$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa File: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (raw, json) Hash identifier: C2BSonCKYiVWZeeC2qwoV2X1NssMvOZNIG8UgoDzSzg= Subject key identifier: 24:15:A4:AE:F9:71:53:FC:F7:01:1C:93:E9:4C:96:06:45:0E:E2:B2 Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 05C0B965FC1C7E567D70972CD69804298CFA90E3 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa Signing time: Fri 10 Oct 2025 00:21:09 +0000 ROA not before: Fri 10 Oct 2025 00:21:09 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 62785 IP address blocks: 2605:b140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c0:b9:65:fc:1c:7e:56:7d:70:97:2c:d6:98:04:29:8c:fa:90:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Oct 10 00:21:09 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=f99bc7286c71115c85103874c4a9a35b653a3b4c1d3fa1c88cbdc7c223836ee1, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:71:8a:ee:c2:42:0f:6c:b4:4d:6a:31:db: f6:b2:83:bf:05:e5:ff:20:42:29:a8:1b:fe:3a:47: 1e:c3:dd:5d:6e:51:63:3d:cf:35:b7:0e:ef:28:80: 7e:a5:a8:e7:67:b2:37:a1:da:2e:b0:bd:90:c2:05: bb:ac:c2:48:48:27:2e:48:aa:99:a1:8d:a8:b5:5c: 23:d1:2b:41:21:4a:62:72:01:fa:ff:0e:38:af:f6: dc:a6:31:f0:eb:2a:b6:b7:8d:63:73:95:ee:f2:9c: 1d:ca:0a:ef:32:6c:39:73:70:50:3c:eb:1f:1a:c6: f1:56:a4:fe:ec:ef:9f:25:4b:54:15:88:35:ce:2f: 49:dc:17:40:2e:4f:fe:29:df:d7:7f:15:dd:bf:95: b3:82:f7:41:fb:cd:a8:85:4a:65:76:9d:25:03:b1: 65:0d:8e:ef:ed:c1:6d:20:8d:d4:fa:d8:d4:4f:32: a7:26:e4:a4:9a:13:8a:94:94:22:c7:5b:fb:94:c7: b1:ad:64:ef:cf:db:31:ae:0c:b7:03:89:b8:c1:e3: 81:07:66:67:b5:47:fb:61:80:fd:01:be:96:0b:a3: 03:f8:63:20:09:fd:26:24:f1:b3:b4:0b:6f:69:68: de:ea:4e:d3:47:50:1a:5a:b1:c7:99:4a:10:c7:86: b8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:15:A4:AE:F9:71:53:FC:F7:01:1C:93:E9:4C:96:06:45:0E:E2:B2 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:b140::/32 Signature Algorithm: sha256WithRSAEncryption 82:0d:2e:e8:76:3e:4d:76:74:c7:ad:08:0d:c4:32:f6:52:1a: db:05:59:8d:28:41:36:fd:8f:45:a5:aa:51:cf:e4:6d:df:91: 26:17:82:dc:b0:10:7a:73:9e:ae:c3:d2:97:f7:a4:81:84:09: 60:64:e4:e4:39:d2:82:65:89:9d:35:18:42:0a:c4:1b:a0:a6: a2:53:df:8a:4b:b8:46:68:73:e9:f6:ec:6d:99:47:40:64:f1: e3:a7:73:e8:13:1c:ed:2c:7f:67:66:8c:09:27:a8:4e:33:f7: ea:af:44:b3:c0:8e:79:bf:31:df:65:2d:55:b8:ed:24:fb:0a: 7f:04:28:a7:1b:15:66:75:0f:e0:84:8c:9d:a4:b1:b7:08:be: 78:8a:b7:85:27:d4:3b:76:e2:44:a4:fb:82:ff:3a:26:fa:de: fc:90:45:44:fa:08:88:85:02:ff:76:49:7e:7d:5a:56:13:e9: 98:1d:9e:44:b9:4c:02:82:a5:58:8c:ca:e7:b4:0e:bf:21:26: 52:2e:2f:f3:ad:69:11:a8:1b:48:2e:a2:69:b8:76:bd:0c:6e: eb:ca:09:16:c1:83:2b:6c:60:4a:0d:bb:b7:cd:d6:e2:77:50: 35:3a:0b:1a:c9:cb:f4:23:d4:4f:ac:bd:06:28:f4:42:a9:4a: de:7d:79:3a -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUBcC5ZfwcflZ9cJcs1pgEKYz6kOMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUxMDEwMDAyMTA5WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTliYzcyODZjNzExMTVjODUxMDM4NzRjNGE5YTM1YjY1 M2EzYjRjMWQzZmExYzg4Y2JkYzdjMjIzODM2ZWUxMS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4CXGK7sJCD2y0TWox2/ayg78F5f8gQimoG/46Rx7D3V1u UWM9zzW3Du8ogH6lqOdnsjeh2i6wvZDCBbuswkhIJy5Iqpmhjai1XCPRK0EhSmJy Afr/Djiv9tymMfDrKra3jWNzle7ynB3KCu8ybDlzcFA86x8axvFWpP7s758lS1QV iDXOL0ncF0AuT/4p39d/Fd2/lbOC90H7zaiFSmV2nSUDsWUNju/twW0gjdT62NRP Mqcm5KSaE4qUlCLHW/uUx7GtZO/P2zGuDLcDibjB44EHZme1R/thgP0BvpYLowP4 YyAJ/SYk8bO0C29paN7qTtNHUBpasceZShDHhrg3AgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUJBWkrvlxU/z3ARyT6UyWBkUO4rIwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzdlNWU0MjA0LThiY2YtNDk5YS05OTlhLThmMTkwZTk5MWNjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3 LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBbFAMA0GCSqGSIb3DQEBCwUAA4IBAQCCDS7odj5NdnTHrQgNxDL2Uhrb BVmNKEE2/Y9FpapRz+Rt35EmF4LcsBB6c56uw9KX96SBhAlgZOTkOdKCZYmdNRhC CsQboKaiU9+KS7hGaHPp9uxtmUdAZPHjp3PoExztLH9nZowJJ6hOM/fqr0SzwI55 vzHfZS1VuO0k+wp/BCinGxVmdQ/ghIydpLG3CL54ireFJ9Q7duJEpPuC/zom+t78 kEVE+giIhQL/dkl+fVpWE+mYHZ5EuUwCgqVYjMrntA6/ISZSLi/zrWkRqBtILqJp uHa9DG7rygkWwYMrbGBKDbu3zdbid1A1Ogsaycv0I9RPrL0GKPRCqUrefXk6 -----END CERTIFICATE-----Generated at Mon Oct 20 15:06:37 2025 by rpki-client