$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e76667a-a923-445b-bc0b-b0c76826fca9.roa File: 4e76667a-a923-445b-bc0b-b0c76826fca9.roa (raw, json) Hash identifier: 4sv+JBSRuTZrzkQ15frQGc711WDahZs70fXPsiG6HB0= Subject key identifier: A7:62:3F:B5:2A:1F:6A:C2:C3:4C:29:14:29:1C:6F:46:F1:40:8C:9B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 49A194502CEE47F90A29FC699F9659719E17AFF9 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e76667a-a923-445b-bc0b-b0c76826fca9.roa Signing time: Fri 31 Oct 2025 07:52:10 +0000 ROA not before: Fri 31 Oct 2025 07:52:10 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a1:94:50:2c:ee:47:f9:0a:29:fc:69:9f:96:59:71:9e:17:af:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:52:10 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=d975b037a6073c4f6571781b96b74c5f511c295d07ee8270e78438a9dacd672a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cd:b1:6e:38:fc:8e:cb:ba:50:42:e8:97:df: 87:ba:9b:06:50:4e:5a:cc:1a:85:e8:08:20:01:aa: 34:f1:81:fe:79:16:ce:32:17:f6:dd:6d:a2:00:65: 2e:2b:75:e1:a9:e4:7d:a1:a2:d3:56:72:4a:fa:19: db:02:91:b0:e0:38:07:49:7d:16:87:b0:44:c4:c5: 23:f0:30:d1:48:2c:45:27:47:6d:10:40:f3:40:7c: de:d3:d6:ba:9c:6d:5e:63:7b:c4:2f:57:84:71:50: 46:92:09:c2:9f:82:ca:36:59:a4:a8:2c:b1:9b:92: b7:3c:a1:15:41:48:a0:7f:37:8f:a0:75:60:c0:1f: 83:5d:92:bb:26:79:94:f1:2b:4f:e9:d1:a3:77:1a: 36:ef:da:fb:14:cd:ac:00:29:1a:e7:b1:07:2d:6a: 4b:da:a7:c2:de:68:c8:6a:81:61:d9:15:51:81:b7: 63:10:b8:a9:2c:02:6d:38:bc:b5:14:ef:13:9e:07: f9:23:a9:a6:1e:ad:f0:79:d0:28:50:89:ec:ec:07: e6:2f:9a:4b:d6:c7:bb:d2:75:9f:eb:9d:18:88:0d: 35:36:18:41:e9:b0:04:5d:7d:c9:87:61:8a:1b:6a: d2:63:41:2c:03:e6:8a:4d:ec:b7:4f:6e:16:93:73: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:62:3F:B5:2A:1F:6A:C2:C3:4C:29:14:29:1C:6F:46:F1:40:8C:9B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e76667a-a923-445b-bc0b-b0c76826fca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1200::/40 Signature Algorithm: sha256WithRSAEncryption 99:c8:ee:3d:4a:0f:12:05:93:9c:e2:e1:78:41:86:29:ea:57: 8c:9b:96:b6:a4:96:f7:20:25:52:24:ad:db:e0:c5:f6:de:cd: 97:d6:9b:18:9b:4b:41:ca:99:a7:d7:45:18:d0:78:1d:d9:4b: 89:71:c9:85:84:33:48:12:9a:d2:b9:19:15:41:c0:b5:0c:b2: 18:2d:03:3a:f2:ca:72:28:f5:7c:d8:1e:62:d1:49:e3:0d:35: ba:85:ce:9d:83:45:b4:3c:1d:14:7c:ae:72:59:4f:20:af:29: 6d:10:94:b9:94:8a:21:f3:a6:e6:93:c5:74:a8:28:c2:c8:85: 7a:70:72:67:9c:62:1e:74:db:94:62:97:c6:69:1f:d1:3a:e6: d8:1b:88:89:e5:f6:3f:b9:52:9c:2a:37:94:d6:8a:75:0f:e9: 5c:dc:da:91:ac:f4:3f:5c:54:e7:81:6f:08:76:68:82:ba:82: 73:bc:7f:00:b3:23:01:8d:1c:e5:62:41:05:a5:dd:09:7b:09: db:c1:21:51:77:63:29:cc:09:b5:60:ec:ad:6d:71:eb:6e:e6: 09:dd:a0:dc:24:be:d1:95:53:f1:07:bf:d3:f3:2d:48:7b:9a: 38:a5:60:98:6d:84:d0:ab:08:97:d4:7b:e3:7d:11:a5:4a:a9: e4:c3:61:67 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSaGUUCzuR/kKKfxpn5ZZcZ4Xr/kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc1MjEwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTc1YjAzN2E2MDczYzRmNjU3MTc4MWI5NmI3NGM1ZjUx MWMyOTVkMDdlZTgyNzBlNzg0MzhhOWRhY2Q2NzJhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMzbFuOPyOy7pQQuiX34e6mwZQTlrMGoXoCCABqjTxgf55 Fs4yF/bdbaIAZS4rdeGp5H2hotNWckr6GdsCkbDgOAdJfRaHsETExSPwMNFILEUn R20QQPNAfN7T1rqcbV5je8QvV4RxUEaSCcKfgso2WaSoLLGbkrc8oRVBSKB/N4+g dWDAH4NdkrsmeZTxK0/p0aN3Gjbv2vsUzawAKRrnsQctakvap8LeaMhqgWHZFVGB t2MQuKksAm04vLUU7xOeB/kjqaYerfB50ChQiezsB+YvmkvWx7vSdZ/rnRiIDTU2 GEHpsARdfcmHYYobatJjQSwD5opN7LdPbhaTc5pDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUp2I/tSofasLDTCkUKRxvRvFAjJswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRlNzY2NjdhLWE5MjMtNDQ1Yi1iYzBiLWIwYzc2ODI2ZmNhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAJAAEjANBgkqhkiG9w0BAQsFAAOCAQEAmcjuPUoPEgWTnOLheEGGKepX jJuWtqSW9yAlUiSt2+DF9t7Nl9abGJtLQcqZp9dFGNB4HdlLiXHJhYQzSBKa0rkZ FUHAtQyyGC0DOvLKcij1fNgeYtFJ4w01uoXOnYNFtDwdFHyucllPIK8pbRCUuZSK IfOm5pPFdKgowsiFenByZ5xiHnTblGKXxmkf0Trm2BuIieX2P7lSnCo3lNaKdQ/p XNzakaz0P1xU54FvCHZogrqCc7x/ALMjAY0c5WJBBaXdCXsJ28EhUXdjKcwJtWDs rW1x627mCd2g3CS+0ZVT8Qe/0/MtSHuaOKVgmG2E0KsIl9R7430RpUqp5MNhZw== -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:04 2025 by rpki-client