$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/036163a9-5318-4ece-8b61-e97b210e5145.roa File: 036163a9-5318-4ece-8b61-e97b210e5145.roa (raw, json) Hash identifier: nnHatDed9JpTY0WBHuhaYzCBSxTsiZvzcmXGofO9eMI= Subject key identifier: 31:A9:5D:ED:D5:0F:C4:92:FD:1D:00:8F:BE:54:AB:B6:D5:26:05:9A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 69C56E1B28337A4AC86BC261A3386F36B5FA6FE2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/036163a9-5318-4ece-8b61-e97b210e5145.roa Signing time: Thu 30 Oct 2025 22:40:25 +0000 ROA not before: Thu 30 Oct 2025 22:40:25 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1f68::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c5:6e:1b:28:33:7a:4a:c8:6b:c2:61:a3:38:6f:36:b5:fa:6f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:40:25 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=a8000823f9c652d5a9b7094f37b0fa9b97252adfb990cd770bc1fb6661c784ce, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:33:f7:8a:af:00:66:ff:32:6c:ed:37:b3: 0e:dc:c5:14:36:a4:46:38:0c:69:86:44:64:85:15: 88:89:47:b3:c0:f7:c0:69:90:93:06:2f:1a:f0:fa: b1:ed:e0:aa:04:c7:b2:65:dc:91:fa:8b:be:ff:7b: 49:9b:b2:9a:77:e4:fa:b9:68:d4:12:60:96:bb:86: 55:da:84:8a:d6:dd:80:74:14:60:3c:77:c3:36:f9: 70:ac:e5:06:b4:44:6a:3d:ae:7b:1d:58:4b:50:da: 57:d4:f9:7d:bd:db:dd:ff:7f:0d:a2:ab:a3:22:32: f6:f1:d2:43:b5:30:9a:78:52:2d:a7:19:94:26:e1: 68:bd:2e:99:28:d9:a8:cf:71:69:d3:8d:aa:3e:53: ef:63:a5:8d:45:23:ad:fb:ff:87:86:d1:f9:9b:67: 19:3f:8e:c5:c4:30:f6:cd:9c:ed:91:78:ff:4a:5e: d6:3d:52:a4:98:f3:fd:b8:12:35:c8:0e:bb:58:fe: 30:34:99:57:0c:fc:91:2e:d7:44:3e:3f:50:27:fe: 62:4d:6d:c1:06:aa:05:06:e9:72:39:cb:ed:22:2c: 50:ed:5f:5a:ba:46:0d:1c:26:34:1f:19:2b:d9:a7: 18:7c:65:9e:92:a6:b6:8d:a6:77:9f:ef:d4:a6:f8: 62:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A9:5D:ED:D5:0F:C4:92:FD:1D:00:8F:BE:54:AB:B6:D5:26:05:9A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/036163a9-5318-4ece-8b61-e97b210e5145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1f68::/47 Signature Algorithm: sha256WithRSAEncryption b0:08:01:98:0d:81:0b:0e:7f:e9:12:54:ec:67:0c:4d:0a:28: 1f:c3:9b:5e:c4:da:04:76:26:e1:5a:d7:c1:f7:36:ae:da:35: d2:53:7a:31:94:dc:99:1d:9a:c6:1e:fb:99:a6:41:6b:1e:e2: 54:37:f1:ba:8b:8d:14:87:40:03:b1:5a:29:31:90:cf:f1:dd: 1a:e0:d8:39:a3:3e:12:6d:a8:65:2d:9b:de:80:0f:cd:64:11: 18:11:a1:6a:0a:1f:21:67:ca:9b:cb:c9:f2:c9:5a:75:be:51: 3a:4f:dc:13:d7:1c:b7:c1:a8:0c:3a:f3:1e:d9:28:e1:4f:3f: 2d:e0:5c:36:20:d3:51:c0:a0:ae:15:7a:18:48:35:be:35:3d: c1:22:05:54:d4:57:20:9d:10:2b:f9:a6:3e:fd:0d:07:b5:e8: a4:89:42:32:f6:c1:cc:9e:07:70:64:a8:a6:60:06:3f:50:df: 03:c1:31:c4:25:5d:7e:79:17:18:de:5d:67:b4:5d:3e:a3:40: 2d:e7:56:a0:7f:d9:ff:ea:56:0d:56:47:df:a0:ff:c7:18:bb: 99:9c:b2:2e:dc:d2:1b:d0:4d:be:19:7a:68:07:db:93:7f:1e: af:03:3c:40:a6:0c:1d:76:dc:f3:1c:c9:b7:75:cf:b0:82:7e: 7e:51:46:78 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUacVuGygzekrIa8JhozhvNrX6b+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI0MDI1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhODAwMDgyM2Y5YzY1MmQ1YTliNzA5NGYzN2IwZmE5Yjk3 MjUyYWRmYjk5MGNkNzcwYmMxZmI2NjYxYzc4NGNlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZtzP3iq8AZv8ybO03sw7cxRQ2pEY4DGmGRGSFFYiJR7PA 98BpkJMGLxrw+rHt4KoEx7Jl3JH6i77/e0mbspp35Pq5aNQSYJa7hlXahIrW3YB0 FGA8d8M2+XCs5Qa0RGo9rnsdWEtQ2lfU+X29293/fw2iq6MiMvbx0kO1MJp4Ui2n GZQm4Wi9Lpko2ajPcWnTjao+U+9jpY1FI637/4eG0fmbZxk/jsXEMPbNnO2ReP9K XtY9UqSY8/24EjXIDrtY/jA0mVcM/JEu10Q+P1An/mJNbcEGqgUG6XI5y+0iLFDt X1q6Rg0cJjQfGSvZpxh8ZZ6SpraNpnef79Sm+GK7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMald7dUPxJL9HQCPvlSrttUmBZowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAzNjE2M2E5LTUzMTgtNGVjZS04YjYxLWU5N2IyMTBlNTE0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAH2gwDQYJKoZIhvcNAQELBQADggEBALAIAZgNgQsOf+kSVOxnDE0K KB/Dm17E2gR2JuFa18H3Nq7aNdJTejGU3JkdmsYe+5mmQWse4lQ38bqLjRSHQAOx WikxkM/x3Rrg2DmjPhJtqGUtm96AD81kERgRoWoKHyFnypvLyfLJWnW+UTpP3BPX HLfBqAw68x7ZKOFPPy3gXDYg01HAoK4VehhINb41PcEiBVTUVyCdECv5pj79DQe1 6KSJQjL2wcyeB3BkqKZgBj9Q3wPBMcQlXX55FxjeXWe0XT6jQC3nVqB/2f/qVg1W R9+g/8cYu5mcsi7c0hvQTb4ZemgH25N/Hq8DPECmDB123PMcybd1z7CCfn5RRng= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:23 2025 by rpki-client