$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/124e92b2-02fb-4854-9dc4-245ffaa10029.roa File: 124e92b2-02fb-4854-9dc4-245ffaa10029.roa (raw, json) Hash identifier: mMdIz7jCgse1MuhPdQ3WkDJM8KKzMrfE9rBVmIXjhxk= Subject key identifier: BD:6E:15:55:E3:15:13:7A:E9:15:21:5A:8F:4C:BC:13:63:28:F7:4B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 29E56852AE4A8BB670EE3352B19D2F36B7B26648 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/124e92b2-02fb-4854-9dc4-245ffaa10029.roa Signing time: Thu 30 Oct 2025 23:38:45 +0000 ROA not before: Thu 30 Oct 2025 23:38:45 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2e44::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e5:68:52:ae:4a:8b:b6:70:ee:33:52:b1:9d:2f:36:b7:b2:66:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:38:45 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=0b822d8cbf9ef44dd97ea93c2689febe1d166f0b48cd6cfe1646cfb145ee2aad, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:39:b5:98:3a:1d:5f:2c:71:b0:d9:c3:49:6f: c7:78:4f:e8:65:15:40:bf:07:78:6a:53:67:4a:3a: 46:45:47:9a:55:89:c0:66:52:4e:c8:30:82:1c:92: df:db:d2:ef:c9:ff:de:4f:a1:c0:44:26:89:2b:de: 78:51:16:52:8a:91:d2:5d:c7:92:69:37:0d:4a:e7: f8:80:5b:fe:a4:14:f8:95:63:25:af:d7:2a:7a:ea: fc:b3:20:cf:d7:bc:61:3d:45:f3:d8:cc:0f:aa:5d: 8d:10:03:8a:3f:83:aa:98:39:34:4c:a2:14:4e:b1: f0:c0:79:6a:c7:ec:17:40:6c:eb:e0:32:a0:2e:d6: 43:2b:a1:3d:46:70:f9:fa:45:0d:38:59:20:43:b7: 8f:fe:36:bd:d5:98:d7:ef:a5:07:6a:43:2a:64:75: 82:92:a7:a4:69:a1:d4:49:f3:6c:a1:ae:d3:d2:55: db:aa:f4:eb:e0:3d:c6:48:7a:11:69:65:71:39:53: dc:bf:56:49:dd:10:d2:d2:69:24:38:84:e5:fd:19: b1:15:79:08:c5:4f:a5:60:58:29:67:e8:c6:6c:e2: e0:23:0f:52:43:3b:c2:98:31:07:b8:da:77:f0:a4: 1c:5c:c2:af:f8:ee:88:52:4f:7a:54:2c:df:13:c9: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6E:15:55:E3:15:13:7A:E9:15:21:5A:8F:4C:BC:13:63:28:F7:4B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/124e92b2-02fb-4854-9dc4-245ffaa10029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2e44::/47 Signature Algorithm: sha256WithRSAEncryption 01:04:1f:f8:02:a7:6d:bf:20:75:19:69:9a:ea:df:d0:ba:95: 6b:d3:fe:e9:c4:95:98:a1:89:79:fe:37:5f:12:5b:6e:4c:85: b5:7c:db:f7:4d:3c:d2:44:50:62:95:58:17:53:9d:4f:6a:eb: 2f:b9:10:32:3d:eb:9e:9e:f7:a6:60:b5:76:b7:c0:ad:5c:e9: 13:bd:1b:52:7b:4b:e9:d6:e7:7f:b3:08:a9:6f:98:c0:eb:40: a6:93:37:bc:68:52:98:7d:62:50:d2:fb:62:4b:9f:e3:79:ae: 77:58:5c:84:d4:f9:4d:52:9c:9b:72:65:fd:39:25:6e:b4:c1: e8:d8:d6:c0:51:0a:37:06:42:74:f6:86:3b:29:66:fb:f6:93: fe:70:e7:e8:7a:ed:d7:9e:09:0f:3c:e8:b1:00:05:48:20:37: 72:da:00:50:8a:5b:24:05:0a:ab:52:37:8f:bf:d0:1f:50:e4: ad:f2:22:2d:93:d8:a9:05:81:b9:96:79:20:75:32:c1:c6:60: 54:6c:5d:aa:c1:cf:fa:5b:40:5a:d3:2a:d9:04:67:4e:d9:f1: 1e:e7:03:7d:fd:b7:f1:a0:f2:bf:45:fa:13:36:cb:a4:04:13: fc:6f:fe:a4:d6:46:aa:b7:e5:a8:30:76:3e:dc:d8:4b:6b:07: 29:c1:3c:65 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKeVoUq5Ki7Zw7jNSsZ0vNreyZkgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMzODQ1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjgyMmQ4Y2JmOWVmNDRkZDk3ZWE5M2MyNjg5ZmViZTFk MTY2ZjBiNDhjZDZjZmUxNjQ2Y2ZiMTQ1ZWUyYWFkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVObWYOh1fLHGw2cNJb8d4T+hlFUC/B3hqU2dKOkZFR5pV icBmUk7IMIIckt/b0u/J/95PocBEJokr3nhRFlKKkdJdx5JpNw1K5/iAW/6kFPiV YyWv1yp66vyzIM/XvGE9RfPYzA+qXY0QA4o/g6qYOTRMohROsfDAeWrH7BdAbOvg MqAu1kMroT1GcPn6RQ04WSBDt4/+Nr3VmNfvpQdqQypkdYKSp6RpodRJ82yhrtPS Vduq9OvgPcZIehFpZXE5U9y/VkndENLSaSQ4hOX9GbEVeQjFT6VgWCln6MZs4uAj D1JDO8KYMQe42nfwpBxcwq/47ohST3pULN8TyXA3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvW4VVeMVE3rpFSFaj0y8E2Mo90swHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzEyNGU5MmIyLTAyZmItNDg1NC05ZGM0LTI0NWZmYWExMDAyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALkQwDQYJKoZIhvcNAQELBQADggEBAAEEH/gCp22/IHUZaZrq39C6 lWvT/unElZihiXn+N18SW25MhbV82/dNPNJEUGKVWBdTnU9q6y+5EDI9656e96Zg tXa3wK1c6RO9G1J7S+nW53+zCKlvmMDrQKaTN7xoUph9YlDS+2JLn+N5rndYXITU +U1SnJtyZf05JW60wejY1sBRCjcGQnT2hjspZvv2k/5w5+h67deeCQ886LEABUgg N3LaAFCKWyQFCqtSN4+/0B9Q5K3yIi2T2KkFgbmWeSB1MsHGYFRsXarBz/pbQFrT KtkEZ07Z8R7nA339t/Gg8r9F+hM2y6QEE/xv/qTWRqq35agwdj7c2EtrBynBPGU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:39:08 2025 by rpki-client