$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b43cc02-2518-4db3-aea0-8b9972713c7e.roa File: 1b43cc02-2518-4db3-aea0-8b9972713c7e.roa (raw, json) Hash identifier: b8CUVuCA+8VV/9GJGCyXrvwYDY1Kaz6811zeuqOLrEw= Subject key identifier: B3:A6:E9:7E:D2:D7:71:E4:35:15:5B:21:A0:39:1F:B0:06:D6:C5:C6 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0C752FAAF6A7BB52B389699CEBC956DE5F3DFD00 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b43cc02-2518-4db3-aea0-8b9972713c7e.roa Signing time: Fri 31 Oct 2025 00:55:05 +0000 ROA not before: Fri 31 Oct 2025 00:55:05 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:385c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:75:2f:aa:f6:a7:bb:52:b3:89:69:9c:eb:c9:56:de:5f:3d:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:55:05 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=aaf00713e768a0039f7b2b24127d4e0af63c27cbf989e7fef11bda50588be364, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f7:88:b0:b3:a3:b8:ac:3e:55:34:ee:7b:5b: f2:a2:75:8c:89:7f:53:40:85:e7:8e:7d:00:5e:74: 1d:76:b6:a1:aa:22:31:3a:23:73:21:42:b1:a0:c0: 86:1d:03:3b:06:3f:c8:8d:73:f7:8b:36:87:3b:35: 23:67:8a:ee:7a:d9:ab:35:94:d1:c3:80:7d:95:ff: a6:cd:08:d3:3f:86:5c:c2:32:05:75:f2:3b:6a:69: bb:9f:4e:79:fe:6e:00:d4:07:a2:3c:03:1e:47:8c: 9c:33:66:61:b2:6d:87:e5:39:ab:08:cd:b2:7a:ce: 53:35:09:58:6e:19:4d:11:43:fd:16:7e:d1:5d:1d: 78:b3:fc:81:f3:a6:09:b4:2b:ce:f8:c5:61:f7:de: cf:e9:c3:2e:34:82:98:cf:3c:32:c4:33:cd:da:d1: 6e:cc:b1:4d:ff:f3:34:d1:98:0c:c0:30:9a:94:50: d1:b1:14:10:ba:ce:0a:60:58:b7:c9:c5:16:4e:f9: 23:58:30:3c:5f:d6:06:9b:d7:ce:6a:36:43:58:f4: dc:f7:ff:12:c5:5d:2e:3d:38:1a:5c:d6:3d:52:be: d6:4e:4d:13:cb:c6:94:4e:ec:37:d9:8c:ba:04:d0: 01:1e:61:2a:4c:cf:73:65:75:76:e4:15:3e:a5:db: 95:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A6:E9:7E:D2:D7:71:E4:35:15:5B:21:A0:39:1F:B0:06:D6:C5:C6 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b43cc02-2518-4db3-aea0-8b9972713c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:385c::/47 Signature Algorithm: sha256WithRSAEncryption 43:63:bc:81:7e:4a:24:de:82:2a:23:81:fa:6a:d0:a5:d1:4a: 47:02:6c:42:02:8e:62:92:90:bd:f1:ac:c7:f4:80:6f:fd:0a: 39:1f:77:96:a5:b7:68:8d:ce:8d:db:ce:99:7c:2b:9a:45:a4: b1:09:51:52:88:56:cf:7e:f0:6b:1a:65:69:26:21:0c:6b:a5: 8c:e0:fc:7f:71:1a:ea:bc:d5:97:9e:be:5c:f9:7e:89:5f:6e: 10:3c:bb:93:04:ed:9b:f5:07:49:ef:6e:52:91:bc:b0:ca:6c: 1a:41:7d:ef:da:0b:b8:94:a4:78:97:31:60:77:79:69:bb:77: 44:81:3b:db:62:0e:fb:91:8e:34:e4:4e:a4:44:ab:0f:b9:af: 8f:14:85:47:9c:74:0d:0a:4a:ba:5f:54:2d:fe:e0:70:39:83: 0c:c4:3d:4b:b3:27:c0:7d:81:3a:00:b4:60:cb:ce:a5:af:5d: f6:67:b8:d4:ae:00:c4:8d:d5:62:fa:0d:ca:86:04:17:6f:88: e1:7e:d5:f8:5c:23:b0:50:ca:f6:93:a8:64:42:52:45:90:7b: de:2c:63:ec:3d:28:b3:2b:b4:59:e2:d1:74:7d:35:14:03:cf: c5:63:e6:b6:51:22:d9:7e:8c:6b:7b:64:d4:e0:cf:d4:4f:8f: 14:0f:48:86 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDHUvqvanu1KziWmc68lW3l89/QAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1NTA1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYWYwMDcxM2U3NjhhMDAzOWY3YjJiMjQxMjdkNGUwYWY2 M2MyN2NiZjk4OWU3ZmVmMTFiZGE1MDU4OGJlMzY0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCS94iws6O4rD5VNO57W/KidYyJf1NAheeOfQBedB12tqGq IjE6I3MhQrGgwIYdAzsGP8iNc/eLNoc7NSNniu562as1lNHDgH2V/6bNCNM/hlzC MgV18jtqabufTnn+bgDUB6I8Ax5HjJwzZmGybYflOasIzbJ6zlM1CVhuGU0RQ/0W ftFdHXiz/IHzpgm0K874xWH33s/pwy40gpjPPDLEM83a0W7MsU3/8zTRmAzAMJqU UNGxFBC6zgpgWLfJxRZO+SNYMDxf1gab185qNkNY9Nz3/xLFXS49OBpc1j1SvtZO TRPLxpRO7DfZjLoE0AEeYSpMz3NldXbkFT6l25X7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUs6bpftLXceQ1FVshoDkfsAbWxcYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzFiNDNjYzAyLTI1MTgtNGRiMy1hZWEwLThiOTk3MjcxM2M3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOFwwDQYJKoZIhvcNAQELBQADggEBAENjvIF+SiTegiojgfpq0KXR SkcCbEICjmKSkL3xrMf0gG/9Cjkfd5alt2iNzo3bzpl8K5pFpLEJUVKIVs9+8Gsa ZWkmIQxrpYzg/H9xGuq81Zeevlz5folfbhA8u5ME7Zv1B0nvblKRvLDKbBpBfe/a C7iUpHiXMWB3eWm7d0SBO9tiDvuRjjTkTqREqw+5r48UhUecdA0KSrpfVC3+4HA5 gwzEPUuzJ8B9gToAtGDLzqWvXfZnuNSuAMSN1WL6DcqGBBdviOF+1fhcI7BQyvaT qGRCUkWQe94sY+w9KLMrtFni0XR9NRQDz8Vj5rZRItl+jGt7ZNTgz9RPjxQPSIY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:38 2025 by rpki-client