$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3a4de9b-bf38-4fd5-a756-7616fc74b5f5.roa File: e3a4de9b-bf38-4fd5-a756-7616fc74b5f5.roa (raw, json) Hash identifier: tDicBoDYfxyUuG8BuLML/E4u8bCymDhJz3ILZd5CsXc= Subject key identifier: 2A:95:AB:EF:62:11:BD:E5:8B:88:6C:B8:EF:F1:13:7B:D4:1A:03:23 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2D26C3E662C422736F9EF689A5C5738033521FD8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3a4de9b-bf38-4fd5-a756-7616fc74b5f5.roa Signing time: Fri 31 Oct 2025 03:23:40 +0000 ROA not before: Fri 31 Oct 2025 03:23:40 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2888::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:26:c3:e6:62:c4:22:73:6f:9e:f6:89:a5:c5:73:80:33:52:1f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:23:40 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=b81113fe7451510a447adbf2949c4a3cf57068b47827becbd928b9fbb0c5da11, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:78:18:60:36:7b:2e:59:ff:7a:b8:2b:d6: fb:98:cb:05:18:2b:e7:94:fe:e0:72:4c:02:12:bb: 1c:1a:0c:8f:46:5b:89:31:7e:8a:33:03:74:de:13: 92:1e:a0:a3:c3:cd:9e:08:8d:b5:a3:c5:18:e0:fd: 1b:81:d9:82:0d:4f:0b:65:ed:a2:ac:88:ea:b5:a2: 30:5e:f8:70:b1:a7:3d:64:83:17:15:1d:74:bd:b7: ad:dd:79:bc:d8:56:78:7e:32:9a:f8:0d:ca:77:84: 4d:5f:dd:c2:a0:cb:bb:6e:1e:c9:b5:b7:91:0d:20: 92:79:bc:00:27:f5:85:b3:c8:71:59:d2:ec:33:d6: 12:ee:83:f3:26:7d:fa:ff:9b:90:e6:b5:e0:65:89: e6:bf:2e:40:e9:48:ed:51:57:55:20:10:7f:11:47: 35:45:9e:ef:18:13:65:f0:c2:4b:1f:07:fa:ff:7f: 70:d7:aa:e8:0e:a6:93:1d:13:7f:5c:01:69:6d:23: bf:93:17:44:51:c5:e0:b4:ae:ea:eb:5a:d4:6e:50: 05:1c:7f:94:da:df:67:7d:f5:ea:5a:35:35:02:78: bd:b0:a1:9b:14:c4:00:97:54:e0:ab:80:7c:00:39: d3:6b:d6:38:5c:cc:85:96:0d:ba:e8:23:2e:27:6a: 4e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:95:AB:EF:62:11:BD:E5:8B:88:6C:B8:EF:F1:13:7B:D4:1A:03:23 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3a4de9b-bf38-4fd5-a756-7616fc74b5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2888::/46 Signature Algorithm: sha256WithRSAEncryption 5e:f9:17:5d:83:b4:d4:13:08:14:88:4c:52:5c:de:3b:f3:a2: 64:98:6b:b6:ff:da:8d:3f:60:9e:af:9b:6b:49:6a:87:cf:7e: 2c:ee:b0:ce:fd:4f:20:f7:49:9f:68:8f:95:cc:18:a3:13:6c: 63:93:d8:4c:69:b5:a4:d2:bc:6e:9c:9f:b0:22:96:ff:66:b0: 0e:f0:d3:9b:26:57:6a:07:91:78:ab:3a:21:ab:d9:a7:ee:12: e1:be:7e:22:b1:ac:09:a6:49:4a:ef:af:bb:67:1d:24:a5:46: 9b:72:92:80:8f:e6:df:58:26:08:db:e1:63:46:38:94:1c:1a: 18:02:ba:60:43:48:3c:21:cd:9d:a7:b1:42:6f:cb:6c:ca:d9: 1b:34:5f:36:5c:c9:58:3d:44:f7:bb:c9:ef:45:75:d3:cc:2a: fb:24:5d:d4:ad:d6:62:b9:b5:dc:88:a3:6a:6d:18:09:50:14: 05:00:f9:0b:dd:15:db:36:4b:fd:53:2a:34:fc:57:eb:cc:e0: 40:09:7d:ce:6b:9e:47:9c:d4:e4:4f:c1:14:ef:40:14:87:04: 75:39:06:52:34:9d:4f:f8:bf:1d:e1:59:96:15:2a:9d:43:0a: 34:84:d3:fa:7e:26:e8:8f:05:f0:fb:12:4e:49:34:b4:7d:fa: 03:66:26:a7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULSbD5mLEInNvnvaJpcVzgDNSH9gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMyMzQwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODExMTNmZTc0NTE1MTBhNDQ3YWRiZjI5NDljNGEzY2Y1 NzA2OGI0NzgyN2JlY2JkOTI4YjlmYmIwYzVkYTExMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYB3gYYDZ7Lln/ergr1vuYywUYK+eU/uByTAISuxwaDI9G W4kxfoozA3TeE5IeoKPDzZ4IjbWjxRjg/RuB2YINTwtl7aKsiOq1ojBe+HCxpz1k gxcVHXS9t63debzYVnh+Mpr4Dcp3hE1f3cKgy7tuHsm1t5ENIJJ5vAAn9YWzyHFZ 0uwz1hLug/Mmffr/m5DmteBliea/LkDpSO1RV1UgEH8RRzVFnu8YE2XwwksfB/r/ f3DXqugOppMdE39cAWltI7+TF0RRxeC0rurrWtRuUAUcf5Ta32d99epaNTUCeL2w oZsUxACXVOCrgHwAOdNr1jhczIWWDbroIy4nak4zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKpWr72IRveWLiGy47/ETe9QaAyMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2UzYTRkZTliLWJmMzgtNGZkNS1hNzU2LTc2MTZmYzc0YjVmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAKIgwDQYJKoZIhvcNAQELBQADggEBAF75F12DtNQTCBSITFJc3jvz omSYa7b/2o0/YJ6vm2tJaofPfizusM79TyD3SZ9oj5XMGKMTbGOT2ExptaTSvG6c n7Ailv9msA7w05smV2oHkXirOiGr2afuEuG+fiKxrAmmSUrvr7tnHSSlRptykoCP 5t9YJgjb4WNGOJQcGhgCumBDSDwhzZ2nsUJvy2zK2Rs0XzZcyVg9RPe7ye9FddPM KvskXdSt1mK5tdyIo2ptGAlQFAUA+QvdFds2S/1TKjT8V+vM4EAJfc5rnkec1ORP wRTvQBSHBHU5BlI0nU/4vx3hWZYVKp1DCjSE0/p+JuiPBfD7Ek5JNLR9+gNmJqc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:13 2025 by rpki-client