$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8400feb8-2947-41bb-8d65-6256c656cb99.roa File: 8400feb8-2947-41bb-8d65-6256c656cb99.roa (raw, json) Hash identifier: pnb0R1YIaCF0atcUPrwx6WY01X50g5WOlXgvuGAJmYU= Subject key identifier: EE:8D:0A:05:46:6F:CD:9D:97:65:CC:30:14:4E:ED:A3:CD:06:7B:5B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4A037D81A58946B5001F2C9DFF27E1D651B72BDA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8400feb8-2947-41bb-8d65-6256c656cb99.roa Signing time: Fri 31 Oct 2025 05:23:54 +0000 ROA not before: Fri 31 Oct 2025 05:23:54 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1aa8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:03:7d:81:a5:89:46:b5:00:1f:2c:9d:ff:27:e1:d6:51:b7:2b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:23:54 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f995e369129974b514f1e98900b7f0cab46360a7c18408b3da6b3644e2d81578, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:17:b7:44:f7:2f:a2:db:36:60:29:01:8f: 86:12:b4:43:32:08:23:a9:66:83:c4:c6:9d:34:f5: 09:b8:2b:a1:19:ef:95:a3:be:72:a7:c2:27:8d:0b: 5b:20:21:23:99:47:bf:9d:f5:6f:77:7a:5e:45:de: 22:88:3b:e1:ef:4a:3c:8d:51:64:29:22:f4:6f:d7: d4:eb:7b:6f:e8:ca:80:e4:fb:6b:13:85:d2:88:b2: d7:a4:e4:49:3e:62:a2:c1:47:dd:fc:e6:66:20:6c: b5:f6:14:5d:7a:37:31:b4:40:a0:0c:94:e2:d6:03: 69:22:f9:b1:d0:a3:f2:32:1a:83:01:fc:26:fb:c0: 4c:90:4a:81:34:a9:ac:6e:d7:55:a5:09:88:16:2e: 25:e6:7f:32:79:b2:44:02:58:03:43:f1:43:85:d7: 6b:e3:44:6d:c7:03:c5:ee:ca:d8:33:1c:0e:4c:cf: c9:f4:ed:1a:b6:de:83:b4:43:16:2e:02:d7:63:0c: 3b:30:8c:a3:24:3a:c6:f8:70:95:7e:f0:dd:69:71: 9c:c0:2d:b6:16:cc:56:b1:b6:6d:91:ca:99:fc:4a: a5:cb:29:f5:b2:2e:8a:f4:eb:78:2d:d1:23:69:ad: 57:97:9b:54:11:23:a7:69:f4:d2:14:55:ff:eb:cf: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8D:0A:05:46:6F:CD:9D:97:65:CC:30:14:4E:ED:A3:CD:06:7B:5B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8400feb8-2947-41bb-8d65-6256c656cb99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1aa8::/45 Signature Algorithm: sha256WithRSAEncryption 7b:df:ca:44:a7:ce:e9:6a:78:4c:6e:f6:59:89:4d:22:ba:96: b8:38:a3:3e:22:a3:7c:65:57:f3:d1:93:6d:d1:78:65:6d:24: 10:77:ca:17:c6:c1:35:45:59:c3:9f:4c:9d:ac:39:74:a0:76: 03:76:5a:98:7a:5b:06:8e:77:fc:74:a4:81:57:6b:8f:b9:7a: 9d:18:2a:22:0e:98:06:db:52:b9:17:71:71:57:7d:1e:68:6d: fc:31:0e:b0:c8:27:7b:82:67:90:d3:4a:36:c0:82:62:2c:6c: 95:a3:d3:52:0a:d8:b8:b1:8c:c1:b1:8d:43:6a:7f:0f:b1:a3: e1:c4:1b:9d:e1:e1:57:28:f6:5c:14:98:6e:b8:12:2d:2a:7c: 5e:98:c0:d4:56:1a:55:79:1d:03:71:e0:fd:b6:1f:1d:e5:89: 95:d4:cb:9d:41:ec:0b:5a:00:d7:e0:bd:a0:4c:ec:bd:5c:b0: 84:39:88:ec:29:14:a1:87:29:36:04:63:19:19:3e:48:4a:37: 51:21:89:1c:58:05:ec:09:72:06:f6:f4:2e:e6:e9:29:83:3d: a2:53:3f:f9:f0:32:48:69:37:d6:15:3b:35:11:49:40:d7:9c: ee:c9:80:85:e2:c8:7f:f2:53:32:c3:ff:21:66:24:de:7c:ea: e6:55:cb:3c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSgN9gaWJRrUAHyyd/yfh1lG3K9owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyMzU0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTk1ZTM2OTEyOTk3NGI1MTRmMWU5ODkwMGI3ZjBjYWI0 NjM2MGE3YzE4NDA4YjNkYTZiMzY0NGUyZDgxNTc4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK2Be3RPcvots2YCkBj4YStEMyCCOpZoPExp009Qm4K6EZ 75WjvnKnwieNC1sgISOZR7+d9W93el5F3iKIO+HvSjyNUWQpIvRv19Tre2/oyoDk +2sThdKIstek5Ek+YqLBR9385mYgbLX2FF16NzG0QKAMlOLWA2ki+bHQo/IyGoMB /Cb7wEyQSoE0qaxu11WlCYgWLiXmfzJ5skQCWAND8UOF12vjRG3HA8XuytgzHA5M z8n07Rq23oO0QxYuAtdjDDswjKMkOsb4cJV+8N1pcZzALbYWzFaxtm2Rypn8SqXL KfWyLor063gt0SNprVeXm1QRI6dp9NIUVf/rz1Q5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7o0KBUZvzZ2XZcwwFE7to80Ge1swHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg0MDBmZWI4LTI5NDctNDFiYi04ZDY1LTYyNTZjNjU2Y2I5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAGqgwDQYJKoZIhvcNAQELBQADggEBAHvfykSnzulqeExu9lmJTSK6 lrg4oz4io3xlV/PRk23ReGVtJBB3yhfGwTVFWcOfTJ2sOXSgdgN2Wph6WwaOd/x0 pIFXa4+5ep0YKiIOmAbbUrkXcXFXfR5obfwxDrDIJ3uCZ5DTSjbAgmIsbJWj01IK 2LixjMGxjUNqfw+xo+HEG53h4Vco9lwUmG64Ei0qfF6YwNRWGlV5HQNx4P22Hx3l iZXUy51B7AtaANfgvaBM7L1csIQ5iOwpFKGHKTYEYxkZPkhKN1EhiRxYBewJcgb2 9C7m6SmDPaJTP/nwMkhpN9YVOzURSUDXnO7JgIXiyH/yUzLD/yFmJN586uZVyzw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:25:24 2025 by rpki-client