$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/95ae9002-c394-42b9-8a6b-18d2a0222392.roa File: 95ae9002-c394-42b9-8a6b-18d2a0222392.roa (raw, json) Hash identifier: sfarHz4fyGExZDRHH4C/hDXXZHZMwZowDMbm1pqqpWg= Subject key identifier: 27:3E:50:BD:CB:39:0F:6A:B5:33:E0:97:D7:5F:42:3A:71:C2:AC:58 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 10FA32ECBE1BDCE2D0561EEDFA7BC5A1CDD10915 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/95ae9002-c394-42b9-8a6b-18d2a0222392.roa Signing time: Fri 31 Oct 2025 04:41:21 +0000 ROA not before: Fri 31 Oct 2025 04:41:21 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3bec::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:fa:32:ec:be:1b:dc:e2:d0:56:1e:ed:fa:7b:c5:a1:cd:d1:09:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:41:21 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=8cc4f11fbb1b341072b63076d50951a3ca164d133842c89b69c6166298bab82c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:04:90:c3:78:a2:ad:eb:6a:b8:47:34:50: 52:ad:34:85:8e:89:ed:65:0f:c0:d8:98:a4:af:19: 52:fc:d4:bc:94:43:e5:d3:36:bd:21:08:91:d2:7c: dc:37:e7:8a:96:15:4b:89:b6:20:07:db:37:6e:11: 93:09:a0:fc:58:a8:fe:f4:f5:a9:d4:3c:c5:1c:05: e6:e5:84:35:63:9c:71:07:d3:39:59:0c:67:1a:df: fa:99:8f:89:24:30:58:7e:54:bc:5e:99:b8:5e:3c: 22:c4:63:92:cd:42:95:73:f9:2e:52:d8:fb:29:8e: 2f:c1:a8:ab:a0:d0:b9:67:62:71:12:64:0a:ab:12: ef:fd:8a:d5:a0:c6:96:f2:f3:c5:46:ba:74:f3:6a: 49:e8:c1:67:f7:c1:4e:02:7e:18:48:d0:bf:aa:58: 0e:97:b7:58:f9:d3:42:ae:7f:ed:2d:9b:92:a8:08: 5a:25:b4:28:ab:e8:78:99:b6:60:95:83:4d:eb:4e: ec:a4:7e:b7:31:1a:90:c6:43:ed:6a:c0:56:36:37: cb:99:b0:d3:54:c6:7b:f8:62:62:85:7a:20:13:56: a6:c9:95:84:60:30:ec:b2:87:1e:b9:2f:bb:54:66: 01:3b:28:b6:67:03:a3:f7:f5:4c:f2:91:94:2b:cf: 04:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3E:50:BD:CB:39:0F:6A:B5:33:E0:97:D7:5F:42:3A:71:C2:AC:58 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/95ae9002-c394-42b9-8a6b-18d2a0222392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3bec::/46 Signature Algorithm: sha256WithRSAEncryption 12:81:29:2b:5a:b7:a0:3c:f2:91:24:82:bb:4a:ed:4d:18:dc: dd:f7:01:86:ff:92:d1:75:f7:9d:b2:61:f8:9e:3a:40:9b:9a: 8e:a4:f6:3a:db:0d:36:f9:e8:30:85:40:4e:fd:4e:30:be:20: 84:88:e6:af:c5:d7:b1:20:8b:34:3e:b9:46:e6:3a:ae:9d:6d: f5:c4:27:aa:1e:7a:a2:18:28:a2:43:10:38:34:32:56:c6:74: 43:2a:ab:67:c5:23:21:c1:85:28:f3:12:6c:14:f5:e9:16:e2: a9:3b:b3:63:5d:37:f3:05:68:13:34:00:af:da:f6:1d:0a:0d: 7a:78:ce:de:20:85:52:94:f0:21:91:8b:51:27:77:a1:e6:46: 4b:dd:a5:3f:af:20:c5:b3:0b:c5:e4:0c:f5:1a:b1:eb:5e:aa: 63:80:d8:48:94:fa:94:ee:04:0f:94:8b:17:9c:39:64:9c:5b: 4b:70:82:ed:a4:19:63:bc:5f:05:ee:24:b2:7d:85:ce:a6:c4: f7:e1:27:dd:15:0e:88:0c:77:e7:50:81:82:1d:8b:5a:c9:c8: 2b:46:cd:3f:48:42:d1:16:55:23:60:29:b6:c5:1c:72:ed:96: 8d:b2:94:f4:63:5a:88:9c:de:cb:32:2f:e4:a2:ba:70:b3:63: 53:0e:9d:78 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEPoy7L4b3OLQVh7t+nvFoc3RCRUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ0MTIxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2M0ZjExZmJiMWIzNDEwNzJiNjMwNzZkNTA5NTFhM2Nh MTY0ZDEzMzg0MmM4OWI2OWM2MTY2Mjk4YmFiODJjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHqASQw3iiretquEc0UFKtNIWOie1lD8DYmKSvGVL81LyU Q+XTNr0hCJHSfNw354qWFUuJtiAH2zduEZMJoPxYqP709anUPMUcBeblhDVjnHEH 0zlZDGca3/qZj4kkMFh+VLxembhePCLEY5LNQpVz+S5S2Pspji/BqKug0LlnYnES ZAqrEu/9itWgxpby88VGunTzaknowWf3wU4CfhhI0L+qWA6Xt1j500Kuf+0tm5Ko CFoltCir6HiZtmCVg03rTuykfrcxGpDGQ+1qwFY2N8uZsNNUxnv4YmKFeiATVqbJ lYRgMOyyhx65L7tUZgE7KLZnA6P39UzykZQrzwRnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJz5Qvcs5D2q1M+CX119COnHCrFgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk1YWU5MDAyLWMzOTQtNDJiOS04YTZiLTE4ZDJhMDIyMjM5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAO+wwDQYJKoZIhvcNAQELBQADggEBABKBKStat6A88pEkgrtK7U0Y 3N33AYb/ktF1952yYfieOkCbmo6k9jrbDTb56DCFQE79TjC+IISI5q/F17EgizQ+ uUbmOq6dbfXEJ6oeeqIYKKJDEDg0MlbGdEMqq2fFIyHBhSjzEmwU9ekW4qk7s2Nd N/MFaBM0AK/a9h0KDXp4zt4ghVKU8CGRi1End6HmRkvdpT+vIMWzC8XkDPUasete qmOA2EiU+pTuBA+UixecOWScW0twgu2kGWO8XwXuJLJ9hc6mxPfhJ90VDogMd+dQ gYIdi1rJyCtGzT9IQtEWVSNgKbbFHHLtlo2ylPRjWoic3ssyL+SiunCzY1MOnXg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:48 2025 by rpki-client