$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ea4225c-1eae-4c35-82bb-3a9889581672.roa File: 0ea4225c-1eae-4c35-82bb-3a9889581672.roa (raw, json) Hash identifier: iAyzKK/iPZJI1k07ykwUciAML+qvi3WyU5s0a9h8iqY= Subject key identifier: 46:0B:0B:83:AC:BC:B0:1E:AB:09:32:BE:8C:BC:5E:66:80:AD:4B:04 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 51275E42C662198DE834BC4E68C247FFBAD9CA7D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ea4225c-1eae-4c35-82bb-3a9889581672.roa Signing time: Thu 30 Oct 2025 23:52:08 +0000 ROA not before: Thu 30 Oct 2025 23:52:08 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2fa8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:27:5e:42:c6:62:19:8d:e8:34:bc:4e:68:c2:47:ff:ba:d9:ca:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:52:08 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=8735876bf8cc702624ac015fca07eae28829c3162c3e677b7a3527327838615a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:39:eb:19:73:ee:c4:a3:a8:ef:4b:7d:7a: e9:86:9c:a0:c1:ef:0b:97:d9:66:00:ab:31:89:9b: c1:ed:3e:79:56:ff:e4:06:a5:9f:a0:f0:ab:90:c3: 3d:f7:a9:98:39:d0:d7:29:d1:cd:74:23:34:71:f7: ca:f6:84:8d:ac:ab:db:6b:45:59:36:91:28:49:26: f2:c5:c4:37:36:50:63:04:e6:4d:6f:ad:40:38:a4: da:44:6e:c0:49:dc:83:bd:bd:df:9c:ad:2f:ac:60: 89:79:56:e9:c8:6e:73:b1:d8:9d:7e:cb:e4:c4:35: 7e:5e:4c:13:08:a5:b6:58:91:8b:4c:2d:d5:76:ce: 25:e2:23:0f:1e:47:00:83:0d:31:8e:0a:4c:db:bc: 27:cf:cb:69:57:60:10:63:76:f5:dd:da:26:90:31: 4b:1f:81:e8:71:01:f1:0a:67:fe:75:13:f1:e4:7f: 63:8f:a8:74:fd:ec:88:0d:5e:2a:d7:3a:53:75:1a: 1a:c3:5c:be:da:0c:08:bf:20:85:25:91:07:39:5b: 61:1f:c1:29:02:26:e8:3a:65:98:ff:ba:90:0e:0b: ed:cd:dd:f6:60:b6:e2:f7:07:09:88:e3:7a:35:b0: 76:05:c4:f0:4b:33:bd:9e:68:65:cf:4a:9b:04:22: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0B:0B:83:AC:BC:B0:1E:AB:09:32:BE:8C:BC:5E:66:80:AD:4B:04 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ea4225c-1eae-4c35-82bb-3a9889581672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2fa8::/47 Signature Algorithm: sha256WithRSAEncryption 2b:bd:43:56:9e:4d:ba:05:fc:f9:77:dd:2a:80:d3:b4:a0:1c: 06:80:fc:97:f0:87:aa:f5:e9:5c:f0:dd:45:81:4b:f8:fd:b7: f9:6e:1f:ec:be:24:97:8d:40:40:db:e3:86:80:c1:d3:c3:7f: 5d:9e:19:fc:bb:03:ba:cc:8c:f6:f3:3a:f4:70:10:14:0b:81: e9:86:20:a0:a4:3a:e4:e1:69:c0:55:3e:4f:da:18:0e:01:1e: 5a:2c:24:19:f3:c5:93:fe:76:47:59:00:75:0e:c6:ea:8f:aa: 97:23:43:2e:78:0a:86:52:50:47:b2:ac:f0:f1:ea:1e:38:69: 75:81:6b:3b:ec:c7:9d:21:e6:36:5d:04:90:51:9b:d1:be:2a: 05:3f:43:52:70:e6:76:38:ec:0f:f2:91:f6:a0:e8:da:fb:44: 48:c0:68:be:4f:20:1e:d0:1c:a2:e1:6c:92:bf:4a:b5:5d:66: ab:51:59:3a:08:51:ba:6a:35:77:c4:35:01:dd:c3:5e:8f:11: 69:ea:cd:86:fa:e3:3e:58:12:a5:3d:82:5a:6a:db:45:2a:6f: 5b:d2:31:c1:a8:fd:37:e2:2f:d7:75:f8:ca:20:76:ce:2d:fa: 54:ff:e7:77:99:1f:1e:f0:68:bb:d8:69:eb:52:8b:4a:25:5c: 54:f9:a2:56 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUSdeQsZiGY3oNLxOaMJH/7rZyn0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM1MjA4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzM1ODc2YmY4Y2M3MDI2MjRhYzAxNWZjYTA3ZWFlMjg4 MjljMzE2MmMzZTY3N2I3YTM1MjczMjc4Mzg2MTVhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRIjnrGXPuxKOo70t9eumGnKDB7wuX2WYAqzGJm8HtPnlW /+QGpZ+g8KuQwz33qZg50Ncp0c10IzRx98r2hI2sq9trRVk2kShJJvLFxDc2UGME 5k1vrUA4pNpEbsBJ3IO9vd+crS+sYIl5VunIbnOx2J1+y+TENX5eTBMIpbZYkYtM LdV2ziXiIw8eRwCDDTGOCkzbvCfPy2lXYBBjdvXd2iaQMUsfgehxAfEKZ/51E/Hk f2OPqHT97IgNXirXOlN1GhrDXL7aDAi/IIUlkQc5W2EfwSkCJug6ZZj/upAOC+3N 3fZgtuL3BwmI43o1sHYFxPBLM72eaGXPSpsEIpUnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURgsLg6y8sB6rCTK+jLxeZoCtSwQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBlYTQyMjVjLTFlYWUtNGMzNS04MmJiLTNhOTg4OTU4MTY3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAL6gwDQYJKoZIhvcNAQELBQADggEBACu9Q1aeTboF/Pl33SqA07Sg HAaA/Jfwh6r16Vzw3UWBS/j9t/luH+y+JJeNQEDb44aAwdPDf12eGfy7A7rMjPbz OvRwEBQLgemGIKCkOuThacBVPk/aGA4BHlosJBnzxZP+dkdZAHUOxuqPqpcjQy54 CoZSUEeyrPDx6h44aXWBazvsx50h5jZdBJBRm9G+KgU/Q1Jw5nY47A/ykfag6Nr7 REjAaL5PIB7QHKLhbJK/SrVdZqtRWToIUbpqNXfENQHdw16PEWnqzYb64z5YEqU9 glpq20Uqb1vSMcGo/TfiL9d1+Mogds4t+lT/53eZHx7waLvYaetSi0olXFT5olY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:13 2025 by rpki-client