$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/165da5d6-02ac-456a-b4d2-dc89fb03422b.roa File: 165da5d6-02ac-456a-b4d2-dc89fb03422b.roa (raw, json) Hash identifier: NPueN4nwqgeUusJG7Vf7SFQkSySCkjAhpZ6NoIFeqt8= Subject key identifier: 0D:31:43:A9:E8:24:85:69:D2:79:5C:F8:B6:5F:5B:2C:E7:3E:31:09 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4FD4BE21D0D9E45F1BD48DAFF8F3A18BB33C3029 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/165da5d6-02ac-456a-b4d2-dc89fb03422b.roa Signing time: Tue 04 Nov 2025 16:40:29 +0000 ROA not before: Tue 04 Nov 2025 16:40:29 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d4:be:21:d0:d9:e4:5f:1b:d4:8d:af:f8:f3:a1:8b:b3:3c:30:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:40:29 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=106262f79bfc268c6f965f9859dd3b53bdbb8e6e785708906c954d55f2c3bf3b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:58:33:e1:d3:ea:89:cb:69:68:db:4c:e6: 91:6a:bc:8d:ab:1e:c0:fb:aa:c0:81:9c:8e:10:9b: 0a:a7:94:43:a3:79:28:ef:c9:48:aa:8a:29:f5:82: f4:df:0c:ec:a1:58:ea:97:81:d8:27:20:d1:47:87: 8e:c9:19:b3:ba:f1:95:25:5b:91:ef:ac:a9:b7:0d: 23:3e:52:3f:dc:4b:d3:06:b3:7f:59:c6:37:51:60: e9:d6:f2:05:5d:58:9c:cd:47:3d:02:db:a5:89:a9: 7f:dd:57:96:6a:88:7c:83:ae:b7:06:33:8d:e5:71: 6d:2f:0b:8e:31:af:f3:01:e3:0b:5d:a1:1c:02:f3: 37:93:36:fb:df:0b:ba:88:a3:69:f5:68:9c:22:2c: 9b:a1:95:38:86:38:d1:50:6a:db:45:43:d6:83:65: 34:ef:d3:11:34:a6:9d:ed:ba:a5:6d:bd:cd:ae:a7: 76:64:86:37:b5:db:60:cd:6c:d5:a3:d7:c9:cc:5b: 0c:a2:34:2b:0b:a8:00:f8:6e:4f:b1:5f:da:47:fa: f6:f5:06:5e:78:04:63:bd:a9:26:86:a0:3c:05:66: d4:9f:0d:dc:01:b8:3f:4b:25:dd:85:0b:21:a2:f0: aa:9c:ed:a1:3c:eb:81:b8:0f:45:cc:fa:3b:34:86: 9b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:31:43:A9:E8:24:85:69:D2:79:5C:F8:B6:5F:5B:2C:E7:3E:31:09 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/165da5d6-02ac-456a-b4d2-dc89fb03422b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c12::/48 Signature Algorithm: sha256WithRSAEncryption 02:b3:b0:89:b2:22:77:ec:90:64:02:4d:86:11:c2:63:52:40: d0:5f:85:8a:f4:5e:80:03:aa:b5:dc:67:42:08:66:c2:58:09: d0:6e:af:db:e5:b1:2d:27:37:aa:aa:a2:c5:52:23:66:7a:ef: 37:cf:01:e8:5f:34:04:39:13:92:e3:4d:f5:ac:c4:c2:ee:65: 9c:73:8d:eb:b7:e7:a2:9e:3f:05:d5:f9:82:f0:c6:be:2f:7f: 82:01:6c:8c:93:60:5f:ab:ee:68:25:ed:c9:f1:f6:e2:72:9d: 51:cb:82:99:96:64:3c:4b:a0:4f:57:d0:18:2a:13:1d:1b:30: 74:e4:23:dc:28:10:9a:86:5d:1b:22:ae:6a:68:5c:1b:c6:1c: 29:57:f1:a9:a3:80:5c:7e:50:00:65:2d:c5:ea:7f:57:dd:4f: 8d:0c:fd:26:bd:c0:a6:3a:81:9c:3c:f7:e0:91:3e:14:71:25: c2:15:34:ed:20:8f:f0:25:18:bb:57:be:2f:c4:fd:60:fa:ba: 24:7a:ac:ad:b0:4a:26:65:a5:84:bd:f4:a9:f9:c4:57:c6:43: 3a:38:88:50:e0:30:4a:c8:14:c2:83:0d:16:f1:4b:22:67:79: f0:af:42:26:43:58:b8:58:4e:1a:30:63:35:2a:8b:54:f2:99: 64:dc:d9:61 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT9S+IdDZ5F8b1I2v+POhi7M8MCkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY0MDI5WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDYyNjJmNzliZmMyNjhjNmY5NjVmOTg1OWRkM2I1M2Jk YmI4ZTZlNzg1NzA4OTA2Yzk1NGQ1NWYyYzNiZjNiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn51gz4dPqictpaNtM5pFqvI2rHsD7qsCBnI4QmwqnlEOj eSjvyUiqiin1gvTfDOyhWOqXgdgnINFHh47JGbO68ZUlW5HvrKm3DSM+Uj/cS9MG s39ZxjdRYOnW8gVdWJzNRz0C26WJqX/dV5ZqiHyDrrcGM43lcW0vC44xr/MB4wtd oRwC8zeTNvvfC7qIo2n1aJwiLJuhlTiGONFQattFQ9aDZTTv0xE0pp3tuqVtvc2u p3Zkhje122DNbNWj18nMWwyiNCsLqAD4bk+xX9pH+vb1Bl54BGO9qSaGoDwFZtSf DdwBuD9LJd2FCyGi8Kqc7aE864G4D0XM+js0hpu1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDTFDqegkhWnSeVz4tl9bLOc+MQkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE2NWRhNWQ2LTAyYWMtNDU2YS1iNGQyLWRjODlmYjAzNDIyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBIwDQYJKoZIhvcNAQELBQADggEBAAKzsImyInfskGQCTYYRwmNS QNBfhYr0XoADqrXcZ0IIZsJYCdBur9vlsS0nN6qqosVSI2Z67zfPAehfNAQ5E5Lj TfWsxMLuZZxzjeu356KePwXV+YLwxr4vf4IBbIyTYF+r7mgl7cnx9uJynVHLgpmW ZDxLoE9X0BgqEx0bMHTkI9woEJqGXRsirmpoXBvGHClX8amjgFx+UABlLcXqf1fd T40M/Sa9wKY6gZw89+CRPhRxJcIVNO0gj/AlGLtXvi/E/WD6uiR6rK2wSiZlpYS9 9Kn5xFfGQzo4iFDgMErIFMKDDRbxSyJnefCvQiZDWLhYThowYzUqi1TymWTc2WE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:17 2025 by rpki-client