$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3b023213-a462-4a25-8dd5-82e5d629bc9c.roa File: 3b023213-a462-4a25-8dd5-82e5d629bc9c.roa (raw, json) Hash identifier: 8u7RIuQLxCTrvVbCUQY+VY53KAJpay4x8NEYsSCAGwQ= Subject key identifier: B9:A5:C7:FF:D9:4E:6A:D9:C5:30:20:86:08:08:60:6B:DD:EF:A3:9E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 74285BF3FEE52EB8032AC030BDB001BCDA175883 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3b023213-a462-4a25-8dd5-82e5d629bc9c.roa Signing time: Thu 30 Oct 2025 21:23:52 +0000 ROA not before: Thu 30 Oct 2025 21:23:52 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:166c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:28:5b:f3:fe:e5:2e:b8:03:2a:c0:30:bd:b0:01:bc:da:17:58:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:23:52 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=1b2fa6b82a2ceccc38033ac00afb8cfc28f61c3620692795afb48001b67af72c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:e4:ed:f3:b2:6c:b0:2c:f8:10:bd:5d:ee: fa:da:1e:81:ff:d5:65:25:e5:69:f5:ea:bc:33:d6: 5f:fd:b1:4e:ab:2a:5b:40:e2:b7:54:5d:47:54:58: 7d:0d:17:fd:ac:2f:f4:61:fd:f0:e8:f5:38:76:10: 7d:22:d1:a5:0f:00:6a:03:8e:43:3d:6f:22:d8:ee: 6f:47:53:1f:c1:44:20:89:55:57:41:9e:50:5f:11: cb:25:f4:99:9d:ab:d6:51:ca:aa:89:e3:e5:6c:e1: ec:87:17:ae:3a:f2:dd:79:6e:aa:79:8a:95:42:35: 94:65:0d:d2:bf:5d:4a:7a:e7:f5:62:93:ce:19:c1: b0:b4:ef:2b:b4:c8:27:db:a5:6a:a8:95:e5:4d:c9: 33:c4:58:21:be:55:01:22:97:13:49:40:b6:9c:8f: a6:21:a3:20:e9:3d:9b:53:aa:2f:0a:6d:a4:8b:2e: b5:9c:f8:39:e6:94:ec:bf:d6:10:8d:65:cd:80:2a: fc:44:3c:71:af:e5:0d:9d:11:3b:03:42:e0:15:f9: 97:2d:f4:3f:5b:e5:72:66:29:38:4e:c7:5d:e4:14: 60:4a:c8:57:73:bb:1b:a4:ff:14:04:af:d8:23:30: 9d:89:05:92:5f:90:fa:5c:33:f2:f6:f5:99:74:a4: a6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A5:C7:FF:D9:4E:6A:D9:C5:30:20:86:08:08:60:6B:DD:EF:A3:9E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3b023213-a462-4a25-8dd5-82e5d629bc9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:166c::/47 Signature Algorithm: sha256WithRSAEncryption 0f:dd:9d:e2:ce:f2:91:85:dd:65:f5:5b:60:72:03:ae:e0:dc: 80:f4:e2:53:26:a7:b8:d8:eb:0b:46:b2:46:4b:e9:a6:01:81: 73:31:52:77:ef:8a:15:ea:80:88:d1:47:28:0b:b7:c1:51:0d: 84:42:33:a7:ea:9c:e8:fd:87:22:2e:49:cf:af:ac:36:31:82: 15:40:8e:55:1d:32:c2:b2:2e:f9:34:85:54:73:83:45:17:34: 35:b4:44:93:e9:da:e0:41:21:e4:ec:80:95:1b:a8:1f:96:e6: 25:5c:40:8c:43:38:3a:2e:3d:3b:6d:07:ff:e3:6c:e8:24:72: fb:21:62:87:4d:0d:76:63:e7:21:f5:69:20:33:5a:55:cc:db: df:b1:8a:79:2c:8d:05:7d:71:29:57:6e:44:5d:ca:92:17:c9: 52:b0:f1:fd:cd:18:e7:81:ff:71:8b:31:f5:ef:01:ba:8c:f2: 38:1f:06:27:ad:ab:d7:15:3c:23:0a:61:85:47:64:61:c8:1f: c1:74:0c:f3:ec:00:9f:24:13:1b:1d:8e:9a:3d:2f:03:a0:99: a8:6e:96:0a:49:e0:0c:16:82:19:ae:92:11:54:a6:4d:4c:8e: db:6e:96:0d:21:7e:1f:db:f0:5d:a1:4e:29:f0:dc:9d:3f:01: 8a:43:56:17 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdChb8/7lLrgDKsAwvbABvNoXWIMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyMzUyWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjJmYTZiODJhMmNlY2NjMzgwMzNhYzAwYWZiOGNmYzI4 ZjYxYzM2MjA2OTI3OTVhZmI0ODAwMWI2N2FmNzJjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYRuTt87JssCz4EL1d7vraHoH/1WUl5Wn16rwz1l/9sU6r KltA4rdUXUdUWH0NF/2sL/Rh/fDo9Th2EH0i0aUPAGoDjkM9byLY7m9HUx/BRCCJ VVdBnlBfEcsl9Jmdq9ZRyqqJ4+Vs4eyHF6468t15bqp5ipVCNZRlDdK/XUp65/Vi k84ZwbC07yu0yCfbpWqoleVNyTPEWCG+VQEilxNJQLacj6YhoyDpPZtTqi8KbaSL LrWc+DnmlOy/1hCNZc2AKvxEPHGv5Q2dETsDQuAV+Zct9D9b5XJmKThOx13kFGBK yFdzuxuk/xQEr9gjMJ2JBZJfkPpcM/L29Zl0pKbVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuaXH/9lOatnFMCCGCAhga93vo54wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNiMDIzMjEzLWE0NjItNGEyNS04ZGQ1LTgyZTVkNjI5YmM5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFmwwDQYJKoZIhvcNAQELBQADggEBAA/dneLO8pGF3WX1W2ByA67g 3ID04lMmp7jY6wtGskZL6aYBgXMxUnfvihXqgIjRRygLt8FRDYRCM6fqnOj9hyIu Sc+vrDYxghVAjlUdMsKyLvk0hVRzg0UXNDW0RJPp2uBBIeTsgJUbqB+W5iVcQIxD ODouPTttB//jbOgkcvshYodNDXZj5yH1aSAzWlXM29+xinksjQV9cSlXbkRdypIX yVKw8f3NGOeB/3GLMfXvAbqM8jgfBietq9cVPCMKYYVHZGHIH8F0DPPsAJ8kExsd jpo9LwOgmahulgpJ4AwWghmukhFUpk1Mjttulg0hfh/b8F2hTinw3J0/AYpDVhc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:53 2025 by rpki-client