$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8cb5bff3-df42-4386-a53b-39910e83a182.roa File: 8cb5bff3-df42-4386-a53b-39910e83a182.roa (raw, json) Hash identifier: 5upGa4cH8SpT4rBD9rm+qZceSiShTR3Ai9uEvcUAGTY= Subject key identifier: 81:73:D6:E4:15:E0:14:C5:CE:AE:9D:25:81:21:E8:45:E8:DB:C3:1B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5F51019188B9939536060E49557D8C13E636FB6D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8cb5bff3-df42-4386-a53b-39910e83a182.roa Signing time: Fri 31 Oct 2025 07:11:42 +0000 ROA not before: Fri 31 Oct 2025 07:11:42 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:19c0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:51:01:91:88:b9:93:95:36:06:0e:49:55:7d:8c:13:e6:36:fb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:11:42 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=deacb97dd0283665b900f6e66b5dfb9db07a0dce53ffbc6db2d295d92d90e566, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:55:2a:7d:b4:cb:a6:7d:dd:fc:0d:15:9f:0e: 2e:75:6b:8a:1c:09:29:e1:d4:11:e3:cb:09:63:3e: 03:6d:9e:91:2c:37:77:c8:d3:2b:c0:6c:8b:fc:79: 66:fd:a4:79:83:7a:66:5d:15:58:4c:13:b2:72:cc: 7e:30:b8:2d:0c:e9:02:29:d4:67:9a:cb:71:72:36: 0a:1e:4b:e5:0e:19:89:3b:a0:fd:60:ab:07:54:07: cf:f6:51:30:6e:f8:9a:f2:11:a8:59:07:e0:c8:02: 66:85:ae:b6:a3:86:e6:fe:fd:ef:09:bc:e9:a8:6d: eb:a3:f3:ef:da:51:13:20:2c:14:f3:c8:03:0e:ab: c5:7c:fe:e3:6c:33:3d:37:bb:5c:65:a5:76:6a:8d: db:fb:bd:c2:bc:7b:e2:f0:34:d2:a3:9e:00:68:bb: 55:19:8c:e9:71:e4:b6:d3:9e:d2:42:8d:18:bd:5d: 2c:c1:84:93:7d:a4:b2:84:4b:8a:4e:f7:be:1c:7c: 77:55:1f:13:8a:c6:5c:e4:6a:c7:18:7a:fe:37:fd: 21:cc:5e:15:ea:ca:65:a3:9c:9c:e3:e2:08:3b:ff: 58:b3:49:46:cc:3c:d5:63:9e:8d:61:16:13:1b:35: 3b:1f:09:54:e5:2d:ce:d4:f5:aa:76:b7:0b:7b:4e: a3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:73:D6:E4:15:E0:14:C5:CE:AE:9D:25:81:21:E8:45:E8:DB:C3:1B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8cb5bff3-df42-4386-a53b-39910e83a182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:19c0::/43 Signature Algorithm: sha256WithRSAEncryption 8b:3b:26:f1:bd:68:96:30:d3:16:40:6b:8c:2f:ef:d6:47:0b: f0:29:5c:a6:42:88:7b:91:96:95:2c:7a:1f:2a:e5:ea:3d:8b: 0a:f2:31:6d:8a:f1:18:bd:55:90:86:37:93:09:a6:c2:d4:0a: 91:e4:e4:47:8c:20:48:cd:62:25:ad:73:cc:e1:a7:a6:16:40: ee:dd:0a:ac:b0:6e:37:07:17:b7:28:5e:a5:73:b4:7b:65:ce: e5:d8:4b:74:4a:74:79:44:2f:33:7f:c9:81:31:79:6a:9b:80: 7b:54:17:24:a7:37:68:f1:92:15:c9:1e:34:23:17:a0:aa:8d: df:af:ff:fb:e5:e5:b9:d7:aa:d7:9e:bc:22:6a:7b:c4:d0:24: 7e:fc:9c:ed:85:d8:93:14:76:93:3d:cd:94:20:95:78:cd:b8: e7:99:c4:23:d3:30:1d:76:59:ae:1b:8f:4a:a7:0a:bf:1f:65: 51:18:fc:fc:bb:f1:c3:6d:97:e8:b5:8d:98:4c:ad:fc:1c:70: 09:78:01:d1:ea:ae:93:b8:97:d2:5d:fd:3a:89:6e:86:f8:db: 96:9a:b9:83:e4:c4:39:7a:8e:e4:cc:9a:18:06:e5:09:bb:5d: 4b:d0:a5:80:ce:7f:22:96:18:6a:0a:4a:ac:34:40:5b:e9:9f: 45:dc:df:77 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX1EBkYi5k5U2Bg5JVX2ME+Y2+20wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcxMTQyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZWFjYjk3ZGQwMjgzNjY1YjkwMGY2ZTY2YjVkZmI5ZGIw N2EwZGNlNTNmZmJjNmRiMmQyOTVkOTJkOTBlNTY2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSVSp9tMumfd38DRWfDi51a4ocCSnh1BHjywljPgNtnpEs N3fI0yvAbIv8eWb9pHmDemZdFVhME7JyzH4wuC0M6QIp1Geay3FyNgoeS+UOGYk7 oP1gqwdUB8/2UTBu+JryEahZB+DIAmaFrrajhub+/e8JvOmobeuj8+/aURMgLBTz yAMOq8V8/uNsMz03u1xlpXZqjdv7vcK8e+LwNNKjngBou1UZjOlx5LbTntJCjRi9 XSzBhJN9pLKES4pO974cfHdVHxOKxlzkascYev43/SHMXhXqymWjnJzj4gg7/1iz SUbMPNVjno1hFhMbNTsfCVTlLc7U9ap2twt7TqPBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgXPW5BXgFMXOrp0lgSHoRejbwxswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhjYjViZmYzLWRmNDItNDM4Ni1hNTNiLTM5OTEwZTgzYTE4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAGcAwDQYJKoZIhvcNAQELBQADggEBAIs7JvG9aJYw0xZAa4wv79ZH C/ApXKZCiHuRlpUseh8q5eo9iwryMW2K8Ri9VZCGN5MJpsLUCpHk5EeMIEjNYiWt c8zhp6YWQO7dCqywbjcHF7coXqVztHtlzuXYS3RKdHlELzN/yYExeWqbgHtUFySn N2jxkhXJHjQjF6Cqjd+v//vl5bnXqteevCJqe8TQJH78nO2F2JMUdpM9zZQglXjN uOeZxCPTMB12Wa4bj0qnCr8fZVEY/Py78cNtl+i1jZhMrfwccAl4AdHqrpO4l9Jd /TqJbob425aauYPkxDl6juTMmhgG5Qm7XUvQpYDOfyKWGGoKSqw0QFvpn0Xc33c= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:36 2025 by rpki-client