$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11485a11-ca55-40ff-9787-9b273283c0e3.roa File: 11485a11-ca55-40ff-9787-9b273283c0e3.roa (raw, json) Hash identifier: dP8pLiy+zwd6ofuV2OTkYQF0/sFMyJoTO3saz2lAp7Q= Subject key identifier: D6:30:3F:F7:B7:31:D3:2E:3A:8C:F9:0E:25:7E:DC:AE:FF:84:37:FF Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 28392EB4721BEED20254FD0CDC35DE7A93B3A76B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11485a11-ca55-40ff-9787-9b273283c0e3.roa Signing time: Thu 30 Oct 2025 21:10:16 +0000 ROA not before: Thu 30 Oct 2025 21:10:16 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1530::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:39:2e:b4:72:1b:ee:d2:02:54:fd:0c:dc:35:de:7a:93:b3:a7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:10:16 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=a5fe6bbebde0b39272eb6fb8f82e247c6f87a46e46f052a9bea292c5f44ab421, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:ac:a4:eb:43:96:c8:5d:e7:80:38:a9:b7: 06:5b:f3:3f:db:8c:45:df:29:70:03:2d:76:d0:bc: dc:26:cc:3c:d5:d7:63:d3:81:bd:3d:c8:3c:28:e5: 7d:f2:35:1e:6e:f6:80:80:c1:9f:47:71:44:f5:6e: 5d:dc:78:31:bc:64:df:78:90:58:fe:0b:13:b1:d5: 05:bd:37:5e:35:77:98:74:0e:d8:4f:a9:30:99:74: e3:cc:b8:b0:32:da:1e:7f:5a:29:11:21:9f:33:f5: ef:28:40:e1:35:9d:04:cf:5a:fe:ef:03:a5:15:63: c3:59:04:cd:56:b4:8f:f7:89:d9:08:c9:42:f4:7c: 55:47:cf:d2:5c:0b:a3:b6:8e:e5:96:c5:e3:d6:7b: a4:9d:9b:b8:a2:f0:b1:43:1d:88:f7:7d:8d:5e:b7: 64:2f:18:9f:08:b7:36:fa:e0:68:89:1e:7a:44:32: 34:e0:76:89:14:15:fc:bd:91:33:af:8d:ed:78:db: 5b:63:a2:16:01:d2:e5:4a:6a:aa:ec:7a:d3:9f:9a: a3:11:f8:25:c4:46:4f:8c:83:35:69:8f:b1:99:c1: 35:fc:ec:02:98:ad:77:af:0f:e6:95:9b:1a:f1:e4: d3:42:f7:88:09:77:a0:41:47:f1:b3:12:25:5c:ce: 09:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:30:3F:F7:B7:31:D3:2E:3A:8C:F9:0E:25:7E:DC:AE:FF:84:37:FF X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11485a11-ca55-40ff-9787-9b273283c0e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1530::/47 Signature Algorithm: sha256WithRSAEncryption 0e:05:71:dc:8a:63:2b:06:c1:ea:65:c5:93:72:e5:8b:9f:94: 2b:19:29:b3:17:3d:61:08:04:61:95:40:cc:dd:7c:71:b1:eb: 3c:6c:bc:1d:45:3a:43:b7:4c:53:60:ec:85:97:31:30:96:ae: c7:41:3f:b2:51:9d:88:1c:e1:b1:9f:d2:d8:19:ee:01:67:7d: 78:8d:8a:9a:d0:62:a2:91:38:f6:1e:29:d7:1c:27:fd:e9:50: 56:42:6a:56:e4:51:fe:b3:d3:9c:2c:b5:41:cc:51:cb:3e:df: c0:9c:9f:86:b8:85:dc:44:57:38:1c:4d:a4:5e:09:44:3a:c4: c3:4c:2c:58:91:d3:71:9b:3b:d4:d4:3d:e5:44:d5:f0:33:5b: 8e:d9:e0:9e:83:65:3e:fd:ed:a7:fe:e6:30:37:e5:eb:df:cf: c7:fc:b2:d1:eb:7e:d7:36:1b:03:43:2a:a4:6e:f0:97:b1:98: be:82:63:cd:cb:0e:da:3b:eb:fe:36:f6:14:83:09:d4:d2:9b: 3a:5c:48:4a:66:47:8d:8d:13:c5:de:95:24:8a:99:07:4e:5f: 83:0b:ed:ad:fd:da:98:e8:82:5b:d4:fb:c8:9b:ed:07:d6:a5: 70:f2:86:15:fc:5f:62:e6:4b:67:23:bf:6e:ec:b6:ff:2d:ff: e5:2e:6a:82 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKDkutHIb7tICVP0M3DXeepOzp2swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjExMDE2WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNWZlNmJiZWJkZTBiMzkyNzJlYjZmYjhmODJlMjQ3YzZm ODdhNDZlNDZmMDUyYTliZWEyOTJjNWY0NGFiNDIxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9pKyk60OWyF3ngDiptwZb8z/bjEXfKXADLXbQvNwmzDzV 12PTgb09yDwo5X3yNR5u9oCAwZ9HcUT1bl3ceDG8ZN94kFj+CxOx1QW9N141d5h0 DthPqTCZdOPMuLAy2h5/WikRIZ8z9e8oQOE1nQTPWv7vA6UVY8NZBM1WtI/3idkI yUL0fFVHz9JcC6O2juWWxePWe6Sdm7ii8LFDHYj3fY1et2QvGJ8Itzb64GiJHnpE MjTgdokUFfy9kTOvje1421tjohYB0uVKaqrsetOfmqMR+CXERk+MgzVpj7GZwTX8 7AKYrXevD+aVmxrx5NNC94gJd6BBR/GzEiVczgknAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1jA/97cx0y46jPkOJX7crv+EN/8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzExNDg1YTExLWNhNTUtNDBmZi05Nzg3LTliMjczMjgzYzBlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFTAwDQYJKoZIhvcNAQELBQADggEBAA4FcdyKYysGweplxZNy5Yuf lCsZKbMXPWEIBGGVQMzdfHGx6zxsvB1FOkO3TFNg7IWXMTCWrsdBP7JRnYgc4bGf 0tgZ7gFnfXiNiprQYqKROPYeKdccJ/3pUFZCalbkUf6z05wstUHMUcs+38Ccn4a4 hdxEVzgcTaReCUQ6xMNMLFiR03GbO9TUPeVE1fAzW47Z4J6DZT797af+5jA35evf z8f8stHrftc2GwNDKqRu8JexmL6CY83LDto76/429hSDCdTSmzpcSEpmR42NE8Xe lSSKmQdOX4ML7a392pjoglvU+8ib7QfWpXDyhhX8X2LmS2cjv27stv8t/+UuaoI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:27 2025 by rpki-client