$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3ff0a2c-8556-49d5-8d2b-f11576abd41d.roa File: a3ff0a2c-8556-49d5-8d2b-f11576abd41d.roa (raw, json) Hash identifier: +F37c4yjNhELH4mkNPrCTEAUE0PflYJJIoKKfU4XLhA= Subject key identifier: 0E:92:2F:84:2A:D6:D0:D7:F9:0D:27:59:8D:4D:F8:2E:FD:57:16:C3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5339C18B395785A906A3EFA02CA70A08B6FF7098 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3ff0a2c-8556-49d5-8d2b-f11576abd41d.roa Signing time: Thu 30 Oct 2025 21:22:13 +0000 ROA not before: Thu 30 Oct 2025 21:22:13 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1640::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:39:c1:8b:39:57:85:a9:06:a3:ef:a0:2c:a7:0a:08:b6:ff:70:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:22:13 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=66320577c2bfbbf9af35249e76af0bb46bc7666d11be55e3cefe9c815b2d989c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:63:92:49:e4:a4:ef:61:24:1f:71:a4:ba: 23:ec:96:0b:27:9d:82:72:62:c4:66:d8:f7:53:cc: af:52:f9:77:40:3c:cf:83:9e:37:64:4c:28:53:77: 4f:79:16:e4:3b:97:bc:1a:bf:98:f3:c9:08:55:ba: 9c:29:28:51:84:fe:83:13:22:ad:ef:b5:72:f8:01: 91:0a:fd:f9:cf:f6:39:b1:52:b0:7b:4e:2f:54:45: 05:58:0b:27:60:d3:36:ac:d8:73:5c:60:a5:71:c5: 92:04:09:be:44:0c:44:c8:87:d7:a5:79:6d:9a:f0: fd:71:05:c0:1f:61:70:59:b1:8a:1c:78:76:9a:68: 37:19:b4:01:a0:79:ad:ef:7d:bb:37:98:2f:b4:ed: 94:5c:f1:f9:31:00:44:6e:16:17:86:48:8d:71:5b: 89:4a:fa:ae:6b:11:68:df:a7:39:a8:85:c2:ef:00: 2c:1d:94:15:63:2d:56:98:2a:b0:75:1f:b6:11:c3: 7b:bb:0b:3c:a6:af:5d:ef:07:be:d3:5d:5b:31:b7: 0d:3e:24:9a:32:23:c8:02:f7:b1:00:08:64:8e:ba: 4b:56:2f:5f:17:eb:07:78:a1:4e:2f:e2:af:7f:d6: fe:cf:e5:dd:a9:23:bb:f5:7b:9e:95:e5:21:9f:17: 90:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:92:2F:84:2A:D6:D0:D7:F9:0D:27:59:8D:4D:F8:2E:FD:57:16:C3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3ff0a2c-8556-49d5-8d2b-f11576abd41d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1640::/47 Signature Algorithm: sha256WithRSAEncryption 5c:19:3b:03:53:ae:a2:9b:01:e8:1f:22:17:ad:7a:85:b6:87: 56:91:b5:3c:bf:7e:8a:dd:da:13:d3:7b:61:66:02:14:02:bc: 80:26:8e:fb:65:f5:28:51:a8:0a:3d:67:02:52:c9:cd:93:26: 2b:1b:fc:f2:fe:74:3f:22:b4:06:4f:2e:a4:bc:3f:ad:74:c6: 42:32:23:0a:5a:70:fe:f8:ed:63:ca:ad:ef:e3:c2:ba:24:eb: 7f:f4:5d:64:e4:bf:cd:20:52:13:96:ec:b9:b8:74:68:6b:d2: b3:ee:19:b2:a5:54:ed:7a:45:3e:37:2c:8d:7c:d7:50:d5:03: ef:42:1f:b4:55:a4:c6:09:15:92:f9:ee:37:ac:01:91:2d:91: 21:6b:44:fb:b8:9e:2f:9e:09:f4:d7:a3:9c:fe:9a:9d:68:2a: 03:aa:5c:1e:6d:3e:b3:30:b2:da:5d:3a:8b:4d:27:89:65:c4: 00:32:e8:c5:98:29:72:a9:9c:52:a6:09:3a:61:09:8d:ad:52: 78:60:59:16:c6:eb:2a:bd:38:82:f2:7f:63:b1:53:eb:92:5a: 66:53:d5:77:9f:5a:f3:da:c5:2a:53:b6:a7:23:ae:e3:be:e8: 20:d3:db:5c:dd:85:72:9c:e6:9e:08:c6:4d:fa:b7:1f:ef:e0: e6:c9:25:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUznBizlXhakGo++gLKcKCLb/cJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyMjEzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjMyMDU3N2MyYmZiYmY5YWYzNTI0OWU3NmFmMGJiNDZi Yzc2NjZkMTFiZTU1ZTNjZWZlOWM4MTViMmQ5ODljMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbZWOSSeSk72EkH3GkuiPslgsnnYJyYsRm2PdTzK9S+XdA PM+DnjdkTChTd095FuQ7l7wav5jzyQhVupwpKFGE/oMTIq3vtXL4AZEK/fnP9jmx UrB7Ti9URQVYCydg0zas2HNcYKVxxZIECb5EDETIh9eleW2a8P1xBcAfYXBZsYoc eHaaaDcZtAGgea3vfbs3mC+07ZRc8fkxAERuFheGSI1xW4lK+q5rEWjfpzmohcLv ACwdlBVjLVaYKrB1H7YRw3u7Czymr13vB77TXVsxtw0+JJoyI8gC97EACGSOuktW L18X6wd4oU4v4q9/1v7P5d2pI7v1e56V5SGfF5A5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDpIvhCrW0Nf5DSdZjU34Lv1XFsMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EzZmYwYTJjLTg1NTYtNDlkNS04ZDJiLWYxMTU3NmFiZDQxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFkAwDQYJKoZIhvcNAQELBQADggEBAFwZOwNTrqKbAegfIheteoW2 h1aRtTy/ford2hPTe2FmAhQCvIAmjvtl9ShRqAo9ZwJSyc2TJisb/PL+dD8itAZP LqS8P610xkIyIwpacP747WPKre/jwrok63/0XWTkv80gUhOW7Lm4dGhr0rPuGbKl VO16RT43LI1811DVA+9CH7RVpMYJFZL57jesAZEtkSFrRPu4ni+eCfTXo5z+mp1o KgOqXB5tPrMwstpdOotNJ4llxAAy6MWYKXKpnFKmCTphCY2tUnhgWRbG6yq9OILy f2OxU+uSWmZT1XefWvPaxSpTtqcjruO+6CDT21zdhXKc5p4Ixk36tx/v4ObJJa4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:08 2025 by rpki-client