$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe927883-70db-485b-9df4-e3b861f8f636.roa File: fe927883-70db-485b-9df4-e3b861f8f636.roa (raw, json) Hash identifier: 7rAbNWqE1xXwakTKwapw4D3KT1DDqIKVhkD8MSZWVNE= Subject key identifier: F4:AF:A2:F7:A2:9F:D0:D4:71:07:12:04:69:6F:B4:15:C5:96:01:75 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 19A60A58C43B622FD0E5D4C93CD42EDC52D13478 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe927883-70db-485b-9df4-e3b861f8f636.roa Signing time: Fri 31 Oct 2025 05:58:43 +0000 ROA not before: Fri 31 Oct 2025 05:58:43 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:34b8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a6:0a:58:c4:3b:62:2f:d0:e5:d4:c9:3c:d4:2e:dc:52:d1:34:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:58:43 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=4faecbb38b2300d91619a15ffd19fed5692f17553fb2ff92fad07ecc71239d07, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:84:c4:65:08:6a:9d:cd:8d:fa:17:df:26:4e: 1d:c4:f8:12:4d:f3:f2:7d:2c:b7:b9:ac:40:2b:33: 77:74:9a:77:44:27:bd:d9:4b:65:9d:81:92:4d:21: 68:b8:6a:87:3f:32:1f:6f:83:f0:64:64:2f:de:28: 08:96:a6:98:38:15:07:23:7a:a6:12:ad:04:1f:10: b4:2f:71:fe:84:f8:c7:9a:34:b9:f2:83:45:a3:17: 30:8d:ae:84:49:87:05:51:55:82:88:5f:94:d4:bf: a7:d4:2c:07:64:ba:ed:f1:00:01:a9:93:a1:fd:b2: 3d:1b:70:c5:1a:76:ea:8b:cf:06:d5:ee:b9:78:34: 5e:0f:9a:c7:03:56:da:28:d5:85:35:d0:f2:f8:27: 08:4b:dc:c9:41:4e:3a:fc:0c:f7:3e:e5:2d:7f:f4: 68:6d:a3:ab:20:a2:7f:e3:5a:d3:d9:be:56:f1:11: 4c:82:e7:46:69:b8:38:f9:27:91:0e:10:f5:97:dc: 08:80:8a:98:3d:dc:c9:89:b8:02:ed:1f:39:7d:6e: 50:2f:4b:e5:a3:f5:bd:7a:b7:d7:6a:7c:67:c6:68: cf:b4:09:79:3a:f0:f7:49:a3:4e:68:40:9b:3c:71: 08:6e:a0:ef:22:50:a0:c4:6e:0c:9e:3b:d0:11:2e: 26:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AF:A2:F7:A2:9F:D0:D4:71:07:12:04:69:6F:B4:15:C5:96:01:75 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe927883-70db-485b-9df4-e3b861f8f636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:34b8::/45 Signature Algorithm: sha256WithRSAEncryption bc:e7:3e:d1:3d:07:e7:0b:f7:7c:d0:b8:86:4b:1a:ff:39:2f: 73:73:56:74:58:93:08:1a:fb:f7:86:c1:9f:df:a0:12:17:69: 36:df:96:b4:4e:4e:bd:b7:fe:9d:ee:61:d7:36:38:8d:23:2e: b4:c9:0a:0e:0f:96:96:6a:c4:3a:be:94:54:34:e5:3e:b5:ff: 2a:12:53:b7:9f:ff:8c:94:37:ca:ce:58:a9:10:56:c7:e5:32: e6:dc:82:2e:8a:c2:7e:73:dd:1c:76:8f:0c:95:df:09:41:4c: 3c:42:27:6a:e3:42:fd:5b:26:96:39:09:81:55:e4:5f:5a:89: 66:eb:23:e8:8b:43:48:85:07:d4:5c:91:55:98:14:28:2f:0f: 84:97:93:76:01:c3:08:44:71:d9:f9:0f:ab:c7:39:1d:39:40: f0:8c:91:81:4e:ec:fa:d8:27:a1:d6:66:6e:3b:9a:3b:e9:96: ff:7b:08:8c:b9:4b:4a:6c:14:bb:a6:8c:3d:56:57:f5:d1:80: 2b:6c:29:9f:7a:ba:7f:90:4a:21:d1:83:9e:f0:23:b3:98:9f: 9e:d2:c7:2f:5f:f2:eb:28:95:89:ea:6c:77:b3:67:43:5a:4f: 14:f9:32:46:03:9a:fc:f3:98:a3:5f:1e:e9:c5:0a:93:82:d4: 11:86:ca:02 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGaYKWMQ7Yi/Q5dTJPNQu3FLRNHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1ODQzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmFlY2JiMzhiMjMwMGQ5MTYxOWExNWZmZDE5ZmVkNTY5 MmYxNzU1M2ZiMmZmOTJmYWQwN2VjYzcxMjM5ZDA3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHhMRlCGqdzY36F98mTh3E+BJN8/J9LLe5rEArM3d0mndE J73ZS2WdgZJNIWi4aoc/Mh9vg/BkZC/eKAiWppg4FQcjeqYSrQQfELQvcf6E+Mea NLnyg0WjFzCNroRJhwVRVYKIX5TUv6fULAdkuu3xAAGpk6H9sj0bcMUaduqLzwbV 7rl4NF4PmscDVtoo1YU10PL4JwhL3MlBTjr8DPc+5S1/9Ghto6sgon/jWtPZvlbx EUyC50ZpuDj5J5EOEPWX3AiAipg93MmJuALtHzl9blAvS+Wj9b16t9dqfGfGaM+0 CXk68PdJo05oQJs8cQhuoO8iUKDEbgyeO9ARLiY5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9K+i96Kf0NRxBxIEaW+0FcWWAXUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ZlOTI3ODgzLTcwZGItNDg1Yi05ZGY0LWUzYjg2MWY4ZjYzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAANLgwDQYJKoZIhvcNAQELBQADggEBALznPtE9B+cL93zQuIZLGv85 L3NzVnRYkwga+/eGwZ/foBIXaTbflrROTr23/p3uYdc2OI0jLrTJCg4PlpZqxDq+ lFQ05T61/yoSU7ef/4yUN8rOWKkQVsflMubcgi6Kwn5z3Rx2jwyV3wlBTDxCJ2rj Qv1bJpY5CYFV5F9aiWbrI+iLQ0iFB9RckVWYFCgvD4SXk3YBwwhEcdn5D6vHOR05 QPCMkYFO7PrYJ6HWZm47mjvplv97CIy5S0psFLumjD1WV/XRgCtsKZ96un+QSiHR g57wI7OYn57Sxy9f8usolYnqbHezZ0NaTxT5MkYDmvzzmKNfHunFCpOC1BGGygI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:16 2025 by rpki-client