$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c5f2a8f-e517-4420-8165-07258b37a752.roa File: 4c5f2a8f-e517-4420-8165-07258b37a752.roa (raw, json) Hash identifier: 05VibYE4g+SJchK6OfGQLvwVw80Hop6nbR0zWZPau/Y= Subject key identifier: 0E:84:C2:82:1F:29:5E:86:F3:DB:36:71:7A:8A:53:46:4B:A2:25:D1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7D7ADE10B8A51B12FC4778EA60F6DE918988BB8D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c5f2a8f-e517-4420-8165-07258b37a752.roa Signing time: Fri 31 Oct 2025 05:40:42 +0000 ROA not before: Fri 31 Oct 2025 05:40:42 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2af0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7a:de:10:b8:a5:1b:12:fc:47:78:ea:60:f6:de:91:89:88:bb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:40:42 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=3927c8d71503a7770a177136ba9cc7f80a43810d41d8fb1dc73aae80b48e9fd4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:98:33:2f:ef:24:da:0b:f2:40:bc:0f:eb: db:fa:eb:c5:c3:8e:91:a5:ed:cc:c8:b5:7b:e5:86: 46:d0:23:8a:0d:f2:72:bd:9f:1d:61:18:4b:a4:69: 5d:de:a9:36:2a:3a:1a:09:26:ab:6d:0c:59:7b:4a: 4d:56:2e:47:c4:0f:98:e5:40:ef:11:65:1a:39:43: 3e:17:69:52:c6:13:50:c7:5f:d7:12:a2:ed:6d:b0: 29:2e:95:33:a4:55:8c:61:61:a1:9e:ff:7f:f0:e4: 34:96:4a:dc:da:df:de:fc:52:ac:8c:f0:f0:69:c2: 8a:7d:eb:ce:dd:2b:cf:0d:19:32:88:d0:3d:76:3b: ee:d9:a5:db:58:a3:a9:74:ce:f0:77:99:e1:81:eb: f1:94:29:58:43:a5:6f:cf:93:a1:e2:69:2a:15:f9: 97:7e:e9:c4:01:fc:1a:5d:eb:19:6b:06:4b:b2:51: eb:43:eb:ba:0c:93:66:62:e9:e7:85:3f:42:02:2b: 29:f9:c6:3f:67:00:e3:70:f4:24:69:8c:a1:62:a7: eb:7f:0b:23:3e:80:55:68:e8:0e:84:c3:26:1d:dd: fc:94:e2:97:30:4f:3a:e4:5b:eb:67:c5:84:24:86: 07:9c:d1:d1:24:7f:e6:9e:67:36:89:21:aa:93:95: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:84:C2:82:1F:29:5E:86:F3:DB:36:71:7A:8A:53:46:4B:A2:25:D1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c5f2a8f-e517-4420-8165-07258b37a752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2af0::/45 Signature Algorithm: sha256WithRSAEncryption a5:dd:36:6b:9a:44:d2:aa:3c:1c:08:b9:8f:77:93:50:20:ce: 8f:88:2a:95:a3:5d:b3:01:0c:8c:0c:14:ff:fe:41:7d:9e:3a: de:9b:c4:9e:79:12:91:da:34:bf:9e:e7:1c:aa:ca:45:ba:63: 27:07:2a:87:91:68:65:4d:17:45:d0:22:8f:2e:02:13:1b:83: 1c:92:79:0c:c0:f3:32:e1:37:22:49:20:4d:90:c8:ed:ce:3e: 8d:d0:9d:44:d4:c7:e7:5f:d9:ba:56:46:39:47:a2:88:b7:e2: fd:61:eb:91:a7:e4:17:ee:37:74:bd:f8:cd:59:f6:d0:e6:4d: 86:1a:dd:86:de:9d:2b:6b:60:8e:1a:f0:12:65:5e:a8:e2:79: e7:78:dc:46:89:ae:13:3c:af:d1:33:5a:24:6f:00:37:b0:56: 50:f7:50:73:52:35:63:4b:c7:19:ec:9b:a4:0a:02:bb:11:d7: 99:6f:6d:aa:28:af:be:0a:33:0f:85:b4:2f:d2:03:57:cd:92: 2b:90:5e:00:4e:ef:06:ef:b2:c5:f5:0f:30:c4:c2:82:65:23: 83:f2:de:e3:d2:e0:a0:cf:96:dc:8f:c5:4c:90:01:19:8c:d7: eb:88:77:d9:bb:01:42:21:3c:a5:ed:79:0b:71:0f:7a:c1:64: bf:81:2d:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfXreELilGxL8R3jqYPbekYmIu40wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU0MDQyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTI3YzhkNzE1MDNhNzc3MGExNzcxMzZiYTljYzdmODBh NDM4MTBkNDFkOGZiMWRjNzNhYWU4MGI0OGU5ZmQ0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTy5gzL+8k2gvyQLwP69v668XDjpGl7czItXvlhkbQI4oN 8nK9nx1hGEukaV3eqTYqOhoJJqttDFl7Sk1WLkfED5jlQO8RZRo5Qz4XaVLGE1DH X9cSou1tsCkulTOkVYxhYaGe/3/w5DSWStza3978UqyM8PBpwop9687dK88NGTKI 0D12O+7ZpdtYo6l0zvB3meGB6/GUKVhDpW/Pk6HiaSoV+Zd+6cQB/Bpd6xlrBkuy UetD67oMk2Zi6eeFP0ICKyn5xj9nAONw9CRpjKFip+t/CyM+gFVo6A6EwyYd3fyU 4pcwTzrkW+tnxYQkhgec0dEkf+aeZzaJIaqTlXULAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDoTCgh8pXobz2zZxeopTRkuiJdEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRjNWYyYThmLWU1MTctNDQyMC04MTY1LTA3MjU4YjM3YTc1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAKvAwDQYJKoZIhvcNAQELBQADggEBAKXdNmuaRNKqPBwIuY93k1Ag zo+IKpWjXbMBDIwMFP/+QX2eOt6bxJ55EpHaNL+e5xyqykW6YycHKoeRaGVNF0XQ Io8uAhMbgxySeQzA8zLhNyJJIE2QyO3OPo3QnUTUx+df2bpWRjlHooi34v1h65Gn 5BfuN3S9+M1Z9tDmTYYa3YbenStrYI4a8BJlXqjieed43EaJrhM8r9EzWiRvADew VlD3UHNSNWNLxxnsm6QKArsR15lvbaoor74KMw+FtC/SA1fNkiuQXgBO7wbvssX1 DzDEwoJlI4Py3uPS4KDPltyPxUyQARmM1+uId9m7AUIhPKXteQtxD3rBZL+BLds= -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:20 2025 by rpki-client