$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa File: 1311a895-43fc-49eb-996b-222d911710a4.roa (raw, json) Hash identifier: KoSZITSzOyscMtB0mZM57bR3qDsgRu4RQx3YPqDQgSw= Subject key identifier: 53:BB:4B:34:D8:0C:D8:A5:BE:27:74:10:26:0B:2E:D0:D8:52:17:91 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7671C3F33975927536ADDAC76A83CEC5D338594E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa Signing time: Mon 06 Oct 2025 17:13:10 +0000 ROA not before: Mon 06 Oct 2025 17:13:10 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:71:c3:f3:39:75:92:75:36:ad:da:c7:6a:83:ce:c5:d3:38:59:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:13:10 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=30d8f72fdd8a77d93d6423e087ad4984cf00968c9d1ada1c690dadcd9e3cbcef, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:73:67:5d:d7:99:0f:f7:3f:91:b6:04:6c: b1:67:94:48:e3:6c:6d:43:55:45:a0:e1:eb:01:58: f0:ee:d8:0f:58:1b:19:0d:8a:91:2e:a8:18:27:7d: 3b:96:76:e1:bb:72:78:62:5f:3f:20:f9:8a:ee:e5: c7:41:84:57:c4:cd:8a:78:87:09:34:ea:94:a8:2b: 9d:f7:6c:6a:de:f6:7f:06:8f:2a:09:93:b7:46:97: fe:a0:61:70:4f:62:09:19:fb:2b:c8:98:b1:49:d0: 2d:e8:a3:a3:62:02:66:bb:e1:62:09:b3:d2:b2:d5: 5f:f3:37:b7:2c:34:0f:39:40:6f:18:9c:1e:9e:69: 16:e0:b5:94:3f:e4:db:06:2e:c0:5a:d6:c3:15:04: 87:cb:c2:51:5b:f8:3f:79:ad:2b:07:a8:04:75:52: a7:5a:cc:ed:fc:be:6d:af:69:b1:13:40:b6:74:a3: 25:f5:4f:29:73:17:3c:83:ab:ad:88:5e:e3:8d:2c: 17:d6:e3:08:0c:3f:6d:3f:c0:98:de:c4:f9:75:11: e1:cd:40:11:83:aa:9f:2f:e7:81:94:da:a8:44:9c: 7f:9b:f1:95:62:41:af:0e:12:a5:2a:52:a4:0b:24: 0b:49:0a:bd:a4:f6:56:80:86:b2:29:2a:c2:93:5e: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BB:4B:34:D8:0C:D8:A5:BE:27:74:10:26:0B:2E:D0:D8:52:17:91 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c00::/48 Signature Algorithm: sha256WithRSAEncryption ae:1b:33:b5:57:b8:8d:92:2c:3c:f3:cb:63:bd:70:94:34:f7: 37:04:3e:d9:a7:e0:24:6b:2b:cf:93:c9:5c:f4:0f:bd:71:4d: f1:65:64:4b:c2:cd:00:93:79:85:8a:29:90:32:2a:19:b5:33: 23:a2:d7:5a:04:61:e8:27:a6:28:58:21:2b:4f:13:b2:bf:44: 69:d6:dd:a8:c9:27:37:99:1a:2a:b5:4f:63:bd:fa:5a:69:a9: 9b:a2:14:08:cd:87:84:03:10:cb:7c:c9:2a:cd:35:62:72:f0: 6d:2d:b0:50:2c:70:b0:98:e7:31:c2:e7:15:4a:9b:ef:74:43: 3f:25:74:61:9b:0a:a2:47:de:96:b6:53:e0:bb:2d:12:50:a7: 47:3c:fa:b0:20:30:60:00:6e:08:71:64:69:ef:a3:89:6f:cd: 1c:db:0a:bc:49:95:08:a9:b3:93:12:74:0f:7c:18:eb:3f:ec: ba:9e:ca:65:ff:59:1c:43:2f:69:a5:2a:87:82:f9:c6:94:73: fa:bc:b1:9a:a7:01:5f:2d:ab:08:1c:5d:cd:6f:78:3b:90:46: fd:57:f1:da:20:d6:81:2d:93:98:0e:53:95:de:85:d7:8a:44: ca:3c:61:cd:cb:91:10:d1:94:ca:94:33:76:21:36:2b:07:7c: 5a:a8:84:5b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdnHD8zl1knU2rdrHaoPOxdM4WU4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMzEwWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGQ4ZjcyZmRkOGE3N2Q5M2Q2NDIzZTA4N2FkNDk4NGNm MDA5NjhjOWQxYWRhMWM2OTBkYWRjZDllM2NiY2VmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeoHNnXdeZD/c/kbYEbLFnlEjjbG1DVUWg4esBWPDu2A9Y GxkNipEuqBgnfTuWduG7cnhiXz8g+Yru5cdBhFfEzYp4hwk06pSoK533bGre9n8G jyoJk7dGl/6gYXBPYgkZ+yvImLFJ0C3oo6NiAma74WIJs9Ky1V/zN7csNA85QG8Y nB6eaRbgtZQ/5NsGLsBa1sMVBIfLwlFb+D95rSsHqAR1UqdazO38vm2vabETQLZ0 oyX1TylzFzyDq62IXuONLBfW4wgMP20/wJjexPl1EeHNQBGDqp8v54GU2qhEnH+b 8ZViQa8OEqUqUqQLJAtJCr2k9laAhrIpKsKTXg71AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUU7tLNNgM2KW+J3QQJgsu0NhSF5EwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzEzMTFhODk1LTQzZmMtNDllYi05OTZiLTIyMmQ5MTE3MTBhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAAwDQYJKoZIhvcNAQELBQADggEBAK4bM7VXuI2SLDzzy2O9cJQ0 9zcEPtmn4CRrK8+TyVz0D71xTfFlZEvCzQCTeYWKKZAyKhm1MyOi11oEYegnpihY IStPE7K/RGnW3ajJJzeZGiq1T2O9+lppqZuiFAjNh4QDEMt8ySrNNWJy8G0tsFAs cLCY5zHC5xVKm+90Qz8ldGGbCqJH3pa2U+C7LRJQp0c8+rAgMGAAbghxZGnvo4lv zRzbCrxJlQips5MSdA98GOs/7LqeymX/WRxDL2mlKoeC+caUc/q8sZqnAV8tqwgc Xc1veDuQRv1X8dog1oEtk5gOU5XehdeKRMo8Yc3LkRDRlMqUM3YhNisHfFqohFs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:48:43 2025 by rpki-client