$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be93c160-f0cc-4340-83a5-955a19cfd910.roa File: be93c160-f0cc-4340-83a5-955a19cfd910.roa (raw, json) Hash identifier: tyhTPVCCUg/E0X/o4FL33wSHFpM6/usKWmre/B0+Edg= Subject key identifier: 43:00:E3:52:0D:41:CB:E6:4A:8F:71:E7:36:BB:84:4B:96:84:42:91 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6BD9068BE25C3C67901BBC29C2155385EEE3593D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be93c160-f0cc-4340-83a5-955a19cfd910.roa Signing time: Fri 31 Oct 2025 00:56:29 +0000 ROA not before: Fri 31 Oct 2025 00:56:29 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3894::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d9:06:8b:e2:5c:3c:67:90:1b:bc:29:c2:15:53:85:ee:e3:59:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:56:29 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=1f4e90eac997611e85dfb313231c5412f3c2cb2bbec2cad99cc36fd525ae97be, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:2e:08:af:28:99:66:92:9a:57:70:18:29: e9:99:81:0a:d3:c8:42:4d:fc:7f:90:74:7e:02:e2: a0:d1:44:15:ba:65:b9:95:db:c3:15:68:50:98:07: 4a:24:17:72:54:6d:27:b3:74:4b:03:ba:8d:bd:5c: 65:bc:c7:ef:26:b9:e5:fb:2a:36:75:31:56:64:b0: 81:78:06:5b:ce:d8:10:80:85:d4:3e:4d:2f:82:94: d0:bf:2e:d6:11:34:0b:da:54:45:ca:61:ae:8c:06: d1:55:2a:78:96:37:b5:38:91:19:82:8e:2b:ee:00: 76:3f:24:21:88:de:4a:66:7f:e9:aa:2e:fe:b8:2d: 50:27:8c:08:23:00:6a:e1:8b:fe:c3:5a:2f:8c:82: 7a:ef:7c:41:7a:68:cd:e9:f6:92:eb:bd:0e:46:47: 3d:4f:ec:bb:5e:b2:4f:49:42:e9:e4:96:3a:67:7b: 6a:27:16:8f:36:8a:14:37:ab:b0:20:23:25:d4:5f: f6:c2:8d:05:d4:f0:e4:c6:44:a2:b8:18:b9:65:6f: f2:3e:e8:14:35:53:db:10:33:79:2d:0c:b1:99:e4: e3:1b:75:71:77:c3:da:04:48:85:d5:35:cd:dd:8d: e8:f1:b0:3f:b6:25:f6:cf:de:10:d9:fc:5a:cd:66: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:00:E3:52:0D:41:CB:E6:4A:8F:71:E7:36:BB:84:4B:96:84:42:91 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be93c160-f0cc-4340-83a5-955a19cfd910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3894::/47 Signature Algorithm: sha256WithRSAEncryption 5c:b8:43:50:03:ac:93:4c:c7:58:c7:15:7a:81:f3:af:5a:00: 71:e8:ef:17:11:04:39:5d:1e:1d:22:79:69:c7:3d:ba:d6:4c: dc:88:d5:a4:6d:55:1f:5a:0e:61:6e:86:b3:78:64:a1:5c:aa: 64:44:2a:d9:70:85:92:a0:0f:1a:1c:d3:e1:1d:9c:a6:e2:57: 10:ff:33:d2:4b:d1:b6:6c:10:65:aa:5b:8b:4e:35:62:6e:62: 3c:3a:7c:08:45:b3:93:f9:78:7d:0f:74:c2:70:3f:6a:1d:4a: 14:d7:c6:a8:14:87:a8:28:8b:55:cf:b5:d9:2b:ce:cd:75:31: ea:23:4a:43:69:51:bb:a0:c3:65:e0:04:2c:ef:52:6e:cb:e6: 28:ec:08:9a:de:d2:3a:73:a6:d5:98:a7:08:2b:6b:b7:df:3c: ca:be:77:87:5f:de:74:a2:60:df:ac:2a:0b:40:60:85:fa:e1: 32:d2:83:4f:35:b1:75:b7:79:e8:37:e4:40:21:90:ae:c0:fe: f6:b2:0d:7f:ef:9d:15:64:e0:b4:cd:8b:ef:7e:f1:d0:e8:02: 3b:89:4b:a1:6c:ec:b3:9c:d7:1f:5d:dd:91:ca:19:8d:aa:9a: 9d:80:8a:af:a1:c2:16:fe:fe:76:c8:fd:2b:82:bf:79:b9:2f: f8:4c:48:03 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUa9kGi+JcPGeQG7wpwhVThe7jWT0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1NjI5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjRlOTBlYWM5OTc2MTFlODVkZmIzMTMyMzFjNTQxMmYz YzJjYjJiYmVjMmNhZDk5Y2MzNmZkNTI1YWU5N2JlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCloS4IryiZZpKaV3AYKemZgQrTyEJN/H+QdH4C4qDRRBW6 ZbmV28MVaFCYB0okF3JUbSezdEsDuo29XGW8x+8mueX7KjZ1MVZksIF4BlvO2BCA hdQ+TS+ClNC/LtYRNAvaVEXKYa6MBtFVKniWN7U4kRmCjivuAHY/JCGI3kpmf+mq Lv64LVAnjAgjAGrhi/7DWi+MgnrvfEF6aM3p9pLrvQ5GRz1P7Ltesk9JQunkljpn e2onFo82ihQ3q7AgIyXUX/bCjQXU8OTGRKK4GLllb/I+6BQ1U9sQM3ktDLGZ5OMb dXF3w9oESIXVNc3djejxsD+2JfbP3hDZ/FrNZsWDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQwDjUg1By+ZKj3HnNruES5aEQpEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JlOTNjMTYwLWYwY2MtNDM0MC04M2E1LTk1NWExOWNmZDkxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOJQwDQYJKoZIhvcNAQELBQADggEBAFy4Q1ADrJNMx1jHFXqB869a AHHo7xcRBDldHh0ieWnHPbrWTNyI1aRtVR9aDmFuhrN4ZKFcqmREKtlwhZKgDxoc 0+EdnKbiVxD/M9JL0bZsEGWqW4tONWJuYjw6fAhFs5P5eH0PdMJwP2odShTXxqgU h6goi1XPtdkrzs11MeojSkNpUbugw2XgBCzvUm7L5ijsCJre0jpzptWYpwgra7ff PMq+d4df3nSiYN+sKgtAYIX64TLSg081sXW3eeg35EAhkK7A/vayDX/vnRVk4LTN i+9+8dDoAjuJS6Fs7LOc1x9d3ZHKGY2qmp2Aiq+hwhb+/nbI/SuCv3m5L/hMSAM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:16 2025 by rpki-client