$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3aaff222-747b-4bc5-aee1-6f807dd93c3d.roa File: 3aaff222-747b-4bc5-aee1-6f807dd93c3d.roa (raw, json) Hash identifier: 2vErZMnNd9N2TltkF9RG9B3sPijS9+jgMdFHmVnN62s= Subject key identifier: 73:31:45:32:C3:97:94:78:A2:0E:B9:DB:4A:AA:94:E8:1E:0E:F9:D2 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5BF3ECFAAB3A7544AEC7A241A9A144A84B3AD58E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3aaff222-747b-4bc5-aee1-6f807dd93c3d.roa Signing time: Fri 31 Oct 2025 04:38:27 +0000 ROA not before: Fri 31 Oct 2025 04:38:27 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3af8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f3:ec:fa:ab:3a:75:44:ae:c7:a2:41:a9:a1:44:a8:4b:3a:d5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:38:27 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=525edf5a0e936acb114d8a570f114e7ed93d3ac5cba7dc961c18763bc2933a8b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:53:49:21:15:fc:b9:4f:44:b2:97:d8:12:e3: 53:69:d4:e2:c0:d6:1e:2b:4d:ed:49:a6:97:d6:5e: 75:54:e3:4c:9c:26:dc:46:98:53:b9:7e:4d:fb:c1: ba:1b:04:ba:80:64:a7:70:25:60:88:bb:9d:ad:5a: e5:ff:5a:29:1b:21:1d:1d:7f:22:73:e1:c7:1a:ce: d3:3b:85:43:3f:81:76:f2:79:0a:a2:f8:ce:fd:28: a7:78:a6:2a:f6:ba:dc:b2:1a:53:77:b7:6b:74:ec: cf:1c:7b:00:69:59:4e:81:8a:40:fd:bc:b1:91:b4: 6b:a2:d8:ca:96:6c:a7:06:47:8c:80:e8:19:82:6d: e6:51:74:cf:78:61:98:85:7c:8b:90:8b:7e:e5:22: cc:1b:66:07:79:c1:96:22:51:f9:33:fa:90:64:04: 54:3b:bb:3e:2a:52:97:fd:9f:67:a8:66:4c:5c:a8: 54:87:7c:b5:72:67:66:05:86:2b:07:c3:ba:55:c4: 2a:4f:09:c5:9d:ab:a3:26:51:88:ef:62:d7:7d:63: b5:cd:61:cd:4b:01:7b:d5:52:3a:92:f8:1d:d9:87: 10:86:f9:ec:1a:e5:ea:54:e7:47:5b:14:8a:87:8b: aa:32:8e:35:fd:14:38:ed:d4:80:40:98:9f:18:bc: 00:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:31:45:32:C3:97:94:78:A2:0E:B9:DB:4A:AA:94:E8:1E:0E:F9:D2 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3aaff222-747b-4bc5-aee1-6f807dd93c3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3af8::/46 Signature Algorithm: sha256WithRSAEncryption 52:e1:8d:b4:84:a8:ae:80:cc:84:5e:ed:95:8f:54:e2:3f:86: 36:53:64:19:25:60:ba:22:af:21:01:c7:ce:37:87:d3:56:ba: a0:ce:d2:f3:76:93:86:68:0b:80:7b:c4:6c:8f:31:e0:8c:e0: 0c:94:30:53:6a:46:31:44:47:5f:9c:3e:3c:1c:f5:a7:7b:77: 0d:4a:f6:3f:2d:a3:ea:8c:30:b3:0b:60:ee:91:4d:fb:95:27: 0d:1f:8e:31:be:19:b2:5e:d9:9a:f3:7e:88:e1:e2:31:e9:f2: 48:7f:34:40:6b:0b:52:d7:d7:c6:54:cd:b8:75:88:41:35:74: 76:cc:e7:f8:10:69:3a:9a:05:40:d5:36:cf:dd:3a:fd:bb:e8: 9d:6e:e6:7d:d7:fe:5e:ee:80:7e:c2:95:5f:0c:80:12:92:9d: 73:77:22:49:51:e8:93:c5:38:2e:c0:0f:ac:da:d9:e6:8a:ad: 7c:0a:12:0d:9a:ba:93:9c:ad:66:f3:0a:a4:c8:18:8f:43:e9: 58:b1:ba:72:b5:c5:10:04:70:5b:bf:f5:14:8b:20:54:f6:8c: 22:c3:5f:19:5c:fb:f7:42:83:68:03:15:e9:d0:81:05:e2:32: d0:78:97:e1:10:ed:e2:26:6d:80:1d:50:2c:26:5a:ea:4b:ed: b5:ee:e5:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW/Ps+qs6dUSux6JBqaFEqEs61Y4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQzODI3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjVlZGY1YTBlOTM2YWNiMTE0ZDhhNTcwZjExNGU3ZWQ5 M2QzYWM1Y2JhN2RjOTYxYzE4NzYzYmMyOTMzYThiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxU0khFfy5T0Syl9gS41Np1OLA1h4rTe1JppfWXnVU40yc JtxGmFO5fk37wbobBLqAZKdwJWCIu52tWuX/WikbIR0dfyJz4ccaztM7hUM/gXby eQqi+M79KKd4pir2utyyGlN3t2t07M8cewBpWU6BikD9vLGRtGui2MqWbKcGR4yA 6BmCbeZRdM94YZiFfIuQi37lIswbZgd5wZYiUfkz+pBkBFQ7uz4qUpf9n2eoZkxc qFSHfLVyZ2YFhisHw7pVxCpPCcWdq6MmUYjvYtd9Y7XNYc1LAXvVUjqS+B3ZhxCG +ewa5epU50dbFIqHi6oyjjX9FDjt1IBAmJ8YvAAjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUczFFMsOXlHiiDrnbSqqU6B4O+dIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNhYWZmMjIyLTc0N2ItNGJjNS1hZWUxLTZmODA3ZGQ5M2MzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAOvgwDQYJKoZIhvcNAQELBQADggEBAFLhjbSEqK6AzIRe7ZWPVOI/ hjZTZBklYLoiryEBx843h9NWuqDO0vN2k4ZoC4B7xGyPMeCM4AyUMFNqRjFER1+c Pjwc9ad7dw1K9j8to+qMMLMLYO6RTfuVJw0fjjG+GbJe2Zrzfojh4jHp8kh/NEBr C1LX18ZUzbh1iEE1dHbM5/gQaTqaBUDVNs/dOv276J1u5n3X/l7ugH7ClV8MgBKS nXN3IklR6JPFOC7AD6za2eaKrXwKEg2aupOcrWbzCqTIGI9D6VixunK1xRAEcFu/ 9RSLIFT2jCLDXxlc+/dCg2gDFenQgQXiMtB4l+EQ7eImbYAdUCwmWupL7bXu5X0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:44 2025 by rpki-client