$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c8a98e0-bc70-4e02-aec8-777faffd09a3.roa File: 9c8a98e0-bc70-4e02-aec8-777faffd09a3.roa (raw, json) Hash identifier: +wWmqKYsR8PnLCou4u3K5kzELNpf1dpbh6BwYlx9Rss= Subject key identifier: A9:BA:52:00:04:BD:6F:22:43:57:1A:A9:EE:83:C8:17:87:CC:EF:5E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 789E3C569A7AF6817BF86CBA7499FF189FAB8FD3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c8a98e0-bc70-4e02-aec8-777faffd09a3.roa Signing time: Thu 30 Oct 2025 20:10:47 +0000 ROA not before: Thu 30 Oct 2025 20:10:47 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:24b0::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9e:3c:56:9a:7a:f6:81:7b:f8:6c:ba:74:99:ff:18:9f:ab:8f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:10:47 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=0eb7412a976cccd60ee8de02e99663c4a43a48df9c982145400c5e7c2b217850, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:de:cf:8e:06:00:fe:8b:41:ce:29:d6:f8: 49:de:03:77:6e:c0:af:5b:cf:c4:5f:ad:de:b4:f7: d2:47:64:0b:0e:5c:53:dd:85:d9:d6:98:00:d0:3b: 38:00:9b:67:9c:9d:f2:2d:2f:2d:f3:e1:db:4a:0d: 14:4d:fa:f1:a4:c2:1b:8a:8e:ae:ad:e4:10:33:9a: 43:86:3f:58:b5:0c:6b:ad:1c:ea:b5:bc:a0:59:82: c2:c6:9a:e2:f8:07:d5:e5:55:15:f2:79:da:c5:7a: 18:0c:4c:fb:f5:94:1c:ea:69:de:88:26:96:dd:a6: f3:68:84:a8:49:d2:37:50:d9:be:2c:f9:9b:7f:82: 13:9e:22:0f:a3:ee:15:a8:10:35:d8:e4:2f:2b:68: d3:94:ec:58:7e:35:35:e8:2b:a9:90:54:88:a0:0b: 09:61:f6:ee:36:39:2e:f2:d3:5a:d5:56:44:4d:31: 9a:72:80:4b:79:8b:14:22:b7:93:6b:32:07:bd:2b: 31:06:f6:c9:2e:15:2b:b5:0d:ff:b1:f7:32:af:c1: d2:5c:f8:d0:1f:7c:90:19:71:2d:78:06:92:f2:db: 05:eb:c0:c6:da:72:59:b6:b3:db:10:31:9a:f7:a8: e1:65:d7:10:2c:b2:fa:4d:c9:c1:a7:da:f1:25:74: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BA:52:00:04:BD:6F:22:43:57:1A:A9:EE:83:C8:17:87:CC:EF:5E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c8a98e0-bc70-4e02-aec8-777faffd09a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:24b0::/45 Signature Algorithm: sha256WithRSAEncryption 81:1b:1c:ab:45:a8:d5:72:2a:fc:4a:e6:75:a0:95:b1:b8:35: 85:bf:83:0d:14:6b:9f:f8:9c:32:74:c5:2f:12:bb:64:74:20: f8:d5:a6:0f:80:bf:08:22:06:72:f4:ab:12:50:77:3a:85:84: fb:7a:e7:f0:6d:c6:1d:84:f6:3a:97:ad:88:b3:65:e3:07:ce: 52:4c:bd:c6:41:70:bd:63:0a:53:dc:29:f5:39:9f:db:57:16: 37:05:0f:e8:49:90:5e:3a:2b:7c:08:2c:58:eb:5c:a5:c6:9c: 7f:39:52:ea:0e:56:72:e4:be:ec:ec:ec:93:a4:3d:89:e4:47: 18:68:72:3a:dd:5b:96:4f:12:da:5e:4d:b7:44:1a:61:e7:c5: fc:9e:d2:38:07:ac:a7:6c:ab:7d:86:c6:f2:30:32:8f:a4:d3: 02:82:82:38:a2:fd:87:b2:64:15:64:38:2e:b0:c7:ff:c0:68: da:d2:30:1c:4b:56:c8:08:bf:27:92:bb:f6:84:94:57:80:48: b6:09:5a:bb:fd:73:8d:f3:7e:51:4b:07:80:64:4f:f2:76:7c: 60:1c:3a:47:fe:72:e5:a4:be:6e:60:14:fa:f2:fa:57:94:ca: 7a:95:51:cb:25:87:30:c5:59:67:1f:32:07:69:ee:df:1d:84: f4:25:4e:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeJ48Vpp69oF7+Gy6dJn/GJ+rj9MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAxMDQ3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWI3NDEyYTk3NmNjY2Q2MGVlOGRlMDJlOTk2NjNjNGE0 M2E0OGRmOWM5ODIxNDU0MDBjNWU3YzJiMjE3ODUwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLSd7PjgYA/otBzinW+EneA3duwK9bz8Rfrd6099JHZAsO XFPdhdnWmADQOzgAm2ecnfItLy3z4dtKDRRN+vGkwhuKjq6t5BAzmkOGP1i1DGut HOq1vKBZgsLGmuL4B9XlVRXyedrFehgMTPv1lBzqad6IJpbdpvNohKhJ0jdQ2b4s +Zt/ghOeIg+j7hWoEDXY5C8raNOU7Fh+NTXoK6mQVIigCwlh9u42OS7y01rVVkRN MZpygEt5ixQit5NrMge9KzEG9skuFSu1Df+x9zKvwdJc+NAffJAZcS14BpLy2wXr wMbaclm2s9sQMZr3qOFl1xAssvpNycGn2vEldGFdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqbpSAAS9byJDVxqp7oPIF4fM714wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzljOGE5OGUwLWJjNzAtNGUwMi1hZWM4LTc3N2ZhZmZkMDlhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAJLAwDQYJKoZIhvcNAQELBQADggEBAIEbHKtFqNVyKvxK5nWglbG4 NYW/gw0Ua5/4nDJ0xS8Su2R0IPjVpg+AvwgiBnL0qxJQdzqFhPt65/Btxh2E9jqX rYizZeMHzlJMvcZBcL1jClPcKfU5n9tXFjcFD+hJkF46K3wILFjrXKXGnH85UuoO VnLkvuzs7JOkPYnkRxhocjrdW5ZPEtpeTbdEGmHnxfye0jgHrKdsq32GxvIwMo+k 0wKCgjii/YeyZBVkOC6wx//AaNrSMBxLVsgIvyeSu/aElFeASLYJWrv9c43zflFL B4BkT/J2fGAcOkf+cuWkvm5gFPry+leUynqVUcslhzDFWWcfMgdp7t8dhPQlTlo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:24 2025 by rpki-client