$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/10127951-5c95-4b65-a2f0-8b6ae66b21e4.roa File: 10127951-5c95-4b65-a2f0-8b6ae66b21e4.roa (raw, json) Hash identifier: 9ejlYlv+852n6K6SRmT6a6QsybbPwSMuiWbRXNaUMG4= Subject key identifier: ED:D3:E1:9B:19:53:17:7E:34:19:F9:51:A7:6B:9B:3C:55:19:59:3D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 71C375B6822D01D9575D75829EDB973E4D61E8F8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/10127951-5c95-4b65-a2f0-8b6ae66b21e4.roa Signing time: Fri 31 Oct 2025 07:27:32 +0000 ROA not before: Fri 31 Oct 2025 07:27:32 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:39a0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c3:75:b6:82:2d:01:d9:57:5d:75:82:9e:db:97:3e:4d:61:e8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:27:32 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=ba9e7aa240dc05404bb6043a59b1fa861bfffc07374723307237a36c3fbafb47, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:68:27:a0:a4:9f:03:4a:e9:8b:c1:4e:33: 78:e6:d7:40:c0:0e:ad:a0:8c:72:c8:ef:40:86:7a: 16:27:67:be:48:48:6e:31:22:05:a1:8f:d5:06:fb: 8a:04:10:73:e8:af:98:b8:06:48:de:bd:1f:7c:77: 7e:88:92:cf:64:f8:b2:92:0f:18:db:85:f8:0d:53: f2:7f:46:3e:80:aa:61:e9:b3:16:e9:1d:5f:a1:57: b7:70:1f:af:e7:e7:5a:0d:9a:f7:48:00:79:2a:38: fe:d5:08:67:0d:ef:5f:6f:d7:de:89:07:17:cf:20: ca:0d:3f:f8:4d:7c:53:54:75:60:0c:ff:7a:7f:99: cc:30:56:29:ea:f0:3e:73:c1:8c:aa:4f:c8:0f:1e: dc:75:f8:be:5e:79:91:73:b7:33:67:46:cd:0b:a6: 4c:66:8f:d2:15:f2:cb:f6:05:32:d6:88:e9:e7:a9: 2a:61:7d:9a:c2:29:f3:24:2b:da:c0:55:92:fe:72: ae:4d:e5:6b:bf:4b:48:3b:aa:e5:9f:60:68:cd:c2: 3d:2c:91:e3:21:72:c5:2f:43:95:fe:46:e7:17:d9: bb:72:29:da:25:c0:78:f2:7e:34:5d:43:1b:86:86: c8:10:be:98:13:f8:02:f7:12:f9:d8:28:7c:c6:68: 54:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D3:E1:9B:19:53:17:7E:34:19:F9:51:A7:6B:9B:3C:55:19:59:3D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/10127951-5c95-4b65-a2f0-8b6ae66b21e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:39a0::/43 Signature Algorithm: sha256WithRSAEncryption a7:06:0c:78:f6:fd:78:cf:94:18:f8:fd:f6:7d:ad:96:03:d6: 8a:b6:5f:5b:2f:65:3d:5a:a9:78:43:dc:ae:8f:32:c6:74:19: 5a:40:4f:43:06:bd:73:15:f8:25:19:3a:e7:99:82:cd:e2:d5: 82:72:fd:8e:a8:a1:d5:2d:43:09:0f:13:d7:37:b6:df:c0:13: 78:af:04:88:92:be:c8:23:6f:89:8b:32:56:11:b9:9d:fa:dc: 7e:ec:7d:fa:8d:d6:53:1a:32:c2:14:97:32:90:a3:f1:aa:0f: 7f:92:2f:79:f9:8e:27:69:77:32:b4:cc:d5:f0:56:42:6b:11: 5d:08:b6:04:3f:dc:99:16:91:e1:78:ed:0b:96:57:33:2f:8d: 52:f1:da:98:9f:9a:01:9b:f1:ec:7e:43:3a:8e:de:e9:8a:32: dd:ca:b7:f7:6a:1e:9b:26:37:4b:40:3c:10:dd:c3:40:ae:7b: ed:78:04:b4:35:c7:a1:d0:3d:df:b7:9a:f1:38:46:1d:03:8a: 40:71:8a:c7:a5:5d:3d:32:bd:8d:02:c5:c8:8e:f5:86:ac:b9: ce:50:18:ed:7a:4b:63:2a:30:5e:d1:f3:7a:8e:26:d5:7d:b4: d3:7a:40:18:cb:e4:fc:48:33:38:8a:41:ba:50:93:51:4a:97: c8:49:cf:99 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUccN1toItAdlXXXWCntuXPk1h6PgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcyNzMyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTllN2FhMjQwZGMwNTQwNGJiNjA0M2E1OWIxZmE4NjFi ZmZmYzA3Mzc0NzIzMzA3MjM3YTM2YzNmYmFmYjQ3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCN/GgnoKSfA0rpi8FOM3jm10DADq2gjHLI70CGehYnZ75I SG4xIgWhj9UG+4oEEHPor5i4BkjevR98d36Iks9k+LKSDxjbhfgNU/J/Rj6AqmHp sxbpHV+hV7dwH6/n51oNmvdIAHkqOP7VCGcN719v196JBxfPIMoNP/hNfFNUdWAM /3p/mcwwVinq8D5zwYyqT8gPHtx1+L5eeZFztzNnRs0Lpkxmj9IV8sv2BTLWiOnn qSphfZrCKfMkK9rAVZL+cq5N5Wu/S0g7quWfYGjNwj0skeMhcsUvQ5X+RucX2bty KdolwHjyfjRdQxuGhsgQvpgT+AL3EvnYKHzGaFQfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7dPhmxlTF340GflRp2ubPFUZWT0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzEwMTI3OTUxLTVjOTUtNGI2NS1hMmYwLThiNmFlNjZiMjFlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAOaAwDQYJKoZIhvcNAQELBQADggEBAKcGDHj2/XjPlBj4/fZ9rZYD 1oq2X1svZT1aqXhD3K6PMsZ0GVpAT0MGvXMV+CUZOueZgs3i1YJy/Y6oodUtQwkP E9c3tt/AE3ivBIiSvsgjb4mLMlYRuZ363H7sffqN1lMaMsIUlzKQo/GqD3+SL3n5 jidpdzK0zNXwVkJrEV0ItgQ/3JkWkeF47QuWVzMvjVLx2pifmgGb8ex+QzqO3umK Mt3Kt/dqHpsmN0tAPBDdw0Cue+14BLQ1x6HQPd+3mvE4Rh0DikBxiselXT0yvY0C xciO9Yasuc5QGO16S2MqMF7R83qOJtV9tNN6QBjL5PxIMziKQbpQk1FKl8hJz5k= -----END CERTIFICATE-----Generated at Wed Nov 5 12:30:22 2025 by rpki-client