$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1858bd1-48f6-462f-a007-4c8c06ccab07.roa File: c1858bd1-48f6-462f-a007-4c8c06ccab07.roa (raw, json) Hash identifier: oj+Nlo0NoY4GNAJgv5f7aWZ+fmgp9RTw+Hg4OsX0gfI= Subject key identifier: BB:47:59:8F:8E:DB:67:36:4B:D8:12:B3:D8:D2:4A:DA:7B:84:BC:AE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 764B3EFFF1164717C2EFB8C27B72F724B4B9EB25 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1858bd1-48f6-462f-a007-4c8c06ccab07.roa Signing time: Fri 31 Oct 2025 07:52:08 +0000 ROA not before: Fri 31 Oct 2025 07:52:08 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4b:3e:ff:f1:16:47:17:c2:ef:b8:c2:7b:72:f7:24:b4:b9:eb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:52:08 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=1dec0f12468b20611a452f3c62dcd16f7e4b77ba18a908593dc9579225e04c28, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:e5:da:18:3c:5a:28:11:5d:58:b5:17:49: a7:74:82:63:73:91:1f:ae:2f:40:3e:54:c7:38:ce: 21:ff:ec:d6:4c:36:54:8d:22:6b:1f:43:bf:61:ee: 3b:a6:54:f8:8a:01:14:6c:c4:0f:e4:32:72:8e:41: 7f:63:64:83:3d:64:7f:6b:7a:ac:46:16:7d:a3:d6: dd:87:0b:7b:69:99:16:ed:35:4e:b3:f8:27:16:d5: 15:0a:37:56:94:79:a6:ca:65:7b:a2:1a:30:f3:09: 40:02:71:30:2e:1f:82:18:4b:84:46:d8:88:fe:64: cd:c8:4d:9a:60:90:b1:aa:59:1c:f1:d8:07:91:14: f0:51:2e:41:5d:1f:33:ea:8b:30:46:c7:fe:42:77: c7:52:1b:30:a6:14:0f:1a:c3:12:65:b0:1b:d2:19: 0f:fd:fc:c6:ca:a6:ed:9f:a0:da:64:1f:bd:c3:94: 2c:d3:a4:2d:c2:ab:e4:68:78:f8:c1:f6:a5:f3:c7: 3a:c3:66:c7:5a:db:4c:64:5b:dc:e8:10:60:42:2a: 80:76:6a:d7:4d:bb:de:8d:7d:9f:4b:7e:e4:f6:92: a4:48:dd:19:2e:87:5d:30:34:d6:81:23:45:c7:60: 88:53:a7:67:6a:02:c7:c9:63:87:75:66:ba:4d:e3: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:47:59:8F:8E:DB:67:36:4B:D8:12:B3:D8:D2:4A:DA:7B:84:BC:AE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1858bd1-48f6-462f-a007-4c8c06ccab07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f80::/41 Signature Algorithm: sha256WithRSAEncryption b9:54:86:0a:93:02:2f:d7:30:25:ac:6f:6f:47:43:16:2c:2d: 4b:6f:5b:87:e8:9e:ad:87:66:36:64:e1:5d:5b:36:2b:05:ba: aa:98:8d:bf:3a:2b:e0:49:76:c0:34:94:b7:35:db:1d:c8:56: 8d:dd:7c:c4:4f:c3:c2:ce:88:d5:4b:34:95:11:52:ef:9c:ce: 7d:c6:5a:f7:99:ac:73:cc:e5:52:9b:52:82:93:fa:d2:8a:5f: b4:46:52:c0:ba:b8:b0:19:29:26:90:b1:5a:a9:48:9d:03:de: 22:0c:af:92:a1:c2:0d:2f:b1:ed:a6:96:3a:01:14:e3:b6:20: e3:3d:58:01:b1:13:31:50:5a:2c:f3:4e:fa:c5:61:65:a5:67: c2:32:55:40:0c:43:c2:a8:1d:d5:cd:18:52:01:35:c9:ee:73: f6:fe:db:90:ee:40:30:70:fd:06:d0:f0:6a:2f:49:d2:67:36: 6e:00:3a:d8:78:37:c0:c1:b2:c9:64:2d:c2:81:4c:78:ce:37: c6:61:33:44:05:b1:74:5d:f7:9d:5a:2f:8a:e1:49:59:f7:04: 10:b3:85:ff:9e:4c:78:72:44:92:42:ce:e0:f2:db:fd:cb:19: 81:c2:65:a6:35:ae:1e:54:95:3b:29:a0:fa:78:57:17:df:05: 36:c8:32:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdks+//EWRxfC77jCe3L3JLS56yUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc1MjA4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGVjMGYxMjQ2OGIyMDYxMWE0NTJmM2M2MmRjZDE2Zjdl NGI3N2JhMThhOTA4NTkzZGM5NTc5MjI1ZTA0YzI4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8peXaGDxaKBFdWLUXSad0gmNzkR+uL0A+VMc4ziH/7NZM NlSNImsfQ79h7jumVPiKARRsxA/kMnKOQX9jZIM9ZH9reqxGFn2j1t2HC3tpmRbt NU6z+CcW1RUKN1aUeabKZXuiGjDzCUACcTAuH4IYS4RG2Ij+ZM3ITZpgkLGqWRzx 2AeRFPBRLkFdHzPqizBGx/5Cd8dSGzCmFA8awxJlsBvSGQ/9/MbKpu2foNpkH73D lCzTpC3Cq+RoePjB9qXzxzrDZsda20xkW9zoEGBCKoB2atdNu96NfZ9LfuT2kqRI 3Rkuh10wNNaBI0XHYIhTp2dqAsfJY4d1ZrpN43uXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUu0dZj47bZzZL2BKz2NJK2nuEvK4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2MxODU4YmQxLTQ4ZjYtNDYyZi1hMDA3LTRjOGMwNmNjYWIwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwcmAJAAP4AwDQYJKoZIhvcNAQELBQADggEBALlUhgqTAi/XMCWsb29HQxYs LUtvW4fonq2HZjZk4V1bNisFuqqYjb86K+BJdsA0lLc12x3IVo3dfMRPw8LOiNVL NJURUu+czn3GWveZrHPM5VKbUoKT+tKKX7RGUsC6uLAZKSaQsVqpSJ0D3iIMr5Kh wg0vse2mljoBFOO2IOM9WAGxEzFQWizzTvrFYWWlZ8IyVUAMQ8KoHdXNGFIBNcnu c/b+25DuQDBw/QbQ8GovSdJnNm4AOth4N8DBsslkLcKBTHjON8ZhM0QFsXRd951a L4rhSVn3BBCzhf+eTHhyRJJCzuDy2/3LGYHCZaY1rh5UlTspoPp4VxffBTbIMi4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:39:09 2025 by rpki-client