$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce7f36da-0b4d-4cff-94c9-0f4c6dcc1e9e.roa File: ce7f36da-0b4d-4cff-94c9-0f4c6dcc1e9e.roa (raw, json) Hash identifier: jhFj1Rv8fqS4gYSCOwwlTU1nvC27Wo6FENQv9XGKouk= Subject key identifier: 5F:50:D4:FB:8D:36:47:07:88:73:C8:61:A9:4F:46:5B:F1:93:5F:9D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 287F463DB6ABC5EE70BCA69AAF7C141ABF763C88 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce7f36da-0b4d-4cff-94c9-0f4c6dcc1e9e.roa Signing time: Fri 31 Oct 2025 02:53:57 +0000 ROA not before: Fri 31 Oct 2025 02:53:57 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:196c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7f:46:3d:b6:ab:c5:ee:70:bc:a6:9a:af:7c:14:1a:bf:76:3c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:53:57 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0f6c7396124a0ba04aa6685f43318d70e559e34ba6395ed89bc9814cc6c0762b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:fa:72:2f:73:a8:cc:5d:e3:0e:3c:d3:29: 91:36:24:e2:3b:3e:ad:55:e8:05:ae:db:d6:54:ce: 2f:81:b4:9a:88:f3:4f:67:88:eb:df:b0:17:07:88: 73:34:d1:42:36:a6:31:0f:ee:cc:0d:21:b0:80:ee: 9e:1d:a7:8f:f1:9e:12:4b:07:14:a8:14:98:79:31: e9:7b:e4:07:02:4c:c0:bd:98:46:de:40:f1:c1:fa: 3a:0a:cf:6a:2e:d9:e1:9a:e2:04:25:e0:35:ee:2c: 5f:aa:31:d7:a1:67:06:6d:4b:d3:19:6e:33:c4:9a: 88:bf:5e:ed:2f:f3:e3:86:a9:23:3e:7a:48:d7:e0: a0:da:4f:79:c5:c3:b9:5a:ac:7b:40:3c:d0:4b:9a: 3b:22:db:8d:3b:10:76:72:e5:59:95:66:4d:ec:85: 2b:78:0a:7e:99:d8:d6:64:a9:6e:f1:dc:e8:66:92: 3b:5b:11:39:6a:2e:2f:bd:f5:18:fb:fe:70:e6:64: 5d:b4:70:10:6b:e6:5c:97:80:6c:1c:87:5a:67:0a: 14:67:d7:f2:85:e3:ba:04:1b:98:8a:fe:f6:14:98: ea:93:6c:fa:6e:24:7f:3d:fd:6d:01:53:80:e9:23: d7:2d:ac:2b:25:26:31:3a:cf:2a:0a:af:ec:16:5d: ba:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:50:D4:FB:8D:36:47:07:88:73:C8:61:A9:4F:46:5B:F1:93:5F:9D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce7f36da-0b4d-4cff-94c9-0f4c6dcc1e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:196c::/46 Signature Algorithm: sha256WithRSAEncryption 2a:ca:71:a1:52:2d:3b:dd:12:67:f6:67:42:4e:d5:32:41:17: 82:66:25:e2:36:e0:1c:62:ca:57:ed:29:0c:1b:e2:96:6e:59: 6e:74:91:32:df:0d:48:e7:05:35:1f:95:1d:a7:65:87:be:38: 2c:fe:2f:bf:d1:63:23:85:ae:ff:91:80:ca:7d:9d:a2:c0:32: 59:0f:45:39:58:74:42:0b:7b:ae:57:fe:94:b4:ca:e5:2c:98: 4d:46:66:2e:f7:75:34:70:80:09:12:8d:b2:b8:bc:29:39:08: 5d:8a:28:04:76:aa:0e:a2:27:55:7d:10:d2:bd:00:e8:aa:16: 25:d7:9c:0d:44:d4:e4:43:9d:b9:9c:f7:8a:51:7c:ee:bd:22: 66:35:39:0f:27:34:23:a0:f5:87:00:b6:ac:fa:27:69:50:23: 49:06:7e:2f:bd:8a:60:9a:b1:ef:15:2d:51:81:b6:4e:21:84: 83:00:85:b4:a9:57:b5:df:71:5a:69:35:87:b4:78:5e:b0:71: 86:57:f8:a4:7a:73:03:23:4d:9a:23:55:05:68:be:6c:48:a9: c4:05:ef:4c:22:ca:d3:a8:18:3d:cf:b8:28:2e:81:73:d1:90: 20:ab:a9:40:4b:ae:a6:ae:cb:75:c8:69:a9:f4:00:ad:ab:03: 43:f0:72:8f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKH9GPbarxe5wvKaar3wUGr92PIgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI1MzU3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjZjNzM5NjEyNGEwYmEwNGFhNjY4NWY0MzMxOGQ3MGU1 NTllMzRiYTYzOTVlZDg5YmM5ODE0Y2M2YzA3NjJiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDd1/pyL3OozF3jDjzTKZE2JOI7Pq1V6AWu29ZUzi+BtJqI 809niOvfsBcHiHM00UI2pjEP7swNIbCA7p4dp4/xnhJLBxSoFJh5Mel75AcCTMC9 mEbeQPHB+joKz2ou2eGa4gQl4DXuLF+qMdehZwZtS9MZbjPEmoi/Xu0v8+OGqSM+ ekjX4KDaT3nFw7larHtAPNBLmjsi2407EHZy5VmVZk3shSt4Cn6Z2NZkqW7x3Ohm kjtbETlqLi+99Rj7/nDmZF20cBBr5lyXgGwch1pnChRn1/KF47oEG5iK/vYUmOqT bPpuJH89/W0BU4DpI9ctrCslJjE6zyoKr+wWXbrVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUX1DU+402RweIc8hhqU9GW/GTX50wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NlN2YzNmRhLTBiNGQtNGNmZi05NGM5LTBmNGM2ZGNjMWU5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAGWwwDQYJKoZIhvcNAQELBQADggEBACrKcaFSLTvdEmf2Z0JO1TJB F4JmJeI24BxiylftKQwb4pZuWW50kTLfDUjnBTUflR2nZYe+OCz+L7/RYyOFrv+R gMp9naLAMlkPRTlYdEILe65X/pS0yuUsmE1GZi73dTRwgAkSjbK4vCk5CF2KKAR2 qg6iJ1V9ENK9AOiqFiXXnA1E1ORDnbmc94pRfO69ImY1OQ8nNCOg9YcAtqz6J2lQ I0kGfi+9imCase8VLVGBtk4hhIMAhbSpV7XfcVppNYe0eF6wcYZX+KR6cwMjTZoj VQVovmxIqcQF70wiytOoGD3PuCgugXPRkCCrqUBLrqauy3XIaan0AK2rA0Pwco8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:27 2025 by rpki-client