$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05dbf5ff-8ffd-4471-9721-71bc035de2f5.roa File: 05dbf5ff-8ffd-4471-9721-71bc035de2f5.roa (raw, json) Hash identifier: yEKO6DMR+bEO8skXb34u26OwaoApdU1Wm6D5jbg3Z/0= Subject key identifier: D1:4D:38:96:80:69:16:C2:E0:7E:FE:AA:A6:C3:FA:80:F6:DC:9B:65 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0413264CC6D61AB91423E7D0A0C0E0DEB55C7243 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05dbf5ff-8ffd-4471-9721-71bc035de2f5.roa Signing time: Thu 30 Oct 2025 21:28:51 +0000 ROA not before: Thu 30 Oct 2025 21:28:51 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1742::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:13:26:4c:c6:d6:1a:b9:14:23:e7:d0:a0:c0:e0:de:b5:5c:72:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:28:51 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=4e67c06dfcb172220c9d99132c3f521a09431e04e909ac16371402271480a690, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:01:02:d3:28:5d:4d:99:62:e1:33:5d:ba: 4c:9e:03:20:5f:03:19:d4:e6:3e:f0:f7:06:ae:3b: 92:09:25:73:4f:54:e2:e6:17:3e:09:27:58:5a:72: 04:bd:d8:6b:17:9e:54:8f:dc:f0:e6:9a:2b:4d:41: 7b:49:59:e7:b4:32:22:ba:cb:21:27:7f:0f:d4:cb: 1b:39:2b:09:0c:19:b2:6c:d2:0c:17:4c:7d:ec:1f: d7:35:92:00:3f:c9:8a:18:27:ec:d4:70:95:83:d9: cc:3c:b2:74:80:74:69:4c:cc:f0:00:e4:5a:a4:c3: e8:4d:9d:73:43:34:15:4a:69:2f:2c:49:48:1a:8a: 1f:65:ff:4a:08:7d:c5:5f:fc:76:4b:dc:96:dd:53: 82:c2:9e:bc:75:c9:23:d6:c8:25:64:e0:67:91:7b: 1a:8a:20:9e:50:bf:b8:b9:94:6f:e6:e8:dc:bd:c2: 57:39:4d:b8:04:20:67:06:49:6d:ec:58:78:7d:f4: 0f:c9:63:f6:f6:3f:6a:91:84:90:25:94:32:c8:dc: 21:7e:08:d3:f5:d1:02:66:3e:36:3a:53:4c:71:fb: 6f:c9:18:46:95:1b:0c:83:9d:01:37:f4:06:00:9f: 8e:ed:60:58:d0:bf:ad:17:9a:b7:d7:da:9c:89:dd: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4D:38:96:80:69:16:C2:E0:7E:FE:AA:A6:C3:FA:80:F6:DC:9B:65 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05dbf5ff-8ffd-4471-9721-71bc035de2f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1742::/47 Signature Algorithm: sha256WithRSAEncryption 86:41:f6:b7:87:37:47:b3:4e:da:de:8d:68:6d:b6:f3:bf:76: cf:24:ad:b1:49:53:ce:a5:b5:17:bb:36:66:05:c9:1d:06:41: c1:89:04:2e:18:e5:76:22:61:5f:22:d1:ca:8b:08:23:bd:53: 1a:09:94:b1:17:a9:67:25:0d:1b:a2:0f:3e:fd:7f:ce:80:1d: 6d:08:9f:9c:e2:9a:c6:4e:0d:f5:fe:06:6c:9e:20:84:b8:43: e6:b6:54:bc:f1:ed:90:6f:5f:55:44:47:a8:51:08:d5:0a:78: 9f:da:17:15:36:6c:21:b4:ee:9e:3c:e8:28:9f:23:16:9f:29: 19:4a:73:02:7e:6e:c2:9d:b8:d8:02:f2:8f:96:2a:15:35:57: 53:93:56:a0:76:33:10:d1:01:24:91:88:32:86:e3:7b:8f:b1: 69:43:19:91:1b:7b:01:ce:85:6c:a0:b4:2e:3f:3b:05:bc:4c: 77:3b:0b:56:9d:4f:16:76:23:a7:51:cd:17:80:e4:3f:0a:9a: 8e:2f:0f:b7:f5:d2:bb:78:b6:79:d2:07:e7:c4:fe:4b:76:b8: 1c:16:3e:4b:9a:3d:0a:84:c8:b8:e6:1b:d3:5f:f6:ab:5f:f0: 89:08:74:58:19:24:46:a3:71:8d:fe:36:00:58:4f:dc:6e:6c: 88:7e:4e:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBBMmTMbWGrkUI+fQoMDg3rVcckMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyODUxWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTY3YzA2ZGZjYjE3MjIyMGM5ZDk5MTMyYzNmNTIxYTA5 NDMxZTA0ZTkwOWFjMTYzNzE0MDIyNzE0ODBhNjkwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdiAEC0yhdTZli4TNdukyeAyBfAxnU5j7w9wauO5IJJXNP VOLmFz4JJ1hacgS92GsXnlSP3PDmmitNQXtJWee0MiK6yyEnfw/Uyxs5KwkMGbJs 0gwXTH3sH9c1kgA/yYoYJ+zUcJWD2cw8snSAdGlMzPAA5Fqkw+hNnXNDNBVKaS8s SUgaih9l/0oIfcVf/HZL3JbdU4LCnrx1ySPWyCVk4GeRexqKIJ5Qv7i5lG/m6Ny9 wlc5TbgEIGcGSW3sWHh99A/JY/b2P2qRhJAllDLI3CF+CNP10QJmPjY6U0xx+2/J GEaVGwyDnQE39AYAn47tYFjQv60XmrfX2pyJ3QI3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0U04loBpFsLgfv6qpsP6gPbcm2UwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzA1ZGJmNWZmLThmZmQtNDQ3MS05NzIxLTcxYmMwMzVkZTJmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAF0IwDQYJKoZIhvcNAQELBQADggEBAIZB9reHN0ezTtrejWhttvO/ ds8krbFJU86ltRe7NmYFyR0GQcGJBC4Y5XYiYV8i0cqLCCO9UxoJlLEXqWclDRui Dz79f86AHW0In5zimsZODfX+BmyeIIS4Q+a2VLzx7ZBvX1VER6hRCNUKeJ/aFxU2 bCG07p486CifIxafKRlKcwJ+bsKduNgC8o+WKhU1V1OTVqB2MxDRASSRiDKG43uP sWlDGZEbewHOhWygtC4/OwW8THc7C1adTxZ2I6dRzReA5D8Kmo4vD7f10rt4tnnS B+fE/kt2uBwWPkuaPQqEyLjmG9Nf9qtf8IkIdFgZJEajcY3+NgBYT9xubIh+Tso= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:41 2025 by rpki-client