$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ab81e68-3fa3-4bd3-8c56-6a5665c71aa3.roa File: 0ab81e68-3fa3-4bd3-8c56-6a5665c71aa3.roa (raw, json) Hash identifier: R1JpXMK+J2egK0k3s7iUJX7vrO5eBVlSGAx5MnwZ34w= Subject key identifier: 9C:8D:63:7C:DC:3E:12:25:9C:59:23:FA:80:11:BC:2B:16:F1:84:ED Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 59BFC6505987CB008FB6F8AAC64FA3D8B19BA75C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ab81e68-3fa3-4bd3-8c56-6a5665c71aa3.roa Signing time: Thu 30 Oct 2025 21:53:47 +0000 ROA not before: Thu 30 Oct 2025 21:53:47 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1994::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:bf:c6:50:59:87:cb:00:8f:b6:f8:aa:c6:4f:a3:d8:b1:9b:a7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:53:47 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=d90fdbc84e9ba16d75508cf5e9d22214bc788eb0627de6133569cf8684c91936, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:50:0e:39:1d:92:57:11:2d:70:c0:27:22:b2: 5d:d7:02:e4:d2:9d:86:4b:a6:74:98:7f:91:9f:8d: cd:8b:1c:99:98:b0:1a:5b:8e:dd:fe:df:6c:30:72: af:19:1a:8f:dc:cc:89:30:a2:47:b9:2d:39:12:3d: c9:db:ac:ed:22:e8:c2:8e:9c:e9:2c:09:d0:de:80: 28:f1:b2:52:cf:f9:c0:a9:82:bd:dd:5e:e5:07:16: ae:3a:51:b9:e7:56:80:f1:be:4a:48:b9:e1:6e:15: 4e:3c:b1:cd:e2:3d:89:c4:ad:34:83:7a:33:39:1b: ff:38:78:84:9e:14:63:53:03:90:00:b3:2f:db:ba: 8b:22:2e:76:31:85:a9:b4:5f:92:ee:25:67:3e:f6: bf:99:94:e2:fb:99:25:37:27:e1:6a:55:0b:9c:71: c2:65:d9:fe:4e:a6:d9:66:cd:31:01:fd:ab:e3:91: 42:a1:30:dd:cc:ad:0b:b1:c2:8e:8c:24:30:44:fa: 24:9e:67:f6:1f:3e:00:81:3a:ef:6c:a2:de:5c:54: c6:08:9e:e8:22:e1:16:39:2e:1a:ad:d2:68:01:19: 91:e0:c5:47:b6:56:20:69:8b:62:27:d3:3e:b3:21: b8:75:88:44:27:ec:8d:3c:26:a1:ff:a2:13:bf:5d: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8D:63:7C:DC:3E:12:25:9C:59:23:FA:80:11:BC:2B:16:F1:84:ED X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0ab81e68-3fa3-4bd3-8c56-6a5665c71aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1994::/47 Signature Algorithm: sha256WithRSAEncryption 55:85:5f:b0:1b:67:9f:24:49:6f:89:b6:54:0e:64:69:14:99: 5b:52:70:c1:c7:c4:fd:dd:3e:8b:70:c9:bd:20:dd:57:1c:79: c7:6e:90:2c:cc:1a:a1:e5:29:12:79:ff:96:15:87:4e:72:55: 76:b0:fe:53:ba:10:b7:85:f4:15:75:3f:2e:68:17:97:ee:1d: 89:3a:89:9b:ac:65:05:04:0b:b6:91:ed:64:0c:b5:00:44:ad: c9:01:bf:57:59:5c:1d:76:13:63:eb:e1:86:b7:0c:62:b9:90: 17:8a:ea:dc:bf:e1:64:f2:ca:c2:59:09:00:e2:3b:4a:3e:8e: 79:2e:d4:ab:2b:04:a6:b7:90:3d:5e:41:92:88:c3:46:d6:20: b7:b4:01:f0:a5:ae:c1:fc:30:99:7f:89:a6:46:f9:18:ee:21: 37:ac:a2:3d:6e:23:3a:d9:f9:70:6a:7e:ac:ac:eb:d4:18:d7: 64:ca:4f:8c:f4:3c:da:97:df:72:2e:3d:a2:a9:13:5b:a0:b5: 42:87:e6:82:ad:98:99:28:32:a3:fc:36:df:15:6e:6a:c7:b3: cc:d9:66:a4:6c:b9:e7:d8:f2:ce:78:8c:06:29:54:8f:10:8b: 1b:b8:2f:61:ea:ce:e3:a7:5e:6c:c5:49:d8:50:ff:96:50:f4: db:74:63:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWb/GUFmHywCPtviqxk+j2LGbp1wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE1MzQ3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTBmZGJjODRlOWJhMTZkNzU1MDhjZjVlOWQyMjIxNGJj Nzg4ZWIwNjI3ZGU2MTMzNTY5Y2Y4Njg0YzkxOTM2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTUA45HZJXES1wwCcisl3XAuTSnYZLpnSYf5Gfjc2LHJmY sBpbjt3+32wwcq8ZGo/czIkwoke5LTkSPcnbrO0i6MKOnOksCdDegCjxslLP+cCp gr3dXuUHFq46UbnnVoDxvkpIueFuFU48sc3iPYnErTSDejM5G/84eISeFGNTA5AA sy/buosiLnYxham0X5LuJWc+9r+ZlOL7mSU3J+FqVQucccJl2f5OptlmzTEB/avj kUKhMN3MrQuxwo6MJDBE+iSeZ/YfPgCBOu9sot5cVMYInugi4RY5Lhqt0mgBGZHg xUe2ViBpi2In0z6zIbh1iEQn7I08JqH/ohO/Xa9XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnI1jfNw+EiWcWSP6gBG8KxbxhO0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBhYjgxZTY4LTNmYTMtNGJkMy04YzU2LTZhNTY2NWM3MWFhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGZQwDQYJKoZIhvcNAQELBQADggEBAFWFX7AbZ58kSW+JtlQOZGkU mVtScMHHxP3dPotwyb0g3VccecdukCzMGqHlKRJ5/5YVh05yVXaw/lO6ELeF9BV1 Py5oF5fuHYk6iZusZQUEC7aR7WQMtQBErckBv1dZXB12E2Pr4Ya3DGK5kBeK6ty/ 4WTyysJZCQDiO0o+jnku1KsrBKa3kD1eQZKIw0bWILe0AfClrsH8MJl/iaZG+Rju ITesoj1uIzrZ+XBqfqys69QY12TKT4z0PNqX33IuPaKpE1ugtUKH5oKtmJkoMqP8 Nt8VbmrHs8zZZqRsuefY8s54jAYpVI8Qixu4L2HqzuOnXmzFSdhQ/5ZQ9Nt0Yy4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:18 2025 by rpki-client