$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cc25eee-bc77-407a-9a39-e9869de54892.roa File: 2cc25eee-bc77-407a-9a39-e9869de54892.roa (raw, json) Hash identifier: phDnJV3rxGSg0YLR8ImtjCP/g0nqJ+5ekfLqj64SZts= Subject key identifier: 41:D4:E9:5D:6A:0C:BA:96:20:17:30:EB:93:CB:54:B7:A8:9F:9C:A9 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 75BE291F8A70AA7DF740F5EE48025D885F76C8E1 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cc25eee-bc77-407a-9a39-e9869de54892.roa Signing time: Fri 31 Oct 2025 03:13:18 +0000 ROA not before: Fri 31 Oct 2025 03:13:18 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1f38::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:be:29:1f:8a:70:aa:7d:f7:40:f5:ee:48:02:5d:88:5f:76:c8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:13:18 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c295deb76b1bfb5307b7dfa0053ec0899c8ee32151328069161b935e85099076, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:18:eb:8d:d0:06:90:1f:42:1b:2f:89:b0: 73:60:52:9c:3a:ea:4d:7c:e2:6c:f1:ca:d8:a3:d0: d3:0f:71:7f:94:ae:8e:fb:d7:31:23:ac:be:03:fa: bb:a6:39:19:e1:b0:64:09:68:84:1e:7d:49:ae:e0: 62:4e:6d:aa:4b:37:0f:77:fc:ed:6b:9a:b0:d8:2b: e7:91:fe:da:70:ba:c2:de:08:92:7e:c1:9c:a1:00: 9b:35:78:96:f7:bd:e2:89:e8:41:96:c2:ae:90:94: 98:25:7f:f2:f4:0a:1c:0f:b2:4b:66:9d:6e:87:2a: 00:01:42:9d:fd:3b:cd:e2:57:08:3b:28:67:64:49: 84:91:f4:7e:e3:49:de:86:7a:86:88:bd:df:d4:82: 73:74:81:fa:30:f9:c8:06:79:86:6c:c5:89:0e:1f: 09:13:38:18:74:32:7d:86:af:63:fc:a1:90:8f:93: e8:6c:70:3a:99:02:40:08:68:4f:a9:1a:77:d9:8f: 96:61:03:88:f4:5c:91:be:e9:18:07:26:b0:76:69: 28:6a:c4:60:2d:22:76:5a:49:74:da:41:f8:a6:10: 47:34:c7:a4:a5:fc:de:1f:f2:2e:7a:24:ed:b3:7c: 02:be:e8:a0:12:f6:38:db:9d:b3:d7:e8:63:78:e7: db:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D4:E9:5D:6A:0C:BA:96:20:17:30:EB:93:CB:54:B7:A8:9F:9C:A9 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cc25eee-bc77-407a-9a39-e9869de54892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1f38::/46 Signature Algorithm: sha256WithRSAEncryption 3d:aa:45:f0:87:28:d2:33:12:4c:4b:1d:fd:60:fa:f6:54:37: f3:53:33:45:df:ba:d2:8c:64:46:34:bd:69:57:3a:c2:e1:b9: 03:f4:2b:c6:55:9b:98:3c:47:20:f0:5b:3d:e2:47:0f:e7:b5: 31:95:67:50:7d:e3:29:5a:f4:47:8d:75:85:c5:ff:2f:5a:d8: c9:0c:dc:5b:ab:43:5b:32:b5:c6:c8:c0:2d:89:15:0f:0e:49: 84:80:55:28:74:3e:a1:dd:c1:46:d8:06:54:c1:ce:78:1c:c9: b5:59:42:b9:b6:e5:03:b7:8a:4c:13:ac:b2:94:52:9d:0c:b3: 86:54:d9:77:23:91:3b:d2:3c:57:9c:5c:43:0d:41:01:ca:e6: d7:c0:ed:d5:0e:4a:2e:a5:fb:c8:e3:7c:39:88:15:0b:4b:14: 9e:35:ed:56:58:2d:4f:3f:38:ba:24:f8:4b:d3:81:66:35:51: 55:49:ea:d9:6a:f2:7b:d4:b4:90:ab:21:eb:a5:cb:e8:3a:fc: 96:0b:8e:6c:dd:c0:5d:75:c7:d1:98:a5:96:13:f6:dd:b0:dd: 61:3c:7b:7d:90:01:db:44:52:b0:91:9f:b3:31:fe:6f:3c:6a: 85:48:36:cb:34:0c:ce:86:e3:29:5a:20:f9:fc:f1:75:82:65: 24:eb:07:41 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdb4pH4pwqn33QPXuSAJdiF92yOEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMxMzE4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjk1ZGViNzZiMWJmYjUzMDdiN2RmYTAwNTNlYzA4OTlj OGVlMzIxNTEzMjgwNjkxNjFiOTM1ZTg1MDk5MDc2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6nhjrjdAGkB9CGy+JsHNgUpw66k184mzxytij0NMPcX+U ro771zEjrL4D+rumORnhsGQJaIQefUmu4GJObapLNw93/O1rmrDYK+eR/tpwusLe CJJ+wZyhAJs1eJb3veKJ6EGWwq6QlJglf/L0ChwPsktmnW6HKgABQp39O83iVwg7 KGdkSYSR9H7jSd6GeoaIvd/UgnN0gfow+cgGeYZsxYkOHwkTOBh0Mn2Gr2P8oZCP k+hscDqZAkAIaE+pGnfZj5ZhA4j0XJG+6RgHJrB2aShqxGAtInZaSXTaQfimEEc0 x6Sl/N4f8i56JO2zfAK+6KAS9jjbnbPX6GN459ufAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQdTpXWoMupYgFzDrk8tUt6ifnKkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJjYzI1ZWVlLWJjNzctNDA3YS05YTM5LWU5ODY5ZGU1NDg5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAHzgwDQYJKoZIhvcNAQELBQADggEBAD2qRfCHKNIzEkxLHf1g+vZU N/NTM0XfutKMZEY0vWlXOsLhuQP0K8ZVm5g8RyDwWz3iRw/ntTGVZ1B94yla9EeN dYXF/y9a2MkM3FurQ1sytcbIwC2JFQ8OSYSAVSh0PqHdwUbYBlTBzngcybVZQrm2 5QO3ikwTrLKUUp0Ms4ZU2XcjkTvSPFecXEMNQQHK5tfA7dUOSi6l+8jjfDmIFQtL FJ417VZYLU8/OLok+EvTgWY1UVVJ6tlq8nvUtJCrIeuly+g6/JYLjmzdwF11x9GY pZYT9t2w3WE8e32QAdtEUrCRn7Mx/m88aoVINss0DM6G4ylaIPn88XWCZSTrB0E= -----END CERTIFICATE-----Generated at Wed Nov 5 09:28:35 2025 by rpki-client