$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d4bbe49e-4a33-4b3c-85f1-511ece9ada72.roa File: d4bbe49e-4a33-4b3c-85f1-511ece9ada72.roa (raw, json) Hash identifier: S5+gHsxZ0e3NMOUZfwNt/mi9lUb1LeNzkbJm0UIDd+8= Subject key identifier: 8A:CB:7F:82:A0:9C:B8:EE:97:70:FB:DB:F1:EA:30:1F:B6:B4:BD:62 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7D2D65B8AE4167C1088591EF5EB6EEF728C983B6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d4bbe49e-4a33-4b3c-85f1-511ece9ada72.roa Signing time: Thu 30 Oct 2025 22:58:53 +0000 ROA not before: Thu 30 Oct 2025 22:58:53 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2a8e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2d:65:b8:ae:41:67:c1:08:85:91:ef:5e:b6:ee:f7:28:c9:83:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:58:53 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=7f031c017287d108ffdea99d0ca9636e979e3a17be3f7282547cba4815b9d925, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:a7:d9:f9:ef:da:a1:ec:3d:e9:f2:93:2e: 63:dd:b5:a3:29:02:41:08:1a:46:af:5c:76:37:73: 6c:ee:f2:33:35:c4:67:5f:d6:94:2a:29:15:ca:de: 76:85:75:e5:15:ba:bc:61:cb:03:43:c2:04:2b:ec: 88:82:2f:dd:91:d5:4e:e2:64:a9:64:84:21:60:05: 74:f4:d4:95:16:41:db:70:ee:4e:96:dd:0f:f6:35: d8:bf:d3:e6:cf:e1:e0:95:17:fa:09:3d:a1:84:4e: 9d:f0:5b:d1:5a:cd:9f:fe:61:7b:c0:75:47:1e:37: 8f:0f:cd:04:33:24:29:6d:11:16:30:96:fe:c1:05: 24:cd:75:c9:70:8c:bd:d6:4c:fe:d0:b1:99:5b:95: c0:3c:7c:cd:67:c6:a0:d2:7d:17:4d:66:3b:f9:c7: 95:51:62:93:9c:58:76:bd:cc:b2:97:fb:ef:7d:6a: 11:88:30:c4:69:ac:2b:21:83:a4:96:7c:9c:a6:67: f4:d0:f4:a3:c7:bb:55:b6:aa:53:1f:60:d3:d4:cf: f7:be:18:52:ed:45:8a:74:d9:e7:51:d7:c5:f7:28: fe:92:94:51:97:2c:f2:32:30:ee:40:ee:bb:c6:b6: 8d:9e:60:e5:9f:06:6e:1e:3e:da:9d:8a:c6:a5:ac: c3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CB:7F:82:A0:9C:B8:EE:97:70:FB:DB:F1:EA:30:1F:B6:B4:BD:62 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d4bbe49e-4a33-4b3c-85f1-511ece9ada72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2a8e::/47 Signature Algorithm: sha256WithRSAEncryption a0:fe:09:da:58:b2:14:3e:d0:3c:72:17:f5:97:62:e2:b9:74: bc:e5:c5:de:b8:e0:a0:11:46:70:ab:04:1b:66:93:3b:7f:4e: 42:4c:00:e2:d2:c2:13:39:e7:a3:2d:41:8f:b9:3b:91:e7:a1: 81:aa:1a:64:ee:c8:e6:e6:9e:c4:01:6c:60:eb:c0:54:32:2c: 46:f8:09:56:c6:80:75:a6:42:b8:00:20:64:38:84:55:13:e5: 3f:39:35:42:6c:ba:d4:c1:0b:06:d4:6b:4b:a3:db:50:21:b0: 4d:26:48:ea:f8:4b:e8:ba:38:8d:df:ec:20:b9:94:13:32:c3: 58:62:1c:be:dd:2f:4e:06:bd:23:a9:30:2b:4d:d4:a0:cc:69: 20:87:f6:dc:97:e3:fe:4a:18:08:b2:9a:ff:65:6c:49:d0:99: 5d:6a:da:b8:be:ba:5f:32:d7:05:db:be:9d:a4:69:52:19:87: cb:a2:19:fe:f1:c3:48:0e:8f:b8:85:5e:1a:38:da:a5:c6:08: f4:5a:31:92:96:79:75:03:d2:7b:79:b7:13:97:79:06:e2:7a: d5:5b:8f:b4:72:7c:d7:cb:9a:c7:cc:ed:35:56:56:f6:8a:bd: 5d:5e:9c:1c:2c:bc:75:39:e5:93:dc:79:d9:7a:eb:cc:dc:6d: d0:65:97:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfS1luK5BZ8EIhZHvXrbu9yjJg7YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI1ODUzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjAzMWMwMTcyODdkMTA4ZmZkZWE5OWQwY2E5NjM2ZTk3 OWUzYTE3YmUzZjcyODI1NDdjYmE0ODE1YjlkOTI1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCY6fZ+e/aoew96fKTLmPdtaMpAkEIGkavXHY3c2zu8jM1 xGdf1pQqKRXK3naFdeUVurxhywNDwgQr7IiCL92R1U7iZKlkhCFgBXT01JUWQdtw 7k6W3Q/2Ndi/0+bP4eCVF/oJPaGETp3wW9FazZ/+YXvAdUceN48PzQQzJCltERYw lv7BBSTNdclwjL3WTP7QsZlblcA8fM1nxqDSfRdNZjv5x5VRYpOcWHa9zLKX++99 ahGIMMRprCshg6SWfJymZ/TQ9KPHu1W2qlMfYNPUz/e+GFLtRYp02edR18X3KP6S lFGXLPIyMO5A7rvGto2eYOWfBm4ePtqdisalrMM9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUist/gqCcuO6XcPvb8eowH7a0vWIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Q0YmJlNDllLTRhMzMtNGIzYy04NWYxLTUxMWVjZTlhZGE3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKo4wDQYJKoZIhvcNAQELBQADggEBAKD+CdpYshQ+0DxyF/WXYuK5 dLzlxd644KARRnCrBBtmkzt/TkJMAOLSwhM556MtQY+5O5HnoYGqGmTuyObmnsQB bGDrwFQyLEb4CVbGgHWmQrgAIGQ4hFUT5T85NUJsutTBCwbUa0uj21AhsE0mSOr4 S+i6OI3f7CC5lBMyw1hiHL7dL04GvSOpMCtN1KDMaSCH9tyX4/5KGAiymv9lbEnQ mV1q2ri+ul8y1wXbvp2kaVIZh8uiGf7xw0gOj7iFXho42qXGCPRaMZKWeXUD0nt5 txOXeQbietVbj7RyfNfLmsfM7TVWVvaKvV1enBwsvHU55ZPcedl668zcbdBll4E= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:24 2025 by rpki-client