$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/937c14fe-8971-4013-9d84-65742a0a8d47.roa File: 937c14fe-8971-4013-9d84-65742a0a8d47.roa (raw, json) Hash identifier: 0xoIodCRxSULXmcCQYxYUTbsBB9hCSOY8BsV6VNhUY8= Subject key identifier: 72:1C:1E:2B:10:73:87:A0:7D:90:07:82:D7:77:83:52:E7:71:1D:DA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 40D90FCB8B154514A57296B32006BD2B1B23E207 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/937c14fe-8971-4013-9d84-65742a0a8d47.roa Signing time: Fri 31 Oct 2025 03:06:52 +0000 ROA not before: Fri 31 Oct 2025 03:06:52 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1bb8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d9:0f:cb:8b:15:45:14:a5:72:96:b3:20:06:bd:2b:1b:23:e2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:06:52 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=dfe62017f1bc086c5144e2c80cd12828e69c12e4a2cd0d6420fedd440f3ee2f8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:15:67:64:be:57:0a:55:93:7b:f0:9e:47:df: df:3e:e0:eb:c0:2d:3f:dc:fa:62:13:c5:ab:08:11: 82:1f:8f:80:7e:5c:28:ef:94:de:e3:78:cb:9e:d5: de:1b:50:b7:5b:3f:f0:37:6b:9c:d6:21:ca:ca:65: 2e:29:92:e0:d2:59:75:b5:66:1f:3c:c4:e1:9e:72: e5:98:77:33:95:1e:0d:fa:13:fe:52:59:99:ed:55: ab:82:fa:fb:14:ae:19:79:0f:63:96:4f:b4:0a:79: ed:e1:56:d3:60:f7:36:f8:0f:85:17:e6:b0:19:29: a2:cd:4d:2f:9e:08:b1:3c:80:c5:d4:1a:6a:53:4e: 7d:8c:28:ed:50:6f:ea:45:25:d8:ca:df:88:c1:a9: a0:1a:10:17:ce:4f:b9:37:0f:07:df:a8:a6:d4:fc: de:c1:a6:ae:85:b6:e2:d4:43:0b:64:e2:41:db:c1: 85:c9:5f:d1:5a:72:7d:00:1f:69:40:45:bc:c3:bf: 8e:14:de:83:d0:3e:d5:e1:7a:25:8f:aa:82:13:9a: 92:b3:33:a6:42:0e:51:a5:a1:2c:34:9d:dd:ed:f5: 35:0d:ba:9d:bf:ce:d3:34:9f:af:a9:cd:74:3b:b2: f0:b5:7c:c0:60:8a:fe:c2:74:f3:74:70:65:ba:bc: cc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1C:1E:2B:10:73:87:A0:7D:90:07:82:D7:77:83:52:E7:71:1D:DA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/937c14fe-8971-4013-9d84-65742a0a8d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1bb8::/46 Signature Algorithm: sha256WithRSAEncryption a4:ce:8f:30:64:2b:fb:ff:cb:dd:be:2a:32:e2:72:23:e2:39: 6f:1c:28:b8:af:35:f4:2a:29:6b:86:3e:f6:47:65:3a:7f:bc: dc:11:e5:cc:0a:2f:9c:26:37:c4:36:35:d3:ad:b5:90:7f:5d: 30:7a:41:73:3c:2d:86:1c:6d:64:b8:3f:bb:d7:a1:96:44:cf: 17:73:a9:f9:fb:0c:6f:4c:a9:a6:40:62:a0:c9:1e:92:dd:9c: db:34:a8:86:84:f6:aa:33:d1:94:6f:47:37:04:2d:ac:01:6b: b4:83:1a:f7:a1:ea:d3:61:9f:ed:b2:3e:de:b3:99:9c:88:af: 9c:db:2b:3f:4d:17:1b:53:3f:42:7d:db:55:c2:e8:d9:48:5a: 36:1e:7a:85:55:a0:74:a8:2f:c1:94:01:4c:1e:ab:68:57:dd: 70:d5:dd:83:a3:98:4c:c0:cc:0a:12:ab:d9:a1:dc:a7:f7:2c: 2b:2d:37:00:6c:c6:15:a9:16:55:81:77:82:cf:3b:14:e0:de: f7:1f:c3:59:5a:2b:fe:29:4c:59:03:47:99:a1:89:0b:64:02: f5:da:7c:08:02:d0:73:15:e4:6f:49:cc:01:80:20:c4:0a:7a: 48:97:d7:fd:55:74:ea:24:7e:78:aa:56:c7:ff:a3:cf:b3:ea: cb:a2:30:c5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQNkPy4sVRRSlcpazIAa9Kxsj4gcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMwNjUyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmU2MjAxN2YxYmMwODZjNTE0NGUyYzgwY2QxMjgyOGU2 OWMxMmU0YTJjZDBkNjQyMGZlZGQ0NDBmM2VlMmY4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFFWdkvlcKVZN78J5H398+4OvALT/c+mITxasIEYIfj4B+ XCjvlN7jeMue1d4bULdbP/A3a5zWIcrKZS4pkuDSWXW1Zh88xOGecuWYdzOVHg36 E/5SWZntVauC+vsUrhl5D2OWT7QKee3hVtNg9zb4D4UX5rAZKaLNTS+eCLE8gMXU GmpTTn2MKO1Qb+pFJdjK34jBqaAaEBfOT7k3DwffqKbU/N7Bpq6FtuLUQwtk4kHb wYXJX9Facn0AH2lARbzDv44U3oPQPtXheiWPqoITmpKzM6ZCDlGloSw0nd3t9TUN up2/ztM0n6+pzXQ7svC1fMBgiv7CdPN0cGW6vMxpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUchweKxBzh6B9kAeC13eDUudxHdowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzkzN2MxNGZlLTg5NzEtNDAxMy05ZDg0LTY1NzQyYTBhOGQ0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAG7gwDQYJKoZIhvcNAQELBQADggEBAKTOjzBkK/v/y92+KjLiciPi OW8cKLivNfQqKWuGPvZHZTp/vNwR5cwKL5wmN8Q2NdOttZB/XTB6QXM8LYYcbWS4 P7vXoZZEzxdzqfn7DG9MqaZAYqDJHpLdnNs0qIaE9qoz0ZRvRzcELawBa7SDGveh 6tNhn+2yPt6zmZyIr5zbKz9NFxtTP0J921XC6NlIWjYeeoVVoHSoL8GUAUweq2hX 3XDV3YOjmEzAzAoSq9mh3Kf3LCstNwBsxhWpFlWBd4LPOxTg3vcfw1laK/4pTFkD R5mhiQtkAvXafAgC0HMV5G9JzAGAIMQKekiX1/1VdOokfniqVsf/o8+z6suiMMU= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:49 2025 by rpki-client