$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2e6f011-086c-4aaa-a903-c42d7fe7e096.roa File: b2e6f011-086c-4aaa-a903-c42d7fe7e096.roa (raw, json) Hash identifier: besvLuQh4huaBSb0DjyBmSK7QrRCL/Styfdvkq4ORRg= Subject key identifier: 96:82:95:14:D0:3A:53:E6:46:6F:DA:33:C3:5A:66:39:26:88:42:3C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 61D2A78788CE4246AA62F686D01231DD53B3EFD1 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2e6f011-086c-4aaa-a903-c42d7fe7e096.roa Signing time: Fri 31 Oct 2025 06:23:55 +0000 ROA not before: Fri 31 Oct 2025 06:23:55 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3e58::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d2:a7:87:88:ce:42:46:aa:62:f6:86:d0:12:31:dd:53:b3:ef:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:23:55 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=23c435c7970a562c26eb714267d8cf5d0375395bf510af07b03a7d0248dcb8eb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:af:e9:d0:da:44:0e:df:f7:ef:92:52:f0:b9: cd:9e:cc:71:6f:9b:2c:d6:c9:0e:f4:59:d3:94:e8: c6:b3:92:45:91:04:eb:28:c6:b3:69:13:eb:92:ad: 78:eb:7a:ab:3f:c3:7d:91:df:30:54:af:ab:dd:bb: 7a:ae:74:f4:55:16:02:82:3d:bf:01:0b:39:68:1f: 23:1a:5a:67:f6:cc:0d:02:83:c8:40:37:1c:b8:0b: 46:78:48:e6:07:36:3c:62:43:dc:c0:ed:df:46:87: 2a:e1:f4:69:61:76:6c:87:59:16:af:0b:38:fc:60: 31:e7:b9:46:43:a0:6d:ea:56:23:9a:c3:bc:8b:33: 96:b7:0a:1d:71:c3:d3:33:7b:a2:49:7c:1a:c1:67: 93:cd:53:be:3f:7a:0f:f4:72:5a:3d:a6:be:fb:8e: 62:0d:86:e8:42:d4:e4:71:bd:07:5a:b0:f4:a2:2b: f7:ab:fa:a1:ca:f5:c5:15:f0:43:67:6e:0b:c2:db: 61:28:c1:a2:fb:dc:e0:ce:fd:51:84:d9:4d:b4:fe: 65:62:21:a2:e7:33:fe:e7:a3:93:c7:c4:6f:ea:78: 6c:04:ac:e4:53:a8:7e:5c:b4:ec:f2:1b:75:46:2e: 3f:bf:e7:f7:97:24:1e:a9:b0:f7:b6:2e:67:9a:eb: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:82:95:14:D0:3A:53:E6:46:6F:DA:33:C3:5A:66:39:26:88:42:3C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2e6f011-086c-4aaa-a903-c42d7fe7e096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3e58::/45 Signature Algorithm: sha256WithRSAEncryption 2f:ec:d4:e6:fa:03:ed:3c:41:15:25:b6:89:a4:81:91:1d:b5: 1e:ce:bf:85:fa:ac:76:1f:ef:68:f3:0c:59:2f:84:c4:2f:07: 3e:0c:36:a8:b1:e8:66:16:12:18:a2:a0:fb:43:e3:f1:24:33: 6a:88:27:5d:e5:0c:80:f4:45:c5:5b:a0:4a:ff:5b:f1:60:ea: 93:e3:12:2c:6c:91:5b:60:df:c6:7b:61:92:65:d2:b9:80:d3: f3:d2:23:17:e9:30:36:d1:f7:cb:39:ae:96:4a:f1:6f:84:86: 37:c6:e6:52:31:d5:e9:39:e2:29:85:38:91:56:c3:42:1e:62: d3:ed:cc:c8:ce:7b:44:5d:37:a2:1a:6b:a5:37:3f:6f:5b:4a: 3d:85:2d:a6:36:b8:64:30:59:4f:13:f2:cd:6a:87:06:02:eb: 8a:d2:6a:43:5d:d8:e1:66:a5:14:0b:cd:9d:72:98:a4:8e:5d: 9a:86:61:ba:af:0e:3d:3b:04:d1:a7:bb:87:45:54:0a:e2:c7: 36:54:21:74:c9:98:ab:b8:97:b1:ad:a9:d1:16:90:20:64:39: ae:3d:f6:a7:73:03:b7:99:10:eb:74:f1:b7:16:e8:48:c0:ee: cb:12:cf:b5:0f:02:b0:5a:e9:16:26:9c:05:86:f2:0c:79:1a: 5f:68:8e:15 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYdKnh4jOQkaqYvaG0BIx3VOz79EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyMzU1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2M0MzVjNzk3MGE1NjJjMjZlYjcxNDI2N2Q4Y2Y1ZDAz NzUzOTViZjUxMGFmMDdiMDNhN2QwMjQ4ZGNiOGViMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMr+nQ2kQO3/fvklLwuc2ezHFvmyzWyQ70WdOU6MazkkWR BOsoxrNpE+uSrXjreqs/w32R3zBUr6vdu3qudPRVFgKCPb8BCzloHyMaWmf2zA0C g8hANxy4C0Z4SOYHNjxiQ9zA7d9Ghyrh9GlhdmyHWRavCzj8YDHnuUZDoG3qViOa w7yLM5a3Ch1xw9Mze6JJfBrBZ5PNU74/eg/0clo9pr77jmINhuhC1ORxvQdasPSi K/er+qHK9cUV8ENnbgvC22EowaL73ODO/VGE2U20/mViIaLnM/7no5PHxG/qeGwE rORTqH5ctOzyG3VGLj+/5/eXJB6psPe2Lmea6wilAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUloKVFNA6U+ZGb9ozw1pmOSaIQjwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2IyZTZmMDExLTA4NmMtNGFhYS1hOTAzLWM0MmQ3ZmU3ZTA5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAPlgwDQYJKoZIhvcNAQELBQADggEBAC/s1Ob6A+08QRUltomkgZEd tR7Ov4X6rHYf72jzDFkvhMQvBz4MNqix6GYWEhiioPtD4/EkM2qIJ13lDID0RcVb oEr/W/Fg6pPjEixskVtg38Z7YZJl0rmA0/PSIxfpMDbR98s5rpZK8W+EhjfG5lIx 1ek54imFOJFWw0IeYtPtzMjOe0RdN6Iaa6U3P29bSj2FLaY2uGQwWU8T8s1qhwYC 64rSakNd2OFmpRQLzZ1ymKSOXZqGYbqvDj07BNGnu4dFVArixzZUIXTJmKu4l7Gt qdEWkCBkOa499qdzA7eZEOt08bcW6EjA7ssSz7UPArBa6RYmnAWG8gx5Gl9ojhU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:56:00 2025 by rpki-client