$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a757ab2-fedf-431d-a20a-c7c55c11cef9.roa File: 2a757ab2-fedf-431d-a20a-c7c55c11cef9.roa (raw, json) Hash identifier: NrtZVd/FHRO75/iuU21JFLnMdrd0/rDdmA3/aUA4+Nc= Subject key identifier: 46:CC:3B:84:01:F1:08:3B:C2:66:4A:DE:3D:A0:9C:BF:1B:F1:22:6A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7ECFF9843CF628FD90B5543B1C88AEAA526C7F3C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a757ab2-fedf-431d-a20a-c7c55c11cef9.roa Signing time: Thu 30 Oct 2025 21:43:38 +0000 ROA not before: Thu 30 Oct 2025 21:43:38 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1916::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:cf:f9:84:3c:f6:28:fd:90:b5:54:3b:1c:88:ae:aa:52:6c:7f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:43:38 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=95485abddeecaa34b3efe4d47df89772ed1dcc7073a773923d2ed9a054cec505, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:95:74:ff:2c:13:01:02:05:4b:59:bc:36: 4e:5a:6d:ae:53:f3:7c:68:29:75:61:17:d8:5f:da: e7:96:31:b8:02:5c:e6:48:77:7e:61:e6:ea:f8:6b: 4a:aa:e0:b9:73:a5:3c:db:b3:63:b8:4b:7a:db:32: e8:2a:f3:25:7c:d3:63:f3:53:68:35:1e:b6:ac:56: 39:8d:28:c7:3c:22:4a:f5:0f:53:98:62:e5:1e:f4: 0f:cb:42:3e:13:1e:2b:b1:71:f1:b1:60:f4:d5:ef: 0b:dd:ae:c8:84:40:20:1f:d1:8d:cb:6e:c1:28:07: 21:ea:10:93:08:45:ab:f9:81:84:d6:45:80:5f:ef: 0d:93:86:16:3e:07:a2:e2:34:3c:ec:32:ca:86:0c: 37:aa:14:be:ae:0a:b6:c9:61:1c:c4:35:10:c4:33: df:94:e6:30:73:3a:5b:bb:67:38:e2:8a:67:08:18: c0:f6:8c:7e:b7:c1:9d:c2:43:93:d4:16:1e:2c:c4: ec:03:61:5b:8e:8a:c1:2b:6f:fc:2f:cf:3a:1c:fa: 29:fd:89:0e:5e:47:65:6f:03:b0:e2:2e:5e:ef:4e: 4f:aa:bb:1d:cd:80:f3:dc:1e:e0:05:33:af:1b:64: 3f:f2:a6:1b:09:c7:be:dd:17:a3:c8:53:34:7e:09: 52:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CC:3B:84:01:F1:08:3B:C2:66:4A:DE:3D:A0:9C:BF:1B:F1:22:6A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a757ab2-fedf-431d-a20a-c7c55c11cef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1916::/47 Signature Algorithm: sha256WithRSAEncryption 76:2c:4b:16:08:ed:54:c5:5d:82:42:aa:69:f2:07:9e:3a:cb: 71:21:ef:49:7b:27:5b:38:dd:0e:9a:40:17:73:e3:d0:bc:a3: 93:ba:ee:03:ed:ff:da:59:9c:90:73:ff:c4:0e:9e:d7:b5:66: 53:73:8f:7d:71:98:cf:9d:03:bb:36:79:9e:1a:49:9c:2a:f4: a6:13:86:ce:43:86:a6:77:0f:58:ab:19:00:4c:41:a2:34:88: 40:01:39:18:bb:d4:fd:6f:f8:ae:73:15:96:aa:93:91:e6:92: 78:ef:18:e7:34:fa:2d:54:df:10:d0:39:7d:c6:0a:66:ef:11: 5d:40:96:e6:44:47:fa:10:4f:1e:45:6c:c2:6a:f6:7f:5f:a1: d8:80:77:7d:b6:6d:ad:7e:79:d9:4b:a7:ae:eb:93:6d:f5:35: fd:e8:08:c8:10:e2:7f:8c:ae:a8:fc:df:e2:b1:6f:58:f4:51: 21:ee:7d:0c:fc:03:4b:b9:b9:c0:58:b1:b8:28:3a:b5:1b:fd: 13:49:bb:87:dc:67:ad:98:5b:c4:cc:a5:e0:64:b0:3d:6f:db: a5:0e:4b:6e:72:9e:91:55:ca:57:c0:94:c0:cc:93:a6:94:83: 11:b4:3f:de:5f:5f:ec:59:f6:2b:f5:7c:81:c2:86:a5:fc:d1: c3:2e:58:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfs/5hDz2KP2QtVQ7HIiuqlJsfzwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE0MzM4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTQ4NWFiZGRlZWNhYTM0YjNlZmU0ZDQ3ZGY4OTc3MmVk MWRjYzcwNzNhNzczOTIzZDJlZDlhMDU0Y2VjNTA1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/pZV0/ywTAQIFS1m8Nk5aba5T83xoKXVhF9hf2ueWMbgC XOZId35h5ur4a0qq4LlzpTzbs2O4S3rbMugq8yV802PzU2g1HrasVjmNKMc8Ikr1 D1OYYuUe9A/LQj4THiuxcfGxYPTV7wvdrsiEQCAf0Y3LbsEoByHqEJMIRav5gYTW RYBf7w2ThhY+B6LiNDzsMsqGDDeqFL6uCrbJYRzENRDEM9+U5jBzOlu7ZzjiimcI GMD2jH63wZ3CQ5PUFh4sxOwDYVuOisErb/wvzzoc+in9iQ5eR2VvA7DiLl7vTk+q ux3NgPPcHuAFM68bZD/yphsJx77dF6PIUzR+CVJ1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURsw7hAHxCDvCZkrePaCcvxvxImowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJhNzU3YWIyLWZlZGYtNDMxZC1hMjBhLWM3YzU1YzExY2VmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGRYwDQYJKoZIhvcNAQELBQADggEBAHYsSxYI7VTFXYJCqmnyB546 y3Eh70l7J1s43Q6aQBdz49C8o5O67gPt/9pZnJBz/8QOnte1ZlNzj31xmM+dA7s2 eZ4aSZwq9KYThs5DhqZ3D1irGQBMQaI0iEABORi71P1v+K5zFZaqk5HmknjvGOc0 +i1U3xDQOX3GCmbvEV1AluZER/oQTx5FbMJq9n9fodiAd322ba1+edlLp67rk231 Nf3oCMgQ4n+Mrqj83+Kxb1j0USHufQz8A0u5ucBYsbgoOrUb/RNJu4fcZ62YW8TM peBksD1v26UOS25ynpFVylfAlMDMk6aUgxG0P95fX+xZ9iv1fIHChqX80cMuWEI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:27 2025 by rpki-client