$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa File: 8f960b0d-c291-490f-aff5-abe964221bd2.roa (raw, json) Hash identifier: voI3HSGQzUq+zjA4TckovlRCmSejq/w8JH36WESQJJU= Subject key identifier: 2C:91:CA:47:97:7A:80:16:06:48:D8:4F:37:43:C9:87:55:72:0D:E7 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 0A44AEBAD214C3E0E5D17D47E5E001A2604FE986 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa Signing time: Sun 02 Nov 2025 00:00:05 +0000 ROA not before: Sun 02 Nov 2025 00:00:05 +0000 ROA not after: Sun 07 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:108:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:44:ae:ba:d2:14:c3:e0:e5:d1:7d:47:e5:e0:01:a2:60:4f:e9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Nov 2 00:00:05 2025 GMT Not After : Dec 7 23:59:59 2025 GMT Subject: serialNumber=55ebee6e2f175e7028ecd24c8ee391e74fbbdb258510deb85c3c511029d45dc2, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:14:da:dc:7d:c1:91:cc:7f:20:d2:77:e6: a5:ed:05:00:b6:54:b7:e1:23:cd:a0:1b:78:51:bd: 2f:5e:19:0f:47:bb:03:bf:36:6e:28:a2:8e:41:44: b1:9d:4f:f9:e2:7c:5d:ef:7b:8f:c0:20:a9:f4:bc: d3:fc:d7:87:93:3e:9c:77:17:68:aa:d7:cf:85:31: bb:94:b4:46:7c:37:8f:d4:b1:96:e5:64:8a:73:8f: 82:04:4d:23:81:ad:16:02:86:1e:b7:0e:99:2a:5a: 9e:c3:fc:b0:58:1b:d2:30:40:71:57:01:1b:3e:af: b7:ec:f0:90:15:0e:3b:2f:fc:25:20:b5:89:84:27: 37:ed:e5:3f:ca:8c:fd:cd:f5:92:ec:87:b9:c1:5c: 60:59:54:c8:29:29:13:c6:f0:d8:31:43:85:f1:9e: 0f:83:40:69:cb:6f:ac:b8:b2:bc:3c:7c:02:7f:e0: b3:6f:ae:71:2b:1b:cc:ed:39:63:ce:18:94:3f:a4: e6:9c:4d:1e:8a:14:2a:cd:34:76:ba:79:e7:da:19: 08:04:73:6c:9d:57:18:37:df:14:4f:ed:35:a6:20: 95:8c:5a:1d:88:fd:ce:33:8f:e8:e8:4e:e9:c1:54: 74:4c:d7:62:62:fc:27:f6:df:a9:20:b9:55:a2:d6: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:91:CA:47:97:7A:80:16:06:48:D8:4F:37:43:C9:87:55:72:0D:E7 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:108:7000::/44 Signature Algorithm: sha256WithRSAEncryption 32:46:6d:48:0c:22:f4:4c:c6:e9:5a:41:fd:b1:82:98:d0:00: fc:14:46:08:f6:93:4a:67:1b:92:08:ef:3c:31:08:7b:c2:8f: 90:e9:5c:eb:74:68:0a:dd:4d:82:b1:d4:4e:ce:cb:2b:6e:b9: e6:ac:17:1a:56:01:2b:a8:30:79:d2:c8:32:f9:66:46:a9:95: 76:bc:28:4a:e2:0c:8c:69:17:9a:6b:60:80:4e:5d:e7:41:97: c8:db:79:37:cc:b7:a1:07:62:37:92:4b:67:81:39:ef:a8:5a: c4:70:26:15:89:56:6f:90:19:49:e7:31:af:ff:0f:58:47:34: 54:48:6f:0d:72:1f:ba:9a:a8:0a:2f:bc:8b:ab:da:fa:00:1a: aa:15:92:fa:29:8e:e2:d1:a2:2e:57:3f:bd:b5:16:3c:6c:cd: 97:61:f9:90:df:3e:af:f0:39:c0:86:4e:3c:11:28:72:22:16: 70:dd:94:ea:b4:58:5a:31:c0:9b:58:a4:c1:6e:8d:f1:a4:98: e3:ad:3d:f8:6c:42:41:db:a5:9d:07:bf:6b:c0:67:4a:3b:54: 95:54:c3:7a:c4:5d:f6:44:bb:63:8f:cf:4e:d1:97:73:a3:95: d6:ae:1b:c1:d8:61:62:f6:98:01:ce:db:48:16:61:d8:a5:95: 93:86:32:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCkSuutIUw+Dl0X1H5eABomBP6YYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUxMTAyMDAwMDA1WhcNMjUxMjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NWViZWU2ZTJmMTc1ZTcwMjhlY2QyNGM4ZWUzOTFlNzRm YmJkYjI1ODUxMGRlYjg1YzNjNTExMDI5ZDQ1ZGMyMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAQhTa3H3Bkcx/INJ35qXtBQC2VLfhI82gG3hRvS9eGQ9H uwO/Nm4ooo5BRLGdT/nifF3ve4/AIKn0vNP814eTPpx3F2iq18+FMbuUtEZ8N4/U sZblZIpzj4IETSOBrRYChh63DpkqWp7D/LBYG9IwQHFXARs+r7fs8JAVDjsv/CUg tYmEJzft5T/KjP3N9ZLsh7nBXGBZVMgpKRPG8NgxQ4Xxng+DQGnLb6y4srw8fAJ/ 4LNvrnErG8ztOWPOGJQ/pOacTR6KFCrNNHa6eefaGQgEc2ydVxg33xRP7TWmIJWM Wh2I/c4zj+joTunBVHRM12Ji/Cf236kguVWi1qUzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULJHKR5d6gBYGSNhPN0PJh1VyDecwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzhmOTYwYjBkLWMyOTEtNDkwZi1hZmY1LWFiZTk2NDIyMWJkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEIcAAwDQYJKoZIhvcNAQELBQADggEBADJGbUgMIvRMxulaQf2xgpjQ APwURgj2k0pnG5II7zwxCHvCj5DpXOt0aArdTYKx1E7OyytuueasFxpWASuoMHnS yDL5ZkaplXa8KEriDIxpF5prYIBOXedBl8jbeTfMt6EHYjeSS2eBOe+oWsRwJhWJ Vm+QGUnnMa//D1hHNFRIbw1yH7qaqAovvIur2voAGqoVkvopjuLRoi5XP721Fjxs zZdh+ZDfPq/wOcCGTjwRKHIiFnDdlOq0WFoxwJtYpMFujfGkmOOtPfhsQkHbpZ0H v2vAZ0o7VJVUw3rEXfZEu2OPz07Rl3OjldauG8HYYWL2mAHO20gWYdillZOGMmw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:07 2025 by rpki-client