$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98228173-6855-4d67-b281-314e541221ba.roa File: 98228173-6855-4d67-b281-314e541221ba.roa (raw, json) Hash identifier: aFaQ0ieFz1S5JWBjo05O0HbUE34U1WfWD0FMR3080cs= Subject key identifier: 2C:98:F9:58:2E:89:08:2D:18:FB:2D:D3:34:8A:57:31:99:82:08:C3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0A4205FAA36CA7461162321A9B42E5E00B9654FF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98228173-6855-4d67-b281-314e541221ba.roa Signing time: Thu 30 Oct 2025 21:53:37 +0000 ROA not before: Thu 30 Oct 2025 21:53:37 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1968::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:42:05:fa:a3:6c:a7:46:11:62:32:1a:9b:42:e5:e0:0b:96:54:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:53:37 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=d47574cb36d97e8336401b1a964e286601eb793e1c2f105f435ab72f41d78a61, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:39:65:e5:0b:ae:bc:87:fb:86:61:3a:3b: f0:ad:ec:01:59:32:4e:90:7b:70:8f:0d:64:a7:fe: d5:e4:ed:8c:a3:f0:6a:8c:0d:49:b6:eb:a0:5e:8a: 0b:48:4a:81:c2:8c:54:de:99:74:cd:b1:75:22:de: 5d:a7:25:fb:7b:d6:05:bf:d7:fd:37:2a:1c:7e:14: 65:a5:d9:a4:1f:bf:1d:21:38:75:ad:43:34:dc:99: 1b:02:b4:06:bd:40:a3:e8:2d:66:45:b3:a2:c8:ff: 47:86:06:59:a3:d6:08:fe:10:bd:07:31:de:17:c4: 8a:c9:c4:a1:91:a0:00:d7:72:7d:f6:b7:be:42:61: 89:ad:43:0e:ea:42:c2:42:db:20:e7:bb:da:58:68: c8:fd:aa:62:26:38:e9:58:d3:31:e8:ea:ad:c9:55: 7f:79:ed:d2:37:b0:87:3b:db:2a:0e:eb:5c:f3:28: 48:e1:c6:6c:8b:9a:52:80:d2:cb:12:17:a0:a6:dd: bb:11:f3:e8:51:90:19:92:0d:b7:8d:93:27:f5:9f: e0:db:ed:a3:c9:46:25:cc:56:fe:03:e9:3f:12:50: 12:b5:3a:b3:22:2e:7b:77:8d:c5:a4:1b:3b:75:51: 3a:59:d0:ff:4c:98:89:90:73:36:7f:36:ef:78:17: 95:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:98:F9:58:2E:89:08:2D:18:FB:2D:D3:34:8A:57:31:99:82:08:C3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98228173-6855-4d67-b281-314e541221ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1968::/47 Signature Algorithm: sha256WithRSAEncryption 41:8f:6b:c5:eb:14:33:9f:da:7f:67:94:22:19:44:fe:89:a4: b6:14:e1:d3:db:8d:72:96:f0:c6:85:79:45:b5:df:22:90:98: a3:25:f1:87:89:72:93:a1:f7:58:ab:ae:8a:e4:2a:28:30:e3: a2:94:f0:bb:f1:f6:57:e7:b3:2c:8f:54:1c:30:91:f5:ca:c6: d7:f7:5e:b5:4e:71:5e:9c:6f:fb:a9:51:52:30:c6:ae:c7:39: e5:8f:67:66:23:32:7b:73:65:7f:70:98:91:35:f4:ee:18:2d: 9d:24:0c:b0:40:43:a1:1c:65:b4:f7:75:21:1b:40:58:01:e0: 0b:10:bc:a9:bb:9d:06:51:11:21:73:9b:ef:d9:56:73:73:1e: e3:60:78:8a:c1:11:2d:64:48:df:fb:79:04:10:c1:08:c5:7a: a5:5b:b7:97:82:98:0a:c6:b8:15:bc:35:86:96:7a:21:f9:08: eb:a7:bd:08:43:a5:b9:16:d7:5d:40:94:8f:d1:57:d2:75:ab: 3f:d7:f2:1b:e5:6a:e5:48:6a:2c:b6:7b:5a:a6:a6:4d:3c:c7: 2b:bc:e6:4d:a8:93:cd:69:4d:2b:4d:3b:45:32:37:51:aa:86: 7f:7b:2b:a6:85:28:d1:62:ab:e3:00:4f:4f:cf:10:58:d2:a0: 18:f3:c1:c5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCkIF+qNsp0YRYjIam0Ll4AuWVP8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE1MzM3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDc1NzRjYjM2ZDk3ZTgzMzY0MDFiMWE5NjRlMjg2NjAx ZWI3OTNlMWMyZjEwNWY0MzVhYjcyZjQxZDc4YTYxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9bzll5QuuvIf7hmE6O/Ct7AFZMk6Qe3CPDWSn/tXk7Yyj 8GqMDUm266BeigtISoHCjFTemXTNsXUi3l2nJft71gW/1/03Khx+FGWl2aQfvx0h OHWtQzTcmRsCtAa9QKPoLWZFs6LI/0eGBlmj1gj+EL0HMd4XxIrJxKGRoADXcn32 t75CYYmtQw7qQsJC2yDnu9pYaMj9qmImOOlY0zHo6q3JVX957dI3sIc72yoO61zz KEjhxmyLmlKA0ssSF6Cm3bsR8+hRkBmSDbeNkyf1n+Db7aPJRiXMVv4D6T8SUBK1 OrMiLnt3jcWkGzt1UTpZ0P9MmImQczZ/Nu94F5WpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULJj5WC6JCC0Y+y3TNIpXMZmCCMMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk4MjI4MTczLTY4NTUtNGQ2Ny1iMjgxLTMxNGU1NDEyMjFiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGWgwDQYJKoZIhvcNAQELBQADggEBAEGPa8XrFDOf2n9nlCIZRP6J pLYU4dPbjXKW8MaFeUW13yKQmKMl8YeJcpOh91irrorkKigw46KU8Lvx9lfnsyyP VBwwkfXKxtf3XrVOcV6cb/upUVIwxq7HOeWPZ2YjMntzZX9wmJE19O4YLZ0kDLBA Q6EcZbT3dSEbQFgB4AsQvKm7nQZRESFzm+/ZVnNzHuNgeIrBES1kSN/7eQQQwQjF eqVbt5eCmArGuBW8NYaWeiH5COunvQhDpbkW111AlI/RV9J1qz/X8hvlauVIaiy2 e1qmpk08xyu85k2ok81pTStNO0UyN1Gqhn97K6aFKNFiq+MAT0/PEFjSoBjzwcU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:39:05 2025 by rpki-client