$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41ebc629-d0f5-46b1-91c9-800b5e69216f.roa File: 41ebc629-d0f5-46b1-91c9-800b5e69216f.roa (raw, json) Hash identifier: 6inM0A0kAYRmpASqNRMPIvnAZimheC8ky4JDbXwc3po= Subject key identifier: F8:E9:96:CD:87:50:D6:F0:46:77:E1:4C:A3:DB:8F:D7:61:71:58:93 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 794704B51A77B6E9849F2AC01E1E007C84CCC986 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41ebc629-d0f5-46b1-91c9-800b5e69216f.roa Signing time: Mon 06 Oct 2025 17:20:03 +0000 ROA not before: Mon 06 Oct 2025 17:20:03 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:47:04:b5:1a:77:b6:e9:84:9f:2a:c0:1e:1e:00:7c:84:cc:c9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:20:03 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=b31a23feffbdc063fe9cf03f226797f0d55e94e1fae6acc2533cd98033c83b4d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:c5:d4:0a:7f:d8:14:1f:1e:ec:f0:34:1a: f0:72:3c:21:ca:56:3b:cd:42:e1:60:c2:2f:ca:d5: 14:44:df:fb:7a:c7:93:77:fa:fb:33:ac:95:4d:3d: 29:ba:28:3e:99:d7:b8:6e:a2:93:33:43:69:af:99: 39:07:9d:15:45:06:71:c3:33:6d:bc:a8:ff:a3:33: 26:81:41:28:20:94:9e:57:f3:66:10:4f:1a:a8:7b: 1c:19:f7:9c:95:7b:2a:21:f4:16:0e:83:da:8b:5c: bd:93:81:63:68:c1:9a:e2:24:57:fd:3f:e0:ec:a0: 22:85:e4:cc:0e:b8:2f:99:70:c1:f4:39:7d:1b:26: 06:f4:23:fa:e7:a4:27:67:b5:e9:e3:09:e7:94:31: 86:46:67:fa:ce:10:57:e4:1b:ca:e9:2e:91:25:61: 35:60:4f:ce:ad:7b:21:f1:c1:de:1f:70:67:26:73: c0:63:74:0a:f7:1d:50:3a:83:3a:a6:04:32:84:b1: d3:b2:88:37:d5:5e:e8:ee:7d:2c:dd:3c:9f:d6:7f: a3:90:19:3d:9b:e3:94:2d:73:04:42:fc:25:9f:ff: 6d:91:f0:e4:1b:a8:92:11:6a:6b:17:f5:f1:bc:56: ab:38:40:1f:f2:16:e0:ba:14:a8:97:45:92:b6:02: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E9:96:CD:87:50:D6:F0:46:77:E1:4C:A3:DB:8F:D7:61:71:58:93 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41ebc629-d0f5-46b1-91c9-800b5e69216f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c15::/48 Signature Algorithm: sha256WithRSAEncryption 06:26:36:a0:65:49:4e:5b:6e:bb:e7:4d:42:b0:61:06:07:7e: f4:76:c2:5d:a8:60:3e:e4:15:a3:4c:e3:2a:bc:e1:18:81:cd: 92:6c:8d:02:31:67:e4:42:12:f8:4c:62:a0:90:c0:b6:7e:9a: 48:a9:eb:d5:77:0b:37:f5:7e:d2:d6:30:43:39:24:71:5d:64: dc:09:d7:3d:48:04:fd:b0:e5:2e:14:3e:7f:5c:5f:db:5a:77: 39:52:ec:49:a2:2b:23:c5:ab:a9:7d:56:69:75:4c:e6:73:a4: b4:29:b5:e3:eb:1d:27:77:a6:56:11:a8:0d:72:97:4f:0d:24: d9:4c:d8:10:87:32:12:15:5f:c9:b2:9c:dc:c2:e2:65:72:17: 1a:0d:35:3f:11:3f:eb:49:8a:32:a4:60:1f:47:d2:64:12:94: bc:94:c8:ed:92:75:cc:e5:a0:14:6b:05:e9:92:d2:d9:d3:59: 47:d1:be:c4:04:f0:e8:9a:26:ce:0a:c5:15:f9:53:8d:03:42: ad:33:59:d9:46:68:e1:eb:49:c2:35:8b:f7:34:2d:50:77:0a: d2:3c:95:ca:ea:d6:a2:22:5e:fc:57:4c:a1:23:dd:de:53:1b: a0:65:6a:d6:f0:db:c5:59:ab:ac:1a:28:9f:58:1d:51:6c:90: fa:3d:64:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeUcEtRp3tumEnyrAHh4AfITMyYYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcyMDAzWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzFhMjNmZWZmYmRjMDYzZmU5Y2YwM2YyMjY3OTdmMGQ1 NWU5NGUxZmFlNmFjYzI1MzNjZDk4MDMzYzgzYjRkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDa08XUCn/YFB8e7PA0GvByPCHKVjvNQuFgwi/K1RRE3/t6 x5N3+vszrJVNPSm6KD6Z17huopMzQ2mvmTkHnRVFBnHDM228qP+jMyaBQSgglJ5X 82YQTxqoexwZ95yVeyoh9BYOg9qLXL2TgWNowZriJFf9P+DsoCKF5MwOuC+ZcMH0 OX0bJgb0I/rnpCdntenjCeeUMYZGZ/rOEFfkG8rpLpElYTVgT86teyHxwd4fcGcm c8BjdAr3HVA6gzqmBDKEsdOyiDfVXujufSzdPJ/Wf6OQGT2b45QtcwRC/CWf/22R 8OQbqJIRamsX9fG8Vqs4QB/yFuC6FKiXRZK2Ajb9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+OmWzYdQ1vBGd+FMo9uP12FxWJMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQxZWJjNjI5LWQwZjUtNDZiMS05MWM5LTgwMGI1ZTY5MjE2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBUwDQYJKoZIhvcNAQELBQADggEBAAYmNqBlSU5bbrvnTUKwYQYH fvR2wl2oYD7kFaNM4yq84RiBzZJsjQIxZ+RCEvhMYqCQwLZ+mkip69V3Czf1ftLW MEM5JHFdZNwJ1z1IBP2w5S4UPn9cX9tadzlS7EmiKyPFq6l9Vml1TOZzpLQptePr HSd3plYRqA1yl08NJNlM2BCHMhIVX8mynNzC4mVyFxoNNT8RP+tJijKkYB9H0mQS lLyUyO2SdczloBRrBemS0tnTWUfRvsQE8OiaJs4KxRX5U40DQq0zWdlGaOHrScI1 i/c0LVB3CtI8lcrq1qIiXvxXTKEj3d5TG6Blatbw28VZq6waKJ9YHVFskPo9ZAs= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:32 2025 by rpki-client