$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/63fed670-35dd-4408-9ed6-10a96867d43f.roa File: 63fed670-35dd-4408-9ed6-10a96867d43f.roa (raw, json) Hash identifier: 6xE0VpP2dY8BSjQv+g1Uas8T9nRBZF9p4fuJpRGmxtQ= Subject key identifier: 63:62:C4:D2:F2:D1:B6:0C:8F:A1:2A:58:84:AA:1E:DA:EB:00:8E:65 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6FE039CF8EC1214504E9B2CD71DE0C499F7A9D9F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/63fed670-35dd-4408-9ed6-10a96867d43f.roa Signing time: Fri 31 Oct 2025 00:36:44 +0000 ROA not before: Fri 31 Oct 2025 00:36:44 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:35fa::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e0:39:cf:8e:c1:21:45:04:e9:b2:cd:71:de:0c:49:9f:7a:9d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:36:44 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=37bdfa108aa9077670619e5301ad86dc9819257808ddad8944272b31fb26e6e6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:77:bf:0b:18:17:e9:41:02:70:ac:83:95: 96:5e:8b:ec:29:d1:7f:9d:c9:aa:67:6a:5b:a4:07: f7:1a:4f:af:4a:d9:0c:58:dd:f6:be:13:ad:f6:d5: 96:c1:42:b0:de:6c:3f:28:54:f2:71:24:a9:fb:7a: 77:28:ae:9b:0c:fb:7e:85:6a:6b:e8:bd:48:f3:72: d6:3f:3f:cb:8a:37:bb:31:bb:91:cf:de:92:1a:1c: 31:2b:60:47:42:50:07:5e:c0:64:08:b9:d5:21:8f: 00:a7:e8:0c:c4:d8:32:3c:fa:65:bc:45:57:ff:28: b8:8a:90:9e:7d:73:94:76:92:24:ff:4e:db:37:33: 54:80:8e:64:ba:b5:88:2b:a6:35:71:d9:e9:45:d2: 14:a5:63:b5:8e:74:47:88:86:50:40:d0:78:23:0d: 89:d9:a6:a4:8a:a8:c3:22:f7:f2:2e:5a:a9:0e:00: c5:86:87:fc:f4:57:f0:7a:27:40:bf:f7:4b:0b:c0: b2:d9:e8:97:1d:dc:52:aa:a6:f6:c8:0e:be:22:b4: 82:31:fe:2d:81:c7:49:2a:2f:c4:38:87:84:79:9b: 72:4f:a9:53:03:33:3f:b1:c7:11:71:2f:62:a2:01: 6d:12:21:5b:69:81:99:c1:7e:70:cb:5d:7c:b3:05: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:62:C4:D2:F2:D1:B6:0C:8F:A1:2A:58:84:AA:1E:DA:EB:00:8E:65 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/63fed670-35dd-4408-9ed6-10a96867d43f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:35fa::/47 Signature Algorithm: sha256WithRSAEncryption b6:5b:50:28:74:92:f2:fd:95:e2:15:28:a2:ff:4c:74:e2:e0: 3f:63:42:bf:75:77:f4:59:7a:4f:b7:60:e8:12:09:35:ff:c3: e8:d4:3d:46:3c:f6:16:c4:00:78:b9:8d:88:a1:e5:15:5a:f3: 79:65:d9:b4:c0:1a:26:80:3f:c7:74:ff:80:d3:37:82:81:f4: ca:9e:a0:31:65:0c:83:01:95:cf:3c:7d:a7:ac:54:f2:bb:46: 54:aa:83:c6:05:a9:39:4f:e8:d0:8c:27:3b:5e:af:4f:65:7a: bd:4b:ec:48:1c:14:d7:aa:3f:34:82:79:54:34:0b:12:79:a9: 61:87:d2:a7:10:56:03:fc:35:8d:f2:2a:9f:35:7c:74:d6:1f: f3:45:93:5d:00:e1:55:de:dd:91:d0:d2:e7:56:ca:e3:92:f9: f3:b2:db:84:d7:f0:7d:67:e9:95:3e:13:17:72:83:e0:53:43: b1:c5:48:ca:1d:dd:f8:ec:73:c1:16:90:a7:2d:6e:83:5e:f4: c0:7e:e9:8d:e1:77:dd:46:29:c6:5d:9a:46:41:55:b1:9a:34: a0:26:16:2f:83:e4:cb:77:14:41:b7:40:a0:f3:95:42:81:4e: 42:7f:d4:74:b9:bc:cc:9b:25:d6:2a:b1:ca:88:27:ac:bd:18: e4:3f:b6:08 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUb+A5z47BIUUE6bLNcd4MSZ96nZ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAzNjQ0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2JkZmExMDhhYTkwNzc2NzA2MTllNTMwMWFkODZkYzk4 MTkyNTc4MDhkZGFkODk0NDI3MmIzMWZiMjZlNmU2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4MHe/CxgX6UECcKyDlZZei+wp0X+dyapnalukB/caT69K 2QxY3fa+E6321ZbBQrDebD8oVPJxJKn7encorpsM+36FamvovUjzctY/P8uKN7sx u5HP3pIaHDErYEdCUAdewGQIudUhjwCn6AzE2DI8+mW8RVf/KLiKkJ59c5R2kiT/ Tts3M1SAjmS6tYgrpjVx2elF0hSlY7WOdEeIhlBA0HgjDYnZpqSKqMMi9/IuWqkO AMWGh/z0V/B6J0C/90sLwLLZ6Jcd3FKqpvbIDr4itIIx/i2Bx0kqL8Q4h4R5m3JP qVMDMz+xxxFxL2KiAW0SIVtpgZnBfnDLXXyzBVidAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUY2LE0vLRtgyPoSpYhKoe2usAjmUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzYzZmVkNjcwLTM1ZGQtNDQwOC05ZWQ2LTEwYTk2ODY3ZDQzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANfowDQYJKoZIhvcNAQELBQADggEBALZbUCh0kvL9leIVKKL/THTi 4D9jQr91d/RZek+3YOgSCTX/w+jUPUY89hbEAHi5jYih5RVa83ll2bTAGiaAP8d0 /4DTN4KB9MqeoDFlDIMBlc88faesVPK7RlSqg8YFqTlP6NCMJzter09ler1L7Egc FNeqPzSCeVQ0CxJ5qWGH0qcQVgP8NY3yKp81fHTWH/NFk10A4VXe3ZHQ0udWyuOS +fOy24TX8H1n6ZU+Exdyg+BTQ7HFSMod3fjsc8EWkKctboNe9MB+6Y3hd91GKcZd mkZBVbGaNKAmFi+D5Mt3FEG3QKDzlUKBTkJ/1HS5vMybJdYqscqIJ6y9GOQ/tgg= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:57 2025 by rpki-client