$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/991fad76-996f-41fc-8beb-8edc16fd3a32.roa File: 991fad76-996f-41fc-8beb-8edc16fd3a32.roa (raw, json) Hash identifier: GboYOesW7gXQec2P768HYcSqS2Rsq+HHJCmxSdRAc7E= Subject key identifier: E2:19:72:51:4E:26:73:9A:E1:2A:05:1B:C1:64:85:FF:A3:7E:CC:88 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 40F9C3823BE48B6FCEE756C50556F25EB93D75BC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/991fad76-996f-41fc-8beb-8edc16fd3a32.roa Signing time: Fri 31 Oct 2025 04:55:11 +0000 ROA not before: Fri 31 Oct 2025 04:55:11 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3e90::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f9:c3:82:3b:e4:8b:6f:ce:e7:56:c5:05:56:f2:5e:b9:3d:75:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:55:11 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=637454e71b554d298d1872e42d73107f3df96a7c54ec42743a72b6e10d98d181, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:c8:08:24:9b:04:e2:c8:66:c9:2c:f5:75: ce:7f:7e:4d:6f:30:67:97:52:08:95:be:f8:36:4b: 98:16:4a:83:4f:45:54:67:05:e9:06:ba:35:24:80: ee:d7:48:d4:d3:ff:a7:7c:f4:0c:7e:26:46:8e:9b: a0:72:8c:b7:ba:8a:f9:cb:9d:c2:c2:c1:e0:a7:0a: 47:e5:46:6e:59:33:23:ee:a8:12:61:99:f9:17:62: d0:5f:31:1a:30:73:35:f7:cd:a3:fd:ec:c6:24:36: 50:d3:8b:93:3c:d9:16:82:98:b0:5c:cb:e7:06:08: 73:ed:18:c3:2c:7a:23:5a:89:98:28:cf:69:f2:70: e2:57:99:f7:32:73:0d:2c:15:de:d3:10:32:b9:6e: 9d:2e:90:89:7b:c3:da:d8:4f:bc:e6:fe:bf:06:37: 7d:ce:8c:41:f7:c3:25:eb:e7:77:98:0b:f4:3d:87: 80:f5:3a:ab:14:0a:70:ed:32:d0:6d:bb:64:18:23: e9:1d:51:fc:77:31:8e:fa:c7:71:f4:0d:1f:30:93: dc:d2:69:f4:12:74:a4:3e:bc:cc:25:2f:ed:ee:84: 19:9a:89:8b:a6:9b:2c:68:9f:22:8d:cc:37:e8:6b: ba:f4:05:3e:60:27:df:18:71:d0:ab:81:76:09:f2: 1d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:19:72:51:4E:26:73:9A:E1:2A:05:1B:C1:64:85:FF:A3:7E:CC:88 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/991fad76-996f-41fc-8beb-8edc16fd3a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3e90::/46 Signature Algorithm: sha256WithRSAEncryption 05:45:d3:c5:79:7b:eb:06:91:3f:3e:98:8b:1c:15:01:4a:5f: 99:e7:78:d1:52:e9:06:c3:74:48:e5:52:78:a8:8a:14:ba:06: 21:3d:1a:04:02:5a:e0:9c:3b:fe:95:fa:14:86:d0:cf:ac:2f: 22:fe:01:97:f8:31:bc:55:16:79:13:60:09:53:88:8e:06:09: 9e:77:b5:61:45:b9:9a:77:7a:05:73:41:c7:ba:18:fc:d8:f5: 9f:53:7e:6d:83:cf:98:bc:d0:56:d6:73:ae:e6:3d:1a:cb:3a: 35:2f:03:aa:23:56:bb:5c:65:54:31:a2:86:38:9a:dc:bd:a8: 64:d0:23:7f:b4:9a:d8:34:c4:eb:98:cc:62:ad:41:24:5d:e1: d5:bb:15:39:c0:61:3b:1c:4b:97:7d:4b:ac:da:91:d9:05:a0: 28:43:b1:60:a4:77:18:df:95:eb:d5:02:58:94:fa:e1:b7:d7: 16:3b:0f:19:4d:5e:de:93:db:95:ed:d5:91:9b:49:c1:0f:49: ba:69:30:83:1f:ba:63:10:67:55:0d:72:2c:fc:e2:dc:5a:e7: 44:9b:72:45:0f:44:29:c6:71:27:4b:89:37:3d:7a:24:cf:eb: a1:ed:46:4f:76:9d:9d:ac:70:82:76:93:9a:b8:0e:14:54:7c: 07:3e:a8:ab -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQPnDgjvki2/O51bFBVbyXrk9dbwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ1NTExWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2Mzc0NTRlNzFiNTU0ZDI5OGQxODcyZTQyZDczMTA3ZjNk Zjk2YTdjNTRlYzQyNzQzYTcyYjZlMTBkOThkMTgxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0+8gIJJsE4shmySz1dc5/fk1vMGeXUgiVvvg2S5gWSoNP RVRnBekGujUkgO7XSNTT/6d89Ax+JkaOm6ByjLe6ivnLncLCweCnCkflRm5ZMyPu qBJhmfkXYtBfMRowczX3zaP97MYkNlDTi5M82RaCmLBcy+cGCHPtGMMseiNaiZgo z2nycOJXmfcycw0sFd7TEDK5bp0ukIl7w9rYT7zm/r8GN33OjEH3wyXr53eYC/Q9 h4D1OqsUCnDtMtBtu2QYI+kdUfx3MY76x3H0DR8wk9zSafQSdKQ+vMwlL+3uhBma iYummyxonyKNzDfoa7r0BT5gJ98YcdCrgXYJ8h3tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4hlyUU4mc5rhKgUbwWSF/6N+zIgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk5MWZhZDc2LTk5NmYtNDFmYy04YmViLThlZGMxNmZkM2EzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAPpAwDQYJKoZIhvcNAQELBQADggEBAAVF08V5e+sGkT8+mIscFQFK X5nneNFS6QbDdEjlUnioihS6BiE9GgQCWuCcO/6V+hSG0M+sLyL+AZf4MbxVFnkT YAlTiI4GCZ53tWFFuZp3egVzQce6GPzY9Z9Tfm2Dz5i80FbWc67mPRrLOjUvA6oj VrtcZVQxooY4mty9qGTQI3+0mtg0xOuYzGKtQSRd4dW7FTnAYTscS5d9S6zakdkF oChDsWCkdxjflevVAliU+uG31xY7DxlNXt6T25Xt1ZGbScEPSbppMIMfumMQZ1UN ciz84txa50SbckUPRCnGcSdLiTc9eiTP66HtRk92nZ2scIJ2k5q4DhRUfAc+qKs= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:34 2025 by rpki-client