$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/abc9ce85-8253-4f73-be7c-a4912f585dae.roa File: abc9ce85-8253-4f73-be7c-a4912f585dae.roa (raw, json) Hash identifier: dF9mzjFgX4tsU+eV1lsR/cnGvyqOeVMgjDAvwHrqUdk= Subject key identifier: 29:ED:57:40:AF:F0:00:36:74:B7:40:FB:4C:C2:EA:19:FA:EC:3A:AA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4F25740BD42EE18783799DA57B93393F723223C7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/abc9ce85-8253-4f73-be7c-a4912f585dae.roa Signing time: Fri 31 Oct 2025 01:58:16 +0000 ROA not before: Fri 31 Oct 2025 01:58:16 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f4a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:25:74:0b:d4:2e:e1:87:83:79:9d:a5:7b:93:39:3f:72:32:23:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:58:16 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=3c9d86b1fc135ae1d3a92b649e72efb1090621f36be4e0796d0013759dfd37e7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:3e:6e:f4:70:48:7c:e8:8c:5d:24:e0:a4: 2a:d1:76:78:ee:91:9b:53:00:49:97:d5:26:c0:60: 63:22:0f:67:14:50:c6:78:ed:65:ce:b3:9f:84:02: 60:26:16:2b:ce:0a:b3:6d:ef:de:57:2b:1f:f7:e1: 75:a0:33:71:23:b6:71:39:d5:2e:00:4f:a8:fd:1a: 69:87:26:35:f1:13:f2:0d:97:3e:37:5f:79:72:c5: 84:bb:3d:de:d8:a1:44:b5:72:90:f1:4b:5f:34:db: 74:3b:bd:83:c3:c5:15:fe:3a:92:50:f0:16:da:f4: 9d:0c:8e:d5:8b:fd:bf:29:06:08:8c:2b:a4:e4:9d: b0:b3:7d:cc:d2:13:81:24:29:fa:0e:bb:40:8d:e5: 04:b1:c0:1e:52:a2:4b:0b:d4:71:66:85:82:23:2f: 36:2d:5b:ee:7a:02:5b:c8:fe:72:1a:5d:0f:6c:58: 89:93:69:5b:b7:9c:2e:aa:cc:e5:67:8a:94:a6:45: 78:08:29:55:7d:77:b9:79:32:ec:2a:71:46:b2:9e: 97:18:1d:8f:69:3a:a8:dc:d4:91:d2:8e:ec:0c:6d: 17:c7:47:ec:7d:a3:44:f1:6b:d3:5e:80:6b:19:8f: 7f:c8:47:ba:a7:f7:a2:bc:d9:0e:8a:6b:1f:6b:f2: c9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:ED:57:40:AF:F0:00:36:74:B7:40:FB:4C:C2:EA:19:FA:EC:3A:AA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/abc9ce85-8253-4f73-be7c-a4912f585dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f4a::/47 Signature Algorithm: sha256WithRSAEncryption 60:21:5b:3c:61:d4:fa:7d:22:15:a2:08:c3:7b:24:7c:33:6e: 52:2b:f1:1b:19:e3:b9:4d:9c:4f:7c:5d:9b:b5:ed:b6:8b:b1: 44:2b:d5:48:a0:bc:4d:aa:52:bf:f1:a7:7b:cb:d4:fc:1d:e0: c3:43:b5:23:2f:6d:2d:6a:f6:65:71:1b:d7:03:ec:38:d4:dc: cc:f4:92:8b:d4:11:93:d8:1e:be:b5:8b:30:d5:6e:d0:43:13: 15:73:d6:0d:aa:99:00:83:4e:44:b6:87:c8:0b:d2:1d:be:8f: d0:0d:82:60:6e:30:70:87:59:87:6a:4d:dd:95:34:2a:63:34: 7c:a9:ac:f6:25:63:c4:05:4a:4c:a6:c8:b2:64:47:91:88:0d: 6a:a1:4a:ea:da:78:a9:87:39:a2:f7:10:71:1c:5c:5a:70:a4: d2:5d:00:97:24:20:4e:6c:20:e2:56:65:43:5c:68:6e:90:14: 36:10:16:04:d5:ad:9f:38:26:95:28:2a:ed:c9:f1:7f:af:07: b4:3f:49:55:21:90:f7:a0:f7:d8:c3:89:0f:27:dc:d0:c6:49: 06:35:4e:2b:b6:47:e0:bc:83:80:0d:d1:9a:ab:55:f2:6c:6e: b1:10:25:5c:f1:ef:00:1b:0b:9c:c4:ed:c8:db:23:4f:23:27: 00:4f:1e:bb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTyV0C9Qu4YeDeZ2le5M5P3IyI8cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDE1ODE2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzlkODZiMWZjMTM1YWUxZDNhOTJiNjQ5ZTcyZWZiMTA5 MDYyMWYzNmJlNGUwNzk2ZDAwMTM3NTlkZmQzN2U3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTYD5u9HBIfOiMXSTgpCrRdnjukZtTAEmX1SbAYGMiD2cU UMZ47WXOs5+EAmAmFivOCrNt795XKx/34XWgM3EjtnE51S4AT6j9GmmHJjXxE/IN lz43X3lyxYS7Pd7YoUS1cpDxS18023Q7vYPDxRX+OpJQ8Bba9J0MjtWL/b8pBgiM K6TknbCzfczSE4EkKfoOu0CN5QSxwB5SoksL1HFmhYIjLzYtW+56AlvI/nIaXQ9s WImTaVu3nC6qzOVnipSmRXgIKVV9d7l5MuwqcUaynpcYHY9pOqjc1JHSjuwMbRfH R+x9o0Txa9NegGsZj3/IR7qn96K82Q6Kax9r8snhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKe1XQK/wADZ0t0D7TMLqGfrsOqowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FiYzljZTg1LTgyNTMtNGY3My1iZTdjLWE0OTEyZjU4NWRhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAP0owDQYJKoZIhvcNAQELBQADggEBAGAhWzxh1Pp9IhWiCMN7JHwz blIr8RsZ47lNnE98XZu17baLsUQr1UigvE2qUr/xp3vL1Pwd4MNDtSMvbS1q9mVx G9cD7DjU3Mz0kovUEZPYHr61izDVbtBDExVz1g2qmQCDTkS2h8gL0h2+j9ANgmBu MHCHWYdqTd2VNCpjNHyprPYlY8QFSkymyLJkR5GIDWqhSuraeKmHOaL3EHEcXFpw pNJdAJckIE5sIOJWZUNcaG6QFDYQFgTVrZ84JpUoKu3J8X+vB7Q/SVUhkPeg99jD iQ8n3NDGSQY1Tiu2R+C8g4AN0ZqrVfJsbrEQJVzx7wAbC5zE7cjbI08jJwBPHrs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:46 2025 by rpki-client