$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e884ac0f-820f-4f58-be7f-3e9953c38125.roa File: e884ac0f-820f-4f58-be7f-3e9953c38125.roa (raw, json) Hash identifier: LPzKjm1TvyyVUSsjYOlBzUQIWTbMSJ/XluK9ptHpbxk= Subject key identifier: 46:1D:22:7A:68:E8:A1:DC:0D:C5:14:85:FC:F6:C2:EE:BB:35:B7:D7 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 46E7B3D5528F03C66993AC42F33845F71EDA2494 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e884ac0f-820f-4f58-be7f-3e9953c38125.roa Signing time: Fri 31 Oct 2025 05:43:49 +0000 ROA not before: Fri 31 Oct 2025 05:43:49 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c58::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e7:b3:d5:52:8f:03:c6:69:93:ac:42:f3:38:45:f7:1e:da:24:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:43:49 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=dda4c81d5ca396c005915a079b475a267ccfcf9da1d2605bdacf1e4b1b4dad57, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:db:72:ae:64:3f:60:51:d1:5c:01:e9:e1: c8:8a:03:f9:e8:bd:9f:b8:4f:81:e6:6e:74:47:df: 72:16:47:a6:c6:05:f7:7d:e7:8d:b8:67:c9:41:bf: e5:a4:da:ab:3c:07:50:01:e3:a1:0b:82:72:a5:1b: 9e:49:5f:10:d9:d4:bd:bd:14:64:b6:54:fd:a6:72: 51:1f:f7:b6:dc:02:cd:6b:dd:66:ae:2c:49:cf:3a: 84:4f:e7:9a:5c:fa:9e:09:8b:ec:6c:0b:43:1b:fb: 40:a3:46:d3:2b:b7:1a:7f:c8:93:03:58:7b:23:46: 84:d3:8e:66:2b:25:81:7d:d8:d2:22:b7:f8:45:43: 31:ed:13:ea:82:78:7f:04:cc:a7:b4:5e:8c:75:d8: 79:b7:a9:b1:3c:46:37:b0:c7:fa:dd:24:e0:25:49: 18:ee:7b:42:37:6f:d6:7c:6e:16:0d:3e:e2:2e:48: 29:ef:ea:14:f9:ec:3d:1a:e3:4b:39:aa:e4:1b:b5: 7e:fa:a7:79:34:4d:bc:12:8f:73:fa:dd:02:63:a5: 5c:e9:29:5d:a5:45:f7:2a:73:1b:51:9b:cd:72:ad: 49:32:32:98:38:87:90:eb:cc:08:13:9d:f6:37:c4: 3e:6c:54:56:36:a5:44:a0:97:ad:1b:f6:cd:de:c5: 45:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1D:22:7A:68:E8:A1:DC:0D:C5:14:85:FC:F6:C2:EE:BB:35:B7:D7 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e884ac0f-820f-4f58-be7f-3e9953c38125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c58::/45 Signature Algorithm: sha256WithRSAEncryption 96:cc:ef:f0:0d:19:b4:26:e3:a9:80:d4:fd:1b:60:4e:e9:b8: a9:38:f5:f2:87:9b:0b:62:7e:02:53:fc:0d:53:c4:9b:12:e1: 30:95:f8:e9:c4:83:38:09:4f:e9:1b:fe:42:73:df:0e:4e:e7: aa:3a:14:cd:17:8c:6f:85:a2:21:90:cd:9c:41:e6:50:7d:8d: e2:0a:73:ea:e4:7e:ac:9f:47:aa:4d:23:f8:a6:b7:7c:4b:e6: 46:bd:b2:73:55:ae:b6:e1:d1:6e:ad:9b:31:6a:cb:b0:5d:8c: 21:14:61:51:2d:9b:d5:a0:49:d2:a5:6a:bc:51:f8:c5:44:70: 2b:a5:95:22:3e:bc:d9:3b:6d:49:c6:3c:40:68:f0:22:f3:08: 05:ac:b3:c0:88:91:8a:76:60:c3:af:00:45:ae:80:cb:b5:d1: 43:41:12:aa:0d:1d:52:60:ca:30:f5:49:cd:4b:5e:c3:3e:2d: 8d:75:4b:7d:cf:8b:4a:a0:4e:13:2d:a3:fe:52:75:34:15:fe: 22:fc:6a:03:87:60:7d:3a:72:8b:2a:f2:f3:37:be:ee:f0:f2: 4b:1a:94:f1:80:80:5b:d8:6d:96:93:64:25:7b:29:be:22:b5: 68:d5:da:bc:24:b4:f3:5d:9a:06:35:18:9d:4c:0b:04:be:f2: c6:33:91:84 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURuez1VKPA8Zpk6xC8zhF9x7aJJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU0MzQ5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGE0YzgxZDVjYTM5NmMwMDU5MTVhMDc5YjQ3NWEyNjdj Y2ZjZjlkYTFkMjYwNWJkYWNmMWU0YjFiNGRhZDU3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHBttyrmQ/YFHRXAHp4ciKA/novZ+4T4HmbnRH33IWR6bG Bfd95424Z8lBv+Wk2qs8B1AB46ELgnKlG55JXxDZ1L29FGS2VP2mclEf97bcAs1r 3WauLEnPOoRP55pc+p4Ji+xsC0Mb+0CjRtMrtxp/yJMDWHsjRoTTjmYrJYF92NIi t/hFQzHtE+qCeH8EzKe0Xox12Hm3qbE8Rjewx/rdJOAlSRjue0I3b9Z8bhYNPuIu SCnv6hT57D0a40s5quQbtX76p3k0TbwSj3P63QJjpVzpKV2lRfcqcxtRm81yrUky Mpg4h5DrzAgTnfY3xD5sVFY2pUSgl60b9s3exUWTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURh0iemjoodwNxRSF/PbC7rs1t9cwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2U4ODRhYzBmLTgyMGYtNGY1OC1iZTdmLTNlOTk1M2MzODEyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALFgwDQYJKoZIhvcNAQELBQADggEBAJbM7/ANGbQm46mA1P0bYE7p uKk49fKHmwtifgJT/A1TxJsS4TCV+OnEgzgJT+kb/kJz3w5O56o6FM0XjG+FoiGQ zZxB5lB9jeIKc+rkfqyfR6pNI/imt3xL5ka9snNVrrbh0W6tmzFqy7BdjCEUYVEt m9WgSdKlarxR+MVEcCullSI+vNk7bUnGPEBo8CLzCAWss8CIkYp2YMOvAEWugMu1 0UNBEqoNHVJgyjD1Sc1LXsM+LY11S33Pi0qgThMto/5SdTQV/iL8agOHYH06cosq 8vM3vu7w8ksalPGAgFvYbZaTZCV7Kb4itWjV2rwktPNdmgY1GJ1MCwS+8sYzkYQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:32 2025 by rpki-client