$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f97cb96-9be4-461a-9317-f7dae940f277.roa File: 0f97cb96-9be4-461a-9317-f7dae940f277.roa (raw, json) Hash identifier: DzIwLD/mbfi+i42EWsZQsIBT16/bmP85/ZCM2VFFzPQ= Subject key identifier: 1E:EF:6C:5F:F3:D4:E9:2D:73:31:56:50:36:AD:59:ED:33:E8:80:97 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4A1739CAF24DB138F528E00EA3770AFBACC4C9F0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f97cb96-9be4-461a-9317-f7dae940f277.roa Signing time: Thu 30 Oct 2025 21:58:54 +0000 ROA not before: Thu 30 Oct 2025 21:58:54 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1a7e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:17:39:ca:f2:4d:b1:38:f5:28:e0:0e:a3:77:0a:fb:ac:c4:c9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:58:54 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=600f94e747765c936770f7a2e80d0986c7ccaa661ca084a996773a30140f93b0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:ae:e5:55:5a:55:dd:08:da:56:ee:a6:14: 3e:20:56:cf:23:ed:21:7d:82:e2:4a:7d:1a:74:db: 13:3f:db:da:08:4d:b3:7a:1c:ca:7a:5a:4d:d3:5f: 48:2c:ae:81:47:6c:7d:b9:5d:90:c7:4d:e9:2e:f9: d8:7d:2e:47:2b:8e:23:79:95:95:f4:15:1b:59:d3: 39:ec:e6:1e:19:40:55:ef:37:22:fa:6e:c0:87:9f: 4e:fa:c6:9d:b7:54:f7:64:eb:73:78:bf:4b:03:ed: 53:5c:37:9f:67:52:f0:d5:aa:d8:d3:01:0b:a2:07: a9:83:59:34:7f:8c:b1:0e:57:be:0d:b2:1a:ea:89: 9d:d2:2a:0d:62:b5:92:f2:c6:f3:05:df:15:db:ad: 9e:eb:85:c9:83:36:be:e0:47:f7:53:53:af:c9:92: 4c:bf:45:c0:43:1c:b8:32:ba:72:43:6f:78:59:9c: fb:c6:64:37:1e:be:62:da:64:b4:27:a0:83:44:7b: 07:cd:d6:ee:56:fb:cf:31:da:2a:f5:02:df:28:8f: 82:1a:3e:20:34:a4:18:58:ed:25:8b:8a:4b:2e:dc: fd:f1:db:0a:a1:9a:6c:c9:2b:d2:ef:10:22:2b:95: f0:48:5c:5b:ec:1c:d5:02:b4:bf:5f:23:ee:6c:6d: a0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EF:6C:5F:F3:D4:E9:2D:73:31:56:50:36:AD:59:ED:33:E8:80:97 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f97cb96-9be4-461a-9317-f7dae940f277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1a7e::/47 Signature Algorithm: sha256WithRSAEncryption 25:05:86:0b:f9:33:65:86:79:13:01:2d:5c:b4:4e:d4:82:c3: 12:e9:8a:d4:12:ac:03:9e:45:4d:5f:36:5f:f8:a0:6f:5c:16: d7:c7:cb:e1:9e:f1:2b:67:39:30:ca:39:19:36:5e:c8:96:16: 97:54:33:b7:d9:f9:b6:e9:a4:ea:8e:aa:3d:7e:f0:d3:64:8f: a5:09:86:cc:02:f3:52:af:a4:14:bc:df:cc:76:44:d5:49:f1: b3:b7:60:23:2c:0d:a5:0a:99:d0:b2:84:fd:9b:1b:51:50:6f: 38:00:cc:e2:4c:11:ca:a8:00:f5:ca:79:f1:d4:5e:4f:d6:bd: d2:27:87:e1:c9:2f:55:93:f7:8b:b6:81:8e:4f:a6:f8:99:84: 85:d5:be:a8:80:cf:24:a2:05:74:a2:30:f3:8b:2d:73:64:1f: 40:7c:25:00:e7:2d:f5:55:6b:cb:1c:b4:e5:c2:f3:2c:45:7b: 90:22:eb:7e:6e:32:3d:67:3b:63:2e:1f:2d:07:e2:08:7a:ec: f6:26:5e:c3:b6:34:ea:4d:99:72:d7:59:fb:55:74:c0:bd:81: 6a:fa:e0:5d:66:8b:74:dd:72:a5:58:70:06:99:68:96:4c:55: 99:14:c5:d8:c5:86:a3:a8:54:65:0d:dd:82:c1:cb:82:c4:27: ff:dc:b6:b3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUShc5yvJNsTj1KOAOo3cK+6zEyfAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE1ODU0WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDBmOTRlNzQ3NzY1YzkzNjc3MGY3YTJlODBkMDk4NmM3 Y2NhYTY2MWNhMDg0YTk5Njc3M2EzMDE0MGY5M2IwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDm67lVVpV3QjaVu6mFD4gVs8j7SF9guJKfRp02xM/29oI TbN6HMp6Wk3TX0gsroFHbH25XZDHTeku+dh9LkcrjiN5lZX0FRtZ0zns5h4ZQFXv NyL6bsCHn076xp23VPdk63N4v0sD7VNcN59nUvDVqtjTAQuiB6mDWTR/jLEOV74N shrqiZ3SKg1itZLyxvMF3xXbrZ7rhcmDNr7gR/dTU6/Jkky/RcBDHLgyunJDb3hZ nPvGZDcevmLaZLQnoINEewfN1u5W+88x2ir1At8oj4IaPiA0pBhY7SWLiksu3P3x 2wqhmmzJK9LvECIrlfBIXFvsHNUCtL9fI+5sbaBfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHu9sX/PU6S1zMVZQNq1Z7TPogJcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBmOTdjYjk2LTliZTQtNDYxYS05MzE3LWY3ZGFlOTQwZjI3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGn4wDQYJKoZIhvcNAQELBQADggEBACUFhgv5M2WGeRMBLVy0TtSC wxLpitQSrAOeRU1fNl/4oG9cFtfHy+Ge8StnOTDKORk2XsiWFpdUM7fZ+bbppOqO qj1+8NNkj6UJhswC81KvpBS838x2RNVJ8bO3YCMsDaUKmdCyhP2bG1FQbzgAzOJM EcqoAPXKefHUXk/WvdInh+HJL1WT94u2gY5PpviZhIXVvqiAzySiBXSiMPOLLXNk H0B8JQDnLfVVa8sctOXC8yxFe5Ai635uMj1nO2MuHy0H4gh67PYmXsO2NOpNmXLX WftVdMC9gWr64F1mi3TdcqVYcAaZaJZMVZkUxdjFhqOoVGUN3YLBy4LEJ//ctrM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:23 2025 by rpki-client