$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe87b7eb-eada-440a-a35a-823a9a6dcac8.roa File: fe87b7eb-eada-440a-a35a-823a9a6dcac8.roa (raw, json) Hash identifier: qOV6njhUQCON4BucRsOgWXEfhmkSt7WC16EEkdRsIic= Subject key identifier: 8F:46:0D:19:32:44:84:18:53:8B:0C:19:CF:17:03:C9:AA:50:FD:20 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0F328A1CB997C679B83FDF85BEF739A2A89454D0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe87b7eb-eada-440a-a35a-823a9a6dcac8.roa Signing time: Fri 31 Oct 2025 01:13:08 +0000 ROA not before: Fri 31 Oct 2025 01:13:08 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3a6a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:32:8a:1c:b9:97:c6:79:b8:3f:df:85:be:f7:39:a2:a8:94:54:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:13:08 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=08398a40f0e00e58b5025836bd6de770a05cca345ad7c265c6adc7671c7406e6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:2d:a8:f9:d4:3d:33:a1:a3:97:12:a7:13: 00:40:21:ee:a3:d5:fc:f1:11:64:a1:24:74:42:c0: 04:72:01:d5:58:c2:da:0a:1f:38:14:94:f8:e7:f5: fe:39:1e:a5:81:e9:c2:56:b9:88:17:bc:da:b1:31: 53:fb:e4:70:4c:f8:97:dc:21:4d:87:9d:89:30:e7: 79:98:de:d3:78:66:ea:42:74:aa:78:63:2a:98:14: 06:a8:07:1f:90:73:d4:12:a1:95:a0:b1:b5:b3:46: a6:58:f5:9e:a2:96:37:ed:02:51:ba:a3:34:76:83: 1b:ba:c6:41:a4:f2:b1:92:74:04:df:be:8a:73:9c: 86:ff:ee:46:62:b5:23:28:6e:e4:a8:99:73:c9:b8: 49:4c:cf:f0:8a:d8:28:95:b0:43:64:23:fb:ed:cc: 30:5c:9c:67:4a:80:80:d4:f6:36:cd:26:fb:1f:9c: 72:c5:b0:92:e6:0c:60:d7:68:bd:b8:41:6c:1c:3c: 6e:a5:be:a7:cc:2b:2d:4a:fe:57:68:7e:ea:2f:f5: 37:85:98:3b:06:4e:56:da:69:d6:ac:bc:90:58:23: c5:3a:86:11:21:e2:e1:17:b7:3e:4e:fe:39:a1:53: 37:cf:05:c3:6a:89:3c:0f:23:38:d1:a5:10:3b:13: 3f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:46:0D:19:32:44:84:18:53:8B:0C:19:CF:17:03:C9:AA:50:FD:20 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe87b7eb-eada-440a-a35a-823a9a6dcac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3a6a::/47 Signature Algorithm: sha256WithRSAEncryption 45:97:41:22:c5:41:18:89:5c:86:9a:2a:89:6a:3a:db:4a:78: 0a:27:1f:05:c9:dc:29:8a:d8:c6:3f:c8:d9:0a:17:2e:bb:79: c2:55:bd:41:81:32:66:b4:3c:aa:a5:4c:b7:42:10:0c:a1:10: 48:8d:61:14:9f:cc:f7:b4:93:50:71:b5:d4:10:15:18:c6:56: d0:17:5f:d2:52:73:19:49:cc:70:1d:6d:85:60:3f:0d:db:3d: e4:ac:05:f9:6e:3a:49:3a:83:db:51:4f:d0:ea:79:75:ef:a7: 20:06:21:b2:1a:b2:cf:cb:b6:22:a9:1e:38:d6:07:27:76:0a: 59:ef:bc:1c:79:51:e8:ba:15:ae:9b:46:cc:c6:ca:48:0a:3f: 53:1f:af:f0:b3:6a:01:1b:10:dc:f0:bb:04:18:55:1f:2a:82: ed:21:73:49:ee:09:b1:57:1b:8f:a8:13:3a:0b:21:89:a0:15: 96:90:f7:b9:60:47:ca:19:72:9d:37:47:19:54:92:81:38:d5: 83:37:4d:ab:ee:0a:a2:2e:6a:9e:fd:fb:83:2b:60:66:97:b5: 7c:75:7a:b6:5a:f6:f7:8b:f2:3f:36:8e:1c:ca:06:9e:89:ea: e0:e5:19:24:d4:18:db:18:5b:0c:4d:f8:dc:fb:96:f4:ff:94: 10:1e:e4:ef -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDzKKHLmXxnm4P9+Fvvc5oqiUVNAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDExMzA4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODM5OGE0MGYwZTAwZTU4YjUwMjU4MzZiZDZkZTc3MGEw NWNjYTM0NWFkN2MyNjVjNmFkYzc2NzFjNzQwNmU2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfxy2o+dQ9M6GjlxKnEwBAIe6j1fzxEWShJHRCwARyAdVY wtoKHzgUlPjn9f45HqWB6cJWuYgXvNqxMVP75HBM+JfcIU2HnYkw53mY3tN4ZupC dKp4YyqYFAaoBx+Qc9QSoZWgsbWzRqZY9Z6iljftAlG6ozR2gxu6xkGk8rGSdATf vopznIb/7kZitSMobuSomXPJuElMz/CK2CiVsENkI/vtzDBcnGdKgIDU9jbNJvsf nHLFsJLmDGDXaL24QWwcPG6lvqfMKy1K/ldofuov9TeFmDsGTlbaadasvJBYI8U6 hhEh4uEXtz5O/jmhUzfPBcNqiTwPIzjRpRA7Ez/pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUj0YNGTJEhBhTiwwZzxcDyapQ/SAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ZlODdiN2ViLWVhZGEtNDQwYS1hMzVhLTgyM2E5YTZkY2FjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOmowDQYJKoZIhvcNAQELBQADggEBAEWXQSLFQRiJXIaaKolqOttK eAonHwXJ3CmK2MY/yNkKFy67ecJVvUGBMma0PKqlTLdCEAyhEEiNYRSfzPe0k1Bx tdQQFRjGVtAXX9JScxlJzHAdbYVgPw3bPeSsBfluOkk6g9tRT9DqeXXvpyAGIbIa ss/LtiKpHjjWByd2ClnvvBx5Uei6Fa6bRszGykgKP1Mfr/CzagEbENzwuwQYVR8q gu0hc0nuCbFXG4+oEzoLIYmgFZaQ97lgR8oZcp03RxlUkoE41YM3TavuCqIuap79 +4MrYGaXtXx1erZa9veL8j82jhzKBp6J6uDlGSTUGNsYWwxN+Nz7lvT/lBAe5O8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:05 2025 by rpki-client