$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4ebc709-1039-4042-b48b-16122d5ae2b4.roa File: a4ebc709-1039-4042-b48b-16122d5ae2b4.roa (raw, json) Hash identifier: wi8w0K6LnGkjkRiBgqiaXToaK+zB7Qj7+1qNQohQ7AI= Subject key identifier: 6C:71:6F:33:CD:2F:BB:D3:FA:BA:96:82:30:3F:B2:79:B4:EE:D2:DC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6E50557CA6DABC96C4933C94725A751863B0E15C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4ebc709-1039-4042-b48b-16122d5ae2b4.roa Signing time: Fri 31 Oct 2025 04:55:16 +0000 ROA not before: Fri 31 Oct 2025 04:55:16 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3eb4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:50:55:7c:a6:da:bc:96:c4:93:3c:94:72:5a:75:18:63:b0:e1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:55:16 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f3ce31331d750ed8ead2046ccf9253596833807fa2b074875df4eb6eb838cf59, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:96:b8:09:7f:32:22:ae:af:b9:67:2f:b4: 6a:55:2d:2c:91:36:ce:ee:63:43:e6:73:28:b1:0f: 8f:7a:c4:b8:60:a4:5b:03:35:9f:59:f6:ff:e6:60: 2e:91:fc:e3:3c:ae:69:dc:b7:5d:f3:c0:c8:73:d4: 5f:9c:24:e5:b6:fd:25:4c:5a:4b:c4:7d:ac:d0:7e: c1:b4:0a:02:7f:98:b5:d6:04:0c:2c:25:82:d3:98: 95:bb:2f:8e:42:d2:85:04:45:27:20:e9:1a:b2:29: 3e:97:1c:3c:62:3c:cf:9b:0a:d2:f4:0e:32:73:4b: b3:81:97:2a:dd:4d:b4:1d:24:ff:f8:65:b8:bb:37: 59:ee:ab:f6:b6:27:ba:87:3c:8d:e2:71:c7:44:ac: 6b:7a:d4:1b:1c:74:ee:65:86:6a:13:8c:6a:da:73: 36:8c:a4:c3:e8:68:fe:04:8a:7d:41:fb:3f:b6:e9: 64:fc:45:ed:db:5f:64:ec:bd:53:60:35:03:d3:a0: 21:04:6d:4f:db:27:4b:d7:f1:a8:9f:93:dc:0d:fd: e8:e0:11:fc:d1:06:b6:6c:67:34:c0:99:13:65:7e: 04:fe:f2:41:da:9b:5c:0d:05:56:83:ff:a5:6f:e0: 91:b9:b7:00:c7:db:9e:aa:03:cb:20:aa:fe:09:4f: a1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:71:6F:33:CD:2F:BB:D3:FA:BA:96:82:30:3F:B2:79:B4:EE:D2:DC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4ebc709-1039-4042-b48b-16122d5ae2b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3eb4::/46 Signature Algorithm: sha256WithRSAEncryption 99:71:b9:08:7a:f2:3f:c6:ae:dd:f1:01:9b:04:f7:85:5f:89: df:b5:d7:3d:f8:20:99:5b:0e:42:1c:aa:3a:f1:f0:64:20:a0: 48:f1:f8:57:cf:66:ee:0a:c1:d5:59:63:a1:73:47:00:62:f7: eb:96:b7:6c:ff:e3:b0:ec:91:dc:5f:8c:67:e1:0d:b0:43:59: ad:68:95:17:89:92:6c:e4:57:74:24:91:0b:ac:83:70:a6:13: ee:49:20:47:41:e7:a6:fc:27:ef:d2:7d:96:96:dd:e1:d6:f6: 81:65:4c:bd:6e:d6:b0:ca:e3:11:3d:57:00:76:14:6c:8b:b4: c4:5a:57:a4:5f:76:af:31:2d:6f:70:94:75:5e:72:60:45:cd: d7:ce:c3:41:69:0e:a5:be:25:00:e5:b2:ff:97:7d:fb:3f:6b: 77:29:02:ed:5b:15:41:21:0e:aa:c1:4d:5e:a4:8c:b5:3d:6c: 50:92:65:0c:cd:18:9f:b4:25:f9:2b:20:69:7e:10:ba:1c:ea: 33:e2:df:cb:c9:96:db:9d:1f:d1:5c:bb:7e:73:49:22:79:bc: 6f:b7:73:a6:7f:b9:ad:4f:41:b0:4c:24:8f:fa:e6:94:72:26: 21:c6:76:a2:2c:7f:87:ee:23:e2:01:63:31:d3:ef:26:6c:42: f2:38:a0:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUblBVfKbavJbEkzyUclp1GGOw4VwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ1NTE2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2NlMzEzMzFkNzUwZWQ4ZWFkMjA0NmNjZjkyNTM1OTY4 MzM4MDdmYTJiMDc0ODc1ZGY0ZWI2ZWI4MzhjZjU5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+u5a4CX8yIq6vuWcvtGpVLSyRNs7uY0PmcyixD496xLhg pFsDNZ9Z9v/mYC6R/OM8rmnct13zwMhz1F+cJOW2/SVMWkvEfazQfsG0CgJ/mLXW BAwsJYLTmJW7L45C0oUERScg6RqyKT6XHDxiPM+bCtL0DjJzS7OBlyrdTbQdJP/4 Zbi7N1nuq/a2J7qHPI3iccdErGt61BscdO5lhmoTjGraczaMpMPoaP4Ein1B+z+2 6WT8Re3bX2TsvVNgNQPToCEEbU/bJ0vX8aifk9wN/ejgEfzRBrZsZzTAmRNlfgT+ 8kHam1wNBVaD/6Vv4JG5twDH256qA8sgqv4JT6FhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbHFvM80vu9P6upaCMD+yebTu0twwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E0ZWJjNzA5LTEwMzktNDA0Mi1iNDhiLTE2MTIyZDVhZTJiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAPrQwDQYJKoZIhvcNAQELBQADggEBAJlxuQh68j/Grt3xAZsE94Vf id+11z34IJlbDkIcqjrx8GQgoEjx+FfPZu4KwdVZY6FzRwBi9+uWt2z/47Dskdxf jGfhDbBDWa1olReJkmzkV3QkkQusg3CmE+5JIEdB56b8J+/SfZaW3eHW9oFlTL1u 1rDK4xE9VwB2FGyLtMRaV6Rfdq8xLW9wlHVecmBFzdfOw0FpDqW+JQDlsv+Xffs/ a3cpAu1bFUEhDqrBTV6kjLU9bFCSZQzNGJ+0JfkrIGl+ELoc6jPi38vJltudH9Fc u35zSSJ5vG+3c6Z/ua1PQbBMJI/65pRyJiHGdqIsf4fuI+IBYzHT7yZsQvI4oLA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:30:50 2025 by rpki-client