$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed2ee362-c641-4cbf-b20f-ffa243369f55.roa File: ed2ee362-c641-4cbf-b20f-ffa243369f55.roa (raw, json) Hash identifier: GHFGVrRjfm6HpSDhh7MnBxNERgm5fRBvsCbsGDqRGiM= Subject key identifier: 17:41:83:BD:82:06:F3:A0:CA:84:ED:E3:D5:18:08:80:34:DA:FD:6F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7D95F0BD4D7567904477C329C9FBE6669D84E2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed2ee362-c641-4cbf-b20f-ffa243369f55.roa Signing time: Fri 31 Oct 2025 00:56:30 +0000 ROA not before: Fri 31 Oct 2025 00:56:30 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3896::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:95:f0:bd:4d:75:67:90:44:77:c3:29:c9:fb:e6:66:9d:84:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:56:30 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=119920ecbb6e14f4c9c933fa55a88da1f4798c27a37812443e48ed220025e20e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:96:73:ad:b2:9b:bd:8e:48:50:a1:5e:f0: 37:ac:c0:dc:bd:d8:ee:df:05:ea:a0:e8:72:b7:97: e6:e7:67:42:50:2c:ab:a1:ec:80:61:5c:3a:78:8d: 5d:54:4e:e9:02:3f:59:e2:f6:0b:2e:da:1f:50:cd: 5c:18:5d:41:93:8a:d0:52:de:f2:43:b2:15:ad:da: 60:d7:f7:fc:46:68:c4:26:88:96:99:74:58:fe:db: 52:ee:c1:de:30:8d:c0:09:6c:2c:78:3e:e9:dc:35: a8:dc:89:18:0d:f1:04:5c:a6:8b:c7:eb:d3:0f:4c: 27:95:bb:71:1b:b3:fb:9f:71:78:00:fe:1d:0f:5c: 91:e0:1c:b7:0a:d7:94:6c:41:ed:e1:08:75:26:6d: 5d:e1:5b:d2:53:67:93:d4:a5:5a:e6:26:75:18:a1: c5:da:2b:b5:a3:b4:ed:d2:2d:35:e3:4d:d7:d4:cf: e2:a0:88:ef:00:1a:8e:aa:cc:fa:6f:2c:c9:1d:5d: fc:0c:86:de:a7:6f:65:dc:0c:4d:6a:2e:88:68:f3: bc:68:2c:d3:c1:91:1b:ca:fa:b2:a7:61:c8:2f:65: ec:a5:fd:0c:c0:c4:19:96:d6:87:65:96:1a:19:3f: ad:6d:ba:9f:64:94:6a:ed:18:03:c4:2e:0c:11:63: c2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:41:83:BD:82:06:F3:A0:CA:84:ED:E3:D5:18:08:80:34:DA:FD:6F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed2ee362-c641-4cbf-b20f-ffa243369f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3896::/47 Signature Algorithm: sha256WithRSAEncryption 76:22:1e:f7:b2:38:f6:38:77:28:32:50:67:b9:1d:60:95:5d: 1f:65:70:88:7e:a3:8f:04:59:fc:f3:e1:1f:95:aa:39:d9:2d: 41:86:de:76:49:78:77:5b:89:75:ea:a2:2a:ed:2a:bc:a8:0f: e6:72:f1:73:18:99:4f:62:29:ac:dc:61:40:35:64:45:21:e3: 40:cd:cf:6e:69:c1:35:23:a2:2c:72:f2:a2:f2:2c:0b:d9:0c: 9a:eb:fe:11:1f:c4:33:89:19:8a:19:cc:25:9b:50:29:3f:de: 7c:ee:2c:19:03:56:e3:ce:d1:c8:66:a5:42:f9:62:5f:ce:ce: 5b:af:6f:fa:a3:f0:40:b8:4f:3b:10:42:b2:40:86:0d:bb:72: 50:f9:00:cf:32:fa:f9:28:07:ff:62:fb:d8:ba:74:db:21:81: be:21:57:0f:58:35:af:a6:5d:ca:b1:17:03:4d:08:fd:57:2c: f9:1d:05:8a:19:71:cf:6b:8c:5b:8f:1a:90:07:2b:50:77:5c: a3:35:bf:a3:c1:c5:59:d7:02:45:d3:84:5f:0a:92:79:ae:3c: a2:a0:6b:05:03:b9:43:b1:81:74:eb:82:6c:5e:54:de:20:78: 65:f1:ab:58:55:54:69:de:38:6c:1b:3a:5c:24:d1:52:78:6c: d2:28:ec:b5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITfZXwvU11Z5BEd8MpyfvmZp2E4jANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMzEwMDU2MzBaFw0yNTEyMDUyMzU5NTla MHoxSTBHBgNVBAUTQDExOTkyMGVjYmI2ZTE0ZjRjOWM5MzNmYTU1YTg4ZGExZjQ3 OThjMjdhMzc4MTI0NDNlNDhlZDIyMDAyNWUyMGUxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKeulnOtspu9jkhQoV7wN6zA3L3Y7t8F6qDocreX5udnQlAs q6HsgGFcOniNXVRO6QI/WeL2Cy7aH1DNXBhdQZOK0FLe8kOyFa3aYNf3/EZoxCaI lpl0WP7bUu7B3jCNwAlsLHg+6dw1qNyJGA3xBFymi8fr0w9MJ5W7cRuz+59xeAD+ HQ9ckeActwrXlGxB7eEIdSZtXeFb0lNnk9SlWuYmdRihxdortaO07dItNeNN19TP 4qCI7wAajqrM+m8syR1d/AyG3qdvZdwMTWouiGjzvGgs08GRG8r6sqdhyC9l7KX9 DMDEGZbWh2WWGhk/rW26n2SUau0YA8QuDBFjwpsCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBQXQYO9ggbzoMqE7ePVGAiANNr9bzAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvZWQyZWUzNjItYzY0MS00Y2JmLWIyMGYtZmZhMjQzMzY5ZjU1LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHASYAkAA4ljANBgkqhkiG9w0BAQsFAAOCAQEAdiIe97I49jh3KDJQZ7kdYJVd H2VwiH6jjwRZ/PPhH5WqOdktQYbedkl4d1uJdeqiKu0qvKgP5nLxcxiZT2IprNxh QDVkRSHjQM3PbmnBNSOiLHLyovIsC9kMmuv+ER/EM4kZihnMJZtQKT/efO4sGQNW 487RyGalQvliX87OW69v+qPwQLhPOxBCskCGDbtyUPkAzzL6+SgH/2L72Lp02yGB viFXD1g1r6ZdyrEXA00I/Vcs+R0Fihlxz2uMW48akAcrUHdcozW/o8HFWdcCRdOE XwqSea48oqBrBQO5Q7GBdOuCbF5U3iB4ZfGrWFVUad44bBs6XCTRUnhs0ijstQ== -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:38 2025 by rpki-client