$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0074df7d-4c94-4e90-b939-44578c1e86b5.roa File: 0074df7d-4c94-4e90-b939-44578c1e86b5.roa (raw, json) Hash identifier: YIYAC1KvvjUskBI6GU+zSTpkC5bzkvYLYvDDD5nPFOs= Subject key identifier: 5F:DD:C8:4E:33:21:1D:41:D7:75:A1:C7:7A:BF:AD:CD:F7:C7:F8:CE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4DFE753CD52EEAD855FFB37570AFB468F73C269E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0074df7d-4c94-4e90-b939-44578c1e86b5.roa Signing time: Fri 31 Oct 2025 06:43:50 +0000 ROA not before: Fri 31 Oct 2025 06:43:50 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:29c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fe:75:3c:d5:2e:ea:d8:55:ff:b3:75:70:af:b4:68:f7:3c:26:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:43:50 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=23049d84c0d064ddfca040ce0ff94bd1648b380ac58c6988660a8333fadf4520, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:3f:b5:e7:d1:5b:30:cd:1a:29:81:c3:50: d7:04:29:7c:8d:f6:76:5d:cb:fb:88:e6:5a:a1:3f: bd:0a:d4:de:35:00:8b:7e:33:27:a5:4f:e6:76:db: e8:f7:b5:e2:49:86:45:d9:74:cd:a2:cf:5e:1f:28: 3c:69:a8:37:26:b3:39:93:78:d7:dd:7e:d2:73:5f: bf:8d:6a:5f:c3:d4:ae:45:01:1f:44:25:68:1b:af: a9:73:d0:dd:c3:21:c5:9f:5c:e6:99:c8:36:37:61: 74:4b:45:9e:39:ea:9e:e2:b1:60:37:9b:e6:6d:01: c0:b5:9d:dc:4d:07:29:fa:ab:7e:c9:09:12:7b:0b: 88:b3:28:b5:36:d7:30:72:98:20:05:c8:3c:6a:66: b1:ad:7c:ae:78:50:f1:f3:e8:d0:fd:b1:99:d8:a0: a1:3b:bb:1b:0f:a3:b2:98:16:f4:5d:05:5c:6a:5c: f5:80:05:87:92:e0:10:2b:6d:7c:ae:54:75:f9:7c: 17:02:59:b7:19:f0:95:1b:3d:4c:55:2a:ef:ab:9b: da:b8:5f:bb:ef:48:8a:46:37:3c:b8:4a:c6:f4:8f: b5:d7:f6:1d:a4:b5:e0:3f:bf:b5:ed:19:51:b9:a1: 84:31:92:f5:64:a1:88:0e:87:ac:e4:e1:90:6c:9b: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DD:C8:4E:33:21:1D:41:D7:75:A1:C7:7A:BF:AD:CD:F7:C7:F8:CE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0074df7d-4c94-4e90-b939-44578c1e86b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:29c0::/44 Signature Algorithm: sha256WithRSAEncryption 9c:02:ee:68:5c:78:c8:9e:db:d1:7a:e3:79:46:85:e7:af:8f: f7:34:da:68:44:82:a0:d0:e6:b1:ea:51:0b:8e:3d:41:6f:b9: 44:13:7f:71:db:1c:3a:40:d2:51:ec:48:1a:72:b1:62:f4:06: f1:32:13:f5:71:2b:8f:eb:d3:85:ad:9b:91:58:e9:10:82:67: 1d:ec:86:4b:c9:47:87:b0:ca:d0:ed:92:a6:da:0a:c0:7d:f4: b4:bd:77:14:b7:f0:8d:26:45:15:b1:83:44:3a:39:93:fc:9b: a2:5b:d0:34:d2:e0:52:ad:e4:09:fd:75:fa:57:5d:ed:f2:20: d2:89:e2:ae:0d:6e:79:0f:3a:23:86:c2:7b:fe:fb:1b:4f:80: b7:2e:62:06:25:fa:83:18:39:53:9a:44:36:ef:ee:92:f6:67: 68:15:f4:fa:7d:a0:52:44:c2:a5:12:f6:b7:c7:7a:ab:6c:e5: e1:ef:4b:3b:0f:13:77:e6:d7:25:ec:33:24:51:15:d4:3d:4f: 8e:2d:cf:44:b1:91:9f:d0:c1:ec:c2:d3:62:c7:d0:53:41:37: fe:89:fa:df:a2:96:07:e9:2f:aa:0f:bb:75:17:d5:5b:bb:00: d2:27:fb:fb:86:2f:a8:ef:3c:12:e5:93:94:6a:b0:d0:cc:87: cf:3e:90:29 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTf51PNUu6thV/7N1cK+0aPc8Jp4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY0MzUwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzA0OWQ4NGMwZDA2NGRkZmNhMDQwY2UwZmY5NGJkMTY0 OGIzODBhYzU4YzY5ODg2NjBhODMzM2ZhZGY0NTIwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7bz+159FbMM0aKYHDUNcEKXyN9nZdy/uI5lqhP70K1N41 AIt+MyelT+Z22+j3teJJhkXZdM2iz14fKDxpqDcmszmTeNfdftJzX7+Nal/D1K5F AR9EJWgbr6lz0N3DIcWfXOaZyDY3YXRLRZ456p7isWA3m+ZtAcC1ndxNByn6q37J CRJ7C4izKLU21zBymCAFyDxqZrGtfK54UPHz6ND9sZnYoKE7uxsPo7KYFvRdBVxq XPWABYeS4BArbXyuVHX5fBcCWbcZ8JUbPUxVKu+rm9q4X7vvSIpGNzy4Ssb0j7XX 9h2kteA/v7XtGVG5oYQxkvVkoYgOh6zk4ZBsm9wxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUX93ITjMhHUHXdaHHer+tzffH+M4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAwNzRkZjdkLTRjOTQtNGU5MC1iOTM5LTQ0NTc4YzFlODZiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAKcAwDQYJKoZIhvcNAQELBQADggEBAJwC7mhceMie29F643lGheev j/c02mhEgqDQ5rHqUQuOPUFvuUQTf3HbHDpA0lHsSBpysWL0BvEyE/VxK4/r04Wt m5FY6RCCZx3shkvJR4ewytDtkqbaCsB99LS9dxS38I0mRRWxg0Q6OZP8m6Jb0DTS 4FKt5An9dfpXXe3yINKJ4q4NbnkPOiOGwnv++xtPgLcuYgYl+oMYOVOaRDbv7pL2 Z2gV9Pp9oFJEwqUS9rfHeqts5eHvSzsPE3fm1yXsMyRRFdQ9T44tz0SxkZ/QwezC 02LH0FNBN/6J+t+ilgfpL6oPu3UX1Vu7ANIn+/uGL6jvPBLlk5RqsNDMh88+kCk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:36 2025 by rpki-client