$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff385da0-3e1d-43f1-88dd-2e09254350a2.roa File: ff385da0-3e1d-43f1-88dd-2e09254350a2.roa (raw, json) Hash identifier: Qt13hEsh5MWz+Ox9VdpNPYTuBpDEciljHyVowyKL4F0= Subject key identifier: DF:B8:69:2A:25:63:F6:31:47:14:79:87:D1:57:89:61:6D:39:15:8F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3662A52141D9054AEAA46128D77177783763DBC4 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff385da0-3e1d-43f1-88dd-2e09254350a2.roa Signing time: Fri 31 Oct 2025 07:38:49 +0000 ROA not before: Fri 31 Oct 2025 07:38:49 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:29c0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:62:a5:21:41:d9:05:4a:ea:a4:61:28:d7:71:77:78:37:63:db:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:38:49 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=8b493c5df491af046ed88955e9ee4fea1c77ac9e3871a87558f82c1ec8cb6182, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:26:a0:b5:2d:5d:ae:70:03:87:e3:f1:ba: eb:3e:00:a9:15:a3:6a:dd:15:1f:aa:53:b7:56:93: 2b:d1:51:a1:87:aa:11:47:92:7e:3d:f7:bc:81:4d: 25:52:98:36:f3:83:7f:ed:17:2b:21:21:9c:d8:22: 4a:e1:f1:44:4f:7c:13:60:c3:35:e9:8f:00:53:2f: d1:67:17:d2:5d:31:6e:d5:52:74:ce:c9:85:27:23: 82:a0:07:7e:70:25:3e:02:5c:d5:d8:50:57:20:84: 65:96:05:ba:a0:bf:86:54:2d:78:e5:56:d6:66:da: f6:25:eb:ba:4a:87:ab:5b:21:3c:81:2c:d8:d0:c0: c9:7e:1b:0f:06:17:1e:b7:6e:3a:75:72:01:34:1c: 03:43:15:04:57:4c:0b:fd:a5:6a:8a:eb:d4:25:2f: 2f:4d:76:86:03:a5:a0:ba:52:f0:9c:8c:ee:77:8a: 82:07:24:9d:d5:df:9a:8b:7a:5d:d5:55:f5:23:69: bd:fa:d6:83:31:21:39:92:c5:aa:2c:93:f1:4a:6d: 0b:71:c6:88:3e:47:ec:8b:9c:d9:65:aa:22:91:1f: af:65:67:2a:91:16:44:2f:02:26:4e:4f:0f:14:1c: d5:8d:1d:62:30:da:44:4f:f8:2a:f2:02:74:3a:78: 47:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B8:69:2A:25:63:F6:31:47:14:79:87:D1:57:89:61:6D:39:15:8F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff385da0-3e1d-43f1-88dd-2e09254350a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:29c0::/42 Signature Algorithm: sha256WithRSAEncryption ac:59:c1:44:23:a1:f3:63:25:69:ba:7d:cd:3e:74:88:2a:99: 9f:c7:25:e2:1e:d9:6b:9e:17:b5:3c:b4:f1:e1:7a:56:37:87: 40:75:22:d1:a3:52:87:6c:e2:20:cd:11:ce:4d:0f:33:3a:b7: 61:48:21:6b:bc:59:6e:3f:7a:ea:4c:1c:b8:21:47:c8:33:c9: c0:df:92:db:46:87:bc:a6:3a:53:11:ff:1f:2d:21:6c:94:87: 04:5f:49:e5:74:89:ef:fb:8c:05:dd:eb:19:e4:0e:76:38:fb: 23:d9:84:c4:e3:e9:a4:1c:b8:be:18:b1:39:45:c1:e1:a6:ae: e7:5f:d2:9e:3d:70:8c:83:c8:2c:aa:73:65:22:0b:69:6e:b8: 31:b6:02:7f:75:b6:71:7b:e8:39:05:29:90:ac:f0:28:ff:cc: 35:4e:2e:f0:22:82:d4:2c:12:79:c7:e5:88:3e:95:83:ba:3c: 70:89:8c:03:1c:ad:fd:2d:c1:6a:07:1a:15:4c:be:90:8d:b5: 5a:dd:57:35:48:dc:02:97:0f:ab:2c:63:d0:c8:c9:4a:ee:55: 8e:a3:62:da:4d:0e:27:55:78:04:4c:e7:aa:99:a0:f9:f5:f4: f4:bc:4d:71:15:c3:60:d8:61:c6:43:40:6d:c4:17:23:7b:d7: 36:77:67:e5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNmKlIUHZBUrqpGEo13F3eDdj28QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDczODQ5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjQ5M2M1ZGY0OTFhZjA0NmVkODg5NTVlOWVlNGZlYTFj NzdhYzllMzg3MWE4NzU1OGY4MmMxZWM4Y2I2MTgyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCXyagtS1drnADh+Pxuus+AKkVo2rdFR+qU7dWkyvRUaGH qhFHkn4997yBTSVSmDbzg3/tFyshIZzYIkrh8URPfBNgwzXpjwBTL9FnF9JdMW7V UnTOyYUnI4KgB35wJT4CXNXYUFcghGWWBbqgv4ZULXjlVtZm2vYl67pKh6tbITyB LNjQwMl+Gw8GFx63bjp1cgE0HANDFQRXTAv9pWqK69QlLy9NdoYDpaC6UvCcjO53 ioIHJJ3V35qLel3VVfUjab361oMxITmSxaosk/FKbQtxxog+R+yLnNllqiKRH69l ZyqRFkQvAiZOTw8UHNWNHWIw2kRP+CryAnQ6eEdhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU37hpKiVj9jFHFHmH0VeJYW05FY8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ZmMzg1ZGEwLTNlMWQtNDNmMS04OGRkLTJlMDkyNTQzNTBhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAJAAKcAwDQYJKoZIhvcNAQELBQADggEBAKxZwUQjofNjJWm6fc0+dIgq mZ/HJeIe2WueF7U8tPHhelY3h0B1ItGjUods4iDNEc5NDzM6t2FIIWu8WW4/eupM HLghR8gzycDfkttGh7ymOlMR/x8tIWyUhwRfSeV0ie/7jAXd6xnkDnY4+yPZhMTj 6aQcuL4YsTlFweGmrudf0p49cIyDyCyqc2UiC2luuDG2An91tnF76DkFKZCs8Cj/ zDVOLvAigtQsEnnH5Yg+lYO6PHCJjAMcrf0twWoHGhVMvpCNtVrdVzVI3AKXD6ss Y9DIyUruVY6jYtpNDidVeARM56qZoPn19PS8TXEVw2DYYcZDQG3EFyN71zZ3Z+U= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:25 2025 by rpki-client