$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ee93371-5e1f-42df-b977-192e21dd67ec.roa File: 4ee93371-5e1f-42df-b977-192e21dd67ec.roa (raw, json) Hash identifier: URlaVZXFq2ZyA9JRLflLCzfGexAQH9Q/GSqAc/VmypM= Subject key identifier: E6:EE:0D:1A:E4:8A:C4:31:15:57:00:A3:FB:26:CE:20:54:E5:F5:7F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2A9004FA69BF04C12A7E444232AF4D53F24DE776 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ee93371-5e1f-42df-b977-192e21dd67ec.roa Signing time: Fri 31 Oct 2025 07:10:02 +0000 ROA not before: Fri 31 Oct 2025 07:10:02 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:12a0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:90:04:fa:69:bf:04:c1:2a:7e:44:42:32:af:4d:53:f2:4d:e7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:10:02 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=556947245efdb229173d34fa51ba64d64b61a4cb60121af6c2d7dc9758561486, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:54:ea:d5:9c:b0:d0:28:b1:d6:4a:8b:ab:9b: fe:0c:2d:19:bd:35:5a:2f:99:f4:d5:e8:d5:5b:67: c4:56:b1:9f:fa:cb:91:d7:4a:a8:36:3c:4e:e6:5f: 8b:86:df:c6:62:2e:c3:c6:9f:ea:34:70:53:7b:43: e6:f1:e5:e7:06:04:b5:6b:7d:79:cd:f7:fe:ad:34: ef:75:c9:a0:4f:c9:8c:e2:5a:61:92:1e:ab:27:da: 1f:4b:e8:72:e7:82:9d:5f:c8:74:c3:58:b9:20:07: 0d:c8:5f:1a:1f:e8:18:15:6c:61:71:de:e9:9d:5f: f2:c0:e7:d1:b9:d4:64:77:50:64:cf:fe:d0:86:07: e6:6a:b9:65:f8:e3:df:2a:e2:84:92:f2:4f:4b:13: c1:d5:25:96:59:7b:e6:52:a8:27:1b:08:54:32:2c: e5:23:c7:a1:1b:5a:e6:48:53:6a:cf:4b:25:30:01: bf:d9:17:85:d4:a4:61:3f:0f:7d:c1:53:ea:fa:15: e2:b1:d0:5b:a5:14:86:bc:a8:92:f0:be:b6:07:d0: cc:96:67:ee:f0:1b:c5:fc:e8:06:2f:66:94:1e:db: 3c:b3:40:61:03:5b:96:18:95:81:2c:56:a9:78:3b: e5:0b:6e:cb:0b:64:86:49:6e:c2:34:50:cf:48:1d: 1e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EE:0D:1A:E4:8A:C4:31:15:57:00:A3:FB:26:CE:20:54:E5:F5:7F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ee93371-5e1f-42df-b977-192e21dd67ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:12a0::/43 Signature Algorithm: sha256WithRSAEncryption 0f:aa:9a:ce:20:4c:43:59:41:35:0a:cd:04:85:87:7b:1e:39: 79:49:2d:ff:47:f1:b5:e4:7c:b8:70:18:4a:8d:19:8a:8c:53: 61:30:8b:80:bc:c3:64:37:c8:51:4d:7a:ae:eb:c7:9b:0a:da: ae:a5:f9:70:9e:6f:df:83:3f:a1:f7:7c:f5:54:0e:63:c2:ec: 32:1f:04:c4:9f:46:b5:e1:b5:f6:b8:73:ed:cf:53:87:62:f2: c6:ed:af:5b:9f:e8:0e:ec:a4:80:0a:68:ab:38:a9:f0:52:cd: cb:34:1a:8e:fc:04:cf:51:ce:c9:09:09:ad:ff:4b:e4:94:30: 4c:2a:13:f6:57:6c:72:5b:7e:a9:4f:61:f4:70:98:74:85:7e: 48:ff:6e:b2:b9:86:38:72:bf:6f:cb:e2:08:a2:7f:82:ec:3c: fb:d5:26:17:b9:80:8c:74:69:63:0e:25:41:d9:e5:4f:2d:db: 76:be:44:f0:02:ba:ab:b8:b4:98:ea:78:b2:66:a6:49:95:66: ce:cf:65:84:d3:9c:f1:79:5f:53:52:e9:04:c1:42:38:01:ec: 3a:ec:77:7f:19:73:70:0a:85:e7:44:25:93:c4:a2:75:22:d2: 0b:e6:6f:60:9a:c4:62:83:1e:32:0b:2f:af:54:86:be:f9:12: 5e:45:b1:d8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKpAE+mm/BMEqfkRCMq9NU/JN53YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcxMDAyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTY5NDcyNDVlZmRiMjI5MTczZDM0ZmE1MWJhNjRkNjRi NjFhNGNiNjAxMjFhZjZjMmQ3ZGM5NzU4NTYxNDg2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQVOrVnLDQKLHWSourm/4MLRm9NVovmfTV6NVbZ8RWsZ/6 y5HXSqg2PE7mX4uG38ZiLsPGn+o0cFN7Q+bx5ecGBLVrfXnN9/6tNO91yaBPyYzi WmGSHqsn2h9L6HLngp1fyHTDWLkgBw3IXxof6BgVbGFx3umdX/LA59G51GR3UGTP /tCGB+ZquWX4498q4oSS8k9LE8HVJZZZe+ZSqCcbCFQyLOUjx6EbWuZIU2rPSyUw Ab/ZF4XUpGE/D33BU+r6FeKx0FulFIa8qJLwvrYH0MyWZ+7wG8X86AYvZpQe2zyz QGEDW5YYlYEsVql4O+ULbssLZIZJbsI0UM9IHR63AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5u4NGuSKxDEVVwCj+ybOIFTl9X8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRlZTkzMzcxLTVlMWYtNDJkZi1iOTc3LTE5MmUyMWRkNjdlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAEqAwDQYJKoZIhvcNAQELBQADggEBAA+qms4gTENZQTUKzQSFh3se OXlJLf9H8bXkfLhwGEqNGYqMU2Ewi4C8w2Q3yFFNeq7rx5sK2q6l+XCeb9+DP6H3 fPVUDmPC7DIfBMSfRrXhtfa4c+3PU4di8sbtr1uf6A7spIAKaKs4qfBSzcs0Go78 BM9RzskJCa3/S+SUMEwqE/ZXbHJbfqlPYfRwmHSFfkj/brK5hjhyv2/L4giif4Ls PPvVJhe5gIx0aWMOJUHZ5U8t23a+RPACuqu4tJjqeLJmpkmVZs7PZYTTnPF5X1NS 6QTBQjgB7Drsd38Zc3AKhedEJZPEonUi0gvmb2CaxGKDHjILL69Uhr75El5Fsdg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:28 2025 by rpki-client