$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa File: ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa (raw, json) Hash identifier: ogPvHlXP6FXSHhggCtXdlBoGbz0j1ZDe82sUVSFH5Mw= Subject key identifier: F4:72:87:76:4C:79:E6:D4:FA:9F:23:88:B0:65:09:A0:15:55:33:FA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1149CF987A680BF5D977FF9747455D1D54A347AE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa Signing time: Mon 06 Oct 2025 17:13:54 +0000 ROA not before: Mon 06 Oct 2025 17:13:54 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:49:cf:98:7a:68:0b:f5:d9:77:ff:97:47:45:5d:1d:54:a3:47:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 6 17:13:54 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=dd812cdd36fe84c8e32af2a02833cc6221376effe2822da7a4c8e84c294ee2db, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:96:c8:27:06:2e:75:38:a3:aa:f3:04:42: 39:48:af:5e:c2:84:c9:73:e0:45:c9:b7:d1:a7:3e: f3:da:a1:76:3e:ab:ea:f8:79:12:61:35:2f:33:f7: 5b:fd:8e:37:bc:84:e4:c1:2b:27:8e:24:77:bf:d0: ec:78:e1:11:75:4d:be:b0:00:55:0f:03:33:4a:6c: 98:db:fc:3e:82:e6:d2:96:06:63:af:ec:5e:5f:3c: 73:fd:94:af:b3:b4:3f:3d:28:95:19:b6:9f:7f:e7: 93:da:71:5a:01:06:af:21:56:b4:79:6f:28:fe:be: 5f:96:13:c8:9d:3a:52:1f:9e:1b:fc:5b:af:6e:ec: c4:f2:a4:8f:ca:ba:e4:76:77:f2:39:0d:e9:bf:f7: a2:4a:19:f6:3c:de:53:87:70:75:36:86:54:8c:67: 0b:98:5c:52:5d:ef:ab:d3:90:0e:e7:52:61:34:74: d7:98:a3:48:61:e7:93:7b:a0:29:1b:6b:c3:e9:97: b5:9a:20:18:2d:67:02:ee:89:48:11:25:3e:6f:ca: 43:8f:86:63:20:28:9a:c6:0c:44:46:14:11:fb:ce: 94:54:d0:81:de:7a:2b:f6:46:87:4f:f3:01:91:d7: c2:07:37:60:08:9d:df:6e:42:ca:bd:88:8a:ff:fb: e4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:87:76:4C:79:E6:D4:FA:9F:23:88:B0:65:09:A0:15:55:33:FA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce2fdba2-ca41-4d2f-9c1f-e479918e93fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0f::/48 Signature Algorithm: sha256WithRSAEncryption a1:ba:80:29:25:0e:24:b8:ff:ec:d5:36:66:de:0c:23:79:6a: 3b:ab:b8:73:13:8c:44:9c:91:b9:01:d3:c1:70:43:b7:dc:8f: bc:b1:83:58:3a:a0:fd:90:9a:e3:18:f6:26:17:81:02:50:50: 2f:f4:0e:45:a0:70:cf:9e:95:dd:ce:7c:c2:c5:bb:a6:64:de: a7:0d:cc:43:3e:2d:ac:25:92:fe:4e:72:a3:bc:d4:f5:19:9e: 7b:ce:b4:24:2c:e7:7e:ca:4b:99:97:49:22:b8:79:c1:58:07: 51:91:b0:f6:13:f9:06:e3:51:88:f7:85:81:5d:9a:a8:9f:2a: be:b9:11:75:16:77:bf:3b:a6:60:e5:63:5e:a9:31:b4:68:2d: fc:2f:c5:2d:0b:0e:c4:cf:cf:b9:10:04:39:24:e4:62:9c:e2: 56:cf:63:93:00:3c:f0:ec:c2:0d:49:7b:55:5a:93:31:65:3b: d8:6c:de:5c:25:64:2b:db:05:ca:b8:15:34:f4:bb:bd:c7:92: 24:a7:fd:4e:fe:db:c7:d1:58:0a:fd:f4:9c:3d:1f:2f:e1:a4: 22:64:23:d3:5d:2d:5d:86:5b:52:41:eb:df:1b:47:65:15:8a: d7:05:24:c7:66:64:63:4e:3c:a4:02:de:6f:a9:a4:bd:2c:90: 20:60:36:cd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEUnPmHpoC/XZd/+XR0VdHVSjR64wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDA2MTcxMzU0WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDgxMmNkZDM2ZmU4NGM4ZTMyYWYyYTAyODMzY2M2MjIx Mzc2ZWZmZTI4MjJkYTdhNGM4ZTg0YzI5NGVlMmRiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5DZbIJwYudTijqvMEQjlIr17ChMlz4EXJt9GnPvPaoXY+ q+r4eRJhNS8z91v9jje8hOTBKyeOJHe/0Ox44RF1Tb6wAFUPAzNKbJjb/D6C5tKW BmOv7F5fPHP9lK+ztD89KJUZtp9/55PacVoBBq8hVrR5byj+vl+WE8idOlIfnhv8 W69u7MTypI/KuuR2d/I5Dem/96JKGfY83lOHcHU2hlSMZwuYXFJd76vTkA7nUmE0 dNeYo0hh55N7oCkba8Ppl7WaIBgtZwLuiUgRJT5vykOPhmMgKJrGDERGFBH7zpRU 0IHeeiv2RodP8wGR18IHN2AInd9uQsq9iIr/++Q9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9HKHdkx55tT6nyOIsGUJoBVVM/owHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NlMmZkYmEyLWNhNDEtNGQyZi05YzFmLWU0Nzk5MThlOTNmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA8wDQYJKoZIhvcNAQELBQADggEBAKG6gCklDiS4/+zVNmbeDCN5 ajuruHMTjESckbkB08FwQ7fcj7yxg1g6oP2QmuMY9iYXgQJQUC/0DkWgcM+eld3O fMLFu6Zk3qcNzEM+Lawlkv5OcqO81PUZnnvOtCQs537KS5mXSSK4ecFYB1GRsPYT +QbjUYj3hYFdmqifKr65EXUWd787pmDlY16pMbRoLfwvxS0LDsTPz7kQBDkk5GKc 4lbPY5MAPPDswg1Je1VakzFlO9hs3lwlZCvbBcq4FTT0u73HkiSn/U7+28fRWAr9 9Jw9Hy/hpCJkI9NdLV2GW1JB698bR2UVitcFJMdmZGNOPKQC3m+ppL0skCBgNs0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:38:39 2025 by rpki-client