$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0d88c13e-24df-4121-82a5-5494fa549af1.roa File: 0d88c13e-24df-4121-82a5-5494fa549af1.roa (raw, json) Hash identifier: XMiqlh4qcWe+Vcv7sHu/UuwjpmvHGqwCdX76nkdSuGg= Subject key identifier: 77:27:F6:ED:EE:DD:30:1F:9C:4B:5C:EA:A8:D8:5F:BD:13:CE:C8:80 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 246AC35A57A9305A9202C3AC94A52F3D8323489E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0d88c13e-24df-4121-82a5-5494fa549af1.roa Signing time: Fri 31 Oct 2025 06:55:16 +0000 ROA not before: Fri 31 Oct 2025 06:55:16 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3460::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:6a:c3:5a:57:a9:30:5a:92:02:c3:ac:94:a5:2f:3d:83:23:48:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:55:16 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=4cc313472f33e3a621fdd5e9c30a6905d1d6160e5f7ab12264d5c8fa734c2584, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:1e:42:11:b5:b0:43:d1:66:fa:94:29:bd: 0c:d1:59:36:17:de:a7:4b:ac:8f:52:89:d6:08:49: 03:0a:29:29:55:94:c0:07:88:d1:6b:f2:cb:89:dc: fb:b1:67:78:79:0d:5f:58:21:24:9f:32:ab:b1:5a: 1c:ab:ac:21:27:66:da:2f:51:7c:43:8a:55:73:ff: 78:9c:4f:56:1b:d4:19:66:c9:47:c8:ec:ff:9e:bd: 48:49:66:69:40:e8:ed:44:4f:eb:0b:30:31:c1:aa: 41:9f:75:53:30:d4:3a:83:4d:5e:23:0a:f5:c6:e1: 5c:b1:3d:c3:db:3a:eb:50:66:77:70:2a:8e:5d:bc: 8d:81:ee:dd:28:f7:7b:8b:3d:7b:c2:25:4d:86:cd: 12:e7:44:6f:c1:04:da:79:4a:ac:da:7f:74:14:a6: c7:18:05:f6:e0:4e:01:87:d4:95:d5:6b:60:c6:8b: 2c:07:9e:46:8a:00:d6:43:ba:be:a8:60:35:4d:fd: c8:a2:0f:02:09:5f:ec:8e:1b:50:ab:5e:83:3d:05: 45:ec:40:88:2d:47:b4:ba:81:e8:13:dd:3a:7e:1c: ed:c5:1b:18:c0:9b:2c:c6:20:56:7b:a3:0c:3c:b5: cc:c4:c3:69:8d:9f:9e:d9:4c:53:10:9c:6d:2a:ab: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:27:F6:ED:EE:DD:30:1F:9C:4B:5C:EA:A8:D8:5F:BD:13:CE:C8:80 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0d88c13e-24df-4121-82a5-5494fa549af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3460::/44 Signature Algorithm: sha256WithRSAEncryption 71:8b:24:12:81:a1:51:bc:c4:8c:5f:56:ca:b9:20:31:07:25: ea:bc:e4:be:32:89:61:ee:ed:9e:33:ac:1a:35:c4:85:ce:b1: 0f:0a:f0:4e:c6:9c:8c:77:01:c2:04:f1:ca:f3:79:71:e0:db: 39:33:1d:c1:aa:da:8f:17:ff:5b:33:ea:dc:87:f0:f9:a7:55: 09:af:e4:1d:d0:71:29:d5:76:b6:97:97:ab:67:68:ac:ff:0e: ad:e5:7a:f3:ee:01:1e:32:33:ce:17:68:8c:6b:08:e9:65:42: 99:a9:9c:e8:99:a6:1d:33:3e:d4:4a:18:94:5f:88:dd:ad:35: 1c:8e:fb:5b:f0:09:0e:4a:3a:c6:3e:8c:6b:dc:2d:cc:82:0f: 51:7a:89:2e:d1:8a:e9:f1:2a:98:34:33:87:57:fe:a4:10:1d: 27:5a:31:fb:58:03:bb:af:d7:66:ee:5f:7a:8f:b1:15:95:50: c3:5e:0e:c8:65:da:b8:58:06:c1:f4:f5:e7:8c:c5:67:72:fe: 1a:81:4e:17:7d:4b:12:01:b8:4f:5c:85:89:8a:b3:d3:67:d9: 33:0d:56:2e:18:df:e2:ab:73:e7:25:d8:9b:23:f1:7a:77:bb: 00:f8:4e:6a:82:3d:5f:d0:9d:6f:69:7b:43:3f:73:90:67:05: 37:ed:b2:60 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJGrDWlepMFqSAsOslKUvPYMjSJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY1NTE2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2MzMTM0NzJmMzNlM2E2MjFmZGQ1ZTljMzBhNjkwNWQx ZDYxNjBlNWY3YWIxMjI2NGQ1YzhmYTczNGMyNTg0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/yR5CEbWwQ9Fm+pQpvQzRWTYX3qdLrI9SidYISQMKKSlV lMAHiNFr8suJ3PuxZ3h5DV9YISSfMquxWhyrrCEnZtovUXxDilVz/3icT1Yb1Blm yUfI7P+evUhJZmlA6O1ET+sLMDHBqkGfdVMw1DqDTV4jCvXG4VyxPcPbOutQZndw Ko5dvI2B7t0o93uLPXvCJU2GzRLnRG/BBNp5Sqzaf3QUpscYBfbgTgGH1JXVa2DG iywHnkaKANZDur6oYDVN/ciiDwIJX+yOG1CrXoM9BUXsQIgtR7S6gegT3Tp+HO3F GxjAmyzGIFZ7oww8tczEw2mNn57ZTFMQnG0qq0hBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdyf27e7dMB+cS1zqqNhfvRPOyIAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBkODhjMTNlLTI0ZGYtNDEyMS04MmE1LTU0OTRmYTU0OWFmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAANGAwDQYJKoZIhvcNAQELBQADggEBAHGLJBKBoVG8xIxfVsq5IDEH Jeq85L4yiWHu7Z4zrBo1xIXOsQ8K8E7GnIx3AcIE8crzeXHg2zkzHcGq2o8X/1sz 6tyH8PmnVQmv5B3QcSnVdraXl6tnaKz/Dq3levPuAR4yM84XaIxrCOllQpmpnOiZ ph0zPtRKGJRfiN2tNRyO+1vwCQ5KOsY+jGvcLcyCD1F6iS7RiunxKpg0M4dX/qQQ HSdaMftYA7uv12buX3qPsRWVUMNeDshl2rhYBsH09eeMxWdy/hqBThd9SxIBuE9c hYmKs9Nn2TMNVi4Y3+Krc+cl2Jsj8Xp3uwD4TmqCPV/QnW9pe0M/c5BnBTftsmA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:39 2025 by rpki-client