$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b17bf491-58d8-4391-b7a8-e39988877ceb.roa File: b17bf491-58d8-4391-b7a8-e39988877ceb.roa (raw, json) Hash identifier: DY43ryQlXvPD/9SxUQRe81ZTw0LXDDPOH+sTGNwBEoY= Subject key identifier: 7E:0A:13:6B:6C:BE:0F:04:6D:7D:7E:D2:8C:AD:6C:57:85:32:AB:D6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 02741DCB18CA06DB548B4B03C0D02E046E3925F9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b17bf491-58d8-4391-b7a8-e39988877ceb.roa Signing time: Tue 04 Nov 2025 16:51:11 +0000 ROA not before: Tue 04 Nov 2025 16:51:11 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c0a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:74:1d:cb:18:ca:06:db:54:8b:4b:03:c0:d0:2e:04:6e:39:25:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:51:11 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=c92ecc8543ecec99af92dacf45cf1d2428579c15a2f4b9b791c5725315777212, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:44:9e:85:52:fb:b5:19:e6:03:ab:05:e8: 01:42:2e:a3:31:f6:3b:b9:8d:86:41:ef:7e:9c:2a: 68:cc:c5:b6:dc:bb:fa:00:33:05:85:68:b8:00:13: c1:34:e0:e7:7a:67:cb:3c:00:15:30:be:0d:d0:7a: 61:13:d6:69:96:8e:ec:3d:9e:15:ab:dd:92:9a:ab: 18:c2:36:9a:c5:f7:a0:b4:bb:12:c0:d8:97:70:66: b5:50:de:12:f5:bd:33:13:b9:94:f9:f1:d2:eb:25: 1d:3d:d1:c5:7c:81:0b:cb:e9:a3:eb:17:6b:0b:c8: e3:77:64:ca:25:fe:6b:46:42:e1:8c:6a:d4:10:4a: bc:f0:db:c8:1b:a9:2e:7f:29:5d:28:b5:e4:05:81: 8c:22:6c:0a:46:57:92:c4:b7:3d:a7:44:b1:0e:58: 04:b4:52:ee:e4:2c:7d:74:91:3a:51:f2:ef:1c:4a: a8:cd:bf:9d:bf:a3:f4:42:0c:c8:1c:78:c6:12:e9: f3:5e:2f:01:be:ea:2e:9e:fd:a4:fe:c0:4d:6d:f0: b4:8c:33:1b:f5:17:57:e5:8d:e2:f9:1c:50:9e:11: de:f6:ff:97:31:01:a6:93:0f:6b:a5:0d:c3:31:d9: 66:50:4f:a9:d8:f2:ef:42:4d:f5:ac:46:f0:71:a7: 71:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0A:13:6B:6C:BE:0F:04:6D:7D:7E:D2:8C:AD:6C:57:85:32:AB:D6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b17bf491-58d8-4391-b7a8-e39988877ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0a::/48 Signature Algorithm: sha256WithRSAEncryption a0:d3:ce:28:75:d0:9a:58:5f:49:dc:40:98:1b:f6:f0:39:12: 7f:de:55:7e:67:9e:69:a3:c5:a1:a1:6d:de:e5:82:59:e4:fd: d5:9e:98:ac:f0:e1:94:44:70:41:5e:f8:8a:63:47:7e:1b:45: 50:6d:cb:bf:f9:97:92:c6:a7:4a:e6:d2:30:64:f0:e5:94:8d: 83:25:e2:ae:e2:af:38:be:24:08:3c:d0:cc:13:82:91:a4:db: 00:1d:16:2a:b8:34:d5:1b:74:4c:a6:4a:93:a4:8c:e3:89:14: 22:ce:33:64:5d:2c:76:3d:e4:d0:ef:59:cd:27:c7:4a:bf:7e: e9:1b:95:e0:6e:4d:63:c6:8b:35:ad:44:a8:34:29:ab:20:a8: 5f:83:75:29:95:df:86:06:5f:75:8b:09:7e:64:4a:84:36:f6: 92:11:8b:ac:28:05:2e:77:30:6e:f8:55:83:bc:70:7c:76:d1: c8:ac:84:01:81:30:55:0d:a8:8d:b8:6b:91:e1:04:c8:b8:71: 5e:f3:6a:6f:05:d2:e8:68:5a:c4:01:ba:45:fd:7c:cd:be:f2: e1:72:89:0e:38:82:c4:5a:c1:bb:0c:0f:93:ac:a3:83:80:7f: 2e:59:b3:30:58:57:bf:61:b6:22:a9:3e:f7:02:99:88:99:fe: b0:d8:cd:c9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAnQdyxjKBttUi0sDwNAuBG45JfkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY1MTExWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTJlY2M4NTQzZWNlYzk5YWY5MmRhY2Y0NWNmMWQyNDI4 NTc5YzE1YTJmNGI5Yjc5MWM1NzI1MzE1Nzc3MjEyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTtUSehVL7tRnmA6sF6AFCLqMx9ju5jYZB736cKmjMxbbc u/oAMwWFaLgAE8E04Od6Z8s8ABUwvg3QemET1mmWjuw9nhWr3ZKaqxjCNprF96C0 uxLA2JdwZrVQ3hL1vTMTuZT58dLrJR090cV8gQvL6aPrF2sLyON3ZMol/mtGQuGM atQQSrzw28gbqS5/KV0oteQFgYwibApGV5LEtz2nRLEOWAS0Uu7kLH10kTpR8u8c SqjNv52/o/RCDMgceMYS6fNeLwG+6i6e/aT+wE1t8LSMMxv1F1fljeL5HFCeEd72 /5cxAaaTD2ulDcMx2WZQT6nY8u9CTfWsRvBxp3HnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfgoTa2y+DwRtfX7SjK1sV4Uyq9YwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IxN2JmNDkxLTU4ZDgtNDM5MS1iN2E4LWUzOTk4ODg3N2NlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAowDQYJKoZIhvcNAQELBQADggEBAKDTzih10JpYX0ncQJgb9vA5 En/eVX5nnmmjxaGhbd7lglnk/dWemKzw4ZREcEFe+IpjR34bRVBty7/5l5LGp0rm 0jBk8OWUjYMl4q7irzi+JAg80MwTgpGk2wAdFiq4NNUbdEymSpOkjOOJFCLOM2Rd LHY95NDvWc0nx0q/fukbleBuTWPGizWtRKg0KasgqF+DdSmV34YGX3WLCX5kSoQ2 9pIRi6woBS53MG74VYO8cHx20cishAGBMFUNqI24a5HhBMi4cV7zam8F0uhoWsQB ukX9fM2+8uFyiQ44gsRawbsMD5Oso4OAfy5ZszBYV79htiKpPvcCmYiZ/rDYzck= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:53 2025 by rpki-client