$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e38d885-46a7-4c49-9f9d-670104a190d0.roa File: 2e38d885-46a7-4c49-9f9d-670104a190d0.roa (raw, json) Hash identifier: I0y3XhlOPIDUYNee8dnjl/eg5eQHqxJ9wpfQUBlokhs= Subject key identifier: E4:47:10:BF:4A:30:1C:59:D1:73:BB:9F:D4:92:FD:24:89:88:05:C8 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 68725FAB93D24EEF9F1A35113069555AF9CA1681 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e38d885-46a7-4c49-9f9d-670104a190d0.roa Signing time: Thu 30 Oct 2025 22:12:00 +0000 ROA not before: Thu 30 Oct 2025 22:12:00 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1b9e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:72:5f:ab:93:d2:4e:ef:9f:1a:35:11:30:69:55:5a:f9:ca:16:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:12:00 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=36486c2506b8dc87563f46aa9c5c4ff6ac13d8dac216aa215e1203134cdfa070, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:53:dd:26:9a:33:8c:4e:61:f8:ac:2f:57: 98:8a:aa:57:44:d8:1b:d9:26:d9:66:5f:c7:86:35: 28:dd:f6:65:cb:5b:4a:fb:ee:f2:b2:b2:7c:cc:b5: cd:d2:85:25:90:f8:f1:1c:b1:41:df:bc:9d:33:e7: d1:8f:87:c4:bd:cb:ce:f1:a1:b7:b0:03:1c:ad:f3: b3:c4:35:1b:1f:d9:be:28:97:14:b8:80:8d:4c:92: ab:0a:26:41:31:46:5a:d4:29:fb:45:91:5d:ea:5c: d9:de:f0:e3:be:69:f8:e2:4b:2a:d1:de:ec:1b:92: 7b:25:cb:40:fd:a1:8b:e0:f0:4a:68:de:22:7a:c4: 33:d2:93:2b:5b:05:c7:2d:1c:76:6b:79:7d:32:f5: 87:a6:9a:4c:44:f4:c1:06:cc:40:ec:58:82:8b:e9: 4a:3a:71:a8:a4:d4:aa:20:b1:0c:56:0e:9d:24:be: 5d:dd:c2:1d:46:59:c7:53:ae:10:d4:f9:c1:83:e1: b2:fa:cf:dc:3e:5e:9e:78:a9:9e:3b:9b:d4:ea:25: 06:1b:32:6e:fe:ff:84:85:7d:b3:a6:d9:d9:a4:3a: a5:c1:3d:05:ed:4b:b7:cc:8d:95:f4:56:c4:f3:d9: 60:6f:6d:fa:dc:be:66:78:45:da:ae:d2:4f:34:e3: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:47:10:BF:4A:30:1C:59:D1:73:BB:9F:D4:92:FD:24:89:88:05:C8 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e38d885-46a7-4c49-9f9d-670104a190d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1b9e::/47 Signature Algorithm: sha256WithRSAEncryption 38:78:1e:2f:ec:58:f0:ba:89:6b:e9:55:97:07:65:ba:96:96: 5c:59:aa:00:26:f7:75:00:42:bf:66:33:98:7d:5e:fb:70:3d: 6d:fa:6e:21:3b:19:a7:2c:f4:87:8b:34:9d:18:3b:84:22:32: 08:dd:61:f1:f9:5a:ac:f4:14:37:71:ae:61:59:16:aa:70:35: 63:ea:30:94:2b:cb:9e:8d:80:ec:d1:55:dd:87:0a:15:52:ea: ac:82:bd:5c:2c:20:80:04:19:ef:40:b0:31:b7:87:6d:d0:f5: 49:9d:33:5c:ae:32:00:dc:07:d6:79:59:9a:e3:4c:cb:c8:b9: c1:9e:8d:e1:72:e4:9a:7b:e3:97:d9:de:80:0b:99:a6:3c:53: 03:37:b6:ed:70:bd:1e:10:54:89:1d:89:92:bf:69:6a:2d:3b: 6e:83:86:de:1e:10:95:a5:cb:77:68:fd:8f:1e:9c:98:4b:1f: 6d:06:d5:ec:47:ae:22:2d:4f:b7:cf:bf:3a:76:ac:49:ac:ae: df:19:eb:c1:4b:39:9b:59:31:d6:f0:c3:26:65:f9:cd:cb:74: 7c:86:ea:17:ee:d1:34:cf:a7:09:9b:00:fc:73:50:a3:06:17: 18:74:99:80:a0:d0:d4:66:94:83:1f:86:c6:ea:96:9a:12:70: d5:25:71:35 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaHJfq5PSTu+fGjURMGlVWvnKFoEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIxMjAwWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjQ4NmMyNTA2YjhkYzg3NTYzZjQ2YWE5YzVjNGZmNmFj MTNkOGRhYzIxNmFhMjE1ZTEyMDMxMzRjZGZhMDcwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrAVPdJpozjE5h+KwvV5iKqldE2BvZJtlmX8eGNSjd9mXL W0r77vKysnzMtc3ShSWQ+PEcsUHfvJ0z59GPh8S9y87xobewAxyt87PENRsf2b4o lxS4gI1MkqsKJkExRlrUKftFkV3qXNne8OO+afjiSyrR3uwbknsly0D9oYvg8Epo 3iJ6xDPSkytbBcctHHZreX0y9YemmkxE9MEGzEDsWIKL6Uo6caik1KogsQxWDp0k vl3dwh1GWcdTrhDU+cGD4bL6z9w+Xp54qZ47m9TqJQYbMm7+/4SFfbOm2dmkOqXB PQXtS7fMjZX0VsTz2WBvbfrcvmZ4Rdqu0k8044bBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5EcQv0owHFnRc7uf1JL9JImIBcgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJlMzhkODg1LTQ2YTctNGM0OS05ZjlkLTY3MDEwNGExOTBkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAG54wDQYJKoZIhvcNAQELBQADggEBADh4Hi/sWPC6iWvpVZcHZbqW llxZqgAm93UAQr9mM5h9XvtwPW36biE7Gacs9IeLNJ0YO4QiMgjdYfH5Wqz0FDdx rmFZFqpwNWPqMJQry56NgOzRVd2HChVS6qyCvVwsIIAEGe9AsDG3h23Q9UmdM1yu MgDcB9Z5WZrjTMvIucGejeFy5Jp745fZ3oALmaY8UwM3tu1wvR4QVIkdiZK/aWot O26Dht4eEJWly3do/Y8enJhLH20G1exHriItT7fPvzp2rEmsrt8Z68FLOZtZMdbw wyZl+c3LdHyG6hfu0TTPpwmbAPxzUKMGFxh0mYCg0NRmlIMfhsbqlpoScNUlcTU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:11 2025 by rpki-client