$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/491153d8-9cc8-492d-8b41-20612cf4151d.roa File: 491153d8-9cc8-492d-8b41-20612cf4151d.roa (raw, json) Hash identifier: yfmncUhwpSBpHk2wZofe4ltlT8AM0X4iP+xEqN7AHG8= Subject key identifier: A4:E1:38:C5:97:0B:F7:22:0E:83:2A:ED:46:DB:24:88:6A:DE:E0:30 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 56C54CDE25109288C809B793A1745B9D547AA5B2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/491153d8-9cc8-492d-8b41-20612cf4151d.roa Signing time: Fri 31 Oct 2025 05:10:34 +0000 ROA not before: Fri 31 Oct 2025 05:10:34 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1518::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c5:4c:de:25:10:92:88:c8:09:b7:93:a1:74:5b:9d:54:7a:a5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:10:34 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c04a376899dae977900c7f6419b6a5dcd0df2b7fdea2acfb28ab0e75a308879c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:34:0e:f3:e8:fa:8a:00:1b:9c:ac:2d:bc: 07:73:bd:e0:7c:c5:7b:df:1b:5f:94:ad:a4:f4:46: 98:32:a6:3f:ae:86:66:be:4f:2d:c1:4e:21:61:2c: 3c:00:1c:b4:8d:19:a3:c2:78:f2:41:9d:ab:d9:5e: ac:6f:34:2d:3a:d8:26:23:cb:c9:8e:99:94:96:48: 08:f7:6d:41:21:dd:80:06:10:26:04:0b:5b:ad:b6: 11:95:db:ca:c5:af:5d:ac:b4:82:e1:13:0a:be:24: 77:bd:2a:98:16:66:a7:b6:da:c7:f8:3d:d8:94:af: a5:cf:00:93:3f:c6:2b:2f:7e:6a:d5:46:76:08:63: d6:a1:27:8b:6a:de:70:0b:ea:ba:3d:63:63:9a:69: 8e:fa:b8:46:f4:12:a8:02:12:d5:ce:72:37:46:e4: d0:1c:12:39:4f:57:b8:1d:f1:f9:de:64:c4:f8:4a: 90:36:85:63:c6:2f:b5:5f:18:ab:c1:6c:03:90:e0: 52:6b:fd:ef:f9:63:ff:a4:c2:af:1b:57:3a:b0:36: 3e:1b:d5:bc:88:33:9b:87:69:66:50:42:e1:26:fe: 95:5b:a3:c3:dd:0c:75:8d:5d:d5:cf:2a:84:c1:4a: 87:ec:42:cf:3e:40:aa:a8:7f:f1:a6:0a:27:83:05: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E1:38:C5:97:0B:F7:22:0E:83:2A:ED:46:DB:24:88:6A:DE:E0:30 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/491153d8-9cc8-492d-8b41-20612cf4151d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1518::/45 Signature Algorithm: sha256WithRSAEncryption 08:ae:21:d8:24:8e:fa:99:41:a0:e3:2c:1c:fd:96:2a:06:99: a2:bd:e5:99:e0:65:45:fd:d9:4f:47:e4:25:80:08:b6:1b:3f: 86:c1:bf:58:00:62:c6:8e:9b:dc:eb:df:07:00:29:93:dc:c9: 34:34:84:0a:7b:79:10:1d:63:f1:60:ed:17:2a:2d:e5:5a:d7: c1:27:e2:19:d3:39:f6:00:7d:64:31:74:86:5a:58:8c:3b:74: 78:46:d0:d0:11:d2:9b:b9:67:d0:20:0c:5c:6f:e6:e8:e4:7f: 87:ae:8a:d2:44:07:f6:f4:46:7f:41:f1:16:69:76:a0:6b:12: 62:39:0a:ad:c0:48:d3:2f:c7:05:a8:82:8a:f9:08:08:2d:c7: 82:f3:f4:b2:3a:bd:e0:7c:a7:ff:45:44:d9:4b:e9:0a:9b:b6: c4:a9:2e:75:8b:7f:b1:ea:15:f8:68:23:e0:2a:57:7f:60:7f: 7c:ca:e9:d6:5a:0c:98:ff:94:0a:07:aa:ad:f5:81:f0:ba:62: 6c:ab:27:85:76:4b:cb:c6:bb:1a:eb:49:2b:2b:97:65:19:45: 53:3e:69:ee:11:22:b6:9a:d4:f5:73:d5:3d:48:ac:a9:a0:65: 40:bf:c4:6a:96:5d:36:25:99:2a:77:66:37:c9:8c:eb:fe:63: ad:ea:5e:f7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVsVM3iUQkojICbeToXRbnVR6pbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUxMDM0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDRhMzc2ODk5ZGFlOTc3OTAwYzdmNjQxOWI2YTVkY2Qw ZGYyYjdmZGVhMmFjZmIyOGFiMGU3NWEzMDg4NzljMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChZjQO8+j6igAbnKwtvAdzveB8xXvfG1+UraT0Rpgypj+u hma+Ty3BTiFhLDwAHLSNGaPCePJBnavZXqxvNC062CYjy8mOmZSWSAj3bUEh3YAG ECYEC1utthGV28rFr12stILhEwq+JHe9KpgWZqe22sf4PdiUr6XPAJM/xisvfmrV RnYIY9ahJ4tq3nAL6ro9Y2OaaY76uEb0EqgCEtXOcjdG5NAcEjlPV7gd8fneZMT4 SpA2hWPGL7VfGKvBbAOQ4FJr/e/5Y/+kwq8bVzqwNj4b1byIM5uHaWZQQuEm/pVb o8PdDHWNXdXPKoTBSofsQs8+QKqof/GmCieDBSUxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpOE4xZcL9yIOgyrtRtskiGre4DAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ5MTE1M2Q4LTljYzgtNDkyZC04YjQxLTIwNjEyY2Y0MTUxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAFRgwDQYJKoZIhvcNAQELBQADggEBAAiuIdgkjvqZQaDjLBz9lioG maK95ZngZUX92U9H5CWACLYbP4bBv1gAYsaOm9zr3wcAKZPcyTQ0hAp7eRAdY/Fg 7RcqLeVa18En4hnTOfYAfWQxdIZaWIw7dHhG0NAR0pu5Z9AgDFxv5ujkf4euitJE B/b0Rn9B8RZpdqBrEmI5Cq3ASNMvxwWogor5CAgtx4Lz9LI6veB8p/9FRNlL6Qqb tsSpLnWLf7HqFfhoI+AqV39gf3zK6dZaDJj/lAoHqq31gfC6YmyrJ4V2S8vGuxrr SSsrl2UZRVM+ae4RIraa1PVz1T1IrKmgZUC/xGqWXTYlmSp3ZjfJjOv+Y63qXvc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:36 2025 by rpki-client