$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1f6522e-e531-416b-9630-d3f1383ac312.roa File: c1f6522e-e531-416b-9630-d3f1383ac312.roa (raw, json) Hash identifier: UI5JYMEXTse5Uj1ixtE1MsimWGXy6k7rhTJlGhc1A4M= Subject key identifier: 30:3F:A2:65:D1:7D:01:27:37:57:E7:D1:AB:1D:EB:AA:04:C4:E8:E1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 30886AA7AF8981BD21A59A8808099E5781FC858D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1f6522e-e531-416b-9630-d3f1383ac312.roa Signing time: Thu 30 Oct 2025 21:06:47 +0000 ROA not before: Thu 30 Oct 2025 21:06:47 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1470::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:88:6a:a7:af:89:81:bd:21:a5:9a:88:08:09:9e:57:81:fc:85:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:06:47 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=cc813145bd35f84d4310966ab22eb564444a0908bb6086eb7a6fafe1d86c7f9e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:2c:0a:aa:e5:a2:49:aa:ac:fc:d3:d8:52: a5:80:c0:3c:f8:a7:32:88:b1:2f:c0:1f:a5:f2:d4: d5:24:cf:5f:43:0f:51:17:9d:2b:b3:1c:a9:7a:4c: d5:76:a5:89:73:36:cf:98:68:ad:da:06:a3:49:09: d8:9a:51:f2:da:70:b9:2e:17:44:83:9c:4d:20:04: 88:54:74:2d:26:56:97:83:94:02:a8:5c:10:ad:0d: ef:df:25:dc:1e:fb:89:a2:4b:60:02:51:87:2c:68: fb:8d:94:6c:18:e0:25:a9:11:fb:0c:4d:54:e6:ae: 11:db:43:6a:cd:f3:57:67:55:3d:f3:0c:e8:62:2b: a3:6e:57:81:a8:aa:41:c3:25:55:49:29:6d:7d:c7: 7f:0f:f3:81:6d:a7:d4:0a:4d:d8:da:78:7c:15:e2: 05:55:27:0b:56:f1:74:2b:ee:23:55:95:4e:67:57: b5:cf:60:38:10:a2:2b:d3:f2:a4:f6:f2:d1:bc:eb: 2e:60:a6:49:62:e2:41:a1:b1:27:40:3f:31:8c:c6: e7:2f:02:bf:aa:f5:7d:d3:61:44:39:af:90:39:e4: ef:24:44:d9:9c:c1:ed:e6:65:f8:b0:d1:7e:fe:13: 2f:d3:aa:da:13:fd:6c:9d:0f:9c:09:e6:17:cb:d2: 20:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3F:A2:65:D1:7D:01:27:37:57:E7:D1:AB:1D:EB:AA:04:C4:E8:E1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1f6522e-e531-416b-9630-d3f1383ac312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1470::/47 Signature Algorithm: sha256WithRSAEncryption 93:98:67:cc:78:55:f7:29:20:6c:92:f9:cf:e5:e4:3d:e4:17: a6:3d:21:0c:19:0e:38:36:7e:93:44:60:83:67:1e:43:cf:91: 5c:e0:db:29:21:1d:d8:cc:46:52:f9:9b:a0:d8:13:80:19:16: 2b:64:55:63:11:ea:8f:7e:1a:58:b8:59:69:52:b5:fc:34:82: 2c:59:a2:1a:fd:f5:56:8d:b9:7d:7a:d7:26:10:d3:cd:83:b3: 6f:f0:ea:dd:fc:57:88:6d:5e:10:83:07:fc:3d:31:d4:c5:90: 45:d5:09:52:af:c9:5e:b8:12:6e:82:67:1b:cb:8b:b4:89:36: ae:8e:c9:76:4f:ee:7a:79:23:83:fa:3f:39:31:63:2a:b3:ec: b8:c1:b7:eb:c6:a6:1a:67:b3:41:ef:57:ad:2c:81:3c:4f:8c: 1e:50:9f:47:60:50:98:be:c4:b6:aa:a8:85:94:0f:1c:02:4c: 33:87:d1:d1:49:ab:84:b0:c1:21:4e:1c:ec:6b:32:af:5b:b2: f8:da:2b:4c:e9:90:e8:d9:ac:1e:95:e9:17:a6:62:b9:b9:41: d0:71:1c:7f:58:9a:08:01:86:a9:8c:49:48:2e:96:ed:c9:6a: 4c:d8:7e:23:07:43:64:02:37:7e:48:55:6a:e3:41:05:56:12: 1d:1d:8a:d0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMIhqp6+Jgb0hpZqICAmeV4H8hY0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEwNjQ3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzgxMzE0NWJkMzVmODRkNDMxMDk2NmFiMjJlYjU2NDQ0 NGEwOTA4YmI2MDg2ZWI3YTZmYWZlMWQ4NmM3ZjllMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+RiwKquWiSaqs/NPYUqWAwDz4pzKIsS/AH6Xy1NUkz19D D1EXnSuzHKl6TNV2pYlzNs+YaK3aBqNJCdiaUfLacLkuF0SDnE0gBIhUdC0mVpeD lAKoXBCtDe/fJdwe+4miS2ACUYcsaPuNlGwY4CWpEfsMTVTmrhHbQ2rN81dnVT3z DOhiK6NuV4GoqkHDJVVJKW19x38P84Ftp9QKTdjaeHwV4gVVJwtW8XQr7iNVlU5n V7XPYDgQoivT8qT28tG86y5gpkli4kGhsSdAPzGMxucvAr+q9X3TYUQ5r5A55O8k RNmcwe3mZfiw0X7+Ey/TqtoT/WydD5wJ5hfL0iAxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMD+iZdF9ASc3V+fRqx3rqgTE6OEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2MxZjY1MjJlLWU1MzEtNDE2Yi05NjMwLWQzZjEzODNhYzMxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFHAwDQYJKoZIhvcNAQELBQADggEBAJOYZ8x4VfcpIGyS+c/l5D3k F6Y9IQwZDjg2fpNEYINnHkPPkVzg2ykhHdjMRlL5m6DYE4AZFitkVWMR6o9+Gli4 WWlStfw0gixZohr99VaNuX161yYQ082Ds2/w6t38V4htXhCDB/w9MdTFkEXVCVKv yV64Em6CZxvLi7SJNq6OyXZP7np5I4P6PzkxYyqz7LjBt+vGphpns0HvV60sgTxP jB5Qn0dgUJi+xLaqqIWUDxwCTDOH0dFJq4SwwSFOHOxrMq9bsvjaK0zpkOjZrB6V 6RemYrm5QdBxHH9YmggBhqmMSUgulu3JakzYfiMHQ2QCN35IVWrjQQVWEh0ditA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:34 2025 by rpki-client