$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa File: fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa (raw, json) Hash identifier: HDnFE4CvImX7C5pjF1tzjJZEZz4BC/Mqp9hIovN8sKI= Subject key identifier: 38:60:AE:7F:49:AD:4C:79:D8:99:E9:93:DE:90:08:E2:17:AF:E4:94 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1CEF9B4228A36371401C5FB38431C6575446AED2 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa Signing time: Tue 21 Oct 2025 12:40:46 +0000 ROA not before: Tue 21 Oct 2025 12:40:46 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:30d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ef:9b:42:28:a3:63:71:40:1c:5f:b3:84:31:c6:57:54:46:ae:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 12:40:46 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=a3695a73fbd85399b11fa550c5a7974af1f29016bd0f7774aeb5f2c7bd1cd198, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:75:09:99:42:8e:0c:52:b8:e1:14:65:dd:1d: f6:a3:5a:77:71:54:7d:4b:44:42:4b:94:08:c7:5a: 8d:2d:e2:45:c1:cf:36:fa:8c:d2:5a:1d:3f:45:51: cd:ec:68:7c:a1:b9:39:44:d5:b5:c6:c2:ec:e7:d1: 80:28:67:17:fc:a7:c7:59:5e:1c:d9:cc:21:5f:ff: f5:8a:12:d4:25:78:49:e5:3d:54:29:8a:00:03:9a: 7d:99:9f:1d:55:e5:fa:5d:69:25:00:b7:b7:42:9b: 47:c4:53:28:0c:06:3f:1d:54:45:60:fd:ac:f1:42: d9:66:73:2e:43:e6:98:ed:98:8f:0b:f9:8a:6b:52: cb:d2:1d:5b:7c:0d:a7:d2:33:3e:44:c3:a9:b4:fe: 4e:8f:d6:a6:08:9a:9c:c5:dd:7d:06:08:c6:88:cd: 7e:0c:10:e0:5b:31:4c:56:f4:1c:53:26:b6:a4:9b: b8:c4:34:75:87:23:e9:cc:a2:c1:fe:e2:14:61:85: ff:c0:2f:a7:5a:0b:95:d5:80:89:22:86:1f:a0:c6: 1c:ff:28:7d:22:79:08:83:d7:99:2e:f2:fd:57:48: 3e:f8:cc:d4:a0:33:da:b7:1b:fc:20:66:d1:21:66: 21:e7:ce:1f:89:65:32:30:4e:e9:d9:09:84:07:76: 7a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:60:AE:7F:49:AD:4C:79:D8:99:E9:93:DE:90:08:E2:17:AF:E4:94 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30d::/48 Signature Algorithm: sha256WithRSAEncryption 4c:77:b9:48:d9:cd:44:88:75:33:30:df:4d:a2:bc:c7:10:6e: 8a:36:71:bf:9f:1b:7f:d2:95:df:85:0c:5c:eb:0f:9a:22:53: c4:9c:4e:53:52:ae:2b:b2:ed:ed:3f:c7:59:1d:d8:df:e6:7e: 2b:4f:f9:53:fa:62:f2:b8:14:ba:33:35:3e:cb:98:89:1c:82: f2:fa:57:9c:df:01:e9:af:f5:86:c5:2f:ff:72:3d:3c:76:7e: f9:58:38:74:c1:d1:f1:40:a0:d5:2a:8b:22:0f:d3:7d:b4:1d: 11:4e:f8:39:0b:5f:d3:7b:3e:2c:79:22:88:8d:62:a7:af:80: 21:53:d0:98:5b:10:94:5a:93:82:0f:36:5e:99:af:af:55:9c: 1d:f2:75:d5:91:d9:cc:d0:4e:d0:18:4c:58:de:c0:9c:35:48: 6f:78:40:8b:1e:8f:ca:e1:72:7f:ba:06:65:4c:8e:7f:39:f5: 03:ec:de:99:4c:b3:ae:23:0b:36:af:ad:4e:77:4f:95:96:92: 49:40:be:55:8b:db:a7:3a:57:cb:61:0f:38:46:47:7d:76:0c: a5:fb:d5:a2:4b:c5:8e:dd:f0:1d:1d:e7:d9:bc:13:06:f2:a1: 6e:f4:73:af:59:c0:91:a0:7f:15:38:29:6d:44:b8:a1:1b:24: ca:34:16:5e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHO+bQiijY3FAHF+zhDHGV1RGrtIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDIxMTI0MDQ2WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzY5NWE3M2ZiZDg1Mzk5YjExZmE1NTBjNWE3OTc0YWYx ZjI5MDE2YmQwZjc3NzRhZWI1ZjJjN2JkMWNkMTk4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDodQmZQo4MUrjhFGXdHfajWndxVH1LREJLlAjHWo0t4kXB zzb6jNJaHT9FUc3saHyhuTlE1bXGwuzn0YAoZxf8p8dZXhzZzCFf//WKEtQleEnl PVQpigADmn2Znx1V5fpdaSUAt7dCm0fEUygMBj8dVEVg/azxQtlmcy5D5pjtmI8L +YprUsvSHVt8DafSMz5Ew6m0/k6P1qYImpzF3X0GCMaIzX4MEOBbMUxW9BxTJrak m7jENHWHI+nMosH+4hRhhf/AL6daC5XVgIkihh+gxhz/KH0ieQiD15ku8v1XSD74 zNSgM9q3G/wgZtEhZiHnzh+JZTIwTunZCYQHdnoTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOGCuf0mtTHnYmemT3pAI4hev5JQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2ZlODkyZDJmLTc1YmEtNDA4Ni04YTU2LTVmZTI0ZGU4ZDljNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAw0wDQYJKoZIhvcNAQELBQADggEBAEx3uUjZzUSIdTMw302ivMcQ boo2cb+fG3/Sld+FDFzrD5oiU8ScTlNSriuy7e0/x1kd2N/mfitP+VP6YvK4FLoz NT7LmIkcgvL6V5zfAemv9YbFL/9yPTx2fvlYOHTB0fFAoNUqiyIP0320HRFO+DkL X9N7Pix5IoiNYqevgCFT0JhbEJRak4IPNl6Zr69VnB3yddWR2czQTtAYTFjewJw1 SG94QIsej8rhcn+6BmVMjn859QPs3plMs64jCzavrU53T5WWkklAvlWL26c6V8th DzhGR312DKX71aJLxY7d8B0d59m8EwbyoW70c69ZwJGgfxU4KW1EuKEbJMo0Fl4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:03 2025 by rpki-client