$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d6b83f1-662b-49ef-8563-5e006109f99a.roa File: 6d6b83f1-662b-49ef-8563-5e006109f99a.roa (raw, json) Hash identifier: s2MfsKq41ZQYC9BC3+apJlQDjeG775SVsT8XsbC2WME= Subject key identifier: 41:9B:0A:36:9B:36:5A:67:19:1B:54:B8:08:D4:A9:57:3B:83:BF:E4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3C364D9534D55EFD793A85A938B7CE809CAA840F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d6b83f1-662b-49ef-8563-5e006109f99a.roa Signing time: Thu 30 Oct 2025 21:53:51 +0000 ROA not before: Thu 30 Oct 2025 21:53:51 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:19a2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:36:4d:95:34:d5:5e:fd:79:3a:85:a9:38:b7:ce:80:9c:aa:84:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:53:51 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=b3d8dde9717cd48c3ecfe127d68eaba30a2f4b5dea65c1cea79b8a3d9bc55d8b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:12:6c:bc:af:05:17:e4:7e:05:06:67:7b: a7:6f:16:ea:42:94:ac:e6:a9:0a:12:4c:ef:2b:a5: 80:cb:4e:11:8c:1c:d3:9b:87:98:56:41:82:89:15: d9:55:bc:ad:af:19:49:62:32:3b:78:44:f5:0d:e0: 66:10:55:43:30:62:20:04:56:8a:08:e7:58:7f:9f: 21:76:3a:57:13:c7:97:e7:6f:2f:d1:01:17:9b:ba: 38:5f:d4:14:06:0a:00:08:b1:7c:5e:e7:b3:3f:78: 25:4e:b1:c4:f7:33:82:a4:5e:e0:ca:56:df:9a:f6: 1e:bb:44:21:0c:5e:fd:46:6d:f0:1b:68:cc:d3:80: ce:87:00:af:90:ac:d0:93:9c:e7:71:09:c2:6c:0a: 2b:43:7f:de:fc:1c:21:df:6e:28:4c:70:23:dc:60: 76:74:9a:05:d4:60:db:dc:ae:9c:81:07:d0:eb:f6: d9:b6:d7:64:33:5d:e3:cd:56:75:39:88:47:8e:c1: 80:9f:c1:2c:a4:ef:27:96:12:3a:9d:bf:4e:32:27: d3:7c:91:f8:35:68:22:ed:13:ca:69:0e:e1:88:2f: 66:23:20:c9:bd:f8:27:2a:7b:d4:1f:b4:ab:dc:ac: 0a:69:07:ed:13:7f:c0:be:ca:2a:69:ab:d9:d8:1b: ac:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9B:0A:36:9B:36:5A:67:19:1B:54:B8:08:D4:A9:57:3B:83:BF:E4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d6b83f1-662b-49ef-8563-5e006109f99a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:19a2::/47 Signature Algorithm: sha256WithRSAEncryption 6e:0e:54:a9:01:ed:ef:52:6c:4f:f5:86:8a:8a:3e:33:9b:87: 86:89:2f:fb:50:f4:79:f8:a0:c5:78:c0:d5:52:18:9e:f6:aa: 9d:83:64:79:76:cb:f8:47:3b:74:4b:0a:c7:1c:f8:a5:41:63: bb:f9:61:d6:67:0e:e6:8a:93:83:66:09:76:02:43:1a:a9:3a: bb:21:5e:c1:d5:b4:ef:29:bd:7c:2d:ce:ee:a4:69:6f:fd:1e: 12:66:03:44:c6:2b:3e:6a:91:dd:5b:ef:4e:30:c3:60:4f:42: f6:9c:42:02:04:26:e0:d8:63:70:49:36:dd:2c:4a:59:90:5e: c6:0c:a2:31:ac:70:8a:2a:d0:97:ec:16:71:f9:0c:ac:19:91: 47:6f:aa:f5:be:b0:72:0e:14:93:35:3e:43:b8:ac:66:3c:8c: cf:2b:5a:6a:b5:3a:9e:89:92:6d:93:f4:62:92:88:f1:6c:33: 05:4d:c6:ff:67:4f:55:80:3d:8b:2d:8c:7c:78:bb:64:dc:3f: 0d:37:71:04:d6:14:22:2b:a7:c0:fd:ae:97:fb:11:3e:c3:fd: 11:be:8f:71:4b:db:5a:fc:6f:47:6f:f4:9d:8f:3b:ad:47:06: 13:93:7e:b8:ee:61:25:7c:57:e5:fb:b5:85:39:fb:d7:64:7b: 67:f0:33:a6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPDZNlTTVXv15OoWpOLfOgJyqhA8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE1MzUxWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2Q4ZGRlOTcxN2NkNDhjM2VjZmUxMjdkNjhlYWJhMzBh MmY0YjVkZWE2NWMxY2VhNzliOGEzZDliYzU1ZDhiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbaBJsvK8FF+R+BQZne6dvFupClKzmqQoSTO8rpYDLThGM HNObh5hWQYKJFdlVvK2vGUliMjt4RPUN4GYQVUMwYiAEVooI51h/nyF2OlcTx5fn by/RARebujhf1BQGCgAIsXxe57M/eCVOscT3M4KkXuDKVt+a9h67RCEMXv1GbfAb aMzTgM6HAK+QrNCTnOdxCcJsCitDf978HCHfbihMcCPcYHZ0mgXUYNvcrpyBB9Dr 9tm212QzXePNVnU5iEeOwYCfwSyk7yeWEjqdv04yJ9N8kfg1aCLtE8ppDuGIL2Yj IMm9+Ccqe9QftKvcrAppB+0Tf8C+yippq9nYG6zlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQZsKNps2WmcZG1S4CNSpVzuDv+QwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzZkNmI4M2YxLTY2MmItNDllZi04NTYzLTVlMDA2MTA5Zjk5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGaIwDQYJKoZIhvcNAQELBQADggEBAG4OVKkB7e9SbE/1hoqKPjOb h4aJL/tQ9Hn4oMV4wNVSGJ72qp2DZHl2y/hHO3RLCscc+KVBY7v5YdZnDuaKk4Nm CXYCQxqpOrshXsHVtO8pvXwtzu6kaW/9HhJmA0TGKz5qkd1b704ww2BPQvacQgIE JuDYY3BJNt0sSlmQXsYMojGscIoq0JfsFnH5DKwZkUdvqvW+sHIOFJM1PkO4rGY8 jM8rWmq1Op6Jkm2T9GKSiPFsMwVNxv9nT1WAPYstjHx4u2TcPw03cQTWFCIrp8D9 rpf7ET7D/RG+j3FL21r8b0dv9J2PO61HBhOTfrjuYSV8V+X7tYU5+9dke2fwM6Y= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:53 2025 by rpki-client