$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a7120da-b813-45da-bb41-0566b93db409.roa File: 0a7120da-b813-45da-bb41-0566b93db409.roa (raw, json) Hash identifier: ETl6QMkG4uHlJJNZrIzaDKKupiZZZFkvzWj9+spbdKU= Subject key identifier: B4:E4:42:58:5C:69:22:E4:09:7C:61:43:A7:08:F8:82:FD:A6:74:39 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 758EDFB24DA81713AC783ECE04EFC460A70CD04E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a7120da-b813-45da-bb41-0566b93db409.roa Signing time: Fri 31 Oct 2025 05:22:07 +0000 ROA not before: Fri 31 Oct 2025 05:22:07 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1960::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8e:df:b2:4d:a8:17:13:ac:78:3e:ce:04:ef:c4:60:a7:0c:d0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:22:07 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=86b05b4fae4e609e6cbc51f22fa201961cd1c715e69f8ffef826f87823c309b6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:46:e1:1b:30:f8:0c:81:5a:c6:a7:dc:7e:dd: 6e:e6:bc:85:75:6d:bf:82:1b:eb:e2:63:64:b7:94: 84:b6:5a:93:54:f1:8b:6b:35:08:a7:0e:7a:15:03: 5d:d9:1f:0b:b1:6c:72:86:11:2e:c2:ee:6b:67:e0: 70:a9:1a:fa:8e:71:e3:2c:2c:5a:a7:04:bc:e1:dd: 0a:3e:ea:19:41:16:45:f9:02:35:17:d1:3b:41:a4: 05:c2:36:ec:ec:86:31:18:d7:ce:01:1a:5d:11:f0: b9:94:59:3c:7a:30:12:53:78:82:c4:fa:66:ff:9b: 90:2f:6e:20:79:7a:87:c3:f5:0a:1d:08:a0:2d:0a: 69:a8:fb:b0:6d:1a:13:d2:d5:03:d8:04:cf:34:2d: ed:24:59:8a:1d:22:d4:b2:65:9a:f3:2d:a0:e4:de: b8:d9:23:47:66:ef:db:2f:6f:14:97:5a:86:c8:fe: 3a:3e:04:1f:8d:eb:4b:c4:d8:58:8c:63:e7:98:79: 81:70:2c:94:6d:4c:cb:ae:28:b7:dc:a8:fb:87:d8: db:50:d9:bd:1a:91:e9:73:f5:e2:b1:fa:d5:c2:af: 6e:73:96:e2:a9:38:d9:9c:2f:e1:89:19:59:a5:31: 55:36:94:51:2d:c7:52:ad:79:63:f1:1d:c2:a1:52: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E4:42:58:5C:69:22:E4:09:7C:61:43:A7:08:F8:82:FD:A6:74:39 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a7120da-b813-45da-bb41-0566b93db409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1960::/45 Signature Algorithm: sha256WithRSAEncryption 85:a0:22:a7:6c:6c:76:0b:7c:fb:b6:ee:3b:a3:39:57:6e:db: 82:66:bf:5d:91:fe:16:9a:f3:7d:98:17:47:02:d5:6d:41:d7: bd:72:89:ea:39:f8:70:fb:39:b6:f5:86:b5:48:ff:fb:0f:39: 39:ba:17:41:ee:5b:5a:13:3e:c3:47:a1:29:29:66:9d:13:17: 0a:5f:c5:6d:a8:de:ed:72:f2:a6:04:c4:39:c3:6d:c9:3d:9b: 7b:65:4a:ce:14:78:1e:94:6f:42:92:61:a4:c3:6f:1d:b8:e8: 1a:82:11:e0:01:b9:27:4a:9c:d7:d8:d7:ac:8f:f3:00:e6:ce: 81:e4:c8:a5:6f:a3:52:d7:2f:e2:b7:05:1b:a6:79:32:3f:3b: 2b:24:a1:27:96:a6:1c:fa:36:f5:cf:f1:69:e4:53:21:9b:34: c6:1f:f9:39:eb:77:12:35:c6:0c:a7:1f:4f:ee:0c:71:37:c7: d4:4d:85:bd:27:a7:46:a6:12:9a:5e:b0:46:e2:3a:1c:5d:8c: ec:46:f2:ac:d8:fa:aa:42:d6:03:12:1e:61:c0:d0:87:19:f2: 01:bb:53:47:83:59:60:98:c1:6a:0f:f9:ad:e5:95:fe:59:ea: 11:d2:31:5f:85:2e:60:47:64:40:62:e6:ca:60:16:67:2f:0d: 90:7b:2c:fa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdY7fsk2oFxOseD7OBO/EYKcM0E4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyMjA3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmIwNWI0ZmFlNGU2MDllNmNiYzUxZjIyZmEyMDE5NjFj ZDFjNzE1ZTY5ZjhmZmVmODI2Zjg3ODIzYzMwOWI2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdRuEbMPgMgVrGp9x+3W7mvIV1bb+CG+viY2S3lIS2WpNU 8YtrNQinDnoVA13ZHwuxbHKGES7C7mtn4HCpGvqOceMsLFqnBLzh3Qo+6hlBFkX5 AjUX0TtBpAXCNuzshjEY184BGl0R8LmUWTx6MBJTeILE+mb/m5AvbiB5eofD9Qod CKAtCmmo+7BtGhPS1QPYBM80Le0kWYodItSyZZrzLaDk3rjZI0dm79svbxSXWobI /jo+BB+N60vE2FiMY+eYeYFwLJRtTMuuKLfcqPuH2NtQ2b0akelz9eKx+tXCr25z luKpONmcL+GJGVmlMVU2lFEtx1KteWPxHcKhUn3pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtORCWFxpIuQJfGFDpwj4gv2mdDkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBhNzEyMGRhLWI4MTMtNDVkYS1iYjQxLTA1NjZiOTNkYjQwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAGWAwDQYJKoZIhvcNAQELBQADggEBAIWgIqdsbHYLfPu27jujOVdu 24Jmv12R/haa832YF0cC1W1B171yieo5+HD7Obb1hrVI//sPOTm6F0HuW1oTPsNH oSkpZp0TFwpfxW2o3u1y8qYExDnDbck9m3tlSs4UeB6Ub0KSYaTDbx246BqCEeAB uSdKnNfY16yP8wDmzoHkyKVvo1LXL+K3BRumeTI/OyskoSeWphz6NvXP8WnkUyGb NMYf+TnrdxI1xgynH0/uDHE3x9RNhb0np0amEppesEbiOhxdjOxG8qzY+qpC1gMS HmHA0IcZ8gG7U0eDWWCYwWoP+a3llf5Z6hHSMV+FLmBHZEBi5spgFmcvDZB7LPo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:39:07 2025 by rpki-client