$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fda8691-7e91-484b-8db5-9a18813b84e1.roa File: 6fda8691-7e91-484b-8db5-9a18813b84e1.roa (raw, json) Hash identifier: tGxkOawUU/5AevIKvdtjIffvLAd/XhZejsU0p5eTLyk= Subject key identifier: A0:50:28:93:18:C3:56:44:F2:07:E3:CB:25:59:0F:46:80:AE:CE:EC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 76E9FD17D4C9282F792FEE782C86B6AD23A6185A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fda8691-7e91-484b-8db5-9a18813b84e1.roa Signing time: Thu 30 Oct 2025 23:23:55 +0000 ROA not before: Thu 30 Oct 2025 23:23:55 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2cec::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e9:fd:17:d4:c9:28:2f:79:2f:ee:78:2c:86:b6:ad:23:a6:18:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:23:55 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=4027d7ff2a8c88f1540d1ad8d887993f8c971e43765759f788ee341614b01eb0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:53:d6:7e:c4:99:f0:66:8e:d4:24:36:11: 28:ad:cf:ca:c3:ae:2c:61:6a:51:9e:42:c5:8c:00: de:b0:b9:0c:7a:f2:89:f7:b7:ae:7e:89:3b:90:23: 86:6f:9c:80:52:dc:16:7e:34:d9:e1:23:5e:d4:db: a8:93:77:01:1f:90:da:5a:24:02:19:41:69:ea:d0: 1b:e0:7f:90:2d:ab:de:d5:b3:39:3a:54:bd:9a:b1: 2b:b7:03:11:38:ef:49:bf:21:ac:1c:0c:51:bf:e6: 83:75:e5:13:85:67:0a:81:f1:97:8b:f5:e7:34:d0: e8:86:e5:70:6c:79:0f:4c:05:40:fd:2f:48:aa:3f: 64:ed:78:f3:d5:0d:de:17:64:5c:99:c1:03:c0:01: d7:51:e8:4e:b8:ca:e6:74:af:60:02:39:97:bf:de: f5:85:53:16:68:5e:ac:51:c0:e0:92:94:5f:93:7c: 47:04:71:2c:f6:69:9e:17:48:78:67:22:1f:5d:7a: 3a:f9:96:4d:65:f7:e6:67:d7:e6:50:51:af:78:c9: a0:7d:d3:f9:71:81:a1:aa:29:c8:a8:e3:f2:43:e8: da:04:d5:59:2f:2c:aa:bc:57:89:32:f4:77:97:84: 33:dd:58:61:3a:5f:65:2c:93:3c:d3:28:63:64:9a: cb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:50:28:93:18:C3:56:44:F2:07:E3:CB:25:59:0F:46:80:AE:CE:EC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fda8691-7e91-484b-8db5-9a18813b84e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2cec::/47 Signature Algorithm: sha256WithRSAEncryption 24:fc:19:20:f7:46:b7:84:8f:10:74:30:b6:16:39:ff:26:ed: 4f:69:79:4f:f7:36:44:c5:ce:57:2f:f1:9b:92:1a:84:97:ea: 42:bb:0a:ae:24:c1:a9:50:b9:1d:2c:f3:a1:37:84:19:28:77: 3a:e7:be:0c:38:94:af:65:90:5d:48:30:5a:0a:e3:73:b1:fe: 7a:2e:56:ad:a9:28:d3:e4:2b:aa:c0:3a:50:9b:e5:a1:3b:e3: 60:97:c1:39:88:a1:fe:38:64:b1:c9:6d:36:f3:d0:a6:9d:d0: ba:0a:ee:c6:30:3c:b4:5e:55:ae:26:a6:23:1c:06:ad:18:61: e0:4b:e3:e2:79:d4:8b:59:c2:1f:76:4e:c6:02:f1:87:da:eb: b9:45:a2:37:f7:8f:9b:a0:ab:b6:13:05:07:bc:7d:9f:f2:3d: b6:37:00:8f:70:8f:11:a2:69:88:ca:72:39:c3:77:6d:2e:25: 7f:92:69:c8:e4:c4:e8:cc:2f:00:9d:78:74:0d:1a:1e:cf:26: 6a:70:3f:50:a9:f0:18:cb:86:57:3c:0b:39:70:2d:cc:0e:3d: 3f:aa:09:58:a5:fd:43:61:cc:cd:3e:e1:a2:3e:53:d5:88:a6: 17:5a:03:a5:b0:26:a0:e2:50:32:52:6b:41:d3:a2:ef:a2:79: 46:7d:7e:0f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdun9F9TJKC95L+54LIa2rSOmGFowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyMzU1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDI3ZDdmZjJhOGM4OGYxNTQwZDFhZDhkODg3OTkzZjhj OTcxZTQzNzY1NzU5Zjc4OGVlMzQxNjE0YjAxZWIwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTGVPWfsSZ8GaO1CQ2ESitz8rDrixhalGeQsWMAN6wuQx6 8on3t65+iTuQI4ZvnIBS3BZ+NNnhI17U26iTdwEfkNpaJAIZQWnq0Bvgf5Atq97V szk6VL2asSu3AxE470m/IawcDFG/5oN15ROFZwqB8ZeL9ec00OiG5XBseQ9MBUD9 L0iqP2TtePPVDd4XZFyZwQPAAddR6E64yuZ0r2ACOZe/3vWFUxZoXqxRwOCSlF+T fEcEcSz2aZ4XSHhnIh9dejr5lk1l9+Zn1+ZQUa94yaB90/lxgaGqKcio4/JD6NoE 1VkvLKq8V4ky9HeXhDPdWGE6X2UskzzTKGNkmstDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoFAokxjDVkTyB+PLJVkPRoCuzuwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzZmZGE4NjkxLTdlOTEtNDg0Yi04ZGI1LTlhMTg4MTNiODRlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALOwwDQYJKoZIhvcNAQELBQADggEBACT8GSD3RreEjxB0MLYWOf8m 7U9peU/3NkTFzlcv8ZuSGoSX6kK7Cq4kwalQuR0s86E3hBkodzrnvgw4lK9lkF1I MFoK43Ox/nouVq2pKNPkK6rAOlCb5aE742CXwTmIof44ZLHJbTbz0Kad0LoK7sYw PLReVa4mpiMcBq0YYeBL4+J51ItZwh92TsYC8Yfa67lFojf3j5ugq7YTBQe8fZ/y PbY3AI9wjxGiaYjKcjnDd20uJX+SacjkxOjMLwCdeHQNGh7PJmpwP1Cp8BjLhlc8 CzlwLcwOPT+qCVil/UNhzM0+4aI+U9WIphdaA6WwJqDiUDJSa0HTou+ieUZ9fg8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:34:38 2025 by rpki-client