$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f09196a-02d8-47c2-b797-d59631519d9a.roa File: 0f09196a-02d8-47c2-b797-d59631519d9a.roa (raw, json) Hash identifier: 9so3hPDL+sw4+CjnjLYkz2D8nVR9Cbwmq0rb+narWXw= Subject key identifier: BD:E1:D8:96:AD:1B:B6:F4:D8:11:25:DD:F4:97:E9:73:25:51:D1:F5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 62730C79FF7A00FA429FDB63F3D471F5BF4CB49A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f09196a-02d8-47c2-b797-d59631519d9a.roa Signing time: Fri 31 Oct 2025 01:23:23 +0000 ROA not before: Fri 31 Oct 2025 01:23:23 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3b2a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:73:0c:79:ff:7a:00:fa:42:9f:db:63:f3:d4:71:f5:bf:4c:b4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:23:23 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f8c63e49553e8ab5c683bd3495ed13e8eda1e01250f22013e60f663299f760b0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:30:cf:eb:11:8b:18:a6:9a:44:9c:b5:b0: e9:2e:a0:84:aa:56:5e:db:d2:45:50:4c:c2:9c:80: 4b:3a:6b:da:0e:21:b4:d8:34:8d:5f:0a:a6:ce:26: 6d:7a:1e:a8:60:3c:e1:a2:ed:fd:a9:fa:4c:cb:a9: dd:0f:1e:4e:f3:06:f9:85:93:da:bf:5f:fa:81:11: 72:ab:20:72:c7:f0:58:a4:71:40:11:91:a5:82:a1: 9b:44:41:0f:4c:6f:11:85:64:4b:41:35:ea:9d:a2: a2:30:f8:4c:66:03:94:c3:d3:77:e9:6d:02:42:10: b3:6f:78:5c:1a:09:96:c0:12:3f:69:45:b5:af:88: c8:eb:b6:10:0b:01:bf:71:96:20:21:30:83:f0:ec: 6b:d5:69:f9:ba:b3:ee:63:94:dc:6a:91:ef:a5:dd: 37:3f:ee:a9:12:4f:da:32:ab:64:01:f6:bf:2a:b5: b3:07:54:bb:91:9d:16:f0:e9:1f:5d:af:68:fd:0e: d0:d8:f8:9f:4e:98:72:f7:3e:7c:65:92:5d:78:a7: 43:57:02:9c:d1:d4:63:7f:db:5a:10:17:c9:91:13: 56:7f:aa:48:2f:f6:61:d5:cf:1b:4d:a2:e0:2c:51: 2b:17:4c:8f:1b:db:76:df:4c:a9:d8:94:88:68:11: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E1:D8:96:AD:1B:B6:F4:D8:11:25:DD:F4:97:E9:73:25:51:D1:F5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f09196a-02d8-47c2-b797-d59631519d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3b2a::/47 Signature Algorithm: sha256WithRSAEncryption 00:a3:93:a4:87:c4:69:29:2f:19:81:e2:45:99:d4:56:02:39: a2:33:04:4a:ff:bd:e5:41:dc:54:bc:d3:9e:57:2d:05:31:32: be:54:f2:e5:e0:e4:0a:59:52:d3:49:cb:25:54:5e:c6:b9:03: 61:f0:1b:00:6e:5a:f2:9a:c9:07:a9:c8:9d:8e:cf:36:a7:81: 0f:5e:84:31:a0:60:6a:f8:97:5d:7a:91:37:df:8d:4c:eb:c0: a4:32:a3:78:04:41:72:02:a4:aa:4c:e1:09:04:e6:c8:54:4f: bd:38:c7:42:ff:ba:d9:4d:23:15:d3:d8:0e:56:3d:6b:a5:25: 41:1a:fa:cc:ed:30:ab:c3:09:d9:14:e4:8c:16:74:77:77:da: c7:cc:34:85:55:64:b3:e5:d9:b1:e6:e4:e4:16:28:7d:d0:0a: 73:56:3f:04:2f:07:5c:f1:3d:97:2d:83:49:63:2f:d6:4e:a0: 80:06:5d:67:d0:e3:5a:9c:08:40:e7:36:4e:d1:83:e0:20:24: 78:d0:6d:8a:36:de:c7:d5:68:4a:b9:83:b4:06:47:b6:89:e2: ee:16:07:d4:bc:f1:07:6b:ab:f9:02:61:fb:7d:82:79:32:a2: ec:42:90:dc:32:d2:c2:bc:62:65:54:ed:1f:c6:d8:cd:8d:af: 0b:5b:1a:39 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYnMMef96APpCn9tj89Rx9b9MtJowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEyMzIzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGM2M2U0OTU1M2U4YWI1YzY4M2JkMzQ5NWVkMTNlOGVk YTFlMDEyNTBmMjIwMTNlNjBmNjYzMjk5Zjc2MGIwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKvTDP6xGLGKaaRJy1sOkuoISqVl7b0kVQTMKcgEs6a9oO IbTYNI1fCqbOJm16HqhgPOGi7f2p+kzLqd0PHk7zBvmFk9q/X/qBEXKrIHLH8Fik cUARkaWCoZtEQQ9MbxGFZEtBNeqdoqIw+ExmA5TD03fpbQJCELNveFwaCZbAEj9p RbWviMjrthALAb9xliAhMIPw7GvVafm6s+5jlNxqke+l3Tc/7qkST9oyq2QB9r8q tbMHVLuRnRbw6R9dr2j9DtDY+J9OmHL3Pnxlkl14p0NXApzR1GN/21oQF8mRE1Z/ qkgv9mHVzxtNouAsUSsXTI8b23bfTKnYlIhoEasrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUveHYlq0btvTYESXd9JfpcyVR0fUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBmMDkxOTZhLTAyZDgtNDdjMi1iNzk3LWQ1OTYzMTUxOWQ5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOyowDQYJKoZIhvcNAQELBQADggEBAACjk6SHxGkpLxmB4kWZ1FYC OaIzBEr/veVB3FS8055XLQUxMr5U8uXg5ApZUtNJyyVUXsa5A2HwGwBuWvKayQep yJ2OzzangQ9ehDGgYGr4l116kTffjUzrwKQyo3gEQXICpKpM4QkE5shUT704x0L/ utlNIxXT2A5WPWulJUEa+sztMKvDCdkU5IwWdHd32sfMNIVVZLPl2bHm5OQWKH3Q CnNWPwQvB1zxPZctg0ljL9ZOoIAGXWfQ41qcCEDnNk7Rg+AgJHjQbYo23sfVaEq5 g7QGR7aJ4u4WB9S88Qdrq/kCYft9gnkyouxCkNwy0sK8YmVU7R/G2M2NrwtbGjk= -----END CERTIFICATE-----Generated at Wed Nov 5 09:28:09 2025 by rpki-client