$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0de455d9-7f50-4309-957e-63799b8fa4c5.roa File: 0de455d9-7f50-4309-957e-63799b8fa4c5.roa (raw, json) Hash identifier: M4qY6mEdyVX56gXGblPE8mARDixnRFpI5ctLoc42t7E= Subject key identifier: A5:CB:B2:E3:A0:09:58:E7:69:65:05:59:83:66:C5:34:82:7E:2F:4D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 284C59D17A8919970C46A18B04EBE178FB53FAA2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0de455d9-7f50-4309-957e-63799b8fa4c5.roa Signing time: Fri 31 Oct 2025 21:53:22 +0000 ROA not before: Fri 31 Oct 2025 21:53:22 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:a102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4c:59:d1:7a:89:19:97:0c:46:a1:8b:04:eb:e1:78:fb:53:fa:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 21:53:22 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=37ef2118e576af2e02a162914aedc817ed313a64b4f34a2dcc5d05729d53cd4f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:ab:d5:db:a5:4c:c1:a1:c9:0a:3d:dc:c1: 27:d4:fe:a1:a9:68:51:5c:c0:e1:99:3c:a0:47:bd: 98:9c:6e:cd:37:cd:54:b4:d9:68:49:ea:0c:4c:58: 42:ae:40:37:70:68:b8:aa:fd:84:48:2e:9d:02:2c: 2d:27:fb:ad:af:17:24:7a:5e:42:08:5c:b5:c0:f1: 84:2b:dc:fa:0f:55:58:92:5c:67:35:ef:d3:13:af: 46:6e:3c:f6:d5:21:46:51:84:46:22:57:b3:a0:28: 1b:81:a3:b9:7f:4f:26:f3:1f:16:9a:6a:e2:5e:74: 65:57:92:fa:61:da:f9:37:b0:17:9b:cb:f6:8d:5d: b5:8a:df:f1:88:d9:e6:be:5c:41:c1:07:b1:36:38: 5c:a7:27:52:cd:5d:b6:2c:f8:df:51:41:91:1c:50: 5e:6a:93:4d:eb:9e:6e:b2:b0:66:ec:d7:7e:c1:3d: fd:ef:1f:f9:46:9e:21:76:4d:06:29:e1:90:32:c8: c5:c0:b0:65:c2:36:0a:27:46:ef:1c:36:05:89:d2: a7:a7:9c:55:52:77:54:55:f1:0e:1d:9a:88:5d:f2: 07:97:8d:41:99:0c:61:53:87:51:ac:90:74:2f:e2: 5f:de:c7:fd:22:bd:d9:60:3d:8b:b5:1e:6d:ec:2f: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CB:B2:E3:A0:09:58:E7:69:65:05:59:83:66:C5:34:82:7E:2F:4D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0de455d9-7f50-4309-957e-63799b8fa4c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:a102::/48 Signature Algorithm: sha256WithRSAEncryption 34:31:29:06:ed:41:ab:2f:e2:55:82:19:65:16:7e:a8:15:1b: 23:04:b8:39:68:13:bb:e4:be:1a:39:29:d0:f6:5d:3d:da:ee: 43:36:14:c6:6b:32:66:a7:51:d5:f8:58:a9:70:2f:3a:70:5b: 4c:ef:51:f0:5e:cd:15:8c:22:0d:6d:3f:72:04:cf:fb:34:85: 77:23:3c:44:de:87:b6:06:6f:b7:c0:53:81:0b:1e:c9:08:8d: 69:c9:b8:8d:32:b9:4c:1d:52:42:bf:53:de:9d:bf:71:24:f2: c3:fc:68:17:45:61:18:ce:77:65:04:53:36:3a:93:25:0e:23: 02:2d:3a:3b:c3:16:bb:01:5d:7d:39:e5:b4:30:3b:ba:f8:d8: d4:96:f2:2f:72:c7:3b:81:63:6d:d7:a3:b4:6a:ee:61:88:d9: 00:8b:2d:54:d3:c9:d7:f5:57:0f:c6:71:29:90:f3:fc:82:be: a7:07:d4:bd:3b:a8:b8:e4:0c:f3:87:9e:09:f9:eb:6c:04:cc: 8a:ae:25:2d:26:73:3f:ca:7b:9e:ae:eb:9c:19:82:4a:a7:00: 1f:90:65:5c:18:90:35:a4:31:0e:27:ea:2d:23:09:ad:67:85: bc:e8:c2:f8:d5:45:e3:db:f9:70:a0:6d:0f:77:93:9b:55:9f: 31:24:47:52 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKExZ0XqJGZcMRqGLBOvhePtT+qIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMjE1MzIyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2VmMjExOGU1NzZhZjJlMDJhMTYyOTE0YWVkYzgxN2Vk MzEzYTY0YjRmMzRhMmRjYzVkMDU3MjlkNTNjZDRmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZj6vV26VMwaHJCj3cwSfU/qGpaFFcwOGZPKBHvZicbs03 zVS02WhJ6gxMWEKuQDdwaLiq/YRILp0CLC0n+62vFyR6XkIIXLXA8YQr3PoPVViS XGc179MTr0ZuPPbVIUZRhEYiV7OgKBuBo7l/TybzHxaaauJedGVXkvph2vk3sBeb y/aNXbWK3/GI2ea+XEHBB7E2OFynJ1LNXbYs+N9RQZEcUF5qk03rnm6ysGbs137B Pf3vH/lGniF2TQYp4ZAyyMXAsGXCNgonRu8cNgWJ0qennFVSd1RV8Q4dmohd8geX jUGZDGFTh1GskHQv4l/ex/0ivdlgPYu1Hm3sL5CfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpcuy46AJWOdpZQVZg2bFNIJ+L00wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBkZTQ1NWQ5LTdmNTAtNDMwOS05NTdlLTYzNzk5YjhmYTRjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAoQIwDQYJKoZIhvcNAQELBQADggEBADQxKQbtQasv4lWCGWUWfqgV GyMEuDloE7vkvho5KdD2XT3a7kM2FMZrMmanUdX4WKlwLzpwW0zvUfBezRWMIg1t P3IEz/s0hXcjPETeh7YGb7fAU4ELHskIjWnJuI0yuUwdUkK/U96dv3Ek8sP8aBdF YRjOd2UEUzY6kyUOIwItOjvDFrsBXX055bQwO7r42NSW8i9yxzuBY23Xo7Rq7mGI 2QCLLVTTydf1Vw/GcSmQ8/yCvqcH1L07qLjkDPOHngn562wEzIquJS0mcz/Ke56u 65wZgkqnAB+QZVwYkDWkMQ4n6i0jCa1nhbzowvjVRePb+XCgbQ93k5tVnzEkR1I= -----END CERTIFICATE-----Generated at Wed Nov 5 15:27:25 2025 by rpki-client