$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa File: c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa (raw, json) Hash identifier: rVTctmmUJnZnae6U/6kuqUbMa62WYRd02gu/0l9wWng= Subject key identifier: 21:AA:AC:B2:B7:37:1D:29:59:94:D5:A2:43:F8:C0:1E:F0:87:1D:38 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 197F8B6F6AA6772FB617C0BD9CFEC74C0B7EB93A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa Signing time: Fri 31 Oct 2025 01:30:11 +0000 ROA not before: Fri 31 Oct 2025 01:30:11 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:648::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7f:8b:6f:6a:a6:77:2f:b6:17:c0:bd:9c:fe:c7:4c:0b:7e:b9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 31 01:30:11 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=3579f76f6b1291337634c9a327feaaa78f6e777dfd742f7c39df13b4fdfbff20, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6b:6a:33:4e:99:31:3b:1e:28:b3:bf:54:b6: a0:42:7c:68:13:c2:97:cc:08:af:11:b1:3e:4f:7b: 5f:40:3b:81:a7:22:fa:d2:e9:98:c0:89:3f:fc:5d: 66:48:f1:06:4b:ca:c9:b1:4e:66:5c:49:4b:22:7d: 8a:98:a6:06:9c:01:a8:88:fa:46:53:82:93:fa:fd: 04:0b:4f:df:c4:0d:a1:e6:0f:2b:79:7b:22:17:1d: 6d:e7:9d:30:91:b5:c1:af:b1:ed:f1:75:91:f8:fb: 8c:9f:0e:1b:71:4c:62:fa:2b:99:58:87:28:14:2b: 4d:4d:4c:8b:2e:37:7d:42:4e:79:e9:c2:70:79:a4: 91:8c:ce:eb:f6:6d:b0:15:fc:1d:50:f6:50:40:36: eb:d2:3b:61:96:43:98:c8:c0:91:d1:64:4c:76:14: 51:28:36:bf:e3:78:c8:36:cd:82:05:c2:5e:68:4d: cc:16:66:1d:49:e8:27:77:71:a5:90:f5:d6:fd:22: cd:15:2b:3a:2b:bc:8d:85:90:27:2a:d6:3e:26:b7: e2:b4:66:e3:0e:af:a9:a0:af:98:4a:3a:9d:9a:7a: e0:46:93:4a:5d:d7:33:bc:5b:36:a0:15:bc:c5:10: e0:3b:11:67:b8:5e:99:99:74:73:67:d9:4f:60:c6: 91:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AA:AC:B2:B7:37:1D:29:59:94:D5:A2:43:F8:C0:1E:F0:87:1D:38 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:648::/48 Signature Algorithm: sha256WithRSAEncryption 9f:13:49:9e:05:84:5e:f5:a5:5f:a6:a0:1a:8b:ef:8e:86:83: 7b:66:8e:b3:42:27:15:e0:20:56:bb:8f:c0:3d:87:ea:26:f2: 12:60:21:b5:42:a0:07:69:3e:64:3a:b8:ff:a4:d9:4e:a6:42: 83:92:3a:0d:0e:63:e1:21:dd:e9:05:78:82:d8:bb:17:18:eb: ff:a9:ef:19:f1:2a:43:c1:ee:86:db:47:a1:76:94:6a:ab:d6: 01:ee:6a:6e:1e:a7:1e:af:60:84:59:73:27:b5:3f:2a:1d:9a: aa:75:57:78:b7:9b:f3:74:43:84:e8:fd:ea:cc:f8:29:b1:72: 32:7c:15:de:20:23:4a:4f:05:e8:6b:72:a8:ab:0f:19:d4:c7: ef:40:7a:49:e8:25:9d:d1:41:f2:23:b5:d0:46:06:9e:2f:17: 22:32:df:6c:4f:21:65:0a:1d:19:3a:c8:74:42:fa:82:04:d5: 16:cc:7f:95:d2:54:71:eb:2f:53:e4:2e:35:20:fa:75:c2:21: b7:35:8e:60:2c:e6:6f:43:d7:b3:db:63:2c:bf:1d:0a:7b:f0: e0:1e:ff:c3:b1:24:0b:77:23:cc:5d:d0:b7:21:99:7b:e7:00: dc:6b:53:91:00:41:f3:24:2c:47:44:54:86:d5:68:22:64:12: 3f:e0:7f:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGX+Lb2qmdy+2F8C9nP7HTAt+uTowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDMxMDEzMDExWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTc5Zjc2ZjZiMTI5MTMzNzYzNGM5YTMyN2ZlYWFhNzhm NmU3NzdkZmQ3NDJmN2MzOWRmMTNiNGZkZmJmZjIwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKa2ozTpkxOx4os79UtqBCfGgTwpfMCK8RsT5Pe19AO4Gn IvrS6ZjAiT/8XWZI8QZLysmxTmZcSUsifYqYpgacAaiI+kZTgpP6/QQLT9/EDaHm Dyt5eyIXHW3nnTCRtcGvse3xdZH4+4yfDhtxTGL6K5lYhygUK01NTIsuN31CTnnp wnB5pJGMzuv2bbAV/B1Q9lBANuvSO2GWQ5jIwJHRZEx2FFEoNr/jeMg2zYIFwl5o TcwWZh1J6Cd3caWQ9db9Is0VKzorvI2FkCcq1j4mt+K0ZuMOr6mgr5hKOp2aeuBG k0pd1zO8WzagFbzFEOA7EWe4XpmZdHNn2U9gxpHBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIaqssrc3HSlZlNWiQ/jAHvCHHTgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2MzMTliYTBhLWVhNjUtNDZmZS04NDVkLWM0ZTJiYjFmMDk3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABkgwDQYJKoZIhvcNAQELBQADggEBAJ8TSZ4FhF71pV+moBqL746G g3tmjrNCJxXgIFa7j8A9h+om8hJgIbVCoAdpPmQ6uP+k2U6mQoOSOg0OY+Eh3ekF eILYuxcY6/+p7xnxKkPB7obbR6F2lGqr1gHuam4epx6vYIRZcye1Pyodmqp1V3i3 m/N0Q4To/erM+CmxcjJ8Fd4gI0pPBehrcqirDxnUx+9AeknoJZ3RQfIjtdBGBp4v FyIy32xPIWUKHRk6yHRC+oIE1RbMf5XSVHHrL1PkLjUg+nXCIbc1jmAs5m9D17Pb Yyy/HQp78OAe/8OxJAt3I8xd0LchmXvnANxrU5EAQfMkLEdEVIbVaCJkEj/gf6k= -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:54 2025 by rpki-client