$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cef61ca1-5a06-43c5-b441-93c155a4b88f.roa File: cef61ca1-5a06-43c5-b441-93c155a4b88f.roa (raw, json) Hash identifier: zGIwT7vkclz76lKmO3Mbav2d/acWvvN3X5F2Pzw8x0Y= Subject key identifier: 3B:CA:57:4B:E3:D8:34:BC:DE:08:34:1B:E4:92:A0:F9:5D:04:24:1B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0F3A9274524230024F545D997733B66A172820CA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cef61ca1-5a06-43c5-b441-93c155a4b88f.roa Signing time: Fri 31 Oct 2025 02:23:33 +0000 ROA not before: Fri 31 Oct 2025 02:23:33 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:12b8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3a:92:74:52:42:30:02:4f:54:5d:99:77:33:b6:6a:17:28:20:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:23:33 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=2e9fd5cc160f5bfd34ab51d70a24c0a7afdac8c2cfa035211cbedd2d271e3c49, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:b8:bf:d6:b0:4f:99:08:ab:73:48:88:3e: 14:65:b0:ff:22:a3:c9:b1:56:38:20:4f:f3:8f:37: 49:8e:cd:00:53:db:bc:85:73:a8:66:ca:c3:20:8d: b0:8b:8d:22:bd:d3:c2:d6:db:d2:fd:9e:08:22:c5: 56:5d:c4:f0:b6:b0:61:97:ab:a5:ac:a6:5f:26:d9: 3a:31:25:79:3d:bc:83:b6:92:a2:3a:7a:42:d5:d0: 69:1d:90:58:b8:0a:db:66:76:e8:93:ea:04:98:34: df:c9:9f:f1:e8:8b:9c:c6:3f:51:a0:eb:50:74:00: 2f:c0:85:e8:68:6d:f6:e1:ea:b9:ce:b4:f5:7d:f4: c7:a1:af:48:a4:b8:4f:18:79:1b:dd:29:69:7d:7e: bb:e5:11:93:f9:b0:4d:ff:dc:ab:f2:8e:f7:a9:bb: 4e:b6:d6:15:8b:88:06:25:e5:4f:63:f0:9a:2b:f0: fd:08:4a:ca:8d:39:a8:21:00:da:84:81:f1:2e:e3: 2f:c3:0f:ee:48:89:1d:99:88:f3:4f:2e:30:09:52: 3f:03:6e:e8:7f:a9:af:88:c1:bf:10:89:ee:c8:19: 84:87:b7:9c:d6:74:47:0b:24:0a:9a:60:f3:55:48: fb:66:77:cc:58:e8:ff:7d:10:9d:7d:66:33:fc:a2: d6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CA:57:4B:E3:D8:34:BC:DE:08:34:1B:E4:92:A0:F9:5D:04:24:1B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cef61ca1-5a06-43c5-b441-93c155a4b88f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:12b8::/46 Signature Algorithm: sha256WithRSAEncryption 67:ad:ee:a8:90:6b:cf:91:87:58:27:cc:7f:9b:6e:1a:b1:49: c0:dd:4c:b2:0b:e3:b2:cc:cd:76:21:cf:ed:59:07:96:c9:fb: 9b:7a:76:e8:b8:65:10:ef:65:71:2d:b4:31:2a:bf:48:c2:b0: af:c9:62:da:3c:a0:18:1c:93:72:cf:3e:1d:32:e7:12:b9:9f: d3:bd:ac:17:83:93:e7:ea:88:80:5a:1c:13:7c:4a:01:f6:07: f8:37:c6:b8:96:27:05:aa:b8:54:b7:a5:7a:7d:74:6b:7f:3e: 72:15:d4:86:58:2b:0e:49:bf:d5:c8:80:62:31:9e:f8:1f:29: be:c4:6d:93:1b:6b:d2:15:04:2c:aa:49:0d:6d:5d:c1:85:3d: 9b:39:e2:fa:c2:4f:d9:87:7b:ec:0c:b0:cc:f4:75:47:d1:f6: 01:86:6c:bf:0d:5c:4d:96:2b:65:ed:ae:cf:f7:65:f7:a8:61: f2:53:73:58:9b:dd:23:76:62:fb:ff:a1:8f:52:22:0d:ac:d2: 70:38:d1:d3:0c:ee:fe:e1:23:9b:14:ac:d7:36:6e:c2:11:47: c5:35:f2:35:18:c5:b0:ea:ad:66:92:04:ae:d1:f5:59:5e:8f: 23:a3:90:d1:18:ea:15:a6:17:39:a5:4b:69:28:7e:e7:f0:3a: 55:69:2f:47 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDzqSdFJCMAJPVF2ZdzO2ahcoIMowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDIyMzMzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTlmZDVjYzE2MGY1YmZkMzRhYjUxZDcwYTI0YzBhN2Fm ZGFjOGMyY2ZhMDM1MjExY2JlZGQyZDI3MWUzYzQ5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5eLi/1rBPmQirc0iIPhRlsP8io8mxVjggT/OPN0mOzQBT 27yFc6hmysMgjbCLjSK908LW29L9nggixVZdxPC2sGGXq6Wspl8m2ToxJXk9vIO2 kqI6ekLV0GkdkFi4CttmduiT6gSYNN/Jn/Hoi5zGP1Gg61B0AC/Ahehobfbh6rnO tPV99Mehr0ikuE8YeRvdKWl9frvlEZP5sE3/3Kvyjvepu0621hWLiAYl5U9j8Jor 8P0ISsqNOaghANqEgfEu4y/DD+5IiR2ZiPNPLjAJUj8Dbuh/qa+Iwb8Qie7IGYSH t5zWdEcLJAqaYPNVSPtmd8xY6P99EJ19ZjP8otYZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUO8pXS+PYNLzeCDQb5JKg+V0EJBswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NlZjYxY2ExLTVhMDYtNDNjNS1iNDQxLTkzYzE1NWE0Yjg4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAErgwDQYJKoZIhvcNAQELBQADggEBAGet7qiQa8+Rh1gnzH+bbhqx ScDdTLIL47LMzXYhz+1ZB5bJ+5t6dui4ZRDvZXEttDEqv0jCsK/JYto8oBgck3LP Ph0y5xK5n9O9rBeDk+fqiIBaHBN8SgH2B/g3xriWJwWquFS3pXp9dGt/PnIV1IZY Kw5Jv9XIgGIxnvgfKb7EbZMba9IVBCyqSQ1tXcGFPZs54vrCT9mHe+wMsMz0dUfR 9gGGbL8NXE2WK2Xtrs/3ZfeoYfJTc1ib3SN2Yvv/oY9SIg2s0nA40dMM7v7hI5sU rNc2bsIRR8U18jUYxbDqrWaSBK7R9VlejyOjkNEY6hWmFzmlS2kofufwOlVpL0c= -----END CERTIFICATE-----Generated at Wed Nov 5 05:33:59 2025 by rpki-client