$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d14e650b-c831-48de-b97c-24d6f99ccf64.roa File: d14e650b-c831-48de-b97c-24d6f99ccf64.roa (raw, json) Hash identifier: m0NPMtvMhkzbC/MyDvcTvlDwtTZYqxRWuLTI/H0zDzI= Subject key identifier: DF:B4:CF:6C:C4:0F:F2:41:25:BC:06:32:B2:48:7A:3F:86:9A:7D:BF Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7C9E3A14D60351ECC036947F75DEA6C462C3ECC0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d14e650b-c831-48de-b97c-24d6f99ccf64.roa Signing time: Fri 31 Oct 2025 04:06:52 +0000 ROA not before: Fri 31 Oct 2025 04:06:52 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3364::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9e:3a:14:d6:03:51:ec:c0:36:94:7f:75:de:a6:c4:62:c3:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:06:52 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=44e941c3ae21a62c5c6e1c17211faad3d85c03d345fbbf19f51d45095de7630c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:2b:4f:a9:53:8b:1c:bb:89:30:e0:35:d2: cd:b8:3e:cc:8e:86:52:6b:01:5d:c7:4c:fc:af:f9: 21:40:19:55:ef:56:d4:bb:16:a0:98:cf:75:38:cd: 92:2b:63:90:69:49:64:9b:75:e3:0a:68:66:fd:6b: a6:1d:44:f9:91:c7:8c:74:80:e8:66:6f:c6:c5:11: 47:b1:02:e9:fb:db:2c:ae:d5:9b:73:cf:40:9d:fb: 13:c7:fb:35:81:bc:3f:5a:42:b1:30:08:94:18:42: 6e:09:9c:13:d1:8c:a2:c9:c7:97:fb:c0:1f:00:cc: 5e:6f:74:58:bc:c8:e6:59:d7:35:5b:f3:f7:ec:9f: f1:7a:d4:6e:72:38:9b:8f:1f:1f:3e:04:c3:df:7b: ef:a3:83:17:e4:5f:9e:46:69:a7:96:13:96:67:66: 75:92:b2:f0:0e:ec:95:6f:88:26:65:fd:eb:3d:94: d9:4b:45:69:0a:46:ef:f0:e6:3b:30:a1:52:ac:36: a3:b4:f8:a3:ef:fa:78:c6:22:ee:4d:55:b5:10:dd: 14:97:3e:18:2a:8c:95:85:1b:60:fa:a6:f4:ad:2d: f3:66:04:8a:b7:90:78:ff:2d:b4:4a:5f:ba:bf:7d: c2:0d:39:71:8e:17:0b:61:f1:cc:47:47:47:a6:10: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B4:CF:6C:C4:0F:F2:41:25:BC:06:32:B2:48:7A:3F:86:9A:7D:BF X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d14e650b-c831-48de-b97c-24d6f99ccf64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3364::/46 Signature Algorithm: sha256WithRSAEncryption 46:c9:a7:8b:ca:e7:52:66:c7:c2:ff:9a:b7:f8:e2:ba:31:f5: 74:cc:2e:95:bd:b1:81:bf:e9:99:ae:70:07:a9:43:52:90:cc: ba:f9:52:71:1a:f1:78:a7:0f:71:a2:50:5b:e7:43:e1:a1:68: 89:b4:80:8b:9f:95:bd:13:08:1c:90:df:4d:ef:3d:a2:c0:7a: 43:bb:08:79:04:ac:b6:c6:cc:3a:d9:5f:03:54:35:a8:0f:99: c3:f7:c6:83:1d:99:46:2d:82:3c:f0:de:8f:78:84:28:c5:2a: 29:1c:ea:74:51:07:91:1b:48:83:1d:e1:8c:fd:b4:e9:8b:e2: c0:3c:b3:8a:d3:2b:57:d5:c6:8c:60:67:33:dd:c0:05:10:a4: e9:5b:f5:df:41:dd:98:cf:e5:69:ae:cf:83:0e:d9:b8:aa:be: 04:9a:4d:9b:5c:52:f0:06:78:dd:56:5d:5d:37:9f:71:25:de: cd:97:90:ed:0c:ad:d0:60:11:c5:79:2f:7c:83:1c:68:4a:ee: 22:c0:74:46:1e:c7:db:58:ff:db:70:1f:39:a4:65:0a:c6:b7: ea:7d:19:e3:1e:6b:bf:e1:06:72:2a:ec:b9:1b:6d:0e:3b:4f: 5f:8a:7a:b0:e0:14:21:42:04:10:06:51:e7:32:3d:26:b8:d0: 6b:0e:74:0e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfJ46FNYDUezANpR/dd6mxGLD7MAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQwNjUyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGU5NDFjM2FlMjFhNjJjNWM2ZTFjMTcyMTFmYWFkM2Q4 NWMwM2QzNDVmYmJmMTlmNTFkNDUwOTVkZTc2MzBjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjrCtPqVOLHLuJMOA10s24PsyOhlJrAV3HTPyv+SFAGVXv VtS7FqCYz3U4zZIrY5BpSWSbdeMKaGb9a6YdRPmRx4x0gOhmb8bFEUexAun72yyu 1Ztzz0Cd+xPH+zWBvD9aQrEwCJQYQm4JnBPRjKLJx5f7wB8AzF5vdFi8yOZZ1zVb 8/fsn/F61G5yOJuPHx8+BMPfe++jgxfkX55GaaeWE5ZnZnWSsvAO7JVviCZl/es9 lNlLRWkKRu/w5jswoVKsNqO0+KPv+njGIu5NVbUQ3RSXPhgqjJWFG2D6pvStLfNm BIq3kHj/LbRKX7q/fcINOXGOFwth8cxHR0emEKW/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU37TPbMQP8kElvAYyskh6P4aafb8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2QxNGU2NTBiLWM4MzEtNDhkZS1iOTdjLTI0ZDZmOTljY2Y2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAM2QwDQYJKoZIhvcNAQELBQADggEBAEbJp4vK51Jmx8L/mrf44rox 9XTMLpW9sYG/6ZmucAepQ1KQzLr5UnEa8XinD3GiUFvnQ+GhaIm0gIuflb0TCByQ 303vPaLAekO7CHkErLbGzDrZXwNUNagPmcP3xoMdmUYtgjzw3o94hCjFKikc6nRR B5EbSIMd4Yz9tOmL4sA8s4rTK1fVxoxgZzPdwAUQpOlb9d9B3ZjP5Wmuz4MO2biq vgSaTZtcUvAGeN1WXV03n3El3s2XkO0MrdBgEcV5L3yDHGhK7iLAdEYex9tY/9tw HzmkZQrGt+p9GeMea7/hBnIq7LkbbQ47T1+KerDgFCFCBBAGUecyPSa40GsOdA4= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:43 2025 by rpki-client