$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c22e6618-b748-4a32-bb84-d93856f3a960.roa File: c22e6618-b748-4a32-bb84-d93856f3a960.roa (raw, json) Hash identifier: oCbgU9K4eq24JqJYnAkHeEWc+Z7R4ZJDCnRu8fFQvUo= Subject key identifier: F5:8A:CD:F0:30:D5:50:3B:64:DF:28:41:CF:70:0B:0C:72:43:CD:28 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6B4DE8E837C01C1EB6EAB36F7D67DF49A3B74A17 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c22e6618-b748-4a32-bb84-d93856f3a960.roa Signing time: Tue 21 Oct 2025 12:30:27 +0000 ROA not before: Tue 21 Oct 2025 12:30:27 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4d:e8:e8:37:c0:1c:1e:b6:ea:b3:6f:7d:67:df:49:a3:b7:4a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:30:27 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=701dde2bd67d3aeccc7a4fd76d00daf3d90798c55a4bf57712cdfd36c82f6dd5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:39:68:18:17:39:15:12:6b:57:df:1a:49: c8:74:22:0e:b3:8f:11:1b:3a:d5:cf:8a:a7:70:51: f1:93:1f:6e:bb:6f:c7:67:90:8f:7e:f5:ab:cb:69: 66:cb:97:d8:16:6f:4c:5d:d5:d5:52:f5:fc:ae:ce: e6:ef:95:a1:a9:96:ee:73:6e:91:a2:4a:39:f1:fb: d0:78:8e:8c:30:2b:fb:b8:d4:68:7e:0c:9d:ad:f2: b4:77:76:b9:e9:78:bc:9e:e2:8a:f7:d4:18:10:92: d4:5b:6a:10:c9:3f:e0:2b:7c:9e:fa:6d:20:ec:c3: 69:f2:47:6a:67:67:38:ec:de:18:60:ef:dc:36:08: 87:cc:8c:1a:94:8b:68:9f:d7:d8:ab:64:b3:98:de: 17:af:97:cb:48:31:e9:26:46:31:c7:6e:a8:86:e0: e5:7e:d1:c2:e6:81:92:5c:d1:15:fd:6d:d4:a1:8c: 52:95:f9:d8:c7:13:ee:ae:45:8c:f0:c5:f7:6d:e2: 38:8f:00:38:b0:80:71:9d:eb:aa:48:d8:b9:b3:d2: ae:2e:12:c5:7b:48:e3:c7:62:b1:75:73:24:d9:6d: bf:f1:ed:c4:b7:22:7c:df:e7:5d:c0:c4:3d:a1:b9: c1:04:c3:88:a5:0c:d8:40:89:12:8e:ba:63:e8:f1: fc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8A:CD:F0:30:D5:50:3B:64:DF:28:41:CF:70:0B:0C:72:43:CD:28 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c22e6618-b748-4a32-bb84-d93856f3a960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c30::/44 Signature Algorithm: sha256WithRSAEncryption 66:14:32:a9:33:a6:6f:17:2c:29:07:e7:83:73:2e:0e:ef:ae: 31:cc:0b:6b:92:87:e9:d3:5c:02:a7:f2:54:a8:89:30:23:55: 26:74:04:53:6d:cd:04:53:23:cc:1f:3f:c4:2c:db:a6:95:ad: a7:ed:96:70:9a:13:6f:74:01:be:c5:b7:d0:42:19:92:7b:ce: 6d:42:79:aa:a9:8f:aa:5a:32:c9:1e:fc:d5:25:d5:62:0f:43: 64:42:f1:76:2c:f1:38:d1:96:de:86:84:6e:f6:17:17:9d:5d: 98:6e:93:53:c0:0e:c8:e5:6f:84:17:50:9e:7b:1e:95:d7:d2: e0:8b:19:30:4b:c6:35:ea:4c:f0:ef:dd:e9:4b:98:7d:59:bf: 5d:66:ff:69:09:5d:0f:eb:dc:45:79:83:dd:df:b6:58:2d:9f: 41:ea:6c:47:17:cc:47:1d:59:6e:f5:83:9a:8d:48:44:b2:b9: 6c:33:49:4f:25:9a:a0:1a:de:ea:1e:83:82:b4:80:15:8e:45: 55:ab:d3:ac:2b:94:98:df:5c:70:1e:05:cf:2b:b6:72:f6:f7: 3c:bc:48:1f:6a:10:d8:a2:65:5e:d6:5f:20:36:44:61:5d:f8: 6f:d4:5b:c0:97:3e:54:3b:6a:a4:b3:37:85:44:d6:13:89:de: d8:84:04:c0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUa03o6DfAHB626rNvfWffSaO3ShcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTIzMDI3WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDFkZGUyYmQ2N2QzYWVjY2M3YTRmZDc2ZDAwZGFmM2Q5 MDc5OGM1NWE0YmY1NzcxMmNkZmQzNmM4MmY2ZGQ1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCJjloGBc5FRJrV98aSch0Ig6zjxEbOtXPiqdwUfGTH267 b8dnkI9+9avLaWbLl9gWb0xd1dVS9fyuzubvlaGplu5zbpGiSjnx+9B4jowwK/u4 1Gh+DJ2t8rR3drnpeLye4or31BgQktRbahDJP+ArfJ76bSDsw2nyR2pnZzjs3hhg 79w2CIfMjBqUi2if19irZLOY3hevl8tIMekmRjHHbqiG4OV+0cLmgZJc0RX9bdSh jFKV+djHE+6uRYzwxfdt4jiPADiwgHGd66pI2Lmz0q4uEsV7SOPHYrF1cyTZbb/x 7cS3Inzf513AxD2hucEEw4ilDNhAiRKOumPo8fxjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9YrN8DDVUDtk3yhBz3ALDHJDzSgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2MyMmU2NjE4LWI3NDgtNGEzMi1iYjg0LWQ5Mzg1NmYzYTk2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADDAwDQYJKoZIhvcNAQELBQADggEBAGYUMqkzpm8XLCkH54NzLg7v rjHMC2uSh+nTXAKn8lSoiTAjVSZ0BFNtzQRTI8wfP8Qs26aVraftlnCaE290Ab7F t9BCGZJ7zm1Ceaqpj6paMske/NUl1WIPQ2RC8XYs8TjRlt6GhG72FxedXZhuk1PA Dsjlb4QXUJ57HpXX0uCLGTBLxjXqTPDv3elLmH1Zv11m/2kJXQ/r3EV5g93ftlgt n0HqbEcXzEcdWW71g5qNSESyuWwzSU8lmqAa3uoeg4K0gBWORVWr06wrlJjfXHAe Bc8rtnL29zy8SB9qENiiZV7WXyA2RGFd+G/UW8CXPlQ7aqSzN4VE1hOJ3tiEBMA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:36 2025 by rpki-client