$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0cf92476-57aa-4f35-9c7f-effd75504c9e.roa File: 0cf92476-57aa-4f35-9c7f-effd75504c9e.roa (raw, json) Hash identifier: JYTN5ZCYglOZS2YoFwtf0diCqK6vSrtV+D/2up2nWlA= Subject key identifier: DE:25:BB:94:6E:02:5F:DB:99:FB:75:11:07:44:80:73:02:54:4A:F5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 27765099F419897963041BB64759AAC18B060296 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0cf92476-57aa-4f35-9c7f-effd75504c9e.roa Signing time: Fri 31 Oct 2025 06:06:48 +0000 ROA not before: Fri 31 Oct 2025 06:06:48 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3638::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:76:50:99:f4:19:89:79:63:04:1b:b6:47:59:aa:c1:8b:06:02:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:06:48 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=123e5cb42f6c90c7f4ef0ea445e55feaa26baf843a7fa01877df309afed321ba, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:d1:eb:c1:f8:35:70:f7:01:92:e2:80:d6: ed:84:fd:81:87:40:42:da:54:d7:aa:30:92:35:67: 96:df:9a:06:4f:2a:74:ab:4c:52:0d:02:81:34:2a: 57:79:9a:15:3e:ea:e7:ef:dc:ac:9d:5b:43:c1:12: 58:3f:50:2d:bc:b8:d5:1e:a5:86:44:0d:d3:37:ce: b0:85:7c:f3:b5:1f:94:0e:06:18:c1:b9:94:73:84: b9:3a:f8:ed:45:e3:08:7e:29:b1:e3:cb:e3:e6:51: 9f:08:73:c0:15:9a:be:a0:4b:8c:b6:86:d3:d0:16: 3c:4e:d6:9f:90:a0:77:0d:ff:d0:31:ed:70:a5:24: 01:aa:eb:b4:78:35:d1:8c:b5:f6:cf:14:62:fd:8e: 74:0d:3a:c1:dc:d8:02:55:1c:13:b6:20:a0:45:8e: 4d:09:76:d9:03:63:14:78:41:e7:0a:4e:4e:7e:65: 62:eb:e4:6b:45:32:f6:79:58:02:8f:40:92:24:95: 50:31:ee:03:9f:94:ea:30:4d:b6:57:ae:20:56:57: b2:01:2c:72:a8:ba:74:00:a7:99:5a:ea:1f:13:03: ac:41:3d:b4:78:e5:ff:56:17:e9:e4:f8:18:ad:96: 17:9a:a2:b4:1c:79:77:77:25:88:24:6b:be:f8:ab: 09:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:25:BB:94:6E:02:5F:DB:99:FB:75:11:07:44:80:73:02:54:4A:F5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0cf92476-57aa-4f35-9c7f-effd75504c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3638::/45 Signature Algorithm: sha256WithRSAEncryption 1d:fc:82:98:b4:0c:dd:a1:43:6f:9d:48:7a:8b:ab:60:51:58: 5c:f9:7c:90:21:9d:56:0b:3b:44:66:14:b4:be:a2:f0:7a:27: f5:c0:c7:d3:f9:a9:be:d2:1d:9f:57:3a:fc:96:d2:d7:14:35: c0:84:e0:f4:05:71:1a:ea:1b:e5:b5:77:c5:da:ed:e0:55:0f: bb:a4:ff:60:7a:d1:98:10:7d:2a:dc:31:39:32:03:c0:a9:0e: f4:9c:4b:c7:41:20:2a:79:aa:5c:19:03:98:95:58:df:8c:0b: 3b:91:0c:e7:b0:4d:ea:4c:fd:f7:bf:9f:1f:61:f7:de:fa:48: c8:6e:e7:45:88:e9:99:80:39:c8:73:f4:7f:9b:0d:eb:40:47: 6e:3b:ed:06:fe:37:c6:9c:13:d4:e7:cf:43:95:c5:a4:ec:da: e2:48:0c:c9:7c:1c:ed:97:46:1d:27:cf:67:09:6b:7a:3c:33: 8f:20:51:f9:8b:eb:f1:25:72:ab:60:c1:aa:84:dd:82:63:11: c9:31:69:38:60:2e:cb:31:c5:8d:af:dc:44:09:89:2a:bb:40: 51:93:26:5c:92:6c:10:be:c2:64:11:d0:34:df:76:f5:2d:f5: fd:32:63:52:a5:dc:1d:76:93:a6:21:9e:4c:40:77:ad:ae:6d: a3:ad:f1:bd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ3ZQmfQZiXljBBu2R1mqwYsGApYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYwNjQ4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjNlNWNiNDJmNmM5MGM3ZjRlZjBlYTQ0NWU1NWZlYWEy NmJhZjg0M2E3ZmEwMTg3N2RmMzA5YWZlZDMyMWJhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiHdHrwfg1cPcBkuKA1u2E/YGHQELaVNeqMJI1Z5bfmgZP KnSrTFINAoE0Kld5mhU+6ufv3KydW0PBElg/UC28uNUepYZEDdM3zrCFfPO1H5QO BhjBuZRzhLk6+O1F4wh+KbHjy+PmUZ8Ic8AVmr6gS4y2htPQFjxO1p+QoHcN/9Ax 7XClJAGq67R4NdGMtfbPFGL9jnQNOsHc2AJVHBO2IKBFjk0JdtkDYxR4QecKTk5+ ZWLr5GtFMvZ5WAKPQJIklVAx7gOflOowTbZXriBWV7IBLHKounQAp5la6h8TA6xB PbR45f9WF+nk+BitlheaorQceXd3JYgka774qwkFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3iW7lG4CX9uZ+3URB0SAcwJUSvUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBjZjkyNDc2LTU3YWEtNGYzNS05YzdmLWVmZmQ3NTUwNGM5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAANjgwDQYJKoZIhvcNAQELBQADggEBAB38gpi0DN2hQ2+dSHqLq2BR WFz5fJAhnVYLO0RmFLS+ovB6J/XAx9P5qb7SHZ9XOvyW0tcUNcCE4PQFcRrqG+W1 d8Xa7eBVD7uk/2B60ZgQfSrcMTkyA8CpDvScS8dBICp5qlwZA5iVWN+MCzuRDOew TepM/fe/nx9h9976SMhu50WI6ZmAOchz9H+bDetAR2477Qb+N8acE9Tnz0OVxaTs 2uJIDMl8HO2XRh0nz2cJa3o8M48gUfmL6/ElcqtgwaqE3YJjEckxaThgLssxxY2v 3EQJiSq7QFGTJlySbBC+wmQR0DTfdvUt9f0yY1Kl3B12k6YhnkxAd62ubaOt8b0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:49 2025 by rpki-client