$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cd2b6f55-8720-42a1-bb67-92ef106b397d.roa File: cd2b6f55-8720-42a1-bb67-92ef106b397d.roa (raw, json) Hash identifier: FFur9NPlIQ/m4xCrXfyj1aFpZ7PUbdV84jpAnDzNS+0= Subject key identifier: 5B:82:7C:85:FB:D5:DE:6B:25:C1:3A:88:9F:8A:0F:F7:74:2B:82:11 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5C5F5341DE57A2D2F75C8672D20299BEE3672B1C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cd2b6f55-8720-42a1-bb67-92ef106b397d.roa Signing time: Thu 30 Oct 2025 23:08:43 +0000 ROA not before: Thu 30 Oct 2025 23:08:43 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2b38::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5f:53:41:de:57:a2:d2:f7:5c:86:72:d2:02:99:be:e3:67:2b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:08:43 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=2ceb16fd8a442d60e332185da0e671d5f2cbc3bbbba0309dbaf6df01179518f2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c7:c5:c2:b3:87:f1:0a:8f:5c:aa:82:d2:a7: 93:87:c1:f3:92:5e:d2:40:91:2e:03:a2:a5:ec:81: d1:1f:15:f8:6e:a7:57:97:c3:45:47:b8:af:09:d6: 38:55:f4:77:c9:da:3d:27:8a:9d:e3:f7:69:2f:48: 5b:35:4a:54:a1:01:18:e2:e4:f1:50:7e:44:45:34: 07:85:47:b6:e3:53:96:17:20:6c:b4:58:e3:03:e0: 38:84:de:02:0c:f0:06:21:ed:05:36:c0:d6:a0:e5: c4:95:a7:a8:86:58:6b:c8:b9:6d:51:43:56:e8:94: cc:53:9a:32:93:fc:5e:c6:53:a6:39:d5:ef:18:a0: 76:c3:f8:4a:5d:88:c9:aa:18:a2:5f:ef:68:8c:dc: 0d:4b:b1:f5:69:60:c5:e1:8d:b6:a5:04:97:d9:84: 80:57:e0:00:6d:49:18:7a:1f:09:70:ff:23:f5:e3: e5:84:ad:60:03:ca:cd:e1:cc:84:f5:9b:c4:30:db: 24:03:c1:6b:41:b8:26:ab:5d:f1:37:e5:ff:23:1c: 36:17:90:b0:07:4b:6b:93:b5:65:c6:15:76:f2:2a: a8:c8:4c:97:41:6b:d0:13:43:30:81:4b:69:e6:bf: fe:77:36:38:51:6c:7d:4a:49:78:ab:4d:73:51:62: 25:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:82:7C:85:FB:D5:DE:6B:25:C1:3A:88:9F:8A:0F:F7:74:2B:82:11 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cd2b6f55-8720-42a1-bb67-92ef106b397d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2b38::/47 Signature Algorithm: sha256WithRSAEncryption b8:1e:af:01:93:45:28:83:23:07:98:ce:7c:7d:a0:ab:c9:b5: 48:92:86:0f:1a:12:5a:a1:4a:97:98:06:38:d3:b1:d8:23:85: 07:53:d7:b3:39:18:c4:0e:1e:6f:f9:8b:be:25:ea:c3:6e:e5: 6b:46:dd:ca:5c:6f:89:43:06:59:86:16:d0:3b:e5:1e:be:93: ec:fe:45:93:af:13:4d:ca:c4:60:9a:73:c2:97:41:77:43:71: d9:54:16:82:8c:8e:b3:45:81:85:5f:52:0a:1a:22:59:da:2a: 79:eb:c7:dc:7d:40:74:2a:77:07:1f:8b:28:48:9b:6e:f5:2d: 9d:d4:2c:38:90:2d:12:58:7b:55:d4:44:80:6b:77:8d:71:9a: 1a:5d:8d:fa:44:59:45:f4:0c:65:37:df:7a:bb:bb:3b:0e:6c: 6f:d0:71:39:02:e2:d2:6b:1d:d4:fe:b2:f6:97:cc:63:f7:12: 3b:70:78:5c:8c:32:69:c3:14:c5:8a:80:11:73:ca:52:72:6e: cf:e2:29:a1:64:7f:68:78:48:b1:8e:10:54:93:a1:ee:29:d3: b3:b9:0b:31:30:c3:2a:4b:7d:74:9e:10:86:d4:d5:29:4d:34: 1d:3c:08:d5:63:be:39:b1:0e:fe:88:b2:f1:51:69:9b:be:a6: 72:01:84:eb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXF9TQd5XotL3XIZy0gKZvuNnKxwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMwODQzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2ViMTZmZDhhNDQyZDYwZTMzMjE4NWRhMGU2NzFkNWYy Y2JjM2JiYmJhMDMwOWRiYWY2ZGYwMTE3OTUxOGYyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUx8XCs4fxCo9cqoLSp5OHwfOSXtJAkS4DoqXsgdEfFfhu p1eXw0VHuK8J1jhV9HfJ2j0nip3j92kvSFs1SlShARji5PFQfkRFNAeFR7bjU5YX IGy0WOMD4DiE3gIM8AYh7QU2wNag5cSVp6iGWGvIuW1RQ1bolMxTmjKT/F7GU6Y5 1e8YoHbD+EpdiMmqGKJf72iM3A1LsfVpYMXhjbalBJfZhIBX4ABtSRh6Hwlw/yP1 4+WErWADys3hzIT1m8Qw2yQDwWtBuCarXfE35f8jHDYXkLAHS2uTtWXGFXbyKqjI TJdBa9ATQzCBS2nmv/53NjhRbH1KSXirTXNRYiU7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW4J8hfvV3mslwTqIn4oP93QrghEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NkMmI2ZjU1LTg3MjAtNDJhMS1iYjY3LTkyZWYxMDZiMzk3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKzgwDQYJKoZIhvcNAQELBQADggEBALgerwGTRSiDIweYznx9oKvJ tUiShg8aElqhSpeYBjjTsdgjhQdT17M5GMQOHm/5i74l6sNu5WtG3cpcb4lDBlmG FtA75R6+k+z+RZOvE03KxGCac8KXQXdDcdlUFoKMjrNFgYVfUgoaIlnaKnnrx9x9 QHQqdwcfiyhIm271LZ3ULDiQLRJYe1XURIBrd41xmhpdjfpEWUX0DGU333q7uzsO bG/QcTkC4tJrHdT+svaXzGP3EjtweFyMMmnDFMWKgBFzylJybs/iKaFkf2h4SLGO EFSToe4p07O5CzEwwypLfXSeEIbU1SlNNB08CNVjvjmxDv6IsvFRaZu+pnIBhOs= -----END CERTIFICATE-----Generated at Wed Nov 5 12:49:19 2025 by rpki-client