$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/823571d6-8248-4714-a477-59a6b0d9a456.roa File: 823571d6-8248-4714-a477-59a6b0d9a456.roa (raw, json) Hash identifier: 423iS+kg5d0tZMqwT7LEzo1EGy/m6e8oz/SgVX8WJpo= Subject key identifier: 64:CC:A7:F8:F6:2B:59:3C:D2:8D:80:73:EE:06:5B:E0:CF:6F:B0:50 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 62862636EFAA8E5A644E11A1C695D2D0FCB8F148 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/823571d6-8248-4714-a477-59a6b0d9a456.roa Signing time: Fri 31 Oct 2025 01:08:26 +0000 ROA not before: Fri 31 Oct 2025 01:08:26 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3968::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:86:26:36:ef:aa:8e:5a:64:4e:11:a1:c6:95:d2:d0:fc:b8:f1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:08:26 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=565c34aaf1b797a7db6e55f969535d7c1570d0bea4df8447507bf937a65b38a9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7c:fb:92:9e:ac:59:cb:1c:af:e4:d0:ec:eb: 7a:a2:d6:56:ab:1e:ac:23:bd:b4:13:d0:6d:78:30: 1e:94:d6:5a:58:36:52:a7:67:42:f5:cb:24:53:e3: ec:70:79:5d:0b:fb:84:56:3c:3b:2d:ee:b8:23:02: 6b:88:5b:fc:72:e2:61:61:32:b0:ca:f0:3b:1b:98: e4:73:ad:4e:39:a1:4f:88:79:90:18:29:d4:9a:9f: 5e:9c:95:dd:54:b5:41:e5:0a:ff:be:1d:ab:1e:d0: e5:91:b0:9b:42:14:c9:b3:e7:c4:fc:63:29:f3:4e: a1:55:3a:a8:23:b8:5f:a3:62:b1:d8:f9:60:64:5a: ea:4e:61:1a:1d:86:e4:77:2a:3f:7f:71:eb:21:eb: 51:03:1d:38:ae:82:6b:cd:a2:e9:ef:6c:b8:e0:61: a7:d2:4c:9b:80:fe:60:d1:76:30:17:2c:91:cf:03: 40:05:8d:9a:f5:8a:e1:38:22:20:6f:2e:64:11:b9: 8b:9b:23:83:0a:91:9d:c9:b1:d4:32:5e:96:a8:22: b8:50:f1:43:95:25:f7:47:14:9d:0d:82:a2:de:85: d6:39:8c:d8:5f:95:6d:52:a6:f6:85:89:37:62:94: 83:74:0d:4c:87:d6:01:cc:82:dd:b9:55:89:13:6b: 07:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CC:A7:F8:F6:2B:59:3C:D2:8D:80:73:EE:06:5B:E0:CF:6F:B0:50 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/823571d6-8248-4714-a477-59a6b0d9a456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3968::/47 Signature Algorithm: sha256WithRSAEncryption 79:0c:5d:35:34:51:42:ec:74:bb:03:b6:09:ae:ab:19:1b:cd: f7:ad:8c:d7:ba:5c:90:ca:c8:66:97:d5:b9:72:4c:e2:94:66: 45:8c:a4:b6:2c:60:72:07:fd:bd:61:1a:73:23:5c:55:43:2d: bc:62:44:29:02:f6:67:2f:da:bc:a1:c2:54:a2:2f:b9:71:db: 0e:c7:dd:9e:92:c5:7d:0b:e9:a1:b4:d1:aa:66:cc:4d:ed:88: 86:5d:98:bb:99:6b:17:0a:b5:d5:c2:07:8e:33:f7:47:01:da: 10:14:ee:a7:33:11:b5:16:59:72:0c:38:e2:a2:ba:f6:d5:7a: ec:0f:9b:ca:0b:b5:2a:c8:10:47:e3:4e:a4:96:e6:8a:2f:b0: 1d:06:07:23:89:29:8b:55:ce:c1:53:1c:f9:da:7a:1a:2d:31: 44:a9:5c:91:3f:25:8c:f8:95:a8:95:93:a3:5f:cf:a3:df:2d: 1d:b5:9b:5f:25:c1:fa:ba:0e:e8:6c:1b:68:d4:c1:c8:20:31: 3c:b8:f8:62:4f:90:03:a4:bd:11:0c:28:ce:53:71:68:2b:3a: d1:00:66:22:26:ff:83:b1:57:c5:e6:6a:19:61:1a:49:a7:7d: 1e:b6:c0:9e:38:f1:fa:9b:d6:7a:8b:5c:96:a8:fb:05:65:1e: bc:54:38:83 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYoYmNu+qjlpkThGhxpXS0Py48UgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEwODI2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjVjMzRhYWYxYjc5N2E3ZGI2ZTU1Zjk2OTUzNWQ3YzE1 NzBkMGJlYTRkZjg0NDc1MDdiZjkzN2E2NWIzOGE5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCafPuSnqxZyxyv5NDs63qi1larHqwjvbQT0G14MB6U1lpY NlKnZ0L1yyRT4+xweV0L+4RWPDst7rgjAmuIW/xy4mFhMrDK8DsbmORzrU45oU+I eZAYKdSan16cld1UtUHlCv++Hase0OWRsJtCFMmz58T8YynzTqFVOqgjuF+jYrHY +WBkWupOYRodhuR3Kj9/cesh61EDHTiugmvNounvbLjgYafSTJuA/mDRdjAXLJHP A0AFjZr1iuE4IiBvLmQRuYubI4MKkZ3JsdQyXpaoIrhQ8UOVJfdHFJ0NgqLehdY5 jNhflW1SpvaFiTdilIN0DUyH1gHMgt25VYkTawdRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZMyn+PYrWTzSjYBz7gZb4M9vsFAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzgyMzU3MWQ2LTgyNDgtNDcxNC1hNDc3LTU5YTZiMGQ5YTQ1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOWgwDQYJKoZIhvcNAQELBQADggEBAHkMXTU0UULsdLsDtgmuqxkb zfetjNe6XJDKyGaX1blyTOKUZkWMpLYsYHIH/b1hGnMjXFVDLbxiRCkC9mcv2ryh wlSiL7lx2w7H3Z6SxX0L6aG00apmzE3tiIZdmLuZaxcKtdXCB44z90cB2hAU7qcz EbUWWXIMOOKiuvbVeuwPm8oLtSrIEEfjTqSW5oovsB0GByOJKYtVzsFTHPnaehot MUSpXJE/JYz4laiVk6Nfz6PfLR21m18lwfq6DuhsG2jUwcggMTy4+GJPkAOkvREM KM5TcWgrOtEAZiIm/4OxV8XmahlhGkmnfR62wJ448fqb1nqLXJao+wVlHrxUOIM= -----END CERTIFICATE-----Generated at Wed Nov 5 15:29:12 2025 by rpki-client