$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b6f34e8-2957-4333-a991-39fbbe3ec673.roa File: 6b6f34e8-2957-4333-a991-39fbbe3ec673.roa (raw, json) Hash identifier: vBw1ZLgIFexAmxShAJa+2g8V78YT/htpPQvIVwMrog8= Subject key identifier: 4D:32:A7:62:FD:0D:1D:33:AA:17:26:0A:DF:87:B8:68:37:B3:FF:EB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 20EE3F70879A596325BE2EDD3714D90DD35D401A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b6f34e8-2957-4333-a991-39fbbe3ec673.roa Signing time: Fri 31 Oct 2025 06:56:47 +0000 ROA not before: Fri 31 Oct 2025 06:56:47 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3780::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ee:3f:70:87:9a:59:63:25:be:2e:dd:37:14:d9:0d:d3:5d:40:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:56:47 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=ab24050b6e0e4861cc27f7957c1699d8490c904cd0e32411abb84d7fc72cb75a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:d5:f6:a9:6d:ab:8c:59:38:29:70:43:e6: 44:23:8c:a3:e9:d0:dd:68:6f:f3:7a:3c:ea:eb:83: 20:47:5d:bf:b9:d4:73:73:3a:88:d7:c4:d2:2e:c0: 0f:d6:5a:4a:ed:f0:54:f2:02:27:25:36:f1:c4:69: db:2e:03:9b:59:89:0a:ca:c8:1d:12:cc:9c:11:18: f3:2f:0d:0b:b8:a6:b8:eb:13:ec:41:ae:bb:65:65: 34:67:ac:29:a0:fa:3f:fe:79:b8:15:5f:23:ff:22: b8:5e:4e:90:14:72:cf:2f:93:79:b8:8f:d7:1f:f2: 63:33:c9:e2:4f:6d:ba:60:ac:c5:b1:05:03:aa:59: 09:23:24:56:40:7e:a5:2d:47:6b:79:75:dc:ba:63: e0:02:e3:ab:c8:dc:ac:89:16:12:c3:f2:40:6f:4b: 63:e6:1a:7f:22:69:81:68:29:ed:bd:e6:3e:f0:7c: 9a:c6:74:33:29:cd:8a:a5:19:f9:a9:28:b6:ac:e8: f4:5c:7c:8c:02:5d:58:5d:03:2d:1d:57:ed:8d:75: 01:40:09:b6:31:5a:e1:06:b5:8c:9f:89:8b:85:e0: bc:24:c8:81:c4:e0:2f:d5:f7:aa:c5:e4:2b:9c:08: 48:2b:ab:ae:95:bf:dd:b3:54:1c:f4:ee:2d:3a:df: 34:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:32:A7:62:FD:0D:1D:33:AA:17:26:0A:DF:87:B8:68:37:B3:FF:EB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b6f34e8-2957-4333-a991-39fbbe3ec673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3780::/44 Signature Algorithm: sha256WithRSAEncryption 23:b3:2f:13:b9:82:8f:59:9c:f9:a8:de:f6:14:16:5b:b6:d8: 0f:a1:85:fb:f7:d3:56:93:98:8e:60:9c:23:e8:be:a3:2f:ba: 73:f9:d7:97:b3:15:2b:75:e1:ef:71:30:89:bb:19:f4:c8:63: db:9f:a6:6e:20:6d:68:af:6b:2d:67:71:ca:49:12:07:47:71: 9d:19:fc:64:f5:3d:b0:51:58:88:a7:94:db:cc:5a:88:09:1a: 2a:ad:c3:51:13:75:ef:15:59:84:24:96:87:ae:b7:ee:38:40: 52:c3:0d:06:97:81:77:fb:5a:29:ac:eb:e2:19:b4:dd:a9:54: 0e:cc:4b:33:67:d8:10:9b:c4:b2:a5:01:fd:29:06:b4:fd:05: 97:b9:e1:70:53:42:17:33:c5:27:97:a0:d5:c8:67:58:23:32: ec:0a:37:54:49:d9:b7:cb:ca:08:0a:c4:22:15:1e:c3:c6:74: 2a:b3:2a:f3:54:23:9f:d2:74:b4:a0:8b:b2:51:a5:14:fa:a4: b0:2c:e9:55:ce:60:6e:be:e4:8a:3e:dc:27:b0:c6:d6:fa:6f: 54:68:e0:8e:99:c1:12:51:92:4a:7a:b7:34:49:5f:d7:08:dc: f9:81:18:a2:47:6d:4f:ef:ce:69:36:eb:5a:e4:85:11:83:30: c7:4d:bd:7a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIO4/cIeaWWMlvi7dNxTZDdNdQBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY1NjQ3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjI0MDUwYjZlMGU0ODYxY2MyN2Y3OTU3YzE2OTlkODQ5 MGM5MDRjZDBlMzI0MTFhYmI4NGQ3ZmM3MmNiNzVhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6etX2qW2rjFk4KXBD5kQjjKPp0N1ob/N6POrrgyBHXb+5 1HNzOojXxNIuwA/WWkrt8FTyAiclNvHEadsuA5tZiQrKyB0SzJwRGPMvDQu4prjr E+xBrrtlZTRnrCmg+j/+ebgVXyP/IrheTpAUcs8vk3m4j9cf8mMzyeJPbbpgrMWx BQOqWQkjJFZAfqUtR2t5ddy6Y+AC46vI3KyJFhLD8kBvS2PmGn8iaYFoKe295j7w fJrGdDMpzYqlGfmpKLas6PRcfIwCXVhdAy0dV+2NdQFACbYxWuEGtYyfiYuF4Lwk yIHE4C/V96rF5CucCEgrq66Vv92zVBz07i063zRzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTTKnYv0NHTOqFyYK34e4aDez/+swHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzZiNmYzNGU4LTI5NTctNDMzMy1hOTkxLTM5ZmJiZTNlYzY3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAN4AwDQYJKoZIhvcNAQELBQADggEBACOzLxO5go9ZnPmo3vYUFlu2 2A+hhfv301aTmI5gnCPovqMvunP515ezFSt14e9xMIm7GfTIY9ufpm4gbWivay1n ccpJEgdHcZ0Z/GT1PbBRWIinlNvMWogJGiqtw1ETde8VWYQkloeut+44QFLDDQaX gXf7Wims6+IZtN2pVA7MSzNn2BCbxLKlAf0pBrT9BZe54XBTQhczxSeXoNXIZ1gj MuwKN1RJ2bfLyggKxCIVHsPGdCqzKvNUI5/SdLSgi7JRpRT6pLAs6VXOYG6+5Io+ 3Cewxtb6b1Ro4I6ZwRJRkkp6tzRJX9cI3PmBGKJHbU/vzmk261rkhRGDMMdNvXo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:51 2025 by rpki-client