$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4dd0c3f4-956c-4157-b193-42aba6a768e4.roa File: 4dd0c3f4-956c-4157-b193-42aba6a768e4.roa (raw, json) Hash identifier: wrybY5j8KMMKba5gIziVF9Xq2brstsdrHbYdU3eruZQ= Subject key identifier: A3:58:1B:92:39:AD:B3:DD:E5:C8:48:6E:A3:4C:6C:5C:51:7F:47:67 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 77E632427E47BE668190293EE9884F21C2DE5F00 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4dd0c3f4-956c-4157-b193-42aba6a768e4.roa Signing time: Thu 30 Oct 2025 20:27:21 +0000 ROA not before: Thu 30 Oct 2025 20:27:21 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:268c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e6:32:42:7e:47:be:66:81:90:29:3e:e9:88:4f:21:c2:de:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:27:21 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=4aaaabf6b0b14594efc5434c74e62e189a815c0134c2638bf54d8aae8fb7ed47, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:c5:40:30:3e:19:27:db:d8:c3:fa:77:05: 08:3b:02:77:68:0e:43:09:f4:47:58:23:4a:14:a7: ab:2a:6c:9a:f8:31:64:50:98:15:4b:aa:24:28:b8: bc:85:6c:a1:c9:16:9f:84:b4:19:67:22:d4:47:b4: e4:9a:30:4e:f9:db:b7:6e:93:0a:71:45:48:e8:e6: 06:d9:f6:d9:8d:83:d4:c7:27:36:d9:03:14:24:a7: 8f:ab:15:a2:3e:65:b7:2a:18:76:c5:cf:cc:1f:c7: 69:00:3c:e0:dd:36:82:de:76:87:e5:e8:c1:1d:ea: a6:c1:ba:ad:04:ca:07:43:a6:96:e2:95:ac:b4:c0: ce:dd:3a:23:64:ef:17:91:17:05:8d:9b:48:53:a8: a2:c3:83:ad:85:9b:8c:d9:69:3c:78:17:ad:f0:4b: dc:f1:ae:a7:0a:36:92:d6:56:c5:8f:97:7a:89:e3: 78:78:3f:1b:b4:e0:a7:1c:0c:35:ab:f7:66:9d:28: 42:9c:44:95:7f:63:bd:54:18:d5:3d:ae:d7:02:5f: 51:af:1d:63:50:75:3e:f0:e5:30:06:0b:e9:c8:17: ac:d1:e7:8f:b8:68:6e:40:30:9c:73:b1:a7:55:26: e6:bc:8c:30:23:b8:c1:c9:eb:ee:d5:63:7b:58:d4: f5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:58:1B:92:39:AD:B3:DD:E5:C8:48:6E:A3:4C:6C:5C:51:7F:47:67 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4dd0c3f4-956c-4157-b193-42aba6a768e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:268c::/48 Signature Algorithm: sha256WithRSAEncryption 2c:5d:e7:91:aa:00:86:24:86:67:1b:3c:1c:c8:5c:50:c0:3d: c9:f9:b8:43:77:11:3d:aa:0c:de:4d:97:c6:38:07:dc:a5:e1: 4f:ec:f6:9a:d9:be:11:75:3d:da:48:38:62:af:f9:7a:a0:9c: d4:9c:0b:16:aa:3f:cc:f6:f4:d4:38:ee:fe:82:a3:34:8b:14: b7:83:5b:1d:c4:1c:73:7a:c6:04:76:39:fa:e9:85:0c:c5:37: d2:1a:d8:d8:91:66:59:f6:61:83:65:c0:07:17:94:84:8c:49: bb:98:8b:33:9c:5d:02:7b:17:b1:d9:bc:dc:ba:0f:61:2f:df: 5e:b8:76:5b:b9:b2:21:4a:75:dc:e2:23:24:47:36:d2:9a:c0: af:5b:fd:2c:06:e3:de:dc:98:6b:18:5e:11:5e:68:f5:1f:66: 55:52:88:37:04:71:fd:bc:46:c0:0c:a6:40:6e:32:04:c8:72: dc:ea:6b:3c:c0:21:74:b1:10:7f:a7:37:e7:f8:fb:f2:b8:8f: ff:b4:7b:44:50:48:8f:76:d1:a9:e9:28:22:a7:fc:cf:78:a7: ca:48:15:74:d9:d6:47:31:75:50:73:4a:f4:75:50:c5:a7:cf: 8f:84:3c:0b:5a:11:ab:18:c4:f2:80:e4:d9:d4:cc:a0:12:7b: 66:b9:61:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd+YyQn5HvmaBkCk+6YhPIcLeXwAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAyNzIxWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWFhYWJmNmIwYjE0NTk0ZWZjNTQzNGM3NGU2MmUxODlh ODE1YzAxMzRjMjYzOGJmNTRkOGFhZThmYjdlZDQ3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBn8VAMD4ZJ9vYw/p3BQg7AndoDkMJ9EdYI0oUp6sqbJr4 MWRQmBVLqiQouLyFbKHJFp+EtBlnItRHtOSaME7527dukwpxRUjo5gbZ9tmNg9TH JzbZAxQkp4+rFaI+ZbcqGHbFz8wfx2kAPODdNoLedofl6MEd6qbBuq0EygdDppbi lay0wM7dOiNk7xeRFwWNm0hTqKLDg62Fm4zZaTx4F63wS9zxrqcKNpLWVsWPl3qJ 43h4Pxu04KccDDWr92adKEKcRJV/Y71UGNU9rtcCX1GvHWNQdT7w5TAGC+nIF6zR 54+4aG5AMJxzsadVJua8jDAjuMHJ6+7VY3tY1PWfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUo1gbkjmts93lyEhuo0xsXFF/R2cwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRkZDBjM2Y0LTk1NmMtNDE1Ny1iMTkzLTQyYWJhNmE3NjhlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAJowwDQYJKoZIhvcNAQELBQADggEBACxd55GqAIYkhmcbPBzIXFDA Pcn5uEN3ET2qDN5Nl8Y4B9yl4U/s9prZvhF1PdpIOGKv+XqgnNScCxaqP8z29NQ4 7v6CozSLFLeDWx3EHHN6xgR2OfrphQzFN9Ia2NiRZln2YYNlwAcXlISMSbuYizOc XQJ7F7HZvNy6D2Ev3164dlu5siFKddziIyRHNtKawK9b/SwG497cmGsYXhFeaPUf ZlVSiDcEcf28RsAMpkBuMgTIctzqazzAIXSxEH+nN+f4+/K4j/+0e0RQSI920anp KCKn/M94p8pIFXTZ1kcxdVBzSvR1UMWnz4+EPAtaEasYxPKA5NnUzKASe2a5YUw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:46 2025 by rpki-client