$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa File: 3983d9b9-cb06-4315-b0e8-52b47d039b39.roa (raw, json) Hash identifier: gVncborgVeg/tvv9tVsQVF3EEmMNWJL+G5plzagCizQ= Subject key identifier: EF:4D:76:35:6E:AD:7C:A2:EA:57:45:A7:B1:EF:C3:A7:10:6A:E9:ED Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 042BB0CD3CABDF495EEC354EEED1E458E629A1A6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa Signing time: Tue 04 Nov 2025 16:50:11 +0000 ROA not before: Tue 04 Nov 2025 16:50:11 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2b:b0:cd:3c:ab:df:49:5e:ec:35:4e:ee:d1:e4:58:e6:29:a1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:50:11 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=a760abe77eb0217eaa44e1267c3abe261c453dd5327f8bbe31026fee9abc523a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:6a:37:36:7d:b6:e3:cc:9c:c1:6b:40:86: 9d:29:ab:4b:c7:fc:b9:54:93:da:5b:d6:5b:51:fa: e9:cb:6b:9a:34:b0:7f:08:59:3f:a6:5c:04:50:be: a0:d9:85:ce:7f:68:e5:10:a4:f3:36:76:91:6b:11: 1f:aa:19:b7:23:bc:ca:86:ca:50:56:59:5f:c0:b8: 3c:17:cc:b1:69:43:dc:e2:54:33:ce:56:91:25:b0: 81:8b:ce:a9:7b:f1:87:05:83:56:93:4b:4f:a3:11: 14:99:83:57:e1:09:d5:30:81:cb:51:c4:d7:70:31: 5d:51:bc:89:85:6b:2f:a8:83:4c:1c:7c:85:2c:4e: 21:91:e0:5b:7d:6e:ca:d2:39:0d:67:29:a4:9e:6d: 04:4a:10:39:38:be:1a:83:21:bb:22:88:70:87:22: 89:cc:04:93:06:0f:35:8f:02:6d:a2:ae:81:52:33: 1c:97:ec:f5:f0:56:70:4b:0b:5f:c7:f5:40:e1:0c: 04:2e:20:c2:60:18:fb:66:2c:78:ca:88:85:44:1e: 1e:96:51:64:00:ad:f9:f9:e9:33:e2:8c:72:73:6b: b6:96:93:5a:23:f2:a2:c9:1a:fa:2a:0d:0a:f3:da: a2:81:c9:34:84:59:bd:96:61:b2:65:d7:99:aa:0e: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4D:76:35:6E:AD:7C:A2:EA:57:45:A7:B1:EF:C3:A7:10:6A:E9:ED X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0d::/48 Signature Algorithm: sha256WithRSAEncryption a7:c4:f7:60:03:8b:61:4e:5b:65:b3:38:a0:b4:b8:59:6b:1e: 0c:df:40:9d:eb:d5:01:33:90:d9:b2:94:de:9d:bf:fe:0f:5f: 22:d5:62:c2:a1:eb:11:7e:72:c8:48:db:c7:e3:9e:c5:8c:07: 7b:8f:cf:3c:d7:e0:0c:e2:a6:4c:77:4d:33:39:09:54:af:f3: 3e:c2:a6:eb:ef:76:32:e0:81:e5:50:b4:d0:ac:e4:ae:83:6b: 67:bd:3e:5f:35:6c:89:59:09:6a:28:ce:3f:b8:2f:7f:49:03: 32:35:40:72:2d:94:4c:58:ed:d3:66:48:8b:e0:61:4d:b6:76: db:98:4e:4f:5c:26:62:ac:59:db:8a:c5:be:e4:e4:36:38:e5: 39:60:98:b0:44:86:92:ae:15:c5:45:59:70:af:ee:bb:c1:6e: f9:34:ba:a9:c2:72:0c:34:e8:93:bc:ee:70:27:ba:7e:12:ec: c0:2e:84:9c:b9:4c:df:83:a8:1a:71:b6:4f:a9:73:49:ac:fc: 9b:09:33:09:d5:91:00:e2:45:fd:a9:35:1d:02:30:62:dc:49: 63:8f:28:29:f2:04:0c:14:fb:6e:8f:45:f2:1a:f4:b8:8c:5c: 80:b6:0b:8d:9e:01:5b:da:e1:04:e8:a2:83:78:7e:31:f3:26: 33:2f:13:69 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBCuwzTyr30le7DVO7tHkWOYpoaYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY1MDExWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzYwYWJlNzdlYjAyMTdlYWE0NGUxMjY3YzNhYmUyNjFj NDUzZGQ1MzI3ZjhiYmUzMTAyNmZlZTlhYmM1MjNhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHdmo3Nn2248ycwWtAhp0pq0vH/LlUk9pb1ltR+unLa5o0 sH8IWT+mXARQvqDZhc5/aOUQpPM2dpFrER+qGbcjvMqGylBWWV/AuDwXzLFpQ9zi VDPOVpElsIGLzql78YcFg1aTS0+jERSZg1fhCdUwgctRxNdwMV1RvImFay+og0wc fIUsTiGR4Ft9bsrSOQ1nKaSebQRKEDk4vhqDIbsiiHCHIonMBJMGDzWPAm2iroFS MxyX7PXwVnBLC1/H9UDhDAQuIMJgGPtmLHjKiIVEHh6WUWQArfn56TPijHJza7aW k1oj8qLJGvoqDQrz2qKByTSEWb2WYbJl15mqDk25AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7012NW6tfKLqV0Wnse/DpxBq6e0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM5ODNkOWI5LWNiMDYtNDMxNS1iMGU4LTUyYjQ3ZDAzOWIzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA0wDQYJKoZIhvcNAQELBQADggEBAKfE92ADi2FOW2WzOKC0uFlr HgzfQJ3r1QEzkNmylN6dv/4PXyLVYsKh6xF+cshI28fjnsWMB3uPzzzX4Azipkx3 TTM5CVSv8z7CpuvvdjLggeVQtNCs5K6Da2e9Pl81bIlZCWoozj+4L39JAzI1QHIt lExY7dNmSIvgYU22dtuYTk9cJmKsWduKxb7k5DY45TlgmLBEhpKuFcVFWXCv7rvB bvk0uqnCcgw06JO87nAnun4S7MAuhJy5TN+DqBpxtk+pc0ms/JsJMwnVkQDiRf2p NR0CMGLcSWOPKCnyBAwU+26PRfIa9LiMXIC2C42eAVva4QToooN4fjHzJjMvE2k= -----END CERTIFICATE-----Generated at Wed Nov 5 07:09:15 2025 by rpki-client