$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5324e0f-5da3-4d1b-b616-7e745cd55867.roa File: c5324e0f-5da3-4d1b-b616-7e745cd55867.roa (raw, json) Hash identifier: tMQ6egdMClJ7ifxBK2GW75vb7wv5tUyws7EeIzprpk0= Subject key identifier: 04:FF:2B:B8:9C:A4:F0:A1:65:B9:BD:B4:6D:89:CE:D5:65:2B:B0:63 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1AD37EC4839A88E6D590B486B5670B774CA45D64 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5324e0f-5da3-4d1b-b616-7e745cd55867.roa Signing time: Fri 31 Oct 2025 06:43:45 +0000 ROA not before: Fri 31 Oct 2025 06:43:45 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:28d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d3:7e:c4:83:9a:88:e6:d5:90:b4:86:b5:67:0b:77:4c:a4:5d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:43:45 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=d502bbf65c63d428bb2a08880a6c75744168546c8e0a1a958eb1d0712ad14d61, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:c2:96:11:f5:be:b5:10:e1:5d:20:8f:d4: 47:4e:52:8e:64:1b:37:56:89:90:c8:06:7e:8a:b3: fe:4c:71:e8:d0:7b:9e:d2:41:18:bf:71:cc:f5:2b: e9:9c:0b:77:ac:cc:1c:e6:41:73:ce:f0:bd:58:00: c5:1b:e0:ba:85:6f:52:b5:d8:60:85:3f:1d:ef:8e: b9:73:3a:e1:ff:bf:19:3a:eb:07:7f:1c:cc:9a:5f: 1f:0a:43:9a:7c:d5:21:9f:f4:ec:c5:a5:3e:57:e2: 21:dd:4a:17:38:90:35:b5:bc:47:5b:9d:8a:b8:07: 3c:24:48:4b:cc:e4:0c:09:61:1b:9f:8a:63:28:cb: d5:77:84:8b:16:37:d0:1e:76:af:81:be:d3:e8:6c: ee:f8:93:bf:97:d3:dd:b9:27:a1:89:50:f4:a2:25: a6:4e:3a:a3:ea:68:83:53:4a:cf:24:98:67:2a:53: 1c:39:e8:d7:b7:17:f2:2d:c2:6e:82:0e:55:bb:ed: 4e:eb:9d:83:94:04:a2:db:63:1a:e4:8b:32:f9:28: 78:42:37:40:2c:c9:4e:23:64:15:ad:40:24:74:68: e0:13:2c:30:af:4c:d6:a7:e9:09:72:06:99:79:11: 1e:7e:7a:1c:56:96:74:0b:1e:84:dc:96:24:ad:71: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FF:2B:B8:9C:A4:F0:A1:65:B9:BD:B4:6D:89:CE:D5:65:2B:B0:63 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5324e0f-5da3-4d1b-b616-7e745cd55867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:28d0::/44 Signature Algorithm: sha256WithRSAEncryption a5:a9:38:9f:0b:c5:9a:50:26:bc:f8:94:c9:f8:64:6b:38:7b: ba:79:9c:18:91:38:a8:55:3c:55:fa:59:b6:e5:3f:17:0f:ef: 1e:09:fd:da:a5:b6:fd:8f:de:c6:46:f6:ec:e2:bb:fe:8f:7d: 35:79:eb:e9:45:1e:7c:55:de:5b:ff:75:0d:63:99:7c:72:30: 04:40:70:cc:99:3d:33:33:51:73:ba:34:55:c3:d6:60:f9:95: 17:6c:bb:0d:26:98:12:2c:36:04:d9:18:77:84:37:0d:6b:e6: b1:54:84:51:86:c2:5a:d3:83:4d:64:66:f5:08:a8:49:ed:b0: c3:d9:07:b3:b4:be:45:29:62:1f:c0:a3:ff:bb:b7:4e:bd:33: 4d:62:7b:ee:bd:6a:c8:06:ca:69:84:72:cb:08:1f:74:00:e4: 0a:7d:61:a1:87:5b:1b:0b:47:02:61:96:bd:1b:2a:96:84:7d: 97:bc:8a:7b:eb:c8:b4:b8:04:be:87:bd:15:f4:3f:28:92:c3: d1:fb:64:e3:c2:d3:79:e4:3f:4c:3f:54:f8:7b:25:14:ff:a5: a1:9c:68:d7:aa:ea:bd:d2:19:46:7c:dd:38:68:d3:e0:ba:ec: d3:60:bf:1d:0a:06:ef:41:be:71:1b:b7:19:3f:77:5d:fa:cd: 93:58:d1:18 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGtN+xIOaiObVkLSGtWcLd0ykXWQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY0MzQ1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTAyYmJmNjVjNjNkNDI4YmIyYTA4ODgwYTZjNzU3NDQx Njg1NDZjOGUwYTFhOTU4ZWIxZDA3MTJhZDE0ZDYxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0gcKWEfW+tRDhXSCP1EdOUo5kGzdWiZDIBn6Ks/5McejQ e57SQRi/ccz1K+mcC3eszBzmQXPO8L1YAMUb4LqFb1K12GCFPx3vjrlzOuH/vxk6 6wd/HMyaXx8KQ5p81SGf9OzFpT5X4iHdShc4kDW1vEdbnYq4BzwkSEvM5AwJYRuf imMoy9V3hIsWN9Aedq+BvtPobO74k7+X0925J6GJUPSiJaZOOqPqaINTSs8kmGcq Uxw56Ne3F/Itwm6CDlW77U7rnYOUBKLbYxrkizL5KHhCN0AsyU4jZBWtQCR0aOAT LDCvTNan6QlyBpl5ER5+ehxWlnQLHoTcliStcUdDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBP8ruJyk8KFlub20bYnO1WUrsGMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M1MzI0ZTBmLTVkYTMtNGQxYi1iNjE2LTdlNzQ1Y2Q1NTg2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAKNAwDQYJKoZIhvcNAQELBQADggEBAKWpOJ8LxZpQJrz4lMn4ZGs4 e7p5nBiROKhVPFX6WbblPxcP7x4J/dqltv2P3sZG9uziu/6PfTV56+lFHnxV3lv/ dQ1jmXxyMARAcMyZPTMzUXO6NFXD1mD5lRdsuw0mmBIsNgTZGHeENw1r5rFUhFGG wlrTg01kZvUIqEntsMPZB7O0vkUpYh/Ao/+7t069M01ie+69asgGymmEcssIH3QA 5Ap9YaGHWxsLRwJhlr0bKpaEfZe8invryLS4BL6HvRX0PyiSw9H7ZOPC03nkP0w/ VPh7JRT/paGcaNeq6r3SGUZ83Tho0+C67NNgvx0KBu9BvnEbtxk/d136zZNY0Rg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:31 2025 by rpki-client