$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78dec03d-e4a6-4a52-9de4-54e4c3526d5b.roa File: 78dec03d-e4a6-4a52-9de4-54e4c3526d5b.roa (raw, json) Hash identifier: 98Zu8ECKyi1i4ebNX60CFoFJ1m2Ly0reTAUJSzizabE= Subject key identifier: 8D:5A:6A:F6:78:6B:46:51:3E:0E:8D:95:C3:70:B0:2F:CA:98:00:53 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 62298272563C441FF5FC58EC9BB995428625D98B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78dec03d-e4a6-4a52-9de4-54e4c3526d5b.roa Signing time: Fri 31 Oct 2025 07:42:42 +0000 ROA not before: Fri 31 Oct 2025 07:42:42 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3e00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:29:82:72:56:3c:44:1f:f5:fc:58:ec:9b:b9:95:42:86:25:d9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:42:42 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c68afe77d7417429462a9c1e46adac6617130dee195a9b67005e3890bd994c8e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0f:53:b0:83:47:2c:b7:ea:fd:44:fa:97:da: 62:7e:0b:f3:c7:6d:ef:ab:0b:c8:c0:b8:4c:85:57: a3:02:d2:41:54:35:97:e1:69:ec:27:d7:42:93:a2: 7f:78:0b:79:8d:35:11:87:a0:94:cc:2e:5c:c6:3b: 44:88:54:52:ed:03:bf:8f:42:a7:6f:8f:f0:52:ba: 08:b6:6c:e5:fa:d3:c9:37:ed:a1:c4:f8:18:99:99: e7:ce:94:09:7b:f0:59:35:4e:62:53:30:2f:7b:c0: 42:ee:f6:36:96:1b:4e:f5:d8:67:7a:ed:20:cd:2f: 58:57:30:e8:3b:bf:24:37:86:fd:00:ca:cf:97:b4: 1a:63:9d:f6:5d:9f:b9:7e:44:ee:e6:1a:ef:07:41: ca:4c:65:67:b1:65:dc:83:03:49:c2:8f:36:c8:7f: 35:ad:fe:84:c3:ab:1e:cc:06:f9:8d:c2:b6:2f:8e: 8e:69:4a:37:d4:4a:ad:87:8b:63:67:b9:7a:d9:a2: d8:43:85:32:ec:42:23:40:ad:2f:09:82:9f:30:e1: 7b:2b:13:86:ec:10:4d:5d:f9:5b:d4:e2:9c:e3:e6: 34:35:3e:9c:96:2d:09:ab:3b:9c:9a:0d:34:07:92: 15:c5:a3:29:6e:1f:8d:9e:ed:2a:78:89:1a:a3:9c: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5A:6A:F6:78:6B:46:51:3E:0E:8D:95:C3:70:B0:2F:CA:98:00:53 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78dec03d-e4a6-4a52-9de4-54e4c3526d5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3e00::/42 Signature Algorithm: sha256WithRSAEncryption 12:4c:8d:c1:ea:d1:aa:04:fb:c2:3e:7c:36:3d:60:8f:d8:6f: a6:db:5f:d3:c5:0a:a2:2a:76:aa:30:6f:63:62:a9:2d:05:cb: 14:de:bb:81:01:af:67:a6:69:de:0a:25:19:43:20:a7:3b:07: d2:53:5d:30:06:52:27:11:f7:f8:15:ba:8f:ce:80:35:ae:43: a1:06:9d:18:9e:21:27:47:c8:fc:ca:31:06:49:a0:4f:74:95: 04:4d:61:89:a9:5b:32:5d:32:ed:fd:ee:96:1e:f0:95:19:96: b4:7b:bd:8d:63:bf:e8:75:a3:57:dd:2a:bb:af:ad:b2:34:97: 47:1f:1f:63:98:6e:62:ed:d2:fc:93:c9:e0:a4:b7:97:63:e9: 64:8a:c9:03:ae:63:fd:0c:67:bf:be:50:24:4e:77:73:e0:ca: 97:11:52:0d:b7:be:91:99:62:dc:5e:6e:f8:4e:8e:7c:80:46: d6:de:c6:da:f1:71:4b:96:5c:5f:e8:42:2a:a2:9d:1e:c4:34: 7b:c0:0a:63:18:83:58:34:af:f1:0a:eb:0d:5f:f0:31:60:57: a7:62:35:7b:1a:a9:06:c0:35:b4:7a:8b:a0:6a:41:07:9a:a8: 89:00:65:b6:a4:f6:38:cc:25:0b:da:69:e5:b5:37:43:a0:d9: e7:57:71:fc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYimCclY8RB/1/Fjsm7mVQoYl2YswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc0MjQyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjhhZmU3N2Q3NDE3NDI5NDYyYTljMWU0NmFkYWM2NjE3 MTMwZGVlMTk1YTliNjcwMDVlMzg5MGJkOTk0YzhlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYD1Owg0cst+r9RPqX2mJ+C/PHbe+rC8jAuEyFV6MC0kFU NZfhaewn10KTon94C3mNNRGHoJTMLlzGO0SIVFLtA7+PQqdvj/BSugi2bOX608k3 7aHE+BiZmefOlAl78Fk1TmJTMC97wELu9jaWG0712Gd67SDNL1hXMOg7vyQ3hv0A ys+XtBpjnfZdn7l+RO7mGu8HQcpMZWexZdyDA0nCjzbIfzWt/oTDqx7MBvmNwrYv jo5pSjfUSq2Hi2NnuXrZothDhTLsQiNArS8Jgp8w4XsrE4bsEE1d+VvU4pzj5jQ1 PpyWLQmrO5yaDTQHkhXFoyluH42e7Sp4iRqjnF2BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjVpq9nhrRlE+Do2Vw3CwL8qYAFMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzc4ZGVjMDNkLWU0YTYtNGE1Mi05ZGU0LTU0ZTRjMzUyNmQ1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAJAAPgAwDQYJKoZIhvcNAQELBQADggEBABJMjcHq0aoE+8I+fDY9YI/Y b6bbX9PFCqIqdqowb2NiqS0FyxTeu4EBr2emad4KJRlDIKc7B9JTXTAGUicR9/gV uo/OgDWuQ6EGnRieISdHyPzKMQZJoE90lQRNYYmpWzJdMu397pYe8JUZlrR7vY1j v+h1o1fdKruvrbI0l0cfH2OYbmLt0vyTyeCkt5dj6WSKyQOuY/0MZ7++UCROd3Pg ypcRUg23vpGZYtxebvhOjnyARtbextrxcUuWXF/oQiqinR7ENHvACmMYg1g0r/EK 6w1f8DFgV6diNXsaqQbANbR6i6BqQQeaqIkAZbak9jjMJQvaaeW1N0Og2edXcfw= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:31 2025 by rpki-client