$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/254d94f2-b287-4b10-8b22-f5f6476b3d70.roa File: 254d94f2-b287-4b10-8b22-f5f6476b3d70.roa (raw, json) Hash identifier: hy6a/tV1brnmKBozzCR0EsFUpgCZUNQbilWeGovbV1s= Subject key identifier: 82:30:07:2E:45:23:61:82:3B:90:61:47:EB:DB:8B:DF:52:37:70:F2 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 27F44F69BA4664C71C047986C6B9CF5C89A84B87 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/254d94f2-b287-4b10-8b22-f5f6476b3d70.roa Signing time: Thu 30 Oct 2025 22:57:12 +0000 ROA not before: Thu 30 Oct 2025 22:57:12 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2a3c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f4:4f:69:ba:46:64:c7:1c:04:79:86:c6:b9:cf:5c:89:a8:4b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:57:12 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=05b0662e83f25fe62696dd41df9cc18815a2afbec2524cac03c69dfd6dfc4689, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:6b:ed:42:0f:49:c3:52:af:62:16:33:79: 2b:cb:e8:08:43:87:3b:8e:77:ad:f7:a0:00:2e:e5: 70:c1:12:e1:29:5e:5b:9c:19:59:e2:07:03:5a:cb: bc:1f:04:01:c5:20:83:64:f8:da:d7:c7:5b:a4:dd: e5:09:1d:91:09:75:9a:58:eb:e0:b9:a9:df:14:9c: 23:ef:95:79:81:9c:98:d5:e2:00:0f:c6:22:c2:24: b7:86:6d:21:f6:bd:23:b1:9b:2e:d7:d7:cc:ff:61: 5b:49:cc:f2:cb:14:ca:f7:68:af:35:6c:5a:30:d9: 5f:6f:fa:4c:a9:d1:60:57:8b:80:9c:29:80:74:9d: 3e:f9:fe:93:03:c5:e6:2e:66:02:27:24:1b:db:12: 3a:ef:a9:23:2a:6d:ca:16:b4:a4:33:b9:50:58:78: 75:3c:72:50:be:b7:4b:d7:fe:d6:53:13:ca:23:dc: 75:1c:e4:56:c1:3c:79:ca:d0:05:fa:4d:7e:0e:95: e5:50:9d:dd:64:00:e3:13:ad:ce:d9:89:dd:ea:bf: de:61:c5:e0:95:69:b0:9f:9e:06:aa:6d:4b:d1:a7: 96:07:55:ae:2c:89:2f:b1:7f:0b:78:b6:db:d7:8d: b6:30:93:41:92:03:16:28:7b:17:06:39:66:cc:dc: ac:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:30:07:2E:45:23:61:82:3B:90:61:47:EB:DB:8B:DF:52:37:70:F2 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/254d94f2-b287-4b10-8b22-f5f6476b3d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2a3c::/47 Signature Algorithm: sha256WithRSAEncryption ad:16:ec:b2:92:cf:c5:03:48:22:0c:5e:17:25:0a:68:ab:40: 09:ab:f0:65:8c:a3:3f:11:31:e5:0f:63:96:47:db:60:fc:d2: 12:54:06:01:f2:9d:89:de:a6:35:40:ac:99:a9:d8:09:94:11: a4:82:32:ce:ae:7e:8b:72:ae:0b:ba:6c:dc:cc:d4:6d:a6:e6: 79:80:2c:6a:9a:7f:70:e3:f3:19:3f:c4:68:42:ec:0f:27:ef: 05:6d:0d:1b:94:19:31:25:8f:76:56:b8:00:ee:b8:50:cd:da: f6:3f:67:a5:2a:dc:94:bf:11:4f:c2:89:93:c4:4f:5c:05:30: f7:63:82:52:26:65:0f:21:31:d1:81:f1:52:83:6a:54:c1:e7: 69:85:e2:61:51:81:c7:6d:50:21:3a:94:79:36:1d:5a:ab:d1: a7:92:11:63:7d:13:7f:74:62:38:1b:eb:73:5f:51:d7:31:1d: 3d:a5:f2:8e:38:11:91:90:01:5b:4c:c9:51:27:e8:8c:bf:1c: 81:65:7b:db:d9:e6:fd:43:cf:da:f2:60:3c:fe:f2:3b:a3:0c: ac:15:51:18:62:4d:82:2d:16:34:a6:33:b9:53:70:51:03:13: 6a:6f:66:16:db:e7:44:62:a3:87:ab:94:26:e7:50:dc:10:38: f4:db:54:ba -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ/RPabpGZMccBHmGxrnPXImoS4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI1NzEyWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNWIwNjYyZTgzZjI1ZmU2MjY5NmRkNDFkZjljYzE4ODE1 YTJhZmJlYzI1MjRjYWMwM2M2OWRmZDZkZmM0Njg5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmumvtQg9Jw1KvYhYzeSvL6AhDhzuOd633oAAu5XDBEuEp XlucGVniBwNay7wfBAHFIINk+NrXx1uk3eUJHZEJdZpY6+C5qd8UnCPvlXmBnJjV 4gAPxiLCJLeGbSH2vSOxmy7X18z/YVtJzPLLFMr3aK81bFow2V9v+kyp0WBXi4Cc KYB0nT75/pMDxeYuZgInJBvbEjrvqSMqbcoWtKQzuVBYeHU8clC+t0vX/tZTE8oj 3HUc5FbBPHnK0AX6TX4OleVQnd1kAOMTrc7Zid3qv95hxeCVabCfngaqbUvRp5YH Va4siS+xfwt4ttvXjbYwk0GSAxYoexcGOWbM3KwVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgjAHLkUjYYI7kGFH69uL31I3cPIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzI1NGQ5NGYyLWIyODctNGIxMC04YjIyLWY1ZjY0NzZiM2Q3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKjwwDQYJKoZIhvcNAQELBQADggEBAK0W7LKSz8UDSCIMXhclCmir QAmr8GWMoz8RMeUPY5ZH22D80hJUBgHynYnepjVArJmp2AmUEaSCMs6ufotyrgu6 bNzM1G2m5nmALGqaf3Dj8xk/xGhC7A8n7wVtDRuUGTElj3ZWuADuuFDN2vY/Z6Uq 3JS/EU/CiZPET1wFMPdjglImZQ8hMdGB8VKDalTB52mF4mFRgcdtUCE6lHk2HVqr 0aeSEWN9E390Yjgb63NfUdcxHT2l8o44EZGQAVtMyVEn6Iy/HIFle9vZ5v1Dz9ry YDz+8jujDKwVURhiTYItFjSmM7lTcFEDE2pvZhbb50Rio4erlCbnUNwQOPTbVLo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:53 2025 by rpki-client