$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/162cc089-c1fd-4700-bc18-efa95ffd9bab.roa File: 162cc089-c1fd-4700-bc18-efa95ffd9bab.roa (raw, json) Hash identifier: oAA7e1/o8J4nmEorvxTgYpdvog3ynY6+iNPeHxOTO7k= Subject key identifier: 52:06:8B:CF:03:6C:4F:AA:86:12:A2:DD:A6:68:77:6C:5D:D1:5F:1E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 70D9D16655EF605D12A9C219063937BA226E4A6C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/162cc089-c1fd-4700-bc18-efa95ffd9bab.roa Signing time: Fri 31 Oct 2025 01:58:04 +0000 ROA not before: Fri 31 Oct 2025 01:58:04 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f18::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d9:d1:66:55:ef:60:5d:12:a9:c2:19:06:39:37:ba:22:6e:4a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:58:04 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=bc47f30b2fe49d06c046df44e7b4449a9403e39927920475e0ae534ce3e2af71, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:52:55:7e:a1:1e:87:ca:09:ad:1e:07:01:05: e5:67:c8:59:50:d4:92:9c:97:92:dd:54:47:09:7a: 2f:f0:6b:21:e9:69:ea:a8:49:1c:cc:c5:d2:43:2e: d5:9a:e2:8a:50:51:c5:71:ce:d5:98:60:f2:9f:9e: 6c:95:e6:ca:0f:2b:b8:75:10:4d:96:48:86:b1:65: cf:c3:af:72:ec:83:c0:14:4d:cd:78:87:e0:4a:21: 81:d0:12:cf:cf:73:43:e0:4d:f2:eb:63:27:c8:38: f6:e9:3b:6e:dc:f3:cc:0a:58:7d:bb:ca:da:14:eb: 11:69:40:c9:cc:9b:90:22:d2:58:6d:9d:69:81:f3: ab:7c:28:b5:f6:55:47:42:0c:c0:f2:39:3a:c4:53: f9:b0:bf:5b:d3:e0:85:85:44:15:a2:e9:6b:18:3b: f9:bd:88:05:b5:4c:4c:f6:7a:a9:e8:39:1a:fe:3c: 7f:72:27:31:f3:8e:42:38:c1:88:80:ff:07:e1:cb: e9:c2:1c:c5:12:93:ce:85:bb:5a:b3:d6:0c:56:74: 47:ae:56:d7:d5:51:07:48:82:48:1b:f7:4e:8a:16: 11:fc:37:00:86:92:29:d3:22:06:d0:0d:7e:92:0d: 38:9d:da:0d:a3:29:95:28:8c:85:5d:44:a7:30:5c: 4a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:06:8B:CF:03:6C:4F:AA:86:12:A2:DD:A6:68:77:6C:5D:D1:5F:1E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/162cc089-c1fd-4700-bc18-efa95ffd9bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f18::/47 Signature Algorithm: sha256WithRSAEncryption 2c:28:59:22:54:42:fc:5f:f0:90:27:c3:1a:5c:8e:e4:c6:a6: a3:4c:56:ff:be:50:5c:50:07:95:e6:16:db:05:db:ad:b1:74: d6:24:fd:ba:fa:5a:8d:5b:d3:a1:eb:d8:4f:b9:30:c7:ad:b8: 7b:f3:8e:0d:64:3b:35:83:7a:2d:c3:3c:0e:7f:f6:6c:7b:b9: c6:70:be:cf:02:66:df:f3:66:d4:91:73:cf:1d:5f:d3:61:28: 35:9e:7f:26:c4:2c:c2:89:aa:a4:c8:6f:f4:dc:52:56:28:35: 96:bf:da:eb:57:ff:09:1c:fc:14:9a:72:44:d4:62:80:45:a7: e1:94:5f:a0:fd:30:b3:05:ae:a5:31:a2:ad:08:98:22:d0:12: ba:48:04:e3:f6:fe:45:77:51:56:19:b0:d2:be:fa:a6:11:c6: 64:c0:0f:30:74:b6:d5:01:50:46:51:e9:f3:a1:d0:ea:9e:8e: 6b:3b:2a:b0:25:5b:48:7e:6a:ad:0b:01:28:3b:63:eb:08:c0: 7b:d2:f5:5f:72:62:03:4c:15:ac:0f:47:f1:57:31:56:d2:f2: 42:04:0d:2d:5b:60:d2:3d:16:21:09:42:82:7c:db:60:3e:06: b7:9c:de:e0:5f:a9:b6:41:20:05:08:09:2c:62:2f:47:e5:05: 0f:0b:11:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcNnRZlXvYF0SqcIZBjk3uiJuSmwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDE1ODA0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzQ3ZjMwYjJmZTQ5ZDA2YzA0NmRmNDRlN2I0NDQ5YTk0 MDNlMzk5Mjc5MjA0NzVlMGFlNTM0Y2UzZTJhZjcxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZUlV+oR6HygmtHgcBBeVnyFlQ1JKcl5LdVEcJei/wayHp aeqoSRzMxdJDLtWa4opQUcVxztWYYPKfnmyV5soPK7h1EE2WSIaxZc/Dr3Lsg8AU Tc14h+BKIYHQEs/Pc0PgTfLrYyfIOPbpO27c88wKWH27ytoU6xFpQMnMm5Ai0lht nWmB86t8KLX2VUdCDMDyOTrEU/mwv1vT4IWFRBWi6WsYO/m9iAW1TEz2eqnoORr+ PH9yJzHzjkI4wYiA/wfhy+nCHMUSk86Fu1qz1gxWdEeuVtfVUQdIgkgb906KFhH8 NwCGkinTIgbQDX6SDTid2g2jKZUojIVdRKcwXErrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUgaLzwNsT6qGEqLdpmh3bF3RXx4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzE2MmNjMDg5LWMxZmQtNDcwMC1iYzE4LWVmYTk1ZmZkOWJhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPxgwDQYJKoZIhvcNAQELBQADggEBACwoWSJUQvxf8JAnwxpcjuTG pqNMVv++UFxQB5XmFtsF262xdNYk/br6Wo1b06Hr2E+5MMetuHvzjg1kOzWDei3D PA5/9mx7ucZwvs8CZt/zZtSRc88dX9NhKDWefybELMKJqqTIb/TcUlYoNZa/2utX /wkc/BSackTUYoBFp+GUX6D9MLMFrqUxoq0ImCLQErpIBOP2/kV3UVYZsNK++qYR xmTADzB0ttUBUEZR6fOh0Oqejms7KrAlW0h+aq0LASg7Y+sIwHvS9V9yYgNMFawP R/FXMVbS8kIEDS1bYNI9FiEJQoJ822A+Brec3uBfqbZBIAUICSxiL0flBQ8LER0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:32 2025 by rpki-client