$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c7afa90-dc10-4155-aac0-441f5339a968.roa File: 0c7afa90-dc10-4155-aac0-441f5339a968.roa (raw, json) Hash identifier: qWvxkGIwaAsMNLauZc/PyI2zyNo7ywEr70ribSi4cxY= Subject key identifier: E7:39:BE:9D:BF:8A:67:7B:3A:B1:C0:AC:61:DF:E8:A5:DC:85:86:22 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6CFAA45D9B8C90A06868DF88F9EF9430D398919D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c7afa90-dc10-4155-aac0-441f5339a968.roa Signing time: Fri 31 Oct 2025 06:27:22 +0000 ROA not before: Fri 31 Oct 2025 06:27:22 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:13f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:fa:a4:5d:9b:8c:90:a0:68:68:df:88:f9:ef:94:30:d3:98:91:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:27:22 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=fdde6e834d2610d6d11be7a9b3a1181a70da8039aa662f8cf27d620221748212, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f3:bf:6a:b4:ab:f7:06:f0:1c:9b:05:7b:f3: a2:40:b0:ac:51:2c:6a:03:ba:10:02:b7:d6:09:f9: 2b:69:04:c6:dd:af:7c:94:eb:7f:ec:bf:d5:3f:94: f0:46:f7:db:a5:ab:e5:87:3b:31:3a:c5:2c:95:7e: d8:8c:40:a7:fd:13:9a:52:cb:b3:bc:a6:fb:43:d6: 3b:16:a4:be:de:d1:3b:8a:3f:26:38:48:c7:79:45: 15:e0:cc:a4:ce:77:a3:1b:74:ad:64:d7:86:d3:45: 34:63:9a:f8:c6:ec:17:58:cf:b3:7e:f6:65:2f:ec: ed:41:52:22:b1:99:87:f3:7e:f2:7c:9d:e0:99:96: 37:2c:62:07:d9:59:d6:2d:d4:ea:e3:23:59:7f:43: 22:54:53:26:c7:99:24:12:88:03:fd:2c:83:d5:1e: 40:30:30:e6:4a:59:12:19:df:59:83:6a:79:b5:de: bf:9d:c0:04:d3:87:c4:ca:4b:a7:df:8f:b2:ee:ed: 66:b6:1c:4b:8f:d2:7b:ae:65:00:a8:53:88:d1:52: f8:b5:bb:a4:30:40:cc:c8:96:27:81:c0:7e:7b:49: 74:e3:49:c9:ad:2f:f8:13:10:c3:65:a6:7f:b4:13: 1a:12:e2:ee:03:26:62:89:a7:7b:c1:8b:20:51:da: 5b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:39:BE:9D:BF:8A:67:7B:3A:B1:C0:AC:61:DF:E8:A5:DC:85:86:22 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c7afa90-dc10-4155-aac0-441f5339a968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:13f0::/44 Signature Algorithm: sha256WithRSAEncryption b2:8c:e2:76:33:6b:fc:9c:7f:d6:5c:06:1b:50:7b:fc:4b:e5: eb:c1:76:ca:8c:be:d0:71:fc:fd:69:28:7b:eb:d1:dd:13:74: 73:3e:3f:d4:00:34:bc:ae:77:02:e8:6c:65:ad:d3:77:26:01: 50:9b:e3:2b:52:5b:2e:9d:15:2d:d2:8f:1b:25:8f:9f:b5:80: e5:0e:23:2e:88:0a:c9:f5:ea:c4:95:a0:e4:ea:81:c7:7d:f7: 5e:74:c8:76:91:2e:35:ef:24:6b:b1:88:34:45:5e:d6:20:28: b6:3e:8e:66:fe:52:9d:26:43:e0:c3:9d:e1:e5:da:23:6d:1d: 07:e7:84:42:19:f5:ac:d4:b4:17:39:97:dd:e1:cb:09:d0:b0: 33:ae:56:2a:f9:53:0d:9f:be:e5:d1:fc:13:ff:f8:35:00:89: 89:5e:64:50:df:0a:83:ed:3d:76:28:52:be:c5:58:8a:fc:0a: 3c:18:ea:05:6a:8f:0c:7f:fd:ba:c6:1d:a6:2c:11:e7:a0:27: 48:47:c5:9b:38:a3:c5:36:3f:ed:72:74:d6:1a:0e:06:4a:2b: 75:2b:f9:4b:cd:53:b1:6c:ab:98:49:e6:be:f9:08:bc:ae:85: ad:fc:3f:dc:b0:67:8d:20:f5:de:1a:6a:d3:2f:58:70:26:1d: 5f:83:3e:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbPqkXZuMkKBoaN+I+e+UMNOYkZ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyNzIyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGRlNmU4MzRkMjYxMGQ2ZDExYmU3YTliM2ExMTgxYTcw ZGE4MDM5YWE2NjJmOGNmMjdkNjIwMjIxNzQ4MjEyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCF879qtKv3BvAcmwV786JAsKxRLGoDuhACt9YJ+StpBMbd r3yU63/sv9U/lPBG99ulq+WHOzE6xSyVftiMQKf9E5pSy7O8pvtD1jsWpL7e0TuK PyY4SMd5RRXgzKTOd6MbdK1k14bTRTRjmvjG7BdYz7N+9mUv7O1BUiKxmYfzfvJ8 neCZljcsYgfZWdYt1OrjI1l/QyJUUybHmSQSiAP9LIPVHkAwMOZKWRIZ31mDanm1 3r+dwATTh8TKS6ffj7Lu7Wa2HEuP0nuuZQCoU4jRUvi1u6QwQMzIlieBwH57SXTj ScmtL/gTEMNlpn+0ExoS4u4DJmKJp3vBiyBR2lsdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5zm+nb+KZ3s6scCsYd/opdyFhiIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBjN2FmYTkwLWRjMTAtNDE1NS1hYWMwLTQ0MWY1MzM5YTk2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAE/AwDQYJKoZIhvcNAQELBQADggEBALKM4nYza/ycf9ZcBhtQe/xL 5evBdsqMvtBx/P1pKHvr0d0TdHM+P9QANLyudwLobGWt03cmAVCb4ytSWy6dFS3S jxslj5+1gOUOIy6ICsn16sSVoOTqgcd99150yHaRLjXvJGuxiDRFXtYgKLY+jmb+ Up0mQ+DDneHl2iNtHQfnhEIZ9azUtBc5l93hywnQsDOuVir5Uw2fvuXR/BP/+DUA iYleZFDfCoPtPXYoUr7FWIr8CjwY6gVqjwx//brGHaYsEeegJ0hHxZs4o8U2P+1y dNYaDgZKK3Ur+UvNU7Fsq5hJ5r75CLyuha38P9ywZ40g9d4aatMvWHAmHV+DPvU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:05 2025 by rpki-client