$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc66a515-5233-4aac-b6b2-8711739d4a9b.roa File: bc66a515-5233-4aac-b6b2-8711739d4a9b.roa (raw, json) Hash identifier: r2pRHSYl01GWiMX/N18FT2xz7hGG6UQKHVgOrBVg1H4= Subject key identifier: CD:2B:0C:B1:F5:54:22:60:6C:09:12:77:10:28:A5:01:2D:DE:50:F1 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 24E8B1C094EF2BC43C76689E234AD423F8216793 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc66a515-5233-4aac-b6b2-8711739d4a9b.roa Signing time: Tue 21 Oct 2025 12:20:14 +0000 ROA not before: Tue 21 Oct 2025 12:20:14 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:629::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e8:b1:c0:94:ef:2b:c4:3c:76:68:9e:23:4a:d4:23:f8:21:67:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:20:14 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=b16eb21e1f72cce5e71a5a21c50d2d62abea1e667058c9984c8ae52775255cf4, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:f7:69:3b:4e:97:9e:c0:5d:36:76:fb:ed: 8a:8f:e4:e3:fd:82:e1:53:b8:6e:bf:0c:a9:48:19: e2:01:c8:b1:26:da:dd:76:1a:c1:2b:84:60:e6:07: 9c:ba:4f:08:e8:1a:fa:74:15:75:ec:72:5b:11:9e: f5:3f:a9:04:05:19:8c:a9:15:80:63:fc:31:13:2a: a0:9d:d1:d1:fe:91:78:1a:38:f0:a8:5a:47:3d:51: 19:55:e1:bf:0b:99:8a:9e:bd:52:4a:f1:06:d6:cd: 1c:fc:40:1f:a3:3d:74:cf:6f:39:62:dc:20:04:83: 21:b7:64:5b:50:95:db:89:21:d7:82:c5:bb:5a:28: 61:5a:fe:3d:16:e2:17:bf:20:f8:34:b1:0b:74:ef: d9:58:aa:af:a3:c9:80:2e:91:06:9c:3b:ea:ec:38: 38:de:02:a2:d6:ca:f7:07:fe:fd:c8:a9:14:e1:6d: 04:97:5a:bf:dd:69:e5:08:5c:b8:13:2d:4f:bb:c9: 6e:eb:74:60:89:7b:05:28:82:90:f5:ae:8d:5c:7c: 2b:ba:c8:6a:de:1a:c7:2c:f8:86:3b:ce:0c:63:1c: a1:7e:c5:22:ba:3d:e4:a1:d2:c9:9c:cd:7e:0e:fa: 1e:b8:b9:5a:d7:e4:7f:41:ff:da:32:3b:93:dc:bc: 45:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2B:0C:B1:F5:54:22:60:6C:09:12:77:10:28:A5:01:2D:DE:50:F1 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc66a515-5233-4aac-b6b2-8711739d4a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:629::/48 Signature Algorithm: sha256WithRSAEncryption 28:d8:b0:c9:c1:df:07:29:97:49:a5:2a:d5:6c:22:07:fe:95: fc:32:42:73:3b:df:b2:d8:43:54:5b:49:fa:3c:66:90:ff:bb: 7c:65:c4:e1:ce:24:e5:61:91:98:65:c4:06:76:d5:71:c3:3b: 4f:ce:aa:2b:36:d5:21:1d:f3:aa:e2:cf:23:1e:d8:c0:66:92: e2:3b:59:a8:ec:7b:58:e5:58:15:13:83:9a:52:5d:e7:06:85: ca:1c:db:c6:9e:f0:19:c8:02:ea:a1:f2:6a:cf:94:c0:ca:90: 76:b9:6a:26:42:26:16:b9:fe:3f:6c:aa:4b:a3:b3:b2:07:97: bc:a6:7d:76:09:36:0d:61:53:b5:f1:bd:51:04:2a:a9:9f:cb: bd:46:5c:09:c5:a9:fa:28:23:d0:b6:25:15:78:0c:0c:af:cd: e5:f5:c3:51:22:66:f7:0a:ab:72:74:bc:c5:de:35:11:00:66: df:93:9a:95:ab:fc:1f:00:b4:99:13:7d:92:f1:f0:33:87:26: 57:64:04:1a:e7:6b:e7:a0:82:e5:27:fd:ef:af:d3:14:e9:41: 20:a4:36:db:93:59:07:fc:b6:97:d3:f7:ed:aa:ea:29:bf:b9: db:7a:86:b0:b5:60:53:c8:16:c2:fe:d2:5b:cd:16:0c:69:26: b8:a4:6e:d3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJOixwJTvK8Q8dmieI0rUI/ghZ5MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIyMDE0WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTZlYjIxZTFmNzJjY2U1ZTcxYTVhMjFjNTBkMmQ2MmFi ZWExZTY2NzA1OGM5OTg0YzhhZTUyNzc1MjU1Y2Y0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9LPdpO06XnsBdNnb77YqP5OP9guFTuG6/DKlIGeIByLEm 2t12GsErhGDmB5y6TwjoGvp0FXXsclsRnvU/qQQFGYypFYBj/DETKqCd0dH+kXga OPCoWkc9URlV4b8LmYqevVJK8QbWzRz8QB+jPXTPbzli3CAEgyG3ZFtQlduJIdeC xbtaKGFa/j0W4he/IPg0sQt079lYqq+jyYAukQacO+rsODjeAqLWyvcH/v3IqRTh bQSXWr/daeUIXLgTLU+7yW7rdGCJewUogpD1ro1cfCu6yGreGscs+IY7zgxjHKF+ xSK6PeSh0smczX4O+h64uVrX5H9B/9oyO5PcvEXVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzSsMsfVUImBsCRJ3ECilAS3eUPEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JjNjZhNTE1LTUyMzMtNGFhYy1iNmIyLTg3MTE3MzlkNGE5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABikwDQYJKoZIhvcNAQELBQADggEBACjYsMnB3wcpl0mlKtVsIgf+ lfwyQnM737LYQ1RbSfo8ZpD/u3xlxOHOJOVhkZhlxAZ21XHDO0/Oqis21SEd86ri zyMe2MBmkuI7Wajse1jlWBUTg5pSXecGhcoc28ae8BnIAuqh8mrPlMDKkHa5aiZC Jha5/j9sqkujs7IHl7ymfXYJNg1hU7XxvVEEKqmfy71GXAnFqfooI9C2JRV4DAyv zeX1w1EiZvcKq3J0vMXeNREAZt+TmpWr/B8AtJkTfZLx8DOHJldkBBrna+egguUn /e+v0xTpQSCkNtuTWQf8tpfT9+2q6im/udt6hrC1YFPIFsL+0lvNFgxpJrikbtM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:14 2025 by rpki-client