$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72ae1bd0-ecd4-485d-9b44-beddf3281120.roa File: 72ae1bd0-ecd4-485d-9b44-beddf3281120.roa (raw, json) Hash identifier: m+m234ozZE79TIHT6AZ5hREqhRO44DjgOoPMoDar1SM= Subject key identifier: 8E:6F:CB:ED:10:EF:27:B0:D5:03:4C:06:AE:59:B0:5E:93:2E:98:31 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0978547CE5AC8FAF2CF483C31ECA5FDB1990B68D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72ae1bd0-ecd4-485d-9b44-beddf3281120.roa Signing time: Thu 30 Oct 2025 23:59:08 +0000 ROA not before: Thu 30 Oct 2025 23:59:08 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:32aa::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:78:54:7c:e5:ac:8f:af:2c:f4:83:c3:1e:ca:5f:db:19:90:b6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:59:08 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=f802b2d106d5311a894a0e972582bc11bea6c3587678c2cb0d1b6b0a6c81690c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:bb:9d:8b:cb:2c:06:e7:3f:9e:72:48:89: 53:98:10:47:dd:ff:09:ef:62:8a:a2:c6:f6:62:ac: 5f:be:41:07:79:01:c6:de:b3:37:ec:fe:95:4b:3e: 01:dd:5b:02:6a:2e:ca:bf:bf:b5:36:6d:b0:ea:03: e9:59:49:e4:18:94:74:67:dd:e5:40:1d:26:1e:ad: ed:ce:c3:bf:19:f1:21:8b:ab:cc:b5:b3:9b:dd:00: 79:e7:88:59:bd:75:c9:49:4c:1c:f1:58:60:dd:48: 41:dd:57:39:41:13:e8:34:21:f3:e9:41:2b:8e:19: 00:73:0f:8c:9a:f0:9a:a6:3b:42:90:a5:76:ae:d6: 90:7f:12:6f:ef:6b:0d:79:c1:dd:6e:9c:54:27:a5: 08:c5:66:0b:a9:68:95:82:0c:ab:65:22:3d:29:30: da:0b:b1:00:81:05:b3:3e:9d:46:6c:9e:a2:01:92: 3c:87:a1:1a:57:6b:a8:f1:82:65:75:28:19:9c:10: d3:40:dd:9c:92:64:11:e4:88:c7:94:72:e5:c3:23: d2:b6:6f:28:b6:5a:18:3a:fe:a9:ef:21:fd:0c:5c: 93:5a:4d:f6:1e:3f:7e:a0:38:5b:c3:9a:83:fc:ac: 24:2e:4d:6c:f1:7a:71:c6:cb:d0:8d:34:82:00:45: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6F:CB:ED:10:EF:27:B0:D5:03:4C:06:AE:59:B0:5E:93:2E:98:31 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72ae1bd0-ecd4-485d-9b44-beddf3281120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:32aa::/47 Signature Algorithm: sha256WithRSAEncryption 30:df:d5:69:fe:00:a8:17:8b:e2:23:db:67:ae:42:55:c6:05: f9:ea:f0:2b:61:83:d4:5c:74:e2:49:16:6c:79:5a:b3:4f:36: 24:77:3a:31:fa:80:b8:d7:42:09:71:51:30:0f:57:4c:32:fe: c6:e9:a2:28:b0:68:39:01:95:7e:54:6e:9f:f1:43:3a:2f:2a: 77:43:4e:fa:71:57:1f:c1:50:aa:ec:d7:bc:e6:be:74:51:2d: 90:8c:e3:92:bb:0a:c6:48:13:d4:77:55:9f:6b:cb:f4:df:7b: a7:e8:aa:e4:5e:b7:cd:50:51:c0:4d:6c:29:6d:a9:00:48:7f: ae:0d:6d:d6:6b:3f:c5:e9:0c:0d:39:5a:5c:fd:fc:bd:0e:10: 7a:57:f2:d7:41:04:4a:0f:2d:64:d8:0c:d9:05:c5:28:a3:b2: 1a:66:be:56:44:79:ee:00:5b:f3:7a:95:2f:ef:0d:0f:43:7c: 97:b7:8b:dd:36:a6:17:87:86:eb:9c:33:15:35:0e:f6:c9:f9: bb:1f:37:98:bd:f3:08:35:e4:fa:cd:c9:d9:49:45:85:47:98: b4:53:15:00:f5:6c:12:04:9c:ed:eb:6b:bd:a0:b6:f2:41:09: 7e:b5:ef:bc:be:e6:8c:bb:b2:93:fa:cb:f4:53:3d:a7:9a:c5: 57:70:c5:dc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCXhUfOWsj68s9IPDHspf2xmQto0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM1OTA4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmODAyYjJkMTA2ZDUzMTFhODk0YTBlOTcyNTgyYmMxMWJl YTZjMzU4NzY3OGMyY2IwZDFiNmIwYTZjODE2OTBjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs47udi8ssBuc/nnJIiVOYEEfd/wnvYoqixvZirF++QQd5 Acbeszfs/pVLPgHdWwJqLsq/v7U2bbDqA+lZSeQYlHRn3eVAHSYere3Ow78Z8SGL q8y1s5vdAHnniFm9dclJTBzxWGDdSEHdVzlBE+g0IfPpQSuOGQBzD4ya8JqmO0KQ pXau1pB/Em/vaw15wd1unFQnpQjFZgupaJWCDKtlIj0pMNoLsQCBBbM+nUZsnqIB kjyHoRpXa6jxgmV1KBmcENNA3ZySZBHkiMeUcuXDI9K2byi2Whg6/qnvIf0MXJNa TfYeP36gOFvDmoP8rCQuTWzxenHGy9CNNIIARcFPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjm/L7RDvJ7DVA0wGrlmwXpMumDEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzcyYWUxYmQwLWVjZDQtNDg1ZC05YjQ0LWJlZGRmMzI4MTEyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAMqowDQYJKoZIhvcNAQELBQADggEBADDf1Wn+AKgXi+Ij22euQlXG Bfnq8Cthg9RcdOJJFmx5WrNPNiR3OjH6gLjXQglxUTAPV0wy/sbpoiiwaDkBlX5U bp/xQzovKndDTvpxVx/BUKrs17zmvnRRLZCM45K7CsZIE9R3VZ9ry/Tfe6foquRe t81QUcBNbCltqQBIf64NbdZrP8XpDA05Wlz9/L0OEHpX8tdBBEoPLWTYDNkFxSij shpmvlZEee4AW/N6lS/vDQ9DfJe3i902pheHhuucMxU1DvbJ+bsfN5i98wg15PrN ydlJRYVHmLRTFQD1bBIEnO3ra72gtvJBCX6177y+5oy7spP6y/RTPaeaxVdwxdw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:09 2025 by rpki-client