$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6e7b611d-4d86-4ffd-8bc4-85dfed0d6a6c.roa File: 6e7b611d-4d86-4ffd-8bc4-85dfed0d6a6c.roa (raw, json) Hash identifier: 21v1AUckSMB98F+iZIRl17UVgvbPGlnCZDQ5EMxElSg= Subject key identifier: 9C:86:93:98:9C:49:EA:1B:79:DA:96:84:09:8C:78:AC:0D:A2:E7:03 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1A556A5FB46E40B2F1F94B9F8CDEDAE1EF8DCC19 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6e7b611d-4d86-4ffd-8bc4-85dfed0d6a6c.roa Signing time: Tue 21 Oct 2025 12:30:23 +0000 ROA not before: Tue 21 Oct 2025 12:30:23 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:627::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:55:6a:5f:b4:6e:40:b2:f1:f9:4b:9f:8c:de:da:e1:ef:8d:cc:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:30:23 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=cd85bd9a97facf8a357a97e1e10e5ac669b9dbc11e7c297ad00affffee8f97a1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:bf:55:84:ed:3d:f8:a0:8a:b2:a9:e9:05: 9b:fb:bf:0b:63:18:39:a0:49:dd:9c:e2:96:f5:f1: 79:32:e0:60:6c:64:69:16:4f:8a:63:0d:d5:3a:df: f9:c2:ba:0d:9a:ad:6e:64:57:1f:64:b4:ba:b5:de: fc:77:4e:1c:77:5d:d0:ed:9d:9b:f5:f2:e1:be:55: dc:c1:01:4a:4a:49:ea:49:7c:f6:3b:35:27:d4:a5: aa:27:18:ea:cf:9d:06:c9:b5:46:8f:da:1d:c7:0b: 8e:09:95:f8:1a:8e:75:85:0d:ec:4b:8e:0e:9b:d0: 08:16:c1:b5:65:20:4c:14:d7:8b:e7:b0:e2:92:5e: 20:41:ac:d8:2a:b8:b1:9e:c1:85:fe:ec:e2:ca:ad: 86:cb:62:47:af:b0:9a:fe:75:1f:df:40:27:c1:23: 04:16:12:05:e1:fb:a3:f4:7c:b5:52:2b:b4:e0:95: fd:ad:6a:c9:39:3a:e4:7c:da:d7:c2:09:06:fe:f5: 78:cb:e4:8b:fe:53:f0:93:f1:9f:b5:52:6d:45:ed: 5d:a9:2b:f8:5e:c0:4b:bb:80:b2:b8:4f:72:c2:f5: 4b:11:8a:98:37:2b:25:69:6d:48:47:58:76:81:92: a7:19:f2:99:cc:92:2a:1a:44:50:4b:02:42:03:0b: 10:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:86:93:98:9C:49:EA:1B:79:DA:96:84:09:8C:78:AC:0D:A2:E7:03 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6e7b611d-4d86-4ffd-8bc4-85dfed0d6a6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:627::/48 Signature Algorithm: sha256WithRSAEncryption 79:42:39:f4:f7:8d:d0:ee:ac:57:91:3c:1c:b7:74:25:a8:0e: b9:07:eb:11:91:63:85:6b:fa:46:83:56:62:a7:ed:63:47:12: da:fd:06:90:a9:ef:94:de:0f:97:8b:9e:42:7e:c0:de:bd:eb: a8:84:e2:c4:0b:e3:65:e8:d2:67:c1:bc:ea:07:ea:13:75:12: b2:af:51:d1:c1:76:47:3d:ed:2a:6f:01:7c:d7:79:32:ba:15: 4e:db:56:1e:cd:fd:d4:db:84:e0:d1:1f:18:24:da:33:34:3f: 92:f9:a4:5b:1e:c6:1c:f6:de:1b:11:c6:86:c6:b8:5b:d4:39: e7:f6:3e:f2:1a:18:84:05:98:f9:b8:10:34:fd:59:f4:06:b5: 99:02:00:4d:69:ca:55:c4:0e:00:62:0e:29:0d:81:fe:3e:e4: af:e2:c1:07:e2:e7:15:1a:57:81:42:30:71:f5:3d:d0:81:c9: 0c:84:eb:19:a8:55:80:48:52:7e:f3:84:e6:90:c0:7d:05:95: a4:7f:41:08:26:ef:9b:30:55:9b:fb:89:ff:99:1e:d2:41:2e: 6f:30:da:02:d4:28:f7:b5:0d:98:b1:8e:b5:cc:bf:7b:64:c1: 43:04:57:76:5a:43:4e:27:f7:a2:96:e6:e0:94:56:64:d6:cf: 41:d2:0c:5c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGlVqX7RuQLLx+UufjN7a4e+NzBkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIzMDIzWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDg1YmQ5YTk3ZmFjZjhhMzU3YTk3ZTFlMTBlNWFjNjY5 YjlkYmMxMWU3YzI5N2FkMDBhZmZmZmVlOGY5N2ExMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDqr9VhO09+KCKsqnpBZv7vwtjGDmgSd2c4pb18Xky4GBs ZGkWT4pjDdU63/nCug2arW5kVx9ktLq13vx3Thx3XdDtnZv18uG+VdzBAUpKSepJ fPY7NSfUpaonGOrPnQbJtUaP2h3HC44JlfgajnWFDexLjg6b0AgWwbVlIEwU14vn sOKSXiBBrNgquLGewYX+7OLKrYbLYkevsJr+dR/fQCfBIwQWEgXh+6P0fLVSK7Tg lf2task5OuR82tfCCQb+9XjL5Iv+U/CT8Z+1Um1F7V2pK/hewEu7gLK4T3LC9UsR ipg3KyVpbUhHWHaBkqcZ8pnMkioaRFBLAkIDCxDzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnIaTmJxJ6ht52paECYx4rA2i5wMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzZlN2I2MTFkLTRkODYtNGZmZC04YmM0LTg1ZGZlZDBkNmE2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABicwDQYJKoZIhvcNAQELBQADggEBAHlCOfT3jdDurFeRPBy3dCWo DrkH6xGRY4Vr+kaDVmKn7WNHEtr9BpCp75TeD5eLnkJ+wN6966iE4sQL42Xo0mfB vOoH6hN1ErKvUdHBdkc97SpvAXzXeTK6FU7bVh7N/dTbhODRHxgk2jM0P5L5pFse xhz23hsRxobGuFvUOef2PvIaGIQFmPm4EDT9WfQGtZkCAE1pylXEDgBiDikNgf4+ 5K/iwQfi5xUaV4FCMHH1PdCByQyE6xmoVYBIUn7zhOaQwH0FlaR/QQgm75swVZv7 if+ZHtJBLm8w2gLUKPe1DZixjrXMv3tkwUMEV3ZaQ04n96KW5uCUVmTWz0HSDFw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:36 2025 by rpki-client