$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f8dce29-bed3-402a-982d-613d45cdcd2b.roa File: 4f8dce29-bed3-402a-982d-613d45cdcd2b.roa (raw, json) Hash identifier: 059HyHFeivvNZDno1aFtf35YoFSac+fqqv081bsDy9U= Subject key identifier: ED:5F:03:9C:7B:AB:73:1D:49:1F:C3:F9:FB:1C:62:4F:8D:F3:80:08 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 32C288025432BE817F348D2D065AD9139444FBF3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f8dce29-bed3-402a-982d-613d45cdcd2b.roa Signing time: Thu 30 Oct 2025 21:38:44 +0000 ROA not before: Thu 30 Oct 2025 21:38:44 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:17e2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c2:88:02:54:32:be:81:7f:34:8d:2d:06:5a:d9:13:94:44:fb:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:38:44 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=7621c08aa39a95c3abf41377123ddd9d3fe692a94021a6aebb139ffe9f19123e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:4a:c8:cb:bc:24:22:76:0f:e1:85:e1:52: 42:20:61:b1:7d:0a:5f:ae:47:32:3e:d4:a6:82:42: 82:63:81:19:72:48:ee:11:34:b3:74:7c:95:b1:7d: 55:ed:80:60:8c:bc:25:f5:c8:05:ab:c0:a1:92:4e: 38:cb:87:c1:cc:c6:77:9e:3c:7b:c1:26:66:78:c8: 25:4e:27:90:b6:37:af:f8:21:42:26:49:39:b1:8f: fa:ee:93:1b:91:52:1f:31:8a:d6:8b:48:bb:68:93: b2:3c:b3:df:48:dc:50:97:ae:79:bb:cd:d2:64:36: 5c:60:29:81:a6:44:86:27:de:94:a7:d5:73:be:19: d0:b7:c4:38:3e:c8:57:be:d4:4e:45:f9:38:c8:4b: b6:12:f0:06:65:cc:ce:99:45:94:f4:a2:0a:79:85: 4b:c2:70:42:08:5a:6e:47:aa:57:fa:6e:46:bd:fc: 7c:40:5b:a4:05:27:de:75:5f:aa:36:97:af:05:d2: c7:22:24:32:a2:26:b9:02:d3:5d:32:47:4a:e0:7f: e0:53:e9:cc:c3:3e:f1:6c:49:0d:f0:86:7e:5d:f1: 92:d7:5f:eb:95:24:eb:2c:a5:65:74:a8:59:57:82: a7:bb:e9:a6:ac:3e:d9:76:44:76:d4:67:41:2d:d1: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5F:03:9C:7B:AB:73:1D:49:1F:C3:F9:FB:1C:62:4F:8D:F3:80:08 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4f8dce29-bed3-402a-982d-613d45cdcd2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:17e2::/47 Signature Algorithm: sha256WithRSAEncryption 30:ca:0a:1a:1d:ab:11:89:78:84:7c:fa:8d:ec:aa:0e:3a:99: 5d:ea:f6:5c:f3:f6:89:73:46:ff:2b:7f:32:d6:8e:d7:d5:32: 21:6a:22:80:79:5b:ba:73:b9:00:9e:0b:92:2b:c7:ad:de:c1: 02:ec:5e:4e:37:22:64:8a:7a:48:5a:f0:27:d7:72:19:e7:d8: 97:71:3f:ab:a4:58:67:a4:8e:00:3b:65:fc:16:17:5b:8e:dd: 22:5c:18:f9:a1:1f:ae:10:d0:14:c2:cc:a0:79:e0:04:2a:e0: e2:eb:0c:c0:8b:77:b7:44:36:53:df:59:84:df:40:21:13:d9: 2c:cd:cb:d9:84:b3:c0:00:eb:d6:21:df:23:55:c5:2a:41:df: 6d:de:a7:61:c4:e3:29:9a:86:03:a6:03:ad:87:0e:47:56:9d: c8:b3:95:be:5a:5a:90:fa:49:29:a3:9c:a7:9b:41:37:77:c9: 4f:39:54:5a:15:85:0a:c0:e6:19:19:05:28:ee:31:6c:0d:7b: 94:1a:51:7c:4e:5a:32:57:7a:01:71:6b:80:e1:bb:8f:72:91: 56:23:8a:36:b0:d8:60:ae:60:39:a8:0a:1d:0c:80:c5:71:d4: 7a:c3:e6:70:0e:57:33:4c:1a:4b:ce:04:03:0f:1a:d4:5d:b2: ec:17:1c:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMsKIAlQyvoF/NI0tBlrZE5RE+/MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEzODQ0WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjIxYzA4YWEzOWE5NWMzYWJmNDEzNzcxMjNkZGQ5ZDNm ZTY5MmE5NDAyMWE2YWViYjEzOWZmZTlmMTkxMjNlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk5krIy7wkInYP4YXhUkIgYbF9Cl+uRzI+1KaCQoJjgRly SO4RNLN0fJWxfVXtgGCMvCX1yAWrwKGSTjjLh8HMxneePHvBJmZ4yCVOJ5C2N6/4 IUImSTmxj/rukxuRUh8xitaLSLtok7I8s99I3FCXrnm7zdJkNlxgKYGmRIYn3pSn 1XO+GdC3xDg+yFe+1E5F+TjIS7YS8AZlzM6ZRZT0ogp5hUvCcEIIWm5Hqlf6bka9 /HxAW6QFJ951X6o2l68F0sciJDKiJrkC010yR0rgf+BT6czDPvFsSQ3whn5d8ZLX X+uVJOsspWV0qFlXgqe76aasPtl2RHbUZ0Et0UztAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7V8DnHurcx1JH8P5+xxiT43zgAgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRmOGRjZTI5LWJlZDMtNDAyYS05ODJkLTYxM2Q0NWNkY2QyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAF+IwDQYJKoZIhvcNAQELBQADggEBADDKChodqxGJeIR8+o3sqg46 mV3q9lzz9olzRv8rfzLWjtfVMiFqIoB5W7pzuQCeC5Irx63ewQLsXk43ImSKekha 8CfXchnn2JdxP6ukWGekjgA7ZfwWF1uO3SJcGPmhH64Q0BTCzKB54AQq4OLrDMCL d7dENlPfWYTfQCET2SzNy9mEs8AA69Yh3yNVxSpB323ep2HE4ymahgOmA62HDkdW ncizlb5aWpD6SSmjnKebQTd3yU85VFoVhQrA5hkZBSjuMWwNe5QaUXxOWjJXegFx a4Dhu49ykVYjijaw2GCuYDmoCh0MgMVx1HrD5nAOVzNMGkvOBAMPGtRdsuwXHPU= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:31 2025 by rpki-client