$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b23dec6d-463d-4db6-8708-7f9dff0710fa.roa File: b23dec6d-463d-4db6-8708-7f9dff0710fa.roa (raw, json) Hash identifier: WFjI1ToGDYFkJR6Z8KS0fT8BDuNFme0hzbsBfyIg2AY= Subject key identifier: C4:FD:82:7F:DE:A1:EF:9D:1E:F3:86:B4:17:41:C8:50:E0:81:E3:BD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0C24EFEB373E5265F7CA79B68196D0BCA4A4DD69 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b23dec6d-463d-4db6-8708-7f9dff0710fa.roa Signing time: Fri 31 Oct 2025 02:40:31 +0000 ROA not before: Fri 31 Oct 2025 02:40:31 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:170c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:24:ef:eb:37:3e:52:65:f7:ca:79:b6:81:96:d0:bc:a4:a4:dd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:40:31 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=7c757608375e7635b0bf2f28ef573e14493b7447388b6d9577495d819140f8a3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:fa:15:9a:d5:d2:4d:d5:41:de:90:9b:81: b9:ed:20:c5:91:a9:8f:47:35:52:de:8d:61:8d:a7: 26:76:28:c7:20:51:af:f1:93:64:0d:40:d0:d5:eb: c8:b4:c9:38:ee:15:41:54:2c:03:58:28:19:80:b2: bd:29:14:3c:6c:a8:8c:54:ce:5e:59:cc:64:00:e7: 65:15:78:3e:8c:27:c2:74:90:b4:38:94:92:fb:02: 78:2f:1a:9a:1e:5e:5a:40:a3:4c:06:9c:c0:bc:00: 9c:2b:85:6c:66:51:62:d5:f9:a2:25:16:3d:fb:af: a9:f6:0a:cf:11:2d:d7:90:42:99:a8:8a:de:08:c4: f9:a5:6c:41:04:a7:5b:a1:a5:71:a3:ba:82:1e:ac: fc:7d:20:da:dd:93:7f:e5:62:a3:6f:fd:35:5a:fa: cd:03:a0:28:ca:b1:dd:bc:22:43:e6:8a:ac:5b:b4: 03:07:a2:28:95:58:55:05:bf:22:06:54:f4:5b:da: c7:0d:1a:3b:2c:ac:13:3c:9f:5e:82:50:9f:d2:d7: 4e:5d:6a:cf:20:8b:6a:ad:cf:f3:9f:1a:d5:a5:e3: 89:84:ee:56:56:75:dc:71:eb:45:df:a1:a9:7f:80: 82:a0:0c:8b:e7:ea:c8:75:e5:ca:11:a9:b9:c2:c2: 60:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FD:82:7F:DE:A1:EF:9D:1E:F3:86:B4:17:41:C8:50:E0:81:E3:BD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b23dec6d-463d-4db6-8708-7f9dff0710fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:170c::/46 Signature Algorithm: sha256WithRSAEncryption 1f:f4:45:1d:64:39:7f:97:df:dc:71:1e:c6:9f:f8:05:80:59: 89:57:f8:4b:94:ee:5b:db:e8:f0:77:e8:8f:6e:22:6d:97:75: b4:cb:74:b6:90:1f:5b:77:9c:62:34:6e:b0:23:6d:b0:c8:4b: 08:bc:96:49:36:9b:88:45:47:70:b0:68:5a:05:a8:48:88:23: 3e:e4:3b:89:1c:e0:47:a8:fd:54:ad:10:b5:c5:d9:eb:f8:8d: f5:d9:4f:9d:79:c9:31:58:83:ed:7c:bf:f6:f4:19:06:10:e8: bc:20:4e:87:5d:4b:eb:6d:4e:ed:86:b6:9f:4a:5f:57:f2:20: e7:75:70:f8:27:55:03:c6:8f:e0:50:33:10:7c:6f:65:09:a0: c7:6a:4e:85:b2:c4:09:9f:bb:b2:1e:10:6a:2b:36:a2:27:3a: 1c:a9:f1:d7:9a:af:cf:62:2b:3a:bd:e3:80:a6:06:a7:dc:ac: 3e:26:59:22:c2:3b:da:38:75:12:35:d8:70:1e:5b:1b:60:9a: 29:1a:e0:5f:b9:3f:1d:7a:bf:b2:fc:0f:69:6e:0a:fe:69:bc: d9:ed:b6:87:20:71:c1:0c:6b:af:fb:a2:06:f1:48:48:46:62: c0:47:00:24:e5:8c:ef:f8:b1:22:4d:92:c8:ed:4e:78:bb:c1: 17:9e:01:90 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDCTv6zc+UmX3ynm2gZbQvKSk3WkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI0MDMxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Yzc1NzYwODM3NWU3NjM1YjBiZjJmMjhlZjU3M2UxNDQ5 M2I3NDQ3Mzg4YjZkOTU3NzQ5NWQ4MTkxNDBmOGEzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfHPoVmtXSTdVB3pCbgbntIMWRqY9HNVLejWGNpyZ2KMcg Ua/xk2QNQNDV68i0yTjuFUFULANYKBmAsr0pFDxsqIxUzl5ZzGQA52UVeD6MJ8J0 kLQ4lJL7AngvGpoeXlpAo0wGnMC8AJwrhWxmUWLV+aIlFj37r6n2Cs8RLdeQQpmo it4IxPmlbEEEp1uhpXGjuoIerPx9INrdk3/lYqNv/TVa+s0DoCjKsd28IkPmiqxb tAMHoiiVWFUFvyIGVPRb2scNGjssrBM8n16CUJ/S105das8gi2qtz/OfGtWl44mE 7lZWddxx60Xfoal/gIKgDIvn6sh15coRqbnCwmBJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxP2Cf96h750e84a0F0HIUOCB470wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2IyM2RlYzZkLTQ2M2QtNGRiNi04NzA4LTdmOWRmZjA3MTBmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAFwwwDQYJKoZIhvcNAQELBQADggEBAB/0RR1kOX+X39xxHsaf+AWA WYlX+EuU7lvb6PB36I9uIm2XdbTLdLaQH1t3nGI0brAjbbDISwi8lkk2m4hFR3Cw aFoFqEiIIz7kO4kc4Eeo/VStELXF2ev4jfXZT515yTFYg+18v/b0GQYQ6LwgTodd S+ttTu2Gtp9KX1fyIOd1cPgnVQPGj+BQMxB8b2UJoMdqToWyxAmfu7IeEGorNqIn Ohyp8dear89iKzq944CmBqfcrD4mWSLCO9o4dRI12HAeWxtgmika4F+5Px16v7L8 D2luCv5pvNnttocgccEMa6/7ogbxSEhGYsBHACTljO/4sSJNksjtTni7wReeAZA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:34:49 2025 by rpki-client