$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77e76223-12b7-46b7-970b-1113f6e73dd4.roa File: 77e76223-12b7-46b7-970b-1113f6e73dd4.roa (raw, json) Hash identifier: lbvEQqWo4ROtB37JMl6G9rj4iFNaN7ajU6P3RslGl0M= Subject key identifier: 22:0A:CB:2C:FA:94:05:7A:54:DE:4F:68:85:38:6B:09:71:36:5D:93 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 13646B920E442288C6719EC93A7C9B92EE08F4EB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77e76223-12b7-46b7-970b-1113f6e73dd4.roa Signing time: Fri 31 Oct 2025 01:55:05 +0000 ROA not before: Fri 31 Oct 2025 01:55:05 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3e86::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:64:6b:92:0e:44:22:88:c6:71:9e:c9:3a:7c:9b:92:ee:08:f4:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:55:05 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=97464763355b9c45515a21e68cc9571a34ecd39dffe5d80c3d2c03b25be151db, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7b:e5:d8:5c:37:69:3b:7c:d4:4b:5a:20:98: 7b:3a:b0:d8:03:6f:35:a0:39:e3:a1:66:cc:56:81: 9d:96:9b:2f:17:62:44:e9:20:b0:82:06:76:8d:d9: 03:4a:fc:a4:04:3e:46:78:ce:a8:b0:67:34:2b:30: ae:c0:be:a5:5b:69:d0:4f:7d:7e:0f:d1:c4:38:1e: 46:4c:6d:3e:4e:41:a2:33:59:69:67:d1:04:4d:48: c8:93:75:68:f5:7a:f2:ff:a3:53:53:8a:b5:07:cd: 21:ef:4f:45:b3:ce:ee:99:fb:53:78:3c:32:9d:56: cb:57:19:8a:b1:5c:a3:3e:9c:bf:5a:c3:6d:e9:77: 0f:24:43:07:43:3a:4d:bd:c1:ac:9a:31:5d:5a:68: c9:b7:d0:35:43:3d:84:f6:79:12:10:77:54:ac:c3: 51:fa:bc:4a:03:38:e9:1d:58:9a:cf:09:bb:af:96: 45:fa:f7:19:47:8e:a1:74:f2:eb:31:8f:13:22:d3: 00:f7:12:b3:e3:3d:1e:31:c4:a9:5e:22:80:f3:3c: f9:d3:fb:48:09:7f:76:1b:bc:a0:a8:70:67:8d:b8: f8:23:bc:3b:b5:82:72:8c:78:9a:06:00:9a:5b:6d: d3:7a:a4:c8:0c:af:23:36:b6:0e:23:9e:7e:16:7b: 9d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:CB:2C:FA:94:05:7A:54:DE:4F:68:85:38:6B:09:71:36:5D:93 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77e76223-12b7-46b7-970b-1113f6e73dd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3e86::/47 Signature Algorithm: sha256WithRSAEncryption 97:20:ac:58:a1:f8:01:f4:87:b6:4e:4d:73:25:c8:ca:bf:d7: 3a:91:b9:e7:02:4f:1b:98:07:d6:04:03:b9:6e:39:d7:ac:83: a2:32:a6:eb:90:db:c1:77:c7:00:ff:31:9f:2b:e0:80:50:b1: 07:66:9a:0e:96:96:e9:60:e7:59:19:42:65:e9:77:34:70:4e: 25:bb:33:d3:b1:d9:ac:76:85:ad:4e:ad:ff:ed:20:e1:c4:8d: f9:b8:e0:98:fe:bd:f5:f0:fd:33:ae:5f:d7:39:d7:34:fb:32: a9:85:77:28:6c:ac:0c:a8:fc:fd:f2:a0:84:07:38:08:b0:99: 5b:6e:82:5b:80:ba:45:e8:b5:6c:60:17:bf:3c:4e:76:b3:00: a5:17:b6:79:1e:29:af:a6:ce:d5:d8:ff:d3:c5:c5:c7:43:e7: 10:20:b4:23:f7:02:21:b1:c8:83:85:ae:d8:07:27:53:67:a4: 78:68:4c:9e:4f:40:80:a2:40:46:76:a0:23:fc:1c:c1:55:03: 04:2a:3d:ae:09:a9:05:c8:fd:80:62:f0:6b:b4:e2:21:17:e6: f7:85:31:ee:c9:91:fb:a8:91:91:04:40:a2:00:e0:7f:fb:43: 0f:c3:37:cc:97:a8:3d:5e:71:7c:56:ec:bc:a1:ab:3d:fd:9a: e3:20:a5:d8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE2Rrkg5EIojGcZ7JOnybku4I9OswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDE1NTA1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzQ2NDc2MzM1NWI5YzQ1NTE1YTIxZTY4Y2M5NTcxYTM0 ZWNkMzlkZmZlNWQ4MGMzZDJjMDNiMjViZTE1MWRiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLe+XYXDdpO3zUS1ogmHs6sNgDbzWgOeOhZsxWgZ2Wmy8X YkTpILCCBnaN2QNK/KQEPkZ4zqiwZzQrMK7AvqVbadBPfX4P0cQ4HkZMbT5OQaIz WWln0QRNSMiTdWj1evL/o1NTirUHzSHvT0Wzzu6Z+1N4PDKdVstXGYqxXKM+nL9a w23pdw8kQwdDOk29wayaMV1aaMm30DVDPYT2eRIQd1Ssw1H6vEoDOOkdWJrPCbuv lkX69xlHjqF08usxjxMi0wD3ErPjPR4xxKleIoDzPPnT+0gJf3YbvKCocGeNuPgj vDu1gnKMeJoGAJpbbdN6pMgMryM2tg4jnn4We51VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIgrLLPqUBXpU3k9ohThrCXE2XZMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzc3ZTc2MjIzLTEyYjctNDZiNy05NzBiLTExMTNmNmU3M2RkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPoYwDQYJKoZIhvcNAQELBQADggEBAJcgrFih+AH0h7ZOTXMlyMq/ 1zqRuecCTxuYB9YEA7luOdesg6IypuuQ28F3xwD/MZ8r4IBQsQdmmg6Wlulg51kZ QmXpdzRwTiW7M9Ox2ax2ha1Orf/tIOHEjfm44Jj+vfXw/TOuX9c51zT7MqmFdyhs rAyo/P3yoIQHOAiwmVtugluAukXotWxgF788TnazAKUXtnkeKa+mztXY/9PFxcdD 5xAgtCP3AiGxyIOFrtgHJ1NnpHhoTJ5PQICiQEZ2oCP8HMFVAwQqPa4JqQXI/YBi 8Gu04iEX5veFMe7JkfuokZEEQKIA4H/7Qw/DN8yXqD1ecXxW7Lyhqz39muMgpdg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:44 2025 by rpki-client