$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f421c68-7a43-42e8-978d-799952bea808.roa File: 2f421c68-7a43-42e8-978d-799952bea808.roa (raw, json) Hash identifier: MdClM0D547PzD2C+kttg61RU9HmsB41a/BK9kWpyXyc= Subject key identifier: 57:F0:29:EA:79:BC:9D:F8:92:EA:39:39:96:C5:B9:9D:C3:CC:29:A4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 26DF3F69391591D52DD575BE7B1E45D2188C9DCC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f421c68-7a43-42e8-978d-799952bea808.roa Signing time: Fri 31 Oct 2025 06:52:00 +0000 ROA not before: Fri 31 Oct 2025 06:52:00 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:df:3f:69:39:15:91:d5:2d:d5:75:be:7b:1e:45:d2:18:8c:9d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:52:00 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=33f285207119ca39b85645432f5091a1e84b3d794826574d330f855fe9ad05d9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:b7:44:1e:ce:33:65:a8:ac:6b:3f:f1:ea: 68:2b:b3:a2:79:7d:df:86:e6:d3:03:9a:6a:fc:5a: 97:cb:ad:d9:40:d0:d9:9b:98:af:e0:aa:bb:c3:b7: 62:c9:99:80:15:ed:3a:40:44:6c:de:63:db:f3:ba: 60:d9:2b:d5:f3:d6:29:ed:b7:48:c3:4a:9b:47:9e: fa:45:19:5c:a7:10:06:16:67:85:a0:f1:01:22:62: ae:9d:7d:54:ac:78:45:b3:d7:55:42:4a:35:ae:d6: ef:f5:dc:c3:17:26:7d:3f:c7:8f:26:94:63:b3:bd: c3:68:6e:96:a2:4d:25:12:0f:18:f1:78:e0:93:a8: 85:d9:94:b6:1e:56:11:50:5f:da:09:87:27:4a:57: 09:58:30:9e:0b:92:16:ff:f1:60:0d:e5:29:2e:f0: bc:db:cc:56:44:ce:fb:64:93:4c:92:07:15:09:c4: c4:50:65:54:df:30:98:49:c7:fc:31:f8:49:17:91: 83:d3:da:d6:c3:b9:04:9f:53:2b:66:e2:71:f6:d1: e1:cc:d7:69:6d:75:ae:73:77:64:ae:ea:b8:af:3b: 6c:39:c0:41:fd:77:4f:4c:a4:31:28:44:5a:24:42: ac:ba:07:03:49:50:b5:94:05:47:c9:9f:c6:84:6c: 3c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F0:29:EA:79:BC:9D:F8:92:EA:39:39:96:C5:B9:9D:C3:CC:29:A4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f421c68-7a43-42e8-978d-799952bea808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d30::/44 Signature Algorithm: sha256WithRSAEncryption bc:7c:4b:b0:20:21:b6:8a:97:0b:c9:3a:54:ef:90:a4:9c:e5: d9:15:f5:e4:d8:b2:cb:09:09:4c:27:57:1a:d5:16:ba:68:4b: b5:91:01:74:31:ed:8f:48:3c:ab:70:08:d6:9b:b1:39:dd:a9: 9a:0a:37:e4:73:a0:0a:9b:43:32:1d:7f:59:de:c2:f9:a2:6e: 60:f8:64:de:43:a3:73:4b:5b:6c:62:6e:59:51:74:8c:ad:32: f3:a1:43:f0:39:eb:13:a6:ba:dc:a6:23:72:3b:ea:34:80:57: f2:67:ae:15:9b:be:02:2d:9b:e0:0b:1c:87:a2:9a:24:85:1d: 07:dc:f8:0c:88:f7:2e:89:b4:8d:be:d6:24:9a:32:e4:a9:6e: af:e3:2a:55:79:62:00:59:fb:bd:e9:3b:62:c1:45:7d:8b:29: 91:70:c1:77:f3:0f:e6:d8:83:ef:db:0c:bc:c9:fe:ff:8b:5c: 13:62:e7:66:8a:f1:71:60:18:a2:f4:24:42:4c:dd:b9:88:d7: 8a:47:2b:fd:a9:36:e3:06:92:e3:6f:af:20:ec:ba:94:06:c4: 59:be:42:d3:52:19:6c:ed:52:6d:2d:6e:cc:4f:3a:72:87:a2: 4b:77:96:e5:fb:c9:0f:35:5d:9b:bb:11:22:4a:b9:d3:30:7d: 90:94:2b:d4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJt8/aTkVkdUt1XW+ex5F0hiMncwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY1MjAwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2YyODUyMDcxMTljYTM5Yjg1NjQ1NDMyZjUwOTFhMWU4 NGIzZDc5NDgyNjU3NGQzMzBmODU1ZmU5YWQwNWQ5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6OrdEHs4zZaisaz/x6mgrs6J5fd+G5tMDmmr8WpfLrdlA 0NmbmK/gqrvDt2LJmYAV7TpARGzeY9vzumDZK9Xz1intt0jDSptHnvpFGVynEAYW Z4Wg8QEiYq6dfVSseEWz11VCSjWu1u/13MMXJn0/x48mlGOzvcNobpaiTSUSDxjx eOCTqIXZlLYeVhFQX9oJhydKVwlYMJ4Lkhb/8WAN5Sku8LzbzFZEzvtkk0ySBxUJ xMRQZVTfMJhJx/wx+EkXkYPT2tbDuQSfUytm4nH20eHM12ltda5zd2Su6rivO2w5 wEH9d09MpDEoRFokQqy6BwNJULWUBUfJn8aEbDwpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUV/Ap6nm8nfiS6jk5lsW5ncPMKaQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJmNDIxYzY4LTdhNDMtNDJlOC05NzhkLTc5OTk1MmJlYTgwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAALTAwDQYJKoZIhvcNAQELBQADggEBALx8S7AgIbaKlwvJOlTvkKSc 5dkV9eTYsssJCUwnVxrVFrpoS7WRAXQx7Y9IPKtwCNabsTndqZoKN+RzoAqbQzId f1newvmibmD4ZN5Do3NLW2xibllRdIytMvOhQ/A56xOmutymI3I76jSAV/JnrhWb vgItm+ALHIeimiSFHQfc+AyI9y6JtI2+1iSaMuSpbq/jKlV5YgBZ+73pO2LBRX2L KZFwwXfzD+bYg+/bDLzJ/v+LXBNi52aK8XFgGKL0JEJM3bmI14pHK/2pNuMGkuNv ryDsupQGxFm+QtNSGWztUm0tbsxPOnKHokt3luX7yQ81XZu7ESJKudMwfZCUK9Q= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:34 2025 by rpki-client