfgziT07X33bOD7m4+Yij2rpIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YzZjFiNmEzLTVhNTQtNDgzNC1iZTU1LTQ1MzZmMzkwOGNhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABkgwDQYJKoZIhvcNAQELBQADggEBAJd81tpocbMcD7F6acrOdJ2O NsDxwbnlkLbbBjK7KKhu06LfkSYtFYnyFSkR3gYaDIZ9WdSrs/ervKaY87rNHCj2 GwkLOJWaQyDqRhQLTcbos2TzyqRgyZhOfBRf4ibyJqf1UUkN8bUx3nAgP/rGhWFq +q8QCom66f9ffyzjvvxSdLwkO/HBgQ0pVBm62Q7IHsv9OmcBF0UbFosFfJnSZIHH P8Iia4d5Hw3RDGeE+Q+rNQ9DWLRjHaUq8oVlf94ORKLcKNnVAyzLAZTwoRMxJXIi 4BDXb2It7FRZcoJ8LFHRgDSxe2OB5tyqLbilNDktJjjj9QzmoDK6nXuG2F47/fs= -----END CERTIFICATE-----Generated at Mon Nov 3 11:17:55 2025 by rpki-client