$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/936a4192-e7b6-4a98-80bc-305d5fdb1ad6.roa File: 936a4192-e7b6-4a98-80bc-305d5fdb1ad6.roa (raw, json) Hash identifier: +c/0kPwf1WUkszZTr42MUcOm/X5Lir6ufihMo0Pn3gM= Subject key identifier: 8D:89:60:C4:C3:05:1B:3A:58:88:8F:D2:E5:ED:96:BC:CD:31:37:64 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2DF9F551C2B7F13E5CF4CDD9270066412DE3831E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/936a4192-e7b6-4a98-80bc-305d5fdb1ad6.roa Signing time: Fri 31 Oct 2025 01:08:32 +0000 ROA not before: Fri 31 Oct 2025 01:08:32 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3982::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f9:f5:51:c2:b7:f1:3e:5c:f4:cd:d9:27:00:66:41:2d:e3:83:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:08:32 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=b1cc6c0e40a674bfa3001c0d4d52e080489611d29e40e213d8869d4c6cb5d774, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ef:4c:5a:7c:3f:99:2f:11:ad:9e:91:26:ab: 0f:62:22:1a:d8:6f:4d:46:5c:61:1a:67:80:b8:2a: d9:9c:47:dc:3d:a4:ac:c7:53:07:f2:57:20:61:44: 27:e9:2c:41:97:55:a6:fe:ed:9d:cc:74:8e:e9:6b: bf:e4:47:17:47:e5:b2:32:b5:b7:dd:74:8b:b9:0c: d2:5a:29:ec:70:a3:dd:b2:56:8f:df:dc:57:d1:c2: 1b:75:64:b8:f5:0e:41:58:e9:fc:ac:3c:5d:02:bf: 03:49:fd:14:0a:2b:61:61:ab:21:0f:56:8f:21:07: 32:e7:48:11:bb:0c:22:21:a0:f9:32:1d:d7:bb:38: 1a:3c:f9:e9:a8:04:9f:01:60:02:52:57:9c:99:91: fb:bd:e8:29:1d:f2:33:5d:17:6f:55:c3:1e:70:92: eb:69:5f:33:0d:90:44:72:c4:ad:de:25:c8:ca:88: 42:e2:95:90:ba:5f:e9:dd:73:2c:8f:de:ab:e9:91: 36:99:5c:27:b5:ed:a3:be:91:45:e6:a6:f4:28:76: ae:d5:40:62:bb:0e:d3:34:b4:b2:10:0a:36:ae:c4: ee:d4:7d:0b:da:7b:a1:68:5e:07:4c:30:72:a3:2c: 2f:b7:16:81:1b:0d:28:95:f5:7b:68:9b:3d:99:6f: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:89:60:C4:C3:05:1B:3A:58:88:8F:D2:E5:ED:96:BC:CD:31:37:64 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/936a4192-e7b6-4a98-80bc-305d5fdb1ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3982::/47 Signature Algorithm: sha256WithRSAEncryption 4c:0b:ce:f9:87:f5:76:2d:19:7a:85:a7:c4:54:91:1b:58:be: c8:6f:96:a5:1e:19:92:04:b7:62:03:0a:30:dc:3a:b0:f3:98: 0a:12:10:4f:44:4f:b5:d7:f9:95:c2:7b:82:07:fa:b5:5e:97: aa:19:cd:00:13:fc:07:d8:8c:00:2f:00:99:7a:cf:b7:79:5e: 18:22:64:4f:d6:b1:65:8e:74:0c:14:ca:da:db:3a:dc:a8:a1: d3:02:ee:65:c3:3d:22:bd:ad:04:43:3a:3d:10:c0:ee:4b:4b: 66:26:75:8e:de:e2:f1:a9:37:2b:41:92:52:76:93:73:26:75: c2:d4:62:35:4a:c7:87:62:23:79:7a:8b:cb:a5:ba:8d:27:8b: 2f:00:af:eb:52:b1:25:b5:55:b1:79:f9:a9:db:45:3a:20:89: 13:11:01:14:05:9e:80:31:fa:68:57:08:a6:d5:ae:16:c9:61: b4:e6:6a:e0:fb:02:d7:ce:a4:b4:55:ae:55:18:66:f6:33:d2: d6:49:9c:75:de:52:6b:94:0d:1e:39:2c:4c:63:7f:54:9a:d4: c0:a4:d0:ac:61:09:00:11:34:37:33:f7:d8:4c:0a:ee:4b:ed: 1e:34:51:de:a0:75:86:24:36:c5:0c:fc:4c:89:42:9e:d7:58: fb:d6:94:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULfn1UcK38T5c9M3ZJwBmQS3jgx4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEwODMyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWNjNmMwZTQwYTY3NGJmYTMwMDFjMGQ0ZDUyZTA4MDQ4 OTYxMWQyOWU0MGUyMTNkODg2OWQ0YzZjYjVkNzc0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDW70xafD+ZLxGtnpEmqw9iIhrYb01GXGEaZ4C4KtmcR9w9 pKzHUwfyVyBhRCfpLEGXVab+7Z3MdI7pa7/kRxdH5bIytbfddIu5DNJaKexwo92y Vo/f3FfRwht1ZLj1DkFY6fysPF0CvwNJ/RQKK2FhqyEPVo8hBzLnSBG7DCIhoPky Hde7OBo8+emoBJ8BYAJSV5yZkfu96Ckd8jNdF29Vwx5wkutpXzMNkERyxK3eJcjK iELilZC6X+ndcyyP3qvpkTaZXCe17aO+kUXmpvQodq7VQGK7DtM0tLIQCjauxO7U fQvae6FoXgdMMHKjLC+3FoEbDSiV9Xtomz2Zby6HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjYlgxMMFGzpYiI/S5e2WvM0xN2QwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzkzNmE0MTkyLWU3YjYtNGE5OC04MGJjLTMwNWQ1ZmRiMWFkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOYIwDQYJKoZIhvcNAQELBQADggEBAEwLzvmH9XYtGXqFp8RUkRtY vshvlqUeGZIEt2IDCjDcOrDzmAoSEE9ET7XX+ZXCe4IH+rVel6oZzQAT/AfYjAAv AJl6z7d5XhgiZE/WsWWOdAwUytrbOtyoodMC7mXDPSK9rQRDOj0QwO5LS2YmdY7e 4vGpNytBklJ2k3MmdcLUYjVKx4diI3l6i8uluo0niy8Ar+tSsSW1VbF5+anbRTog iRMRARQFnoAx+mhXCKbVrhbJYbTmauD7AtfOpLRVrlUYZvYz0tZJnHXeUmuUDR45 LExjf1Sa1MCk0KxhCQARNDcz99hMCu5L7R40Ud6gdYYkNsUM/EyJQp7XWPvWlCg= -----END CERTIFICATE-----Generated at Tue Nov 18 08:25:00 2025 by rpki-client