$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23e4313b-f4a7-4042-8ff2-f587e5f39095.roa File: 23e4313b-f4a7-4042-8ff2-f587e5f39095.roa (raw, json) Hash identifier: 9a5ofzQv3t4fZapZyaNlgV4duY3+KjwkBOaJa9sw2nM= Subject key identifier: 45:36:96:31:F2:7C:81:5D:E1:C0:D7:0B:46:D9:84:F0:26:11:F0:C9 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 18D8E051633DC56CC4516358885EDBC0B9B5171C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23e4313b-f4a7-4042-8ff2-f587e5f39095.roa Signing time: Fri 31 Oct 2025 04:25:01 +0000 ROA not before: Fri 31 Oct 2025 04:25:01 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:37e4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d8:e0:51:63:3d:c5:6c:c4:51:63:58:88:5e:db:c0:b9:b5:17:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:25:01 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f78ce30b73319a40defc3bf9cd04638006d584d0c9578e2694f8944e0c60bbe2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:bd:77:03:f2:c8:17:a9:0e:29:8d:bf:39: b3:19:90:2f:d5:be:68:d0:f6:4d:7d:61:c5:05:36: e6:db:6b:29:3c:15:fd:ac:27:33:c7:2c:65:87:3e: 35:a6:f0:ac:df:92:46:4d:99:89:aa:fc:92:23:8c: 96:6d:04:23:e3:74:35:44:58:d8:e1:e1:23:32:13: 5e:35:60:0b:be:27:60:82:a8:6c:ee:88:2d:af:77: eb:1e:3e:4b:33:07:0d:7b:0e:5c:99:83:4d:3a:97: e7:84:20:80:2d:a4:fb:ef:20:fe:50:3e:ec:40:cc: ba:f0:5e:89:db:50:c5:aa:09:6d:83:a2:f1:7f:1d: 0a:f3:72:b0:7f:a3:c9:e0:d8:53:b7:39:b9:e2:5e: 0f:46:b8:67:1d:6c:90:4b:d3:b0:0d:b1:e1:9a:e1: d2:9e:1a:f8:63:e9:d6:f1:a5:d0:fa:15:ee:31:9b: fa:5e:6e:38:9b:15:98:05:80:00:6e:b9:99:34:f0: 90:d8:97:79:38:e7:71:e1:c3:dd:97:4d:cc:93:a4: b6:92:0a:bf:b6:7b:1a:da:ea:2d:cd:71:8f:ca:bd: 78:9b:97:ed:59:45:e5:0a:13:e7:dc:87:fa:82:72: 59:7b:06:61:91:0b:4c:18:51:7b:9e:ae:d0:f3:90: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:36:96:31:F2:7C:81:5D:E1:C0:D7:0B:46:D9:84:F0:26:11:F0:C9 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23e4313b-f4a7-4042-8ff2-f587e5f39095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:37e4::/46 Signature Algorithm: sha256WithRSAEncryption a6:dd:eb:28:90:de:ca:8d:05:67:da:79:3d:cd:be:a5:11:a8: d1:00:11:0c:4e:f9:a1:91:43:ff:2c:8b:a7:4f:fc:68:2a:22: 08:8a:c5:af:4c:49:5d:86:4a:ef:ad:8e:27:c4:6b:d8:29:ad: 5f:5f:3f:c4:e8:0d:d8:ca:aa:3b:fa:9b:25:d2:db:9c:82:0a: cd:7f:eb:ae:42:54:d1:fd:26:ee:c3:91:a7:b4:09:09:49:dc: 97:75:b4:0b:46:5c:44:23:54:67:2b:88:b5:bd:1e:bf:32:f9: 4c:f2:c4:ae:6b:49:5e:63:39:62:6b:c1:ea:77:57:13:9e:65: a5:90:04:a0:ba:92:56:f2:0d:09:2c:4e:78:6b:70:29:c6:6b: da:70:eb:8d:ed:a4:59:71:d1:18:78:f6:4b:df:03:49:7f:d4: f2:0c:05:f2:fc:f7:c3:f5:4d:6e:12:e7:2d:63:ba:81:c8:e9: 09:78:02:89:64:6b:7f:49:aa:db:ad:02:40:60:1b:77:6f:fe: 32:ea:b6:7d:32:af:e3:8b:ec:a8:2c:a4:19:a2:74:25:9f:c5: 25:fd:ac:a5:24:f7:a7:eb:54:21:5a:54:b9:c9:a1:80:60:a1: d3:60:19:be:4a:39:1e:48:bc:f0:2c:71:24:a2:3b:64:58:a6: 57:47:d9:23 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGNjgUWM9xWzEUWNYiF7bwLm1FxwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQyNTAxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzhjZTMwYjczMzE5YTQwZGVmYzNiZjljZDA0NjM4MDA2 ZDU4NGQwYzk1NzhlMjY5NGY4OTQ0ZTBjNjBiYmUyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2Rr13A/LIF6kOKY2/ObMZkC/VvmjQ9k19YcUFNubbayk8 Ff2sJzPHLGWHPjWm8KzfkkZNmYmq/JIjjJZtBCPjdDVEWNjh4SMyE141YAu+J2CC qGzuiC2vd+sePkszBw17DlyZg006l+eEIIAtpPvvIP5QPuxAzLrwXonbUMWqCW2D ovF/HQrzcrB/o8ng2FO3ObniXg9GuGcdbJBL07ANseGa4dKeGvhj6dbxpdD6Fe4x m/pebjibFZgFgABuuZk08JDYl3k453Hhw92XTcyTpLaSCr+2exra6i3NcY/KvXib l+1ZReUKE+fch/qCcll7BmGRC0wYUXuertDzkBFpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURTaWMfJ8gV3hwNcLRtmE8CYR8MkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIzZTQzMTNiLWY0YTctNDA0Mi04ZmYyLWY1ODdlNWYzOTA5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAN+QwDQYJKoZIhvcNAQELBQADggEBAKbd6yiQ3sqNBWfaeT3NvqUR qNEAEQxO+aGRQ/8si6dP/GgqIgiKxa9MSV2GSu+tjifEa9gprV9fP8ToDdjKqjv6 myXS25yCCs1/665CVNH9Ju7Dkae0CQlJ3Jd1tAtGXEQjVGcriLW9Hr8y+UzyxK5r SV5jOWJrwep3VxOeZaWQBKC6klbyDQksTnhrcCnGa9pw643tpFlx0Rh49kvfA0l/ 1PIMBfL898P1TW4S5y1juoHI6Ql4Aolka39JqtutAkBgG3dv/jLqtn0yr+OL7Kgs pBmidCWfxSX9rKUk96frVCFaVLnJoYBgodNgGb5KOR5IvPAscSSiO2RYpldH2SM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:30 2025 by rpki-client