$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b1e9db15-cd30-47ea-a2b3-4e71e5882543.roa File: b1e9db15-cd30-47ea-a2b3-4e71e5882543.roa (raw, json) Hash identifier: yHDEc6AOTPQRiTQG/QCYlKm9swRqHDsDGlfV37glFco= Subject key identifier: A1:98:B6:14:CD:59:EA:66:20:8D:18:66:80:11:C0:1A:1D:1A:23:A9 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7BD46098966D092CAEF14418A30D473356B09742 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b1e9db15-cd30-47ea-a2b3-4e71e5882543.roa Signing time: Fri 31 Oct 2025 02:41:57 +0000 ROA not before: Fri 31 Oct 2025 02:41:57 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1728::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d4:60:98:96:6d:09:2c:ae:f1:44:18:a3:0d:47:33:56:b0:97:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:41:57 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=6843ed0eb8333a43b5194b15a256d89f1b0d73d718a5485280d810976b902c0f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c6:2d:1b:29:48:e3:4b:97:f5:1e:be:b3:66: 8f:9e:a8:dd:7a:82:11:78:02:0e:71:06:aa:30:fb: 03:56:99:cd:04:53:d5:f6:45:c4:8c:d0:1f:5d:bb: 91:e3:fe:a5:77:05:63:f2:e9:6c:e1:73:05:23:67: d2:cc:0b:c3:38:6f:ee:ae:55:6c:e0:2e:10:b6:53: e7:fb:98:97:cb:07:c9:be:5f:2b:f2:1e:b9:3e:db: 02:22:a7:4a:1e:1f:c0:a0:7d:aa:46:56:3d:04:b9: c8:28:c9:a5:e8:fb:79:86:5e:0b:8f:5d:1e:3b:72: 37:00:79:5e:2b:19:f2:a6:1e:0d:fd:ab:6d:81:77: fb:0a:6b:0e:f6:24:46:ad:62:e5:8c:d2:52:05:39: 7e:49:9a:96:b2:8b:22:4d:53:5f:f4:07:28:6a:49: 1d:00:99:72:de:a1:77:6d:fe:18:df:f6:3c:6e:c7: 3d:01:5d:bf:59:7b:0e:58:04:e8:34:fc:27:49:36: 56:df:56:c6:36:50:93:00:be:97:96:bc:7b:a8:a4: a1:f8:40:35:48:b8:b9:a2:da:9f:a7:b8:f0:d6:65: 16:6e:5b:74:13:08:5f:a9:1e:be:aa:fb:09:92:f4: de:3e:bb:ff:fa:a0:8e:67:6d:37:f7:66:da:98:03: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:98:B6:14:CD:59:EA:66:20:8D:18:66:80:11:C0:1A:1D:1A:23:A9 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b1e9db15-cd30-47ea-a2b3-4e71e5882543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1728::/46 Signature Algorithm: sha256WithRSAEncryption 6d:cb:fd:07:03:8e:e9:cc:91:69:b1:f5:1d:bc:7d:6d:00:cc: 2b:53:30:cf:6d:94:6f:86:c1:77:57:70:cb:a5:0a:e1:aa:c7: dc:70:07:0d:c4:49:23:56:43:69:bc:20:a0:db:a8:b6:cd:8f: 32:52:e6:d2:e2:2c:2d:6d:84:37:e4:83:18:1f:d5:8c:b5:2a: a4:66:f7:f5:6b:4e:8c:81:df:21:04:4e:89:70:81:0e:13:65: 71:89:c3:a1:7f:f9:74:02:be:6a:77:d5:6b:b9:17:50:fa:37: 4c:d4:af:1a:37:89:71:7d:b5:0f:05:16:fa:69:88:e7:f0:0d: 68:e2:4b:22:44:c0:d9:e7:e2:cf:45:bf:65:6d:16:2e:89:7f: ec:5c:0b:ee:5a:15:af:fa:d0:ab:58:20:c7:41:5f:fc:91:9b: 40:14:03:98:9d:3e:6c:54:54:61:a8:81:82:1d:a9:1c:18:12: 41:14:e5:f0:f4:d1:54:9a:75:9f:ab:61:bf:d5:9f:30:8a:de: 62:89:d6:61:47:01:a0:49:32:ca:ab:21:47:6d:e2:10:aa:64: 96:6b:2f:7e:db:2a:5b:72:0f:ed:53:ee:89:b7:8f:1d:e6:d5: 06:b4:a3:30:b8:80:d8:02:cc:4e:6f:dc:b4:36:b5:d2:03:54: cf:40:0d:dd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe9RgmJZtCSyu8UQYow1HM1awl0IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI0MTU3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODQzZWQwZWI4MzMzYTQzYjUxOTRiMTVhMjU2ZDg5ZjFi MGQ3M2Q3MThhNTQ4NTI4MGQ4MTA5NzZiOTAyYzBmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPxi0bKUjjS5f1Hr6zZo+eqN16ghF4Ag5xBqow+wNWmc0E U9X2RcSM0B9du5Hj/qV3BWPy6WzhcwUjZ9LMC8M4b+6uVWzgLhC2U+f7mJfLB8m+ XyvyHrk+2wIip0oeH8CgfapGVj0EucgoyaXo+3mGXguPXR47cjcAeV4rGfKmHg39 q22Bd/sKaw72JEatYuWM0lIFOX5JmpayiyJNU1/0ByhqSR0AmXLeoXdt/hjf9jxu xz0BXb9Zew5YBOg0/CdJNlbfVsY2UJMAvpeWvHuopKH4QDVIuLmi2p+nuPDWZRZu W3QTCF+pHr6q+wmS9N4+u//6oI5nbTf3ZtqYA03bAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoZi2FM1Z6mYgjRhmgBHAGh0aI6kwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2IxZTlkYjE1LWNkMzAtNDdlYS1hMmIzLTRlNzFlNTg4MjU0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAFygwDQYJKoZIhvcNAQELBQADggEBAG3L/QcDjunMkWmx9R28fW0A zCtTMM9tlG+GwXdXcMulCuGqx9xwBw3ESSNWQ2m8IKDbqLbNjzJS5tLiLC1thDfk gxgf1Yy1KqRm9/VrToyB3yEETolwgQ4TZXGJw6F/+XQCvmp31Wu5F1D6N0zUrxo3 iXF9tQ8FFvppiOfwDWjiSyJEwNnn4s9Fv2VtFi6Jf+xcC+5aFa/60KtYIMdBX/yR m0AUA5idPmxUVGGogYIdqRwYEkEU5fD00VSadZ+rYb/VnzCK3mKJ1mFHAaBJMsqr IUdt4hCqZJZrL37bKltyD+1T7om3jx3m1Qa0ozC4gNgCzE5v3LQ2tdIDVM9ADd0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:59:59 2025 by rpki-client