$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3e6a182-09eb-4cdc-a074-d9c1ca01fad9.roa File: b3e6a182-09eb-4cdc-a074-d9c1ca01fad9.roa (raw, json) Hash identifier: IDKzY3e17peMUIq9Jrx6lDj5QEeGhXS/x2ccT0fCzjw= Subject key identifier: 90:1C:F3:20:D4:F4:B6:67:03:B4:F6:84:A1:B3:01:78:80:CB:BA:5C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 79F1FD6FF86C8CFC05DC6C7FB3E19338DEF297B5 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3e6a182-09eb-4cdc-a074-d9c1ca01fad9.roa Signing time: Fri 24 Oct 2025 00:20:06 +0000 ROA not before: Fri 24 Oct 2025 00:20:06 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:3b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f1:fd:6f:f8:6c:8c:fc:05:dc:6c:7f:b3:e1:93:38:de:f2:97:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 24 00:20:06 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=f92bd0f9f4347bcf34e38949f644ad877a1d87f32b27e4d629223e32a7596658, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:3f:7d:50:69:7c:2a:91:75:25:a6:39:6a: e0:7f:c2:74:b2:24:83:0b:ca:6e:9b:8b:be:52:d4: 6c:ac:94:f5:6e:9e:ea:cc:bc:9f:21:f4:7c:9c:94: 62:d9:db:7b:1d:88:4a:5d:0f:16:8a:70:95:2b:81: 75:3d:24:81:95:52:36:a8:1f:f1:07:da:6e:25:39: 77:34:c8:8b:c1:ac:77:31:7f:1e:84:01:f3:ba:e6: e9:20:fb:f3:d0:7e:59:4a:06:76:06:f1:56:1b:2c: 49:41:bc:d7:f8:6e:49:5f:86:3e:f0:ce:32:95:ce: 9a:7e:5e:5c:58:7f:8e:f7:e6:e4:be:7f:ab:7b:86: 9b:6f:6f:47:76:89:9e:d6:b9:dc:74:3d:62:5a:48: 6a:df:9b:51:7f:1b:60:a0:38:35:95:ae:e8:87:8b: f1:8c:7b:8b:d2:63:ab:13:21:5c:b1:61:e5:90:74: 43:89:bd:b3:7b:b2:dd:8a:c9:01:d7:72:68:6c:0a: b9:9b:fa:d5:9b:bf:7f:b4:99:6b:9a:a6:f1:9a:d1: 16:d8:43:c2:d5:00:cc:c7:3f:93:fe:e9:07:75:36: 39:08:d6:72:93:bc:ea:cb:dc:9f:dd:f7:40:27:a2: db:66:2e:2b:61:e4:c3:00:9f:d6:0d:74:90:bb:6d: 25:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1C:F3:20:D4:F4:B6:67:03:B4:F6:84:A1:B3:01:78:80:CB:BA:5C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3e6a182-09eb-4cdc-a074-d9c1ca01fad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3b4::/48 Signature Algorithm: sha256WithRSAEncryption 93:32:bc:f3:8a:b6:a5:24:fe:ee:03:a1:e1:11:fd:7c:a2:b7: 7e:a8:dd:07:38:9f:58:ef:23:6f:f9:03:a5:54:4e:42:a4:ed: ce:f1:2c:a7:71:0a:37:df:f9:bb:c1:d9:27:10:1a:d2:43:4c: 21:8f:d7:22:43:c5:c6:4e:0a:b1:d2:0d:df:8f:97:c5:a2:c7: 1a:b3:2f:06:25:ce:57:e0:25:82:d3:d3:37:50:ea:8b:10:7c: 3c:82:f6:ea:7a:e2:b9:1a:51:71:d6:3e:0b:af:f8:f8:8f:51: ec:59:0d:96:a8:cf:d6:99:cf:4d:f0:b5:dc:28:22:d9:50:f4: 1a:9f:56:2f:13:33:8e:12:7e:66:4b:11:2d:fc:ef:ad:0b:81: c1:bf:40:56:46:40:ad:2a:79:6d:96:d2:86:ac:ca:11:38:4d: fe:b0:0e:3a:e4:9b:85:d7:5d:cd:9d:f8:f2:fa:0e:9a:20:cd: 3a:cc:04:30:cf:a2:80:ca:73:50:dd:ac:31:11:21:81:e8:c3: da:b8:be:89:5b:aa:31:0f:ba:f8:08:73:eb:4e:61:5d:2f:4d: 98:5d:4d:3e:1d:dd:5e:65:5f:0f:6e:86:2b:6d:da:57:0f:8f: 60:5d:b7:dc:0e:2a:a6:8a:12:23:fa:0a:b7:4f:30:c6:3a:23: a5:09:4f:03 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUefH9b/hsjPwF3Gx/s+GTON7yl7UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDI0MDAyMDA2WhcNMjUxMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTJiZDBmOWY0MzQ3YmNmMzRlMzg5NDlmNjQ0YWQ4Nzdh MWQ4N2YzMmIyN2U0ZDYyOTIyM2UzMmE3NTk2NjU4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVjj99UGl8KpF1JaY5auB/wnSyJIMLym6bi75S1GyslPVu nurMvJ8h9HyclGLZ23sdiEpdDxaKcJUrgXU9JIGVUjaoH/EH2m4lOXc0yIvBrHcx fx6EAfO65ukg+/PQfllKBnYG8VYbLElBvNf4bklfhj7wzjKVzpp+XlxYf4735uS+ f6t7hptvb0d2iZ7Wudx0PWJaSGrfm1F/G2CgODWVruiHi/GMe4vSY6sTIVyxYeWQ dEOJvbN7st2KyQHXcmhsCrmb+tWbv3+0mWuapvGa0RbYQ8LVAMzHP5P+6Qd1NjkI 1nKTvOrL3J/d90AnottmLith5MMAn9YNdJC7bSVnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkBzzINT0tmcDtPaEobMBeIDLulwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IzZTZhMTgyLTA5ZWItNGNkYy1hMDc0LWQ5YzFjYTAxZmFkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA7QwDQYJKoZIhvcNAQELBQADggEBAJMyvPOKtqUk/u4DoeER/Xyi t36o3Qc4n1jvI2/5A6VUTkKk7c7xLKdxCjff+bvB2ScQGtJDTCGP1yJDxcZOCrHS Dd+Pl8WixxqzLwYlzlfgJYLT0zdQ6osQfDyC9up64rkaUXHWPguv+PiPUexZDZao z9aZz03wtdwoItlQ9BqfVi8TM44SfmZLES38760LgcG/QFZGQK0qeW2W0oasyhE4 Tf6wDjrkm4XXXc2d+PL6DpogzTrMBDDPooDKc1DdrDERIYHow9q4volbqjEPuvgI c+tOYV0vTZhdTT4d3V5lXw9uhitt2lcPj2Bdt9wOKqaKEiP6CrdPMMY6I6UJTwM= -----END CERTIFICATE-----Generated at Wed Nov 5 15:07:55 2025 by rpki-client