$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18c15798-dc7e-4b7d-b980-0082ca24bbe2.roa File: 18c15798-dc7e-4b7d-b980-0082ca24bbe2.roa (raw, json) Hash identifier: +QoPRzy5geDHN5Z2JLNSN6SN2h35/ImKx3gOUe2R84s= Subject key identifier: 6A:0E:23:30:2C:8D:04:50:A9:90:8A:A8:E9:A6:13:AE:C9:CF:E5:28 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 483A0EE0410EF81359897944C7ECCE76910ECFCF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18c15798-dc7e-4b7d-b980-0082ca24bbe2.roa Signing time: Fri 31 Oct 2025 07:42:34 +0000 ROA not before: Fri 31 Oct 2025 07:42:34 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3ac0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:3a:0e:e0:41:0e:f8:13:59:89:79:44:c7:ec:ce:76:91:0e:cf:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:42:34 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=26095159cbde2d79ca666892b24ceb10e8bdab2fa9e33f80da658711e8e795a6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:fd:75:55:a3:28:1f:6d:c8:c2:b4:64:b7: f9:23:94:bf:a0:ef:57:a0:8d:eb:0d:04:96:44:25: 45:f8:0d:cd:09:54:bc:ee:82:cb:a0:bd:dc:32:fa: 89:35:5b:fe:7f:a8:52:dd:88:fa:46:4b:0c:e9:3b: 36:db:9a:29:38:e4:3b:ce:c1:43:17:0e:ae:bf:37: 8f:59:99:6a:0f:cf:05:64:aa:54:ad:91:2c:c0:c7: a4:b3:f5:9a:cf:fc:8b:c9:65:fc:ca:f8:7d:2a:e0: 2a:8c:41:40:5c:3b:0e:d3:00:0c:c5:f2:82:4c:dc: 7d:ab:17:54:ae:70:46:54:ba:7a:ce:02:cc:ff:67: 18:bd:c7:bb:fe:3f:81:0f:26:27:db:82:cc:52:bb: aa:84:33:f8:7e:77:1f:6c:b1:d5:d5:75:d5:90:fe: 60:ff:16:e8:f9:09:fa:b5:3c:00:e6:41:91:a7:8e: b6:f1:4b:0f:e2:a9:87:31:35:8d:77:36:7f:90:e8: a6:44:b5:70:f5:da:4c:d3:93:66:d2:84:72:58:b5: 77:8f:87:4e:5a:d4:85:e5:71:7f:18:94:c9:6b:53: 8f:7b:bb:03:4b:be:dd:92:fc:a9:10:29:3e:96:7a: cd:59:fb:be:9c:0f:53:2c:02:31:18:bc:3e:2d:aa: 26:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0E:23:30:2C:8D:04:50:A9:90:8A:A8:E9:A6:13:AE:C9:CF:E5:28 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18c15798-dc7e-4b7d-b980-0082ca24bbe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3ac0::/42 Signature Algorithm: sha256WithRSAEncryption 9d:1e:cc:3f:46:16:9c:7a:2c:24:94:1b:67:ed:a4:cf:5b:13: f7:47:45:3c:6e:ca:0f:92:8a:c1:9d:71:7d:a8:62:27:66:50: 1e:29:f8:a6:2b:af:d8:62:f9:16:09:25:9a:82:07:89:f7:27: 8b:d7:0a:bb:e4:01:69:3b:83:35:bf:d5:87:63:7b:cf:79:ab: 4d:cb:7c:58:9e:d3:e1:62:ee:fc:2b:58:36:d0:3c:2a:d9:06: 5b:5e:f6:3a:e8:5a:a8:bb:9a:ba:60:56:99:b3:bd:ab:ad:dc: d4:09:14:e3:bd:f7:65:73:e5:f9:d0:dc:19:d9:35:f1:aa:c6: c1:f0:8d:e7:80:09:fa:cd:67:56:1c:a0:a2:f6:a3:3f:ed:81: 05:88:93:bc:f4:18:70:b9:41:e9:eb:e9:68:27:e1:a9:12:08: 8b:cf:24:9f:9e:25:aa:e1:2e:1b:80:fa:dd:8f:87:42:c2:77: af:7b:07:e3:87:ad:ca:f2:3b:96:b1:69:82:ec:47:af:f4:6e: b1:7e:5c:2b:64:7f:3d:3b:7d:fe:e0:b1:a4:82:c5:e2:81:c8: 5f:a5:e7:44:21:70:a3:25:a0:f6:b8:63:1a:8b:03:c0:fe:9f: 75:ae:20:d3:dc:e8:69:64:35:c1:98:f0:48:1b:b1:78:1a:4e: 77:4e:3a:c3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSDoO4EEO+BNZiXlEx+zOdpEOz88wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc0MjM0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjA5NTE1OWNiZGUyZDc5Y2E2NjY4OTJiMjRjZWIxMGU4 YmRhYjJmYTllMzNmODBkYTY1ODcxMWU4ZTc5NWE2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS8/11VaMoH23IwrRkt/kjlL+g71egjesNBJZEJUX4Dc0J VLzugsugvdwy+ok1W/5/qFLdiPpGSwzpOzbbmik45DvOwUMXDq6/N49ZmWoPzwVk qlStkSzAx6Sz9ZrP/IvJZfzK+H0q4CqMQUBcOw7TAAzF8oJM3H2rF1SucEZUunrO Asz/Zxi9x7v+P4EPJifbgsxSu6qEM/h+dx9ssdXVddWQ/mD/Fuj5Cfq1PADmQZGn jrbxSw/iqYcxNY13Nn+Q6KZEtXD12kzTk2bShHJYtXePh05a1IXlcX8YlMlrU497 uwNLvt2S/KkQKT6Wes1Z+76cD1MsAjEYvD4tqiZ1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUag4jMCyNBFCpkIqo6aYTrsnP5SgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzE4YzE1Nzk4LWRjN2UtNGI3ZC1iOTgwLTAwODJjYTI0YmJlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAJAAOsAwDQYJKoZIhvcNAQELBQADggEBAJ0ezD9GFpx6LCSUG2ftpM9b E/dHRTxuyg+SisGdcX2oYidmUB4p+KYrr9hi+RYJJZqCB4n3J4vXCrvkAWk7gzW/ 1Ydje895q03LfFie0+Fi7vwrWDbQPCrZBlte9jroWqi7mrpgVpmzvaut3NQJFOO9 92Vz5fnQ3BnZNfGqxsHwjeeACfrNZ1YcoKL2oz/tgQWIk7z0GHC5Qenr6Wgn4akS CIvPJJ+eJarhLhuA+t2Ph0LCd697B+OHrcryO5axaYLsR6/0brF+XCtkfz07ff7g saSCxeKByF+l50QhcKMloPa4YxqLA8D+n3WuINPc6GlkNcGY8EgbsXgaTndOOsM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:27 2025 by rpki-client