$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c64f1f90-55f1-4362-b479-f7a57fd83524.roa File: c64f1f90-55f1-4362-b479-f7a57fd83524.roa (raw, json) Hash identifier: f283sLo+Fs0B4j3Ehlc0KXoCxs83tX448YmaQIISx7c= Subject key identifier: 19:7B:4C:0A:40:CE:DD:7F:7A:58:CB:B0:EA:4F:37:BB:62:F3:56:E4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0F2F234C52BFF14AFDD81EAE8B2A3118436A9D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c64f1f90-55f1-4362-b479-f7a57fd83524.roa Signing time: Fri 31 Oct 2025 04:13:39 +0000 ROA not before: Fri 31 Oct 2025 04:13:39 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:369c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2f:23:4c:52:bf:f1:4a:fd:d8:1e:ae:8b:2a:31:18:43:6a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:13:39 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=3f0fbb28577a1cee3a0e54fc70de2a3d5346c2f2f78cadb87cc7b095da22b87f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:17:d9:80:33:dc:b3:99:c0:78:c6:6b:ac: 1c:40:5c:2e:37:be:33:0a:85:00:db:cc:2c:87:00: f7:ed:74:15:eb:00:0b:0e:82:8f:9e:92:94:d4:30: bd:78:7f:10:9c:67:bc:da:5c:15:99:d6:1b:c7:fe: ab:50:fb:52:21:f9:96:de:47:ba:9f:67:01:5c:8b: 07:dc:ff:76:83:c5:a9:29:23:0d:f4:37:d9:7e:fc: 58:3a:ff:fd:fc:d4:50:5c:52:e8:aa:0f:66:2c:93: 07:55:bc:69:21:5b:4e:c5:01:70:5c:f9:81:2d:e1: 54:d0:38:ba:8a:63:29:20:08:cd:3f:6f:6e:63:3e: 12:e8:6b:54:b2:4f:f1:dc:4e:2c:a2:96:d7:56:50: d0:80:39:e5:57:c7:9f:eb:7b:04:e0:33:04:ea:73: 60:f9:12:35:35:c9:e7:d4:df:00:c7:b2:96:6d:50: d8:76:fb:99:9c:00:b0:6c:80:41:18:20:06:ed:ab: e2:73:bd:e5:4d:0a:66:43:ac:e4:36:2c:d7:b0:db: 27:2a:35:7d:d2:13:ac:14:8f:62:84:a5:49:17:75: 36:6c:1e:7c:4e:29:6d:af:07:35:1f:53:f0:94:cb: d6:f4:eb:80:1d:b4:e0:0a:b0:5c:c0:43:c2:a4:3b: 1c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7B:4C:0A:40:CE:DD:7F:7A:58:CB:B0:EA:4F:37:BB:62:F3:56:E4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c64f1f90-55f1-4362-b479-f7a57fd83524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:369c::/46 Signature Algorithm: sha256WithRSAEncryption 8a:86:53:5e:74:8c:54:7b:2c:cb:c9:4b:32:1c:5f:6b:4f:02: 43:bb:36:52:31:b5:0b:11:b1:10:0a:06:48:c2:b4:b3:0b:73: 78:f6:53:0f:1b:43:05:f2:ab:25:30:27:82:8e:55:27:35:d3: 9f:ec:fe:17:37:d9:af:00:de:d4:94:7c:78:c9:58:45:93:4e: db:b9:77:66:12:8d:81:63:c9:ae:08:68:47:1e:12:41:91:eb: ff:67:80:9e:21:69:06:54:fb:27:f4:99:05:ea:1a:d3:2e:15: 3c:e6:66:3e:4d:36:b7:e9:d9:da:79:95:97:de:0e:96:3d:62: 45:ba:24:e1:08:d5:7b:09:b2:6d:86:25:5e:69:87:a8:b1:c4: 5a:ce:3e:d8:10:e5:4c:f6:18:1f:68:c8:90:62:cf:28:b5:f7: 2b:73:00:6c:e0:74:2a:82:e0:5a:6d:7e:a8:be:67:67:8b:03: cc:06:fd:58:93:34:23:e3:7d:c3:37:5b:6e:0b:ca:71:a0:51: f7:10:b6:cf:42:b3:2e:fe:25:48:f6:08:4b:2d:0d:cb:b7:18: aa:f8:55:8e:73:6f:b5:73:e4:b2:64:59:71:b3:13:23:77:42: ec:6d:1e:93:c6:80:0b:9e:b0:e2:4a:d1:9a:f6:a8:b9:21:00: cd:41:26:2d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITDy8jTFK/8Ur92B6uiyoxGENqnTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMzEwNDEzMzlaFw0yNTEyMDUyMzU5NTla MHoxSTBHBgNVBAUTQDNmMGZiYjI4NTc3YTFjZWUzYTBlNTRmYzcwZGUyYTNkNTM0 NmMyZjJmNzhjYWRiODdjYzdiMDk1ZGEyMmI4N2YxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKKyF9mAM9yzmcB4xmusHEBcLje+MwqFANvMLIcA9+10FesA Cw6Cj56SlNQwvXh/EJxnvNpcFZnWG8f+q1D7UiH5lt5Hup9nAVyLB9z/doPFqSkj DfQ32X78WDr//fzUUFxS6KoPZiyTB1W8aSFbTsUBcFz5gS3hVNA4uopjKSAIzT9v bmM+EuhrVLJP8dxOLKKW11ZQ0IA55VfHn+t7BOAzBOpzYPkSNTXJ59TfAMeylm1Q 2Hb7mZwAsGyAQRggBu2r4nO95U0KZkOs5DYs17DbJyo1fdITrBSPYoSlSRd1Nmwe fE4pba8HNR9T8JTL1vTrgB204AqwXMBDwqQ7HIkCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBQZe0wKQM7df3pYy7DqTze7YvNW5DAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvYzY0ZjFmOTAtNTVmMS00MzYyLWI0NzktZjdhNTdmZDgzNTI0LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHAiYAkAA2nDANBgkqhkiG9w0BAQsFAAOCAQEAioZTXnSMVHssy8lLMhxfa08C Q7s2UjG1CxGxEAoGSMK0swtzePZTDxtDBfKrJTAngo5VJzXTn+z+FzfZrwDe1JR8 eMlYRZNO27l3ZhKNgWPJrghoRx4SQZHr/2eAniFpBlT7J/SZBeoa0y4VPOZmPk02 t+nZ2nmVl94Olj1iRbok4QjVewmybYYlXmmHqLHEWs4+2BDlTPYYH2jIkGLPKLX3 K3MAbOB0KoLgWm1+qL5nZ4sDzAb9WJM0I+N9wzdbbgvKcaBR9xC2z0KzLv4lSPYI Sy0Ny7cYqvhVjnNvtXPksmRZcbMTI3dC7G0ek8aAC56w4krRmvaouSEAzUEmLQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:17 2025 by rpki-client