$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3692bb58-f56d-4e32-a3e0-c36f90d9ab5c.roa File: 3692bb58-f56d-4e32-a3e0-c36f90d9ab5c.roa (raw, json) Hash identifier: 5ZChRJSISk3Gy1wnk36FAb3LxcJnr63DR9sqMPUtCcI= Subject key identifier: AE:9B:6C:81:37:C8:5C:2F:61:11:31:2B:D8:E9:D6:C9:DE:B6:A8:30 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 479D10A53F4135400DEDB7C54A142E9A954C2B37 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3692bb58-f56d-4e32-a3e0-c36f90d9ab5c.roa Signing time: Fri 31 Oct 2025 00:51:47 +0000 ROA not before: Fri 31 Oct 2025 00:51:47 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:37a8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9d:10:a5:3f:41:35:40:0d:ed:b7:c5:4a:14:2e:9a:95:4c:2b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:51:47 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=d4cf07eb9b0087ba206330a63781c599ba49e40f3b1517924355d2026ec11140, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:84:49:d2:95:26:f3:2d:9c:0b:1b:ae:dc: c9:12:19:c5:f5:00:87:a8:51:dc:ef:3d:fb:58:ad: 44:b6:ab:55:47:09:04:f8:5b:b5:5d:2a:7a:9a:4d: 8d:d2:ef:35:59:6e:c2:7b:cf:f5:55:ba:2a:05:66: 1f:b4:85:16:7b:9d:d3:f5:a9:0b:6c:bb:ad:d5:d7: fc:7c:bb:89:a2:cb:86:0d:73:96:88:3f:fd:be:34: 80:85:ed:31:7f:70:6c:4e:42:3c:48:a6:a6:7e:ba: fd:14:fc:09:6e:d8:72:4e:37:76:e4:e0:c3:cd:34: 19:0f:d3:54:2c:80:6a:6d:2f:ba:a0:38:c3:d2:3d: c7:9e:c7:a1:7e:f0:a9:76:05:e7:a1:a1:7f:18:a2: b0:ce:47:88:30:74:93:9a:c8:2f:e2:9e:4b:e4:6c: c4:29:73:bf:19:84:fd:63:d0:cf:b3:8e:de:af:9a: 90:63:f4:6e:da:87:04:0a:a8:2e:00:26:17:56:00: d6:8f:24:5d:c2:28:ff:11:67:93:b0:0f:56:fc:9b: dd:75:12:09:99:e0:62:24:22:78:a2:c4:81:30:e9: f6:b5:34:2f:9f:a7:b2:63:50:94:2a:ad:29:4a:68: b8:83:b1:77:59:83:40:9e:0c:8f:f7:22:6a:f0:9c: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9B:6C:81:37:C8:5C:2F:61:11:31:2B:D8:E9:D6:C9:DE:B6:A8:30 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3692bb58-f56d-4e32-a3e0-c36f90d9ab5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:37a8::/47 Signature Algorithm: sha256WithRSAEncryption b8:d8:5c:60:4e:62:74:37:09:1c:1b:f5:0b:07:08:d5:2e:1f: 96:45:37:9c:a1:fb:6a:f7:a1:92:1b:15:4c:c4:73:97:75:9f: 6f:1b:dc:c0:06:22:15:75:d2:7a:64:8b:c9:1e:e8:66:c0:23: f6:82:99:67:5e:cc:09:04:8a:f6:6b:d8:28:e5:3d:76:9f:90: e8:57:1c:6b:01:b3:75:91:ac:11:75:2d:f7:10:8c:77:37:47: 2c:df:47:ac:fc:62:0e:e2:fa:33:3d:08:87:f6:19:28:ed:3b: 1e:33:1b:35:eb:9d:69:21:df:73:9f:99:a3:d1:bb:8c:b1:9f: 7f:74:99:68:cd:79:93:f1:13:be:e1:e2:62:49:5d:de:ea:f0: f5:76:00:c4:d7:20:d6:43:05:4d:e4:1a:7f:4d:e6:3b:45:87: 41:e5:8d:85:4e:85:71:5c:4f:bc:db:ba:56:d4:4b:b8:f5:be: f9:1c:5a:20:42:ca:45:9f:53:39:3a:d4:b4:fe:26:c0:57:10: f3:6b:22:0c:70:e7:03:55:19:32:cc:ad:72:62:ff:42:d9:ae: 71:61:7c:a8:df:1e:24:25:3c:0c:a8:18:c6:46:f8:fc:a7:6f: 84:f5:9b:18:7c:8c:17:21:ff:3a:33:3f:29:4e:54:d7:bc:5b: 14:83:ab:1b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR50QpT9BNUAN7bfFShQumpVMKzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1MTQ3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGNmMDdlYjliMDA4N2JhMjA2MzMwYTYzNzgxYzU5OWJh NDllNDBmM2IxNTE3OTI0MzU1ZDIwMjZlYzExMTQwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd1YRJ0pUm8y2cCxuu3MkSGcX1AIeoUdzvPftYrUS2q1VH CQT4W7VdKnqaTY3S7zVZbsJ7z/VVuioFZh+0hRZ7ndP1qQtsu63V1/x8u4miy4YN c5aIP/2+NICF7TF/cGxOQjxIpqZ+uv0U/Alu2HJON3bk4MPNNBkP01QsgGptL7qg OMPSPceex6F+8Kl2BeehoX8YorDOR4gwdJOayC/inkvkbMQpc78ZhP1j0M+zjt6v mpBj9G7ahwQKqC4AJhdWANaPJF3CKP8RZ5OwD1b8m911EgmZ4GIkIniixIEw6fa1 NC+fp7JjUJQqrSlKaLiDsXdZg0CeDI/3ImrwnDWtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrptsgTfIXC9hETEr2OnWyd62qDAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM2OTJiYjU4LWY1NmQtNGUzMi1hM2UwLWMzNmY5MGQ5YWI1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAN6gwDQYJKoZIhvcNAQELBQADggEBALjYXGBOYnQ3CRwb9QsHCNUu H5ZFN5yh+2r3oZIbFUzEc5d1n28b3MAGIhV10npki8ke6GbAI/aCmWdezAkEivZr 2CjlPXafkOhXHGsBs3WRrBF1LfcQjHc3RyzfR6z8Yg7i+jM9CIf2GSjtOx4zGzXr nWkh33OfmaPRu4yxn390mWjNeZPxE77h4mJJXd7q8PV2AMTXINZDBU3kGn9N5jtF h0HljYVOhXFcT7zbulbUS7j1vvkcWiBCykWfUzk61LT+JsBXEPNrIgxw5wNVGTLM rXJi/0LZrnFhfKjfHiQlPAyoGMZG+Pynb4T1mxh8jBch/zozPylOVNe8WxSDqxs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:48 2025 by rpki-client