$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3a6ead7-d007-45d4-bae9-70a2813b7b8b.roa File: d3a6ead7-d007-45d4-bae9-70a2813b7b8b.roa (raw, json) Hash identifier: sG3nd/WRiB0dyl14+AXgcbiom4pPq4tr84SHdHZhQqg= Subject key identifier: 38:7F:BB:CB:FA:3F:69:EA:9F:A4:20:F8:54:01:23:B8:9B:55:F5:DA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0B24F91DCCAF4CD99710BED204080116DB1BC5F8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3a6ead7-d007-45d4-bae9-70a2813b7b8b.roa Signing time: Fri 31 Oct 2025 07:53:51 +0000 ROA not before: Fri 31 Oct 2025 07:53:51 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:24:f9:1d:cc:af:4c:d9:97:10:be:d2:04:08:01:16:db:1b:c5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:53:51 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e68314287deea6d645113b1bb2d9613c5fa69ee9cf1bf39a11927fe411aeb447, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:90:e1:f9:3a:54:52:2b:db:1e:4e:88:d6: dd:7e:71:d0:1c:2a:2a:88:f8:0a:a0:16:b4:99:3f: 24:c8:ce:8a:42:16:57:1d:b3:04:00:a8:a0:3e:09: 06:d7:2e:5e:0d:01:c3:d8:5c:e3:a1:52:ff:3d:67: e1:44:4f:9b:f1:3b:33:f9:ee:6e:19:89:c9:e4:c2: 1c:17:00:39:c7:b5:b9:fe:8d:3e:16:b2:47:0c:11: d0:e7:dc:57:dd:06:37:0e:ec:3e:ea:c7:83:28:46: 50:a9:79:92:aa:bb:f1:f4:b4:b4:b3:41:5f:d5:46: df:f7:d7:1f:d7:61:e4:d2:1b:41:43:72:02:ce:c6: ad:34:f5:23:c0:a7:9d:ae:5a:3f:f8:ff:d5:39:d1: 04:12:8c:ab:8a:a9:3e:54:fc:8b:31:c1:1a:92:ab: 05:d2:ac:01:44:fd:b5:db:fc:60:23:16:0c:4d:88: 3c:c3:c9:37:3e:cd:6b:de:7b:b1:a5:82:39:bc:7e: 04:4f:8f:22:08:f4:b6:eb:ed:44:a4:ba:f0:fc:b0: 28:b3:67:e8:d8:fd:d7:cf:a6:14:e7:d4:00:be:de: eb:60:68:0b:27:8f:c3:d6:93:ef:32:9f:50:87:f9: e8:99:0e:9f:7b:d3:ad:73:02:70:ae:f0:70:4d:9e: e8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7F:BB:CB:FA:3F:69:EA:9F:A4:20:F8:54:01:23:B8:9B:55:F5:DA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3a6ead7-d007-45d4-bae9-70a2813b7b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d00::/40 Signature Algorithm: sha256WithRSAEncryption 3f:1b:c4:ae:b6:f3:3f:89:06:db:be:69:9b:9a:46:ba:64:3c: 57:db:4f:c9:30:a4:00:8f:0e:15:9d:94:6c:cb:41:96:73:0f: b8:22:28:cf:a9:61:8c:c1:b3:28:91:f6:b7:e9:ef:a5:0f:75: 76:10:14:ea:54:ad:34:52:fc:30:54:38:7a:2c:f1:5a:d6:36: 28:ee:cb:04:2b:2f:a6:5d:4d:97:8a:e7:9e:1f:17:d8:b5:1c: 50:05:12:ab:a9:74:0f:60:2b:41:f8:9f:db:d6:c1:c9:8e:63: 5d:63:2e:d2:f4:04:81:2b:57:0c:fb:b9:5c:6f:28:bd:53:f2: d2:ae:4e:91:61:1a:51:bb:99:fd:17:90:33:3b:65:74:e4:80: d9:a3:41:bf:16:72:3d:5e:03:47:f5:b3:a1:60:50:d4:8a:77: 79:c9:46:0a:0c:48:13:c1:f1:1d:49:84:85:70:0b:d5:af:8c: 9d:dc:51:b1:32:d1:39:15:88:5e:30:2e:b6:00:a5:d6:a0:a9: f1:13:d0:3a:66:8a:8f:43:be:2d:6f:70:36:60:14:ac:50:7e: 9f:02:55:f9:9c:1f:81:6b:a5:ed:3c:39:9d:70:71:e2:35:36: cf:6d:ad:35:3c:75:e3:3b:dd:62:bc:ac:5b:57:0d:8a:9c:7b: d4:11:8a:42 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCyT5HcyvTNmXEL7SBAgBFtsbxfgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc1MzUxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjgzMTQyODdkZWVhNmQ2NDUxMTNiMWJiMmQ5NjEzYzVm YTY5ZWU5Y2YxYmYzOWExMTkyN2ZlNDExYWViNDQ3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCskpDh+TpUUivbHk6I1t1+cdAcKiqI+AqgFrSZPyTIzopC FlcdswQAqKA+CQbXLl4NAcPYXOOhUv89Z+FET5vxOzP57m4ZicnkwhwXADnHtbn+ jT4WskcMEdDn3FfdBjcO7D7qx4MoRlCpeZKqu/H0tLSzQV/VRt/31x/XYeTSG0FD cgLOxq009SPAp52uWj/4/9U50QQSjKuKqT5U/IsxwRqSqwXSrAFE/bXb/GAjFgxN iDzDyTc+zWvee7Glgjm8fgRPjyII9Lbr7USkuvD8sCizZ+jY/dfPphTn1AC+3utg aAsnj8PWk+8yn1CH+eiZDp97061zAnCu8HBNnuiTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUOH+7y/o/aeqfpCD4VAEjuJtV9dowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2QzYTZlYWQ3LWQwMDctNDVkNC1iYWU5LTcwYTI4MTNiN2I4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAJAALTANBgkqhkiG9w0BAQsFAAOCAQEAPxvErrbzP4kG275pm5pGumQ8 V9tPyTCkAI8OFZ2UbMtBlnMPuCIoz6lhjMGzKJH2t+nvpQ91dhAU6lStNFL8MFQ4 eizxWtY2KO7LBCsvpl1Nl4rnnh8X2LUcUAUSq6l0D2ArQfif29bByY5jXWMu0vQE gStXDPu5XG8ovVPy0q5OkWEaUbuZ/ReQMztldOSA2aNBvxZyPV4DR/WzoWBQ1Ip3 eclGCgxIE8HxHUmEhXAL1a+MndxRsTLRORWIXjAutgCl1qCp8RPQOmaKj0O+LW9w NmAUrFB+nwJV+ZwfgWul7Tw5nXBx4jU2z22tNTx14zvdYrysW1cNipx71BGKQg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:22 2025 by rpki-client