$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa File: 43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa (raw, json) Hash identifier: 0UZgsKnT2xzeGVwyLlJdQIYNLdSU/Ovjn2bN/lhGpa8= Subject key identifier: F1:48:27:BB:29:B3:64:E9:A7:A7:7A:19:40:EA:E8:5D:73:EC:DE:30 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2E9E4D5B107122975D5AE4E8D7684DBA665E7BDD Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa Signing time: Tue 04 Nov 2025 16:41:05 +0000 ROA not before: Tue 04 Nov 2025 16:41:05 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9e:4d:5b:10:71:22:97:5d:5a:e4:e8:d7:68:4d:ba:66:5e:7b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:41:05 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=51ea7b71819969088272be0c5da7c455b2b82bbad148feb7e0d8197cd458ed5c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:71:9c:29:d2:9d:ba:50:de:b2:e6:6f:42: be:25:81:88:52:10:05:53:2f:0d:b6:2e:9d:a7:2e: 40:6e:7d:cd:0b:3f:5d:eb:1b:9c:ad:d0:69:a7:21: 8c:8b:9f:38:db:ac:76:80:93:80:c9:19:6f:76:a8: 27:69:8c:39:c3:f0:f0:02:22:c0:61:a5:a2:16:4c: 1a:da:bb:e3:a5:72:11:9c:1d:9c:3b:99:9a:4d:23: 7e:0c:96:e6:bb:27:73:b8:45:be:56:6b:3a:bd:c0: 17:a4:1e:a2:82:47:2f:ae:30:e2:2e:12:b6:5b:e7: 9a:fd:2b:45:a6:ca:af:5e:8f:d6:37:7e:28:21:4f: 1d:a5:9d:77:69:2f:a6:d2:80:52:52:af:81:07:28: 24:64:37:0f:bc:52:a7:41:02:af:ae:2f:06:5d:5e: 98:64:10:3a:86:3d:d0:9d:61:c8:52:14:b3:64:82: 88:f5:26:9c:e6:10:ff:ab:1f:60:e6:38:85:65:7f: d6:e8:c4:21:b9:35:3e:34:ea:c9:9e:19:12:a7:a8: fc:96:1d:01:88:23:6d:3d:9e:88:07:88:2c:de:4f: ec:ce:b7:c8:29:7a:19:f3:a3:ef:e6:70:ad:c7:45: ee:01:b0:13:33:c7:75:7b:2a:dc:0d:21:5c:cf:f3: 60:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:48:27:BB:29:B3:64:E9:A7:A7:7A:19:40:EA:E8:5D:73:EC:DE:30 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1a::/48 Signature Algorithm: sha256WithRSAEncryption 3f:ed:83:72:ff:c5:af:56:46:63:3c:4a:1c:e8:30:f2:6f:9f: 3b:92:e0:81:a2:c8:ab:08:ad:49:6a:15:b6:fb:2f:2c:5a:a0: 97:88:ba:56:f6:21:fd:be:23:11:2e:44:90:9f:a9:f4:b3:87: 36:23:62:b4:ca:3e:89:8c:65:40:e7:74:0b:47:b3:49:31:ae: 26:b3:03:e0:c8:98:36:2b:13:df:3a:2b:c3:ae:af:86:68:48: 4d:3f:a9:99:d6:6c:3a:2d:0f:41:f7:60:65:97:bd:70:a3:8f: c6:4f:e0:9a:eb:79:9c:29:22:be:12:61:c3:a1:3a:2c:16:af: 92:79:f2:20:67:96:2a:91:58:6b:1a:87:a7:d3:e0:a5:6b:2c: 3d:55:5f:3c:ba:42:c0:6c:78:a0:71:c4:28:e8:e1:65:e5:e6: 8d:14:43:7c:49:6c:dc:3b:78:df:f9:1b:81:4e:83:65:2a:84: 34:9b:ff:71:16:1b:3e:1a:27:4a:1e:fa:03:3c:c6:11:6d:a7: a0:a1:00:91:a6:a3:87:39:a4:62:13:7b:0a:cf:ea:2b:46:c6: ac:56:9d:4f:71:31:28:e1:a7:26:57:87:13:68:40:03:81:ef: c5:a6:6c:ca:7f:74:3a:83:35:f3:0c:98:04:71:65:b0:0b:18: 78:ec:29:dd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULp5NWxBxIpddWuTo12hNumZee90wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY0MTA1WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWVhN2I3MTgxOTk2OTA4ODI3MmJlMGM1ZGE3YzQ1NWIy YjgyYmJhZDE0OGZlYjdlMGQ4MTk3Y2Q0NThlZDVjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnjHGcKdKdulDesuZvQr4lgYhSEAVTLw22Lp2nLkBufc0L P13rG5yt0GmnIYyLnzjbrHaAk4DJGW92qCdpjDnD8PACIsBhpaIWTBrau+OlchGc HZw7mZpNI34Mlua7J3O4Rb5Wazq9wBekHqKCRy+uMOIuErZb55r9K0Wmyq9ej9Y3 fighTx2lnXdpL6bSgFJSr4EHKCRkNw+8UqdBAq+uLwZdXphkEDqGPdCdYchSFLNk goj1JpzmEP+rH2DmOIVlf9boxCG5NT406smeGRKnqPyWHQGII209nogHiCzeT+zO t8gpehnzo+/mcK3HRe4BsBMzx3V7KtwNIVzP82CzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8UgnuymzZOmnp3oZQOroXXPs3jAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQzZjM4YTkwLTk0MWMtNGU2MS04YWE1LWVhZDk1N2JmNmFlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBowDQYJKoZIhvcNAQELBQADggEBAD/tg3L/xa9WRmM8ShzoMPJv nzuS4IGiyKsIrUlqFbb7LyxaoJeIulb2If2+IxEuRJCfqfSzhzYjYrTKPomMZUDn dAtHs0kxriazA+DImDYrE986K8Our4ZoSE0/qZnWbDotD0H3YGWXvXCjj8ZP4Jrr eZwpIr4SYcOhOiwWr5J58iBnliqRWGsah6fT4KVrLD1VXzy6QsBseKBxxCjo4WXl 5o0UQ3xJbNw7eN/5G4FOg2UqhDSb/3EWGz4aJ0oe+gM8xhFtp6ChAJGmo4c5pGIT ewrP6itGxqxWnU9xMSjhpyZXhxNoQAOB78WmbMp/dDqDNfMMmARxZbALGHjsKd0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:05 2025 by rpki-client