$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a7fa532-a6f2-4c0b-9be6-5854588a7d24.roa File: 4a7fa532-a6f2-4c0b-9be6-5854588a7d24.roa (raw, json) Hash identifier: eQg4CcY30Pey3vEN9kTC3tHL1Brgp9YJx30AEB4Tf7k= Subject key identifier: 71:07:60:DC:D7:AA:6C:8B:A4:5E:D8:89:86:FC:7A:86:CF:B7:D7:E0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3100CEF88796C57BCF2A11F0426CAE367765417D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a7fa532-a6f2-4c0b-9be6-5854588a7d24.roa Signing time: Fri 31 Oct 2025 06:42:22 +0000 ROA not before: Fri 31 Oct 2025 06:42:22 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2880::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:00:ce:f8:87:96:c5:7b:cf:2a:11:f0:42:6c:ae:36:77:65:41:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:42:22 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0e48fc141b5882695196cf8efc030e6843ae5341f5c219c044dd769d83b393cc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7b:6b:2e:91:4e:01:17:fd:08:83:c9:26:39: 1c:81:d5:e4:71:fe:3f:0a:37:86:73:dc:0d:5f:57: e5:30:d4:b5:f1:1c:a9:a6:8b:ac:a1:34:30:c4:f6: 76:66:a2:28:28:bb:f7:c2:95:09:3c:b6:a8:8d:64: 6b:de:f9:ce:03:1a:ee:9d:4a:90:80:5c:fd:20:f0: ea:dc:50:8e:40:05:c0:b2:bc:e2:7c:ba:a8:ec:95: 4d:b9:0e:f5:c2:56:e4:b8:40:d5:ba:e0:d4:c8:c3: 93:ed:5b:b0:fb:7e:cb:d0:ef:82:e8:5a:08:e0:b7: 06:43:e9:f6:f7:80:43:75:e8:91:62:64:c3:40:67: 90:28:b8:ac:fe:89:5f:63:c1:dd:53:61:54:4a:c8: 42:12:48:e3:ea:93:13:65:b9:15:3d:8b:1a:39:d2: 96:88:23:74:5b:de:a9:fd:99:bd:1a:4b:35:3f:14: 2f:32:69:05:7c:e6:05:71:75:1f:9c:48:81:6c:44: cd:f9:6d:78:1c:25:0c:03:61:fc:64:08:41:1c:bd: 9d:5a:a4:ab:4f:32:c7:6d:0a:66:d1:6f:10:35:88: cf:10:ed:e0:79:3d:58:cd:6c:22:0b:43:ec:89:74: 19:21:26:ff:4e:57:29:25:76:e4:d5:58:e1:52:3a: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:07:60:DC:D7:AA:6C:8B:A4:5E:D8:89:86:FC:7A:86:CF:B7:D7:E0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a7fa532-a6f2-4c0b-9be6-5854588a7d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2880::/44 Signature Algorithm: sha256WithRSAEncryption 9c:c3:e1:42:b6:84:94:be:43:1d:e3:e5:3b:48:a8:61:ea:2f: 63:1f:57:f4:05:41:8f:6c:8c:ec:19:a5:6b:f0:4a:98:a3:66: 5c:8f:de:99:f2:e4:c9:67:c3:47:9f:9f:89:5d:0f:14:9f:c8: 74:72:88:bd:b1:16:4f:ff:85:1b:be:70:c7:1c:4b:d2:4a:5a: 3c:9c:9c:3d:3d:b3:fb:df:06:cc:fa:31:e9:1c:38:70:56:32: 50:95:b8:7c:a6:67:94:8b:d4:58:ef:c4:06:e5:80:bb:1f:f3: eb:8f:0d:37:13:91:69:cb:35:30:82:01:a6:54:95:d6:22:e6: 48:c8:51:80:66:a8:58:8c:cc:a9:b5:c4:7f:2a:11:22:0e:1d: e7:2b:8e:e1:1f:b0:3e:e1:87:3b:dd:73:a6:91:d0:98:be:da: 45:1f:23:61:8d:c2:d1:fe:ad:69:bb:b6:b6:a8:fa:14:e5:62: d0:2c:34:3c:36:af:57:8c:52:fd:33:db:d7:3e:75:9b:36:7c: 50:c6:80:7d:27:75:f7:2c:19:8d:a9:2f:34:b7:75:c0:66:7f: fc:c6:63:7b:af:9b:3f:26:78:d9:a4:52:a2:f0:44:d4:79:a6: 27:8e:f7:f5:76:30:7b:4d:34:2b:b4:e2:b8:4f:5b:c9:ac:8e: bb:85:9f:cf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMQDO+IeWxXvPKhHwQmyuNndlQX0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY0MjIyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTQ4ZmMxNDFiNTg4MjY5NTE5NmNmOGVmYzAzMGU2ODQz YWU1MzQxZjVjMjE5YzA0NGRkNzY5ZDgzYjM5M2NjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOe2sukU4BF/0Ig8kmORyB1eRx/j8KN4Zz3A1fV+Uw1LXx HKmmi6yhNDDE9nZmoigou/fClQk8tqiNZGve+c4DGu6dSpCAXP0g8OrcUI5ABcCy vOJ8uqjslU25DvXCVuS4QNW64NTIw5PtW7D7fsvQ74LoWgjgtwZD6fb3gEN16JFi ZMNAZ5AouKz+iV9jwd1TYVRKyEISSOPqkxNluRU9ixo50paII3Rb3qn9mb0aSzU/ FC8yaQV85gVxdR+cSIFsRM35bXgcJQwDYfxkCEEcvZ1apKtPMsdtCmbRbxA1iM8Q 7eB5PVjNbCILQ+yJdBkhJv9OVyklduTVWOFSOtyVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcQdg3NeqbIukXtiJhvx6hs+31+AwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRhN2ZhNTMyLWE2ZjItNGMwYi05YmU2LTU4NTQ1ODhhN2QyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAKIAwDQYJKoZIhvcNAQELBQADggEBAJzD4UK2hJS+Qx3j5TtIqGHq L2MfV/QFQY9sjOwZpWvwSpijZlyP3pny5Mlnw0efn4ldDxSfyHRyiL2xFk//hRu+ cMccS9JKWjycnD09s/vfBsz6MekcOHBWMlCVuHymZ5SL1FjvxAblgLsf8+uPDTcT kWnLNTCCAaZUldYi5kjIUYBmqFiMzKm1xH8qESIOHecrjuEfsD7hhzvdc6aR0Ji+ 2kUfI2GNwtH+rWm7trao+hTlYtAsNDw2r1eMUv0z29c+dZs2fFDGgH0ndfcsGY2p LzS3dcBmf/zGY3uvmz8meNmkUqLwRNR5pieO9/V2MHtNNCu04rhPW8msjruFn88= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:48 2025 by rpki-client