$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0957db1f-16fb-4961-8979-5fa4d904ea19.roa File: 0957db1f-16fb-4961-8979-5fa4d904ea19.roa (raw, json) Hash identifier: oks7azzVWCltCchBY4R5z0jkPo9Rpxn+knCsAsSUNhA= Subject key identifier: 11:97:B7:5C:11:0F:9F:D5:51:F4:FC:DF:5F:97:EE:47:6C:95:20:07 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3A7D0947D2DF32FF0D3FF1C373C683211E6C97F9 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0957db1f-16fb-4961-8979-5fa4d904ea19.roa Signing time: Fri 31 Oct 2025 07:11:34 +0000 ROA not before: Fri 31 Oct 2025 07:11:34 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:17a0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7d:09:47:d2:df:32:ff:0d:3f:f1:c3:73:c6:83:21:1e:6c:97:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:11:34 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=984fd7562d1dd24573dba1ebd211efcace9de7df46ce17ba700af1de526cd686, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:90:35:32:ba:41:2a:ef:b4:0a:a8:8b:e8:68: 69:3c:b2:f5:ee:e2:fe:4d:6b:c8:3b:f7:52:7e:ca: eb:84:25:89:e6:1d:4b:39:d8:bd:3d:f1:b8:aa:ca: d7:0d:ad:04:de:45:1d:4a:1c:1c:e4:ce:aa:97:3d: 39:0e:56:45:22:a6:e6:89:ac:72:b0:31:ac:97:75: 71:a3:6c:ce:15:ca:e7:55:6e:93:ec:32:71:ab:68: 06:46:c9:3a:13:51:bf:d4:12:bb:f9:7b:56:cb:8e: a1:1e:8c:ca:55:af:6c:19:05:85:15:ee:05:1e:7d: c0:b3:50:c5:5e:5b:f1:95:c4:2e:4f:3f:f3:09:17: 0e:67:5c:48:72:4a:7e:a6:c8:84:20:9d:7a:e5:25: ea:bb:d3:cf:8e:7d:39:2e:6c:44:46:7b:b0:f3:ab: 3c:c8:62:0c:a2:e1:e9:e9:f9:d2:80:8c:54:30:65: 09:6b:86:e1:11:0a:e8:80:71:02:ee:77:93:5a:f0: a0:29:cb:48:44:49:35:b6:fe:51:59:6a:b0:01:8e: d9:4c:52:a1:45:05:26:c2:19:2a:64:e4:6d:bd:1b: 5c:b8:65:d5:f0:2e:a0:d9:3f:bb:eb:bb:91:fe:a8: 95:80:55:a2:b7:d6:3c:e9:29:1d:14:f8:c1:63:fa: bf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:97:B7:5C:11:0F:9F:D5:51:F4:FC:DF:5F:97:EE:47:6C:95:20:07 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0957db1f-16fb-4961-8979-5fa4d904ea19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:17a0::/43 Signature Algorithm: sha256WithRSAEncryption 9e:1a:6d:f6:ba:bf:2d:a7:6c:e2:bc:15:18:be:81:10:cd:8b: 3b:e1:2f:69:1f:99:6c:9e:b1:85:88:39:44:fb:4a:86:ea:7b: 16:13:ee:18:21:9d:04:0b:cb:30:7e:9c:d4:90:aa:87:93:28: 83:7d:00:28:51:10:90:51:cc:67:f4:b5:a7:6e:7b:98:c5:97: 47:d2:d2:32:8b:fd:de:e9:4a:e5:52:e3:e5:b7:e4:bb:d5:c3: 4e:ad:9c:85:ac:d0:ed:49:db:b9:ed:ec:e0:f0:46:8c:8e:74: b5:16:8b:50:0f:ea:0e:db:e5:5c:1e:49:73:50:20:12:6d:e5: a0:74:cf:ea:23:65:1d:1c:14:01:f0:aa:4b:36:26:03:dd:5b: c8:10:d2:fe:bf:c7:cc:05:dc:06:a6:df:49:c3:aa:f5:c6:fd: 2c:ee:2d:d4:aa:60:2d:d6:82:86:27:bf:83:c3:f9:94:1b:ab: 57:66:80:69:6e:14:af:bb:44:cb:b5:2a:54:a1:38:a1:ca:8a: d8:8f:85:b4:5a:33:29:e1:41:c3:f2:47:09:72:32:1c:87:0e: e4:8e:69:7b:38:97:a6:96:76:01:b2:36:c3:0d:86:54:17:ed: ec:d3:a6:bc:d0:80:5d:81:9e:e4:08:79:96:df:42:07:b2:fd: a8:da:dc:8f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOn0JR9LfMv8NP/HDc8aDIR5sl/kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcxMTM0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODRmZDc1NjJkMWRkMjQ1NzNkYmExZWJkMjExZWZjYWNl OWRlN2RmNDZjZTE3YmE3MDBhZjFkZTUyNmNkNjg2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYkDUyukEq77QKqIvoaGk8svXu4v5Na8g791J+yuuEJYnm HUs52L098biqytcNrQTeRR1KHBzkzqqXPTkOVkUipuaJrHKwMayXdXGjbM4VyudV bpPsMnGraAZGyToTUb/UErv5e1bLjqEejMpVr2wZBYUV7gUefcCzUMVeW/GVxC5P P/MJFw5nXEhySn6myIQgnXrlJeq708+OfTkubERGe7DzqzzIYgyi4enp+dKAjFQw ZQlrhuERCuiAcQLud5Na8KApy0hESTW2/lFZarABjtlMUqFFBSbCGSpk5G29G1y4 ZdXwLqDZP7vru5H+qJWAVaK31jzpKR0U+MFj+r/tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEZe3XBEPn9VR9PzfX5fuR2yVIAcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzA5NTdkYjFmLTE2ZmItNDk2MS04OTc5LTVmYTRkOTA0ZWExOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAF6AwDQYJKoZIhvcNAQELBQADggEBAJ4abfa6vy2nbOK8FRi+gRDN izvhL2kfmWyesYWIOUT7SobqexYT7hghnQQLyzB+nNSQqoeTKIN9AChREJBRzGf0 tadue5jFl0fS0jKL/d7pSuVS4+W35LvVw06tnIWs0O1J27nt7ODwRoyOdLUWi1AP 6g7b5VweSXNQIBJt5aB0z+ojZR0cFAHwqks2JgPdW8gQ0v6/x8wF3Aam30nDqvXG /SzuLdSqYC3WgoYnv4PD+ZQbq1dmgGluFK+7RMu1KlShOKHKitiPhbRaMynhQcPy RwlyMhyHDuSOaXs4l6aWdgGyNsMNhlQX7ezTprzQgF2BnuQIeZbfQgey/aja3I8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:25 2025 by rpki-client