$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f5823366-acd0-4b15-aeaa-2cc7eeb612e3.roa File: f5823366-acd0-4b15-aeaa-2cc7eeb612e3.roa (raw, json) Hash identifier: aImz+gb58/90TyhjrzrX6hk6cGiLVKtJmr/ZZmKHHdk= Subject key identifier: B7:2A:23:7A:28:0D:14:8A:E8:4D:D7:5A:35:72:3A:6A:07:3D:E4:4B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4D1AFECFC725DFF386EAA2F4791AFA83500C2406 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f5823366-acd0-4b15-aeaa-2cc7eeb612e3.roa Signing time: Fri 31 Oct 2025 03:40:17 +0000 ROA not before: Fri 31 Oct 2025 03:40:17 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c7c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:1a:fe:cf:c7:25:df:f3:86:ea:a2:f4:79:1a:fa:83:50:0c:24:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:40:17 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=1b70f37e294ae9df281fa42d455a2bda81e256f13dd8dfceb12c5519fc012960, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fa:c8:1a:f4:7c:12:55:60:48:39:c5:2b:ad: 36:16:0e:5d:a4:6c:75:4b:2f:cf:28:71:1a:56:4c: a8:3e:33:d4:1b:d0:e7:73:56:ae:00:a7:84:0e:26: 36:ae:3c:5d:ab:b0:7c:e8:03:a9:5e:2d:b0:fb:d1: 0a:4d:2e:5c:35:a3:4f:be:82:2f:a0:d3:31:2b:37: d7:87:cb:99:4e:38:89:a3:af:68:51:c2:3d:ab:52: 8f:9a:25:8d:c5:f6:05:9d:13:69:45:1c:c0:da:a3: be:70:6f:d2:2c:65:bd:34:bd:52:32:d4:5a:76:a0: b5:4b:26:cb:a7:7c:52:2d:4d:bc:43:e6:cd:94:8e: 20:10:b9:f6:dc:fe:83:25:27:bb:58:52:80:1f:1f: 3c:60:84:b3:f5:41:d7:42:f4:db:5a:6f:10:cb:b3: 82:3c:fc:2c:9c:db:4a:8e:ef:4e:a4:58:1a:6e:e4: f7:88:1b:50:9e:5e:a0:49:fb:e0:54:a9:19:5c:18: c4:da:18:96:97:62:7b:2a:d8:6a:65:bd:38:da:46: 57:45:01:7b:79:4e:83:3a:73:31:8a:8a:f2:35:87: 29:2e:ff:56:b0:8d:f0:d2:9b:0f:2f:33:a0:5c:6e: b2:f1:4e:a8:06:62:c0:0d:85:0b:07:e2:1d:fd:c4: 33:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2A:23:7A:28:0D:14:8A:E8:4D:D7:5A:35:72:3A:6A:07:3D:E4:4B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f5823366-acd0-4b15-aeaa-2cc7eeb612e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c7c::/46 Signature Algorithm: sha256WithRSAEncryption 92:89:32:2d:30:f0:96:59:f8:45:4d:5a:59:fb:db:6d:f3:69: a3:58:84:c7:92:8f:ce:05:7c:54:9c:0c:d1:04:93:19:b8:28: 2a:ae:e6:69:1a:37:07:2f:4a:ac:cf:16:47:2c:67:93:09:da: fd:5b:1d:7d:4d:b0:38:0f:e4:1c:04:cb:eb:20:d6:09:29:61: f6:4e:7f:8e:b2:de:9b:f3:22:2d:14:57:04:4e:83:22:4f:3f: 09:60:65:1d:fe:35:9b:97:39:de:7c:2d:0a:84:d5:e9:82:fa: 88:fb:8e:8a:ca:82:be:c0:fc:db:da:23:e9:15:c1:9d:0b:6a: 61:98:13:a7:5a:94:aa:f2:28:16:ae:bf:aa:df:5b:18:19:36: b4:30:40:7a:be:f9:61:d3:53:02:d7:0f:b5:f7:4f:cf:a0:ca: e4:4a:f3:c1:04:02:5b:81:92:05:eb:65:af:f6:e3:77:12:df: 9b:ee:ef:04:eb:00:0e:3c:00:83:30:da:13:6c:4b:df:c2:ee: 71:9e:61:57:07:32:79:7e:56:1e:f4:de:13:35:a6:37:b9:8b: 15:71:ca:47:12:31:21:44:83:c5:2e:aa:ea:09:03:b9:23:66: 8d:3d:4b:82:65:a5:15:16:cf:c0:9d:20:66:57:69:44:79:da: 3d:14:2b:66 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTRr+z8cl3/OG6qL0eRr6g1AMJAYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDM0MDE3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjcwZjM3ZTI5NGFlOWRmMjgxZmE0MmQ0NTVhMmJkYTgx ZTI1NmYxM2RkOGRmY2ViMTJjNTUxOWZjMDEyOTYwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR+sga9HwSVWBIOcUrrTYWDl2kbHVLL88ocRpWTKg+M9Qb 0OdzVq4Ap4QOJjauPF2rsHzoA6leLbD70QpNLlw1o0++gi+g0zErN9eHy5lOOImj r2hRwj2rUo+aJY3F9gWdE2lFHMDao75wb9IsZb00vVIy1Fp2oLVLJsunfFItTbxD 5s2UjiAQufbc/oMlJ7tYUoAfHzxghLP1QddC9NtabxDLs4I8/Cyc20qO706kWBpu 5PeIG1CeXqBJ++BUqRlcGMTaGJaXYnsq2GplvTjaRldFAXt5ToM6czGKivI1hyku /1awjfDSmw8vM6BcbrLxTqgGYsANhQsH4h39xDMrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtyojeigNFIroTddaNXI6agc95EswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Y1ODIzMzY2LWFjZDAtNGIxNS1hZWFhLTJjYzdlZWI2MTJlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAALHwwDQYJKoZIhvcNAQELBQADggEBAJKJMi0w8JZZ+EVNWln7223z aaNYhMeSj84FfFScDNEEkxm4KCqu5mkaNwcvSqzPFkcsZ5MJ2v1bHX1NsDgP5BwE y+sg1gkpYfZOf46y3pvzIi0UVwROgyJPPwlgZR3+NZuXOd58LQqE1emC+oj7jorK gr7A/NvaI+kVwZ0LamGYE6dalKryKBauv6rfWxgZNrQwQHq++WHTUwLXD7X3T8+g yuRK88EEAluBkgXrZa/243cS35vu7wTrAA48AIMw2hNsS9/C7nGeYVcHMnl+Vh70 3hM1pje5ixVxykcSMSFEg8UuquoJA7kjZo09S4JlpRUWz8CdIGZXaUR52j0UK2Y= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:22 2025 by rpki-client