$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa File: 5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa (raw, json) Hash identifier: as+q2ZIwen2kKkP+gW4RkNwnjEp9G7w/LLWUPuC13SM= Subject key identifier: 91:4A:A1:7D:1E:E2:00:21:23:B5:FB:91:31:06:EB:C0:32:54:90:9F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 506E8E8048209111E2CA3A7F325623DB2BA43864 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa Signing time: Tue 21 Oct 2025 12:30:27 +0000 ROA not before: Tue 21 Oct 2025 12:30:27 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:6e:8e:80:48:20:91:11:e2:ca:3a:7f:32:56:23:db:2b:a4:38:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:30:27 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=f13f2261133746f0845ee783662dfa037137d59d78254af9e8a194e39d066039, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ba:a5:de:e6:e6:58:c7:6a:89:73:78:90:e8: 78:87:05:ec:c6:6a:b5:e9:8d:dc:56:dd:b6:84:9d: da:f5:58:26:29:d6:36:d5:22:2c:d2:8b:33:d4:c5: 6a:8b:a8:78:cb:f8:68:98:c9:b7:18:73:0c:69:34: 0c:ce:bb:7d:1b:14:22:8e:c6:61:0d:20:66:b6:c5: c1:95:9b:2a:0f:ca:d1:9b:4d:60:a5:d7:7c:60:12: b3:f9:d7:73:0b:a1:bb:0e:4a:b3:70:78:0a:81:fd: dc:8b:f8:93:44:aa:91:fb:ad:29:4a:ed:26:e9:21: 2e:77:88:55:4f:a5:d0:1b:d4:2c:db:22:57:50:23: 52:8a:c3:35:fe:ba:02:61:98:9c:b1:a5:2f:17:10: 2f:e6:e9:4a:e2:77:39:cc:a9:a1:91:69:ed:1f:7b: 51:d4:c6:60:9e:4a:fb:cd:ab:42:83:4a:93:ef:b6: cb:f0:9c:cd:27:16:32:4b:61:8b:10:b1:43:8e:7d: 73:48:34:92:34:c5:dd:86:ba:4b:6a:d1:fb:e6:5f: bd:cc:71:5d:fa:5e:d9:11:45:84:9e:18:e1:85:1e: 62:92:de:f7:6b:70:7b:db:12:24:b1:e8:f6:9a:51: f9:f8:02:1b:85:74:8f:9f:93:ed:cf:55:3e:5e:31: c7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4A:A1:7D:1E:E2:00:21:23:B5:FB:91:31:06:EB:C0:32:54:90:9F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5f04655a-fd85-45a0-96e0-1fe7ac309a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c48::/48 Signature Algorithm: sha256WithRSAEncryption a3:e2:5c:cc:73:9a:df:0c:46:d0:ca:cb:89:61:f1:b4:50:fa: e7:79:2b:a0:a0:f9:0e:80:3e:78:cc:e4:03:37:2e:97:5b:de: 0d:39:47:a2:cb:3e:f8:9d:6b:b3:1e:df:0f:77:a1:92:bf:9c: 8d:1e:98:65:19:9a:77:e2:93:ae:d9:48:cd:51:86:de:67:b6: a0:7b:15:91:b4:29:40:b9:20:3e:49:38:27:ea:e0:eb:26:54: 9d:23:4e:b9:6f:9e:ae:c7:09:36:6e:7e:63:ba:d1:0d:b4:c0: 9e:68:6c:a8:f8:6d:07:dc:e7:77:af:e6:64:d6:e4:a0:8c:ce: 25:08:db:65:3c:ff:37:9e:e8:7a:dc:9f:fd:be:14:6b:73:11: 75:f7:c3:a6:1f:24:00:9a:ff:15:c8:77:cb:03:bb:9f:d6:4e: 58:9f:7d:9a:80:1c:3d:b2:1e:93:81:31:f6:dc:b8:14:c5:81: 23:6f:d1:b7:27:6a:de:9e:70:62:69:2f:30:31:9f:a3:65:6e: 96:3a:2f:34:98:0c:51:14:b9:27:7b:69:49:01:6c:13:ba:56: 96:77:d8:c4:21:9b:7b:fd:b5:17:83:72:a2:17:3c:7b:8a:c3: 1a:11:80:48:a8:85:9e:4f:09:24:4e:89:51:dc:24:29:1d:2e: e6:e5:06:ab -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUG6OgEggkRHiyjp/MlYj2yukOGQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIzMDI3WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTNmMjI2MTEzMzc0NmYwODQ1ZWU3ODM2NjJkZmEwMzcx MzdkNTlkNzgyNTRhZjllOGExOTRlMzlkMDY2MDM5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTuqXe5uZYx2qJc3iQ6HiHBezGarXpjdxW3baEndr1WCYp 1jbVIizSizPUxWqLqHjL+GiYybcYcwxpNAzOu30bFCKOxmENIGa2xcGVmyoPytGb TWCl13xgErP513MLobsOSrNweAqB/dyL+JNEqpH7rSlK7SbpIS53iFVPpdAb1Czb IldQI1KKwzX+ugJhmJyxpS8XEC/m6UridznMqaGRae0fe1HUxmCeSvvNq0KDSpPv tsvwnM0nFjJLYYsQsUOOfXNINJI0xd2Guktq0fvmX73McV36XtkRRYSeGOGFHmKS 3vdrcHvbEiSx6PaaUfn4AhuFdI+fk+3PVT5eMce3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkUqhfR7iACEjtfuRMQbrwDJUkJ8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVmMDQ2NTVhLWZkODUtNDVhMC05NmUwLTFmZTdhYzMwOWE2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADEgwDQYJKoZIhvcNAQELBQADggEBAKPiXMxzmt8MRtDKy4lh8bRQ +ud5K6Cg+Q6APnjM5AM3Lpdb3g05R6LLPvida7Me3w93oZK/nI0emGUZmnfik67Z SM1Rht5ntqB7FZG0KUC5ID5JOCfq4OsmVJ0jTrlvnq7HCTZufmO60Q20wJ5obKj4 bQfc53ev5mTW5KCMziUI22U8/zee6Hrcn/2+FGtzEXX3w6YfJACa/xXId8sDu5/W TliffZqAHD2yHpOBMfbcuBTFgSNv0bcnat6ecGJpLzAxn6NlbpY6LzSYDFEUuSd7 aUkBbBO6VpZ32MQhm3v9tReDcqIXPHuKwxoRgEiohZ5PCSROiVHcJCkdLublBqs= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:35 2025 by rpki-client