$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0a8e0d3-f51d-42d4-89f0-0c7178dab72b.roa File: c0a8e0d3-f51d-42d4-89f0-0c7178dab72b.roa (raw, json) Hash identifier: jy6g8kPIkGrl2mXFKTxFnTUhDibNrYW8lELsCC+yqIY= Subject key identifier: EC:81:20:B2:59:B1:8F:FE:9E:11:27:42:E9:7A:2D:F1:21:D6:0A:AA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 672D60CFB873B5E86AE2F66F9A242BB5EBE89AB6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0a8e0d3-f51d-42d4-89f0-0c7178dab72b.roa Signing time: Fri 31 Oct 2025 00:56:34 +0000 ROA not before: Fri 31 Oct 2025 00:56:34 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:38a6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2d:60:cf:b8:73:b5:e8:6a:e2:f6:6f:9a:24:2b:b5:eb:e8:9a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:56:34 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c29941ff546faff178e00c6572ee0cd54b8edae143433f6af60fd58de4645bd9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c8:0f:a4:29:64:28:d2:1a:12:0f:df:ce:2c: c9:fd:37:5b:4b:0d:fa:a5:4f:79:f7:6d:be:fd:3a: 2e:1c:1b:4e:7a:51:cd:d8:4c:26:14:2a:7b:3f:49: c6:e5:d9:b3:d3:cf:34:24:5b:b1:29:3f:ef:ca:1b: b0:df:c0:02:53:94:22:21:8e:5a:89:73:ab:92:f5: ac:4f:43:e9:aa:83:32:eb:55:22:36:2b:f0:33:54: 9b:29:9c:e4:cc:55:20:14:5f:20:b1:25:e6:04:d8: c2:d8:25:48:a0:1b:ed:34:4d:de:9c:69:6b:d5:54: 2f:d7:c2:56:93:14:88:6a:7c:5e:ab:f1:b1:19:d5: b9:31:29:4d:0b:8f:27:38:8d:80:f4:b4:ce:14:a8: 42:e7:96:79:96:5b:3f:af:a0:26:d0:7f:ad:d7:73: 17:c5:f3:30:d9:79:a1:10:58:2a:98:eb:fb:a5:b2: ab:f3:ce:1e:6f:ac:d2:59:c2:a4:eb:54:7f:6e:88: 06:ef:4f:2d:3d:70:91:1d:93:1f:53:ba:15:fc:c0: 7e:8e:4b:5a:21:25:d1:63:2b:c6:6a:27:87:ba:e8: 56:fa:1c:bb:34:2a:95:e4:f1:9e:48:ab:6b:4c:5a: f0:cb:f7:7c:d2:c2:10:72:8a:f8:dc:9a:02:28:c1: a3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:81:20:B2:59:B1:8F:FE:9E:11:27:42:E9:7A:2D:F1:21:D6:0A:AA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0a8e0d3-f51d-42d4-89f0-0c7178dab72b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:38a6::/47 Signature Algorithm: sha256WithRSAEncryption c2:51:0a:87:18:bc:fb:29:80:9e:46:68:60:6b:90:71:b4:ea: 90:6f:f4:19:a3:b3:89:01:96:53:49:f2:10:bd:3a:60:a2:c3: 18:57:c7:3f:50:2f:14:22:a6:1c:39:c5:a6:cb:fb:70:4d:c4: f0:2b:1f:c5:6a:3f:7b:20:07:b5:94:3c:b6:c3:18:bf:94:01: e5:cf:f4:d1:32:5e:0f:8b:90:b4:93:85:c1:90:d8:1d:66:ca: cd:da:1b:c6:ac:09:2c:13:23:8a:fd:02:f5:b6:94:56:e2:56: 40:7d:3b:f4:8f:2a:49:91:07:c4:1f:9d:e4:8b:47:16:c9:e9: 19:6c:b2:8a:42:a8:5a:43:d2:04:0a:02:04:ad:3f:c8:fd:cd: db:80:18:5f:17:ba:15:9b:99:a0:55:44:d7:7d:39:b4:53:fa: 16:06:35:74:fd:b0:1b:a6:a3:c2:2e:a7:99:07:e4:27:3c:4a: 64:45:ea:00:da:07:f0:1d:b3:fb:64:3d:0b:b0:ef:b8:b8:04: d2:fa:f5:8f:5a:b2:ab:fb:eb:3a:e7:d0:b8:25:3b:71:97:d2: a3:d5:51:00:4c:28:f6:3c:17:51:20:3f:49:02:48:6b:24:a4: d3:82:cf:d5:d0:99:64:73:68:70:e1:5a:f9:01:a1:25:82:a3: 95:fd:5e:e7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZy1gz7hztehq4vZvmiQrtevomrYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1NjM0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjk5NDFmZjU0NmZhZmYxNzhlMDBjNjU3MmVlMGNkNTRi OGVkYWUxNDM0MzNmNmFmNjBmZDU4ZGU0NjQ1YmQ5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRyA+kKWQo0hoSD9/OLMn9N1tLDfqlT3n3bb79Oi4cG056 Uc3YTCYUKns/Scbl2bPTzzQkW7EpP+/KG7DfwAJTlCIhjlqJc6uS9axPQ+mqgzLr VSI2K/AzVJspnOTMVSAUXyCxJeYE2MLYJUigG+00Td6caWvVVC/XwlaTFIhqfF6r 8bEZ1bkxKU0Ljyc4jYD0tM4UqELnlnmWWz+voCbQf63XcxfF8zDZeaEQWCqY6/ul sqvzzh5vrNJZwqTrVH9uiAbvTy09cJEdkx9TuhX8wH6OS1ohJdFjK8ZqJ4e66Fb6 HLs0KpXk8Z5Iq2tMWvDL93zSwhByivjcmgIowaNbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7IEgslmxj/6eESdC6Xot8SHWCqowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2MwYThlMGQzLWY1MWQtNDJkNC04OWYwLTBjNzE3OGRhYjcyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOKYwDQYJKoZIhvcNAQELBQADggEBAMJRCocYvPspgJ5GaGBrkHG0 6pBv9Bmjs4kBllNJ8hC9OmCiwxhXxz9QLxQiphw5xabL+3BNxPArH8VqP3sgB7WU PLbDGL+UAeXP9NEyXg+LkLSThcGQ2B1mys3aG8asCSwTI4r9AvW2lFbiVkB9O/SP KkmRB8QfneSLRxbJ6RlssopCqFpD0gQKAgStP8j9zduAGF8XuhWbmaBVRNd9ObRT +hYGNXT9sBumo8Iup5kH5Cc8SmRF6gDaB/Ads/tkPQuw77i4BNL69Y9asqv76zrn 0LglO3GX0qPVUQBMKPY8F1EgP0kCSGskpNOCz9XQmWRzaHDhWvkBoSWCo5X9Xuc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:33 2025 by rpki-client