$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/061bef62-806d-474c-8506-decad59d0e8a.roa File: 061bef62-806d-474c-8506-decad59d0e8a.roa (raw, json) Hash identifier: eOYfVWEaWPEtIhdBvPRPZlFlsQcdHFQCbsscmvuZc4Q= Subject key identifier: 57:A2:03:0D:78:BC:C3:54:50:4E:F9:56:E4:36:22:21:BB:22:36:CD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1CABA4256F6F7BA9B85F14D35B83F97E81D0323D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/061bef62-806d-474c-8506-decad59d0e8a.roa Signing time: Fri 31 Oct 2025 03:22:03 +0000 ROA not before: Fri 31 Oct 2025 03:22:03 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1ff4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ab:a4:25:6f:6f:7b:a9:b8:5f:14:d3:5b:83:f9:7e:81:d0:32:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:22:03 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=78f1dfed964e5b0d47f5c620eb537aed0c7ee2ee42ffef89d63aa9244450ce56, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:70:e9:3e:16:36:33:f8:e0:33:32:35:a6: ad:2c:1f:d3:6b:f4:0e:01:b0:ed:5f:74:67:dd:85: af:74:57:19:3a:60:75:5a:6c:83:86:88:42:4d:14: 1c:19:52:03:94:bd:7b:40:72:66:6e:04:1c:26:d1: ae:c8:84:cb:3c:ab:06:13:ce:73:6a:ac:d5:2d:82: 69:b2:ea:02:12:af:60:6c:f6:df:d4:0c:28:54:ae: c8:d6:c8:c5:85:10:74:66:eb:3b:12:82:9e:65:42: 92:1d:47:af:53:9d:92:f4:b0:cd:8a:b3:8e:6a:5d: 77:09:74:15:b2:03:75:84:d1:2b:d9:eb:a5:ba:29: b3:7b:fc:14:6b:d2:cc:4b:70:b2:9e:81:2c:db:ef: bd:a4:7f:81:09:af:20:20:c1:ea:24:fe:e6:3e:d7: 04:2a:13:5d:28:97:32:9f:e2:c5:ef:da:e8:6b:b7: da:0d:df:0c:53:ad:0a:fd:92:e3:b8:38:c1:2d:35: cf:94:2d:2e:e0:d4:b8:9b:70:0e:f7:14:97:60:41: 54:f4:25:cf:37:ec:8b:d9:5a:a3:48:3c:e8:e4:d3: 1d:14:bb:47:74:7d:8e:8c:6b:39:6e:81:cd:e4:cf: 41:97:37:b8:82:32:b2:26:3f:15:df:31:1d:32:8c: 87:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A2:03:0D:78:BC:C3:54:50:4E:F9:56:E4:36:22:21:BB:22:36:CD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/061bef62-806d-474c-8506-decad59d0e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1ff4::/46 Signature Algorithm: sha256WithRSAEncryption b5:e8:51:9a:11:93:0c:90:f6:3c:6f:dc:5e:52:e1:33:5c:29: 4b:1e:c0:50:0e:1c:8d:a4:f4:7d:39:d8:c3:2c:e2:27:a0:d7: 27:37:a0:49:93:69:18:e3:b8:e7:cd:0c:5a:3c:2a:ed:13:d8: 95:6e:a0:1d:0c:66:10:6d:a2:2d:3f:7d:18:11:6c:2b:64:79: c2:55:0d:d6:0b:b0:7d:b2:e1:d2:f5:63:97:52:a4:74:e0:1d: 00:3d:a9:6f:12:96:fd:6d:36:ca:23:21:4e:90:f0:b0:f7:a1: 3f:5b:dc:f0:b2:29:9c:3c:ea:6a:96:41:07:b5:96:7d:4b:99: a7:bc:2e:5a:bf:af:b4:84:82:13:d3:7f:a8:31:d8:14:a4:b9: d5:8a:98:2e:8e:8b:0d:ef:39:2c:91:c9:d1:30:5e:df:57:2b: 9c:65:8e:3f:47:98:9f:c9:59:3a:17:bb:ff:00:f6:5a:e8:92: 99:13:bc:bf:8d:d1:e9:84:cb:d2:af:e5:d4:fc:90:ae:61:ed: 22:26:9b:e3:53:26:15:60:72:cc:a2:38:9b:b8:ca:e6:f8:7e: cf:33:2a:21:c8:a1:48:ce:a7:49:c8:5d:0b:93:f6:a9:f3:60: 6e:56:4f:f6:dd:d7:29:2f:34:3d:46:df:b8:1f:47:21:4f:06: ab:2e:dd:e6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHKukJW9ve6m4XxTTW4P5foHQMj0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMyMjAzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGYxZGZlZDk2NGU1YjBkNDdmNWM2MjBlYjUzN2FlZDBj N2VlMmVlNDJmZmVmODlkNjNhYTkyNDQ0NTBjZTU2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGBnDpPhY2M/jgMzI1pq0sH9Nr9A4BsO1fdGfdha90Vxk6 YHVabIOGiEJNFBwZUgOUvXtAcmZuBBwm0a7IhMs8qwYTznNqrNUtgmmy6gISr2Bs 9t/UDChUrsjWyMWFEHRm6zsSgp5lQpIdR69TnZL0sM2Ks45qXXcJdBWyA3WE0SvZ 66W6KbN7/BRr0sxLcLKegSzb772kf4EJryAgweok/uY+1wQqE10olzKf4sXv2uhr t9oN3wxTrQr9kuO4OMEtNc+ULS7g1LibcA73FJdgQVT0Jc837IvZWqNIPOjk0x0U u0d0fY6Mazlugc3kz0GXN7iCMrImPxXfMR0yjIcfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUV6IDDXi8w1RQTvlW5DYiIbsiNs0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzA2MWJlZjYyLTgwNmQtNDc0Yy04NTA2LWRlY2FkNTlkMGU4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAH/QwDQYJKoZIhvcNAQELBQADggEBALXoUZoRkwyQ9jxv3F5S4TNc KUsewFAOHI2k9H052MMs4ieg1yc3oEmTaRjjuOfNDFo8Ku0T2JVuoB0MZhBtoi0/ fRgRbCtkecJVDdYLsH2y4dL1Y5dSpHTgHQA9qW8Slv1tNsojIU6Q8LD3oT9b3PCy KZw86mqWQQe1ln1Lmae8Llq/r7SEghPTf6gx2BSkudWKmC6Oiw3vOSyRydEwXt9X K5xljj9HmJ/JWToXu/8A9lrokpkTvL+N0emEy9Kv5dT8kK5h7SImm+NTJhVgcsyi OJu4yub4fs8zKiHIoUjOp0nIXQuT9qnzYG5WT/bd1ykvND1G37gfRyFPBqsu3eY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:20 2025 by rpki-client