$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ef8fa43-e8a7-485a-a7fa-94431147d16e.roa File: 8ef8fa43-e8a7-485a-a7fa-94431147d16e.roa (raw, json) Hash identifier: mJttatK7Ijs5INmcHMwGUQubqvyetEtBqApUj2IOEdU= Subject key identifier: 02:DD:D5:3A:60:A4:DD:7B:9D:41:1B:41:01:68:F6:1F:5C:1E:49:88 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 062DC30E591E0BE5D5135D34A04ED956E9130909 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ef8fa43-e8a7-485a-a7fa-94431147d16e.roa Signing time: Fri 31 Oct 2025 05:14:05 +0000 ROA not before: Fri 31 Oct 2025 05:14:05 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1788::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2d:c3:0e:59:1e:0b:e5:d5:13:5d:34:a0:4e:d9:56:e9:13:09:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:14:05 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=87f4584ee88d78021010660b66bedbf8ccd670f5497c678c7c94d240bed4d6d6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e0:78:5a:b3:e8:56:46:ef:5a:79:99:ec:80: 2b:3f:20:9a:54:93:17:e7:c7:43:39:57:ba:d5:33: 69:0e:4e:ad:9c:3a:a7:da:35:14:80:ae:ef:2f:c7: d5:08:a6:13:c7:b0:c2:c6:1b:44:39:81:83:a0:30: 05:1e:6a:1e:33:a6:1c:97:3c:ee:e2:74:2f:e1:9a: d6:4e:db:97:07:11:47:6c:43:16:f0:d2:b3:c9:15: 2c:32:61:bf:d3:62:8f:9a:e4:b6:97:b8:8f:3c:fc: 2d:77:64:7c:ce:e2:cc:bc:d9:03:86:55:06:86:8e: a7:9b:b5:74:aa:10:2e:c6:cb:b4:11:61:ad:a7:52: fb:89:9b:03:37:69:43:3b:dd:51:03:83:cf:4b:67: 9f:21:b9:60:10:94:86:d4:aa:da:71:a8:08:de:5e: b5:20:9c:4b:48:3c:fe:20:05:09:20:c3:74:ce:a1: 1a:aa:79:ea:79:a1:62:29:21:29:4d:aa:e2:40:1b: 25:28:9c:78:05:65:42:c7:2d:ac:6d:e9:4b:dd:49: 4a:2c:45:a0:90:f9:f1:d5:c7:49:35:86:bc:8b:3f: 02:f6:9b:b3:b4:d8:88:97:1b:4c:21:8b:5c:c2:d0: 82:1e:bc:3c:61:5f:13:12:f0:e6:94:17:b3:38:36: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DD:D5:3A:60:A4:DD:7B:9D:41:1B:41:01:68:F6:1F:5C:1E:49:88 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ef8fa43-e8a7-485a-a7fa-94431147d16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1788::/45 Signature Algorithm: sha256WithRSAEncryption 93:84:1e:14:0d:fd:27:a6:e6:08:f3:7a:ae:f0:9e:0f:32:2c: 07:fa:f1:59:87:fa:3b:b6:ee:97:a1:0f:d1:66:c9:36:ae:12: 4a:95:50:1b:1d:34:8f:b2:b2:c3:7d:b7:e9:bf:15:a8:cd:76: 90:42:b9:ae:b2:fa:36:76:8a:e9:42:7b:a7:44:09:4d:d5:df: d8:0f:5a:67:79:c6:7b:20:b5:e8:2d:2b:4b:e8:22:8c:e5:b6: fa:1f:24:3a:36:6a:33:57:be:37:d9:7d:38:e9:8f:f2:8a:ca: e6:06:22:3a:ae:06:27:04:18:b8:10:e6:a3:e6:b9:c7:0d:bf: 18:5b:f4:0b:72:43:12:25:76:e0:65:a3:cd:39:e2:dd:41:87: 24:04:6a:d4:d5:6e:82:40:39:36:51:54:e0:ee:77:7d:ac:bf: 8b:d4:87:99:df:92:38:2c:4d:92:75:3a:a7:cf:19:cd:ee:3c: ca:19:23:01:90:d0:83:94:07:e9:58:34:c5:c7:4a:ba:93:c6: 45:e5:ae:09:79:7b:14:42:b4:27:9d:b4:08:c1:83:f6:97:ea: ff:0f:6c:cf:02:ca:39:5d:a6:ab:f6:98:fd:11:44:8c:25:85: 20:09:04:6f:f2:33:16:43:8b:d9:79:e6:9a:97:ca:dc:01:e8: 35:ab:f2:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBi3DDlkeC+XVE100oE7ZVukTCQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUxNDA1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2Y0NTg0ZWU4OGQ3ODAyMTAxMDY2MGI2NmJlZGJmOGNj ZDY3MGY1NDk3YzY3OGM3Yzk0ZDI0MGJlZDRkNmQ2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDh4Hhas+hWRu9aeZnsgCs/IJpUkxfnx0M5V7rVM2kOTq2c OqfaNRSAru8vx9UIphPHsMLGG0Q5gYOgMAUeah4zphyXPO7idC/hmtZO25cHEUds Qxbw0rPJFSwyYb/TYo+a5LaXuI88/C13ZHzO4sy82QOGVQaGjqebtXSqEC7Gy7QR Ya2nUvuJmwM3aUM73VEDg89LZ58huWAQlIbUqtpxqAjeXrUgnEtIPP4gBQkgw3TO oRqqeep5oWIpISlNquJAGyUonHgFZULHLaxt6UvdSUosRaCQ+fHVx0k1hryLPwL2 m7O02IiXG0whi1zC0IIevDxhXxMS8OaUF7M4NszjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAt3VOmCk3XudQRtBAWj2H1weSYgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhlZjhmYTQzLWU4YTctNDg1YS1hN2ZhLTk0NDMxMTQ3ZDE2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAF4gwDQYJKoZIhvcNAQELBQADggEBAJOEHhQN/Sem5gjzeq7wng8y LAf68VmH+ju27pehD9FmyTauEkqVUBsdNI+yssN9t+m/FajNdpBCua6y+jZ2iulC e6dECU3V39gPWmd5xnsgtegtK0voIozltvofJDo2ajNXvjfZfTjpj/KKyuYGIjqu BicEGLgQ5qPmuccNvxhb9AtyQxIlduBlo8054t1BhyQEatTVboJAOTZRVODud32s v4vUh5nfkjgsTZJ1OqfPGc3uPMoZIwGQ0IOUB+lYNMXHSrqTxkXlrgl5exRCtCed tAjBg/aX6v8PbM8Cyjldpqv2mP0RRIwlhSAJBG/yMxZDi9l55pqXytwB6DWr8gs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:48 2025 by rpki-client