$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0d407aa5-83eb-4a47-9639-b1ce5c3ecd13.roa File: 0d407aa5-83eb-4a47-9639-b1ce5c3ecd13.roa (raw, json) Hash identifier: MLVk4jEu1xii9x3ZSezDSgfPME/vAd2iy38tsbCAIjU= Subject key identifier: C1:A8:74:9C:9E:C3:B8:68:AE:22:03:C9:A0:CC:16:6A:7A:43:81:B6 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 699DA96BB6C4D241855B0B3EC779DB5E6686199D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0d407aa5-83eb-4a47-9639-b1ce5c3ecd13.roa Signing time: Fri 31 Oct 2025 03:23:28 +0000 ROA not before: Fri 31 Oct 2025 03:23:28 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:244c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9d:a9:6b:b6:c4:d2:41:85:5b:0b:3e:c7:79:db:5e:66:86:19:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:23:28 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=9b666f8f1a54f77a5d69dda218f644bc6929f2d83a72705cb74758f1e6a30dfc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:46:53:f6:e8:d4:9b:38:cc:e7:54:fd:01: 89:1c:d4:2e:92:9a:aa:64:a4:d3:4e:90:24:e7:c4: 84:59:38:a8:fb:4f:c4:5a:97:6a:fb:de:6d:59:c6: a7:20:1e:9d:26:8e:99:6b:e0:d8:44:9c:2a:52:7d: e9:0d:ab:21:bc:70:e3:c5:25:0e:f6:a3:89:d0:45: 0f:76:bc:76:f9:21:53:9f:0c:0a:03:56:1e:15:be: be:bc:21:2f:7a:b8:43:aa:4d:cb:df:e2:d5:dc:a4: 29:7b:96:0e:7c:e7:31:32:d7:f9:84:43:1a:05:e5: 5f:b4:a0:c3:2b:7b:07:fc:17:db:05:fe:91:71:7d: fc:b6:2a:37:45:a2:47:44:1e:ac:76:94:f4:82:6b: 29:51:04:08:c0:b8:78:90:1e:88:e3:c7:7a:a7:51: e9:53:58:74:61:f5:28:d6:fd:b1:0d:ec:03:f1:d7: d4:80:58:8c:74:9a:08:b1:22:28:1a:a7:73:8b:a9: d9:00:7f:d3:a4:c4:ac:9b:9f:5c:38:ef:c1:9d:c4: 4f:16:9c:df:55:d7:a9:39:12:c0:ef:f1:31:47:24: 84:7a:42:30:e0:b9:4f:48:6a:3a:08:f7:1c:0c:ed: 80:06:3c:b3:c6:3b:8a:20:df:d0:c2:1d:83:49:4d: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A8:74:9C:9E:C3:B8:68:AE:22:03:C9:A0:CC:16:6A:7A:43:81:B6 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0d407aa5-83eb-4a47-9639-b1ce5c3ecd13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:244c::/46 Signature Algorithm: sha256WithRSAEncryption 4a:88:68:85:f3:40:d5:70:fe:0b:b9:d4:ff:00:dd:47:2f:35: ab:16:a5:73:51:f8:34:90:ca:d5:1c:8f:5a:e7:c7:15:8f:44: 0c:ad:a5:8f:c2:2d:80:51:e9:8a:d3:d6:20:d4:ef:b4:00:2e: 31:38:db:66:bc:1b:d7:cb:64:0a:b3:6d:bf:19:da:06:86:5f: 91:7e:9e:77:5a:e6:25:bd:95:5a:0b:91:50:50:43:52:ff:75: 97:b3:67:80:ed:bc:40:61:90:76:9e:93:9d:27:13:21:3d:c0: a9:fb:20:33:b4:9e:23:b8:99:a8:b1:ec:58:3e:c3:4d:8b:11: 5e:6d:e2:c0:28:98:34:f5:00:f0:e5:3d:39:54:e3:1b:4d:57: a2:9c:9f:79:fc:e4:cf:c6:88:ca:15:8c:ac:02:f6:57:59:93: 0f:bd:48:20:f6:42:04:09:0e:ab:35:e5:63:46:24:31:41:4c: e8:2a:75:f3:ef:a4:bf:cc:ad:8f:c6:24:a8:31:eb:14:7f:16: 8a:70:a1:15:f3:d9:aa:76:7f:b1:03:07:f7:8c:fc:42:23:d7: fe:59:4d:14:06:f8:cb:c5:67:e9:e8:d5:c7:d3:27:3a:ff:db: 95:16:1e:88:86:50:bd:b6:78:fa:64:88:59:2f:f0:1b:92:01: 5f:30:c2:21 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaZ2pa7bE0kGFWws+x3nbXmaGGZ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMyMzI4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjY2NmY4ZjFhNTRmNzdhNWQ2OWRkYTIxOGY2NDRiYzY5 MjlmMmQ4M2E3MjcwNWNiNzQ3NThmMWU2YTMwZGZjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC62kZT9ujUmzjM51T9AYkc1C6SmqpkpNNOkCTnxIRZOKj7 T8Ral2r73m1ZxqcgHp0mjplr4NhEnCpSfekNqyG8cOPFJQ72o4nQRQ92vHb5IVOf DAoDVh4Vvr68IS96uEOqTcvf4tXcpCl7lg585zEy1/mEQxoF5V+0oMMrewf8F9sF /pFxffy2KjdFokdEHqx2lPSCaylRBAjAuHiQHojjx3qnUelTWHRh9SjW/bEN7APx 19SAWIx0mgixIigap3OLqdkAf9OkxKybn1w478GdxE8WnN9V16k5EsDv8TFHJIR6 QjDguU9IajoI9xwM7YAGPLPGO4og39DCHYNJTacNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwah0nJ7DuGiuIgPJoMwWanpDgbYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBkNDA3YWE1LTgzZWItNGE0Ny05NjM5LWIxY2U1YzNlY2QxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAJEwwDQYJKoZIhvcNAQELBQADggEBAEqIaIXzQNVw/gu51P8A3Ucv NasWpXNR+DSQytUcj1rnxxWPRAytpY/CLYBR6YrT1iDU77QALjE422a8G9fLZAqz bb8Z2gaGX5F+nnda5iW9lVoLkVBQQ1L/dZezZ4DtvEBhkHaek50nEyE9wKn7IDO0 niO4maix7Fg+w02LEV5t4sAomDT1APDlPTlU4xtNV6Kcn3n85M/GiMoVjKwC9ldZ kw+9SCD2QgQJDqs15WNGJDFBTOgqdfPvpL/MrY/GJKgx6xR/FopwoRXz2ap2f7ED B/eM/EIj1/5ZTRQG+MvFZ+no1cfTJzr/25UWHoiGUL22ePpkiFkv8BuSAV8wwiE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:31 2025 by rpki-client