$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa File: f7068e3e-0b73-43e3-83c2-9df613575814.roa (raw, json) Hash identifier: JHiTTomDesSmKqmdFr8eRQV6PMflNzE8Ns65wT7jWsE= Subject key identifier: 7C:1F:17:D5:75:2B:17:9F:9B:75:55:FD:18:7D:C8:6C:6D:2F:6F:5B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4FAC5ED8F61D0B880B8A3643072B509A91E85682 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa Signing time: Tue 21 Oct 2025 12:40:14 +0000 ROA not before: Tue 21 Oct 2025 12:40:14 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:547::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ac:5e:d8:f6:1d:0b:88:0b:8a:36:43:07:2b:50:9a:91:e8:56:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:40:14 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=73dde7c8105da602d33b6efb342d5af60bd97112b21a645533e264336ba3bcc2, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bb:cb:43:ee:f8:53:e9:50:47:4e:3d:42:45: c7:dc:37:b9:71:50:66:9b:72:bf:3b:8a:26:72:b7: 1f:df:c7:57:0e:8d:6e:1d:24:23:75:da:c4:8f:9d: 11:4e:87:1a:d8:c6:e1:ca:10:d2:9f:07:43:7c:8b: 5b:f9:cf:8d:7d:57:e7:63:16:81:a0:9f:c4:36:fe: ce:20:57:a5:61:d9:de:bc:14:13:9b:14:d7:84:d3: d0:9f:db:4b:cd:3c:34:50:bb:c3:a1:ee:cd:b8:fd: 27:44:59:58:3f:65:8d:db:de:68:fc:54:c1:3c:e0: 4a:74:04:3c:16:57:b9:a6:9d:50:2c:63:cc:f0:16: d3:f3:7d:d2:b0:0b:0f:d9:b1:ac:c7:66:13:33:e7: ef:dc:84:f4:87:90:b1:8d:af:64:30:74:85:5b:59: fe:c4:84:ff:8c:b0:75:c8:f7:21:7a:56:6a:93:4f: cd:5a:ef:8d:82:20:e2:08:af:05:65:95:1d:0a:86: f8:d0:d6:cd:9e:96:a4:b0:3b:29:4c:b4:f5:9b:67: cb:18:e8:a2:da:f7:82:e1:80:1a:ae:4e:25:f5:cc: 72:cd:a9:e3:4b:59:e1:f2:28:13:a5:76:52:0f:e5: b1:32:88:c9:1e:0b:79:a1:e8:23:a6:30:23:ab:4e: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1F:17:D5:75:2B:17:9F:9B:75:55:FD:18:7D:C8:6C:6D:2F:6F:5B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f7068e3e-0b73-43e3-83c2-9df613575814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:547::/48 Signature Algorithm: sha256WithRSAEncryption 4f:65:dd:ba:33:08:19:68:1a:e4:11:a6:3d:4a:c6:8a:01:78: 78:bb:f1:c3:bd:14:d5:6a:83:25:e3:b5:25:5f:b0:64:7b:1c: 36:5f:06:85:2c:3e:7d:0a:22:3f:4a:43:a9:21:f1:59:7f:63: 81:cb:ba:78:d5:73:70:df:d6:61:a3:db:83:5b:ae:b5:79:ad: 11:b0:2f:d6:1e:bc:a4:18:de:c3:01:a2:9b:a9:0f:37:33:6a: f1:b8:37:8f:b8:1f:9e:45:9d:63:f5:75:90:5d:3f:1a:89:f2: f3:97:27:50:e8:34:2d:da:e2:5b:f5:c7:f8:e0:7c:bd:9f:85: 0e:5e:28:20:b5:7e:23:fc:a5:1b:3a:e8:31:07:d1:b9:81:5a: 4b:04:dd:9b:36:42:08:0b:91:c0:c5:13:31:73:7a:5c:32:30: 64:14:37:e9:1b:cd:a3:d0:e6:3c:2b:8b:0c:40:c7:42:26:a0: bb:82:0b:d4:d8:6d:b7:e4:92:23:f4:92:6d:1a:4b:56:e1:d6: 8f:be:15:cd:52:2d:e3:15:82:10:c4:ac:26:f1:c3:9d:7e:4f: ea:23:6f:01:b6:d0:c8:0b:f5:cf:42:1a:01:44:01:64:4c:91: 9b:65:ac:9d:e6:34:0c:10:3a:ff:29:00:91:f1:bf:94:80:45: e9:93:fc:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT6xe2PYdC4gLijZDBytQmpHoVoIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTI0MDE0WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2RkZTdjODEwNWRhNjAyZDMzYjZlZmIzNDJkNWFmNjBi ZDk3MTEyYjIxYTY0NTUzM2UyNjQzMzZiYTNiY2MyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhu8tD7vhT6VBHTj1CRcfcN7lxUGabcr87iiZytx/fx1cO jW4dJCN12sSPnRFOhxrYxuHKENKfB0N8i1v5z419V+djFoGgn8Q2/s4gV6Vh2d68 FBObFNeE09Cf20vNPDRQu8Oh7s24/SdEWVg/ZY3b3mj8VME84Ep0BDwWV7mmnVAs Y8zwFtPzfdKwCw/ZsazHZhMz5+/chPSHkLGNr2QwdIVbWf7EhP+MsHXI9yF6VmqT T81a742CIOIIrwVllR0KhvjQ1s2elqSwOylMtPWbZ8sY6KLa94LhgBquTiX1zHLN qeNLWeHyKBOldlIP5bEyiMkeC3mh6COmMCOrTuOvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfB8X1XUrF5+bdVX9GH3IbG0vb1swHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y3MDY4ZTNlLTBiNzMtNDNlMy04M2MyLTlkZjYxMzU3NTgxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUcwDQYJKoZIhvcNAQELBQADggEBAE9l3bozCBloGuQRpj1KxooB eHi78cO9FNVqgyXjtSVfsGR7HDZfBoUsPn0KIj9KQ6kh8Vl/Y4HLunjVc3Df1mGj 24NbrrV5rRGwL9YevKQY3sMBopupDzczavG4N4+4H55FnWP1dZBdPxqJ8vOXJ1Do NC3a4lv1x/jgfL2fhQ5eKCC1fiP8pRs66DEH0bmBWksE3Zs2QggLkcDFEzFzelwy MGQUN+kbzaPQ5jwriwxAx0ImoLuCC9TYbbfkkiP0km0aS1bh1o++Fc1SLeMVghDE rCbxw51+T+ojbwG20MgL9c9CGgFEAWRMkZtlrJ3mNAwQOv8pAJHxv5SARemT/Ns= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:15 2025 by rpki-client