$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16e0a904-7eed-46d5-bc58-c19751fa628d.roa File: 16e0a904-7eed-46d5-bc58-c19751fa628d.roa (raw, json) Hash identifier: 28OeTvF7LWRVquWZbaJXrizSIiJskHUccwK+pFpu3RM= Subject key identifier: 2B:7F:E1:F5:65:F6:32:B4:48:89:14:37:B1:0F:57:B7:8D:1C:7E:18 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 23313DC90B7A0E879F5D585DD068268D57DA2ABB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16e0a904-7eed-46d5-bc58-c19751fa628d.roa Signing time: Fri 31 Oct 2025 07:52:11 +0000 ROA not before: Fri 31 Oct 2025 07:52:11 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:31:3d:c9:0b:7a:0e:87:9f:5d:58:5d:d0:68:26:8d:57:da:2a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:52:11 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=21e8678ee7e6ca7657e214fbabc690e4160f163d087704cb9a564cad6348d666, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:a3:4c:63:a5:0c:79:8a:b1:db:22:8d:29: bf:a5:1f:d0:00:3b:c0:f7:e6:01:cb:23:43:36:30: 3f:4a:ec:03:0c:b7:7c:e1:37:4e:b2:ef:48:df:2d: 54:5f:78:f1:30:f5:eb:ec:cf:24:6a:fc:55:d4:bf: 86:94:c2:8a:b1:d7:6e:b5:8f:d0:86:d9:c3:98:0b: 27:77:bf:4b:d7:46:43:6d:e0:d4:8b:9a:ff:3c:b9: 56:63:66:23:de:49:34:d8:4e:85:4c:50:3a:3d:f1: 71:39:5e:5b:75:d3:26:82:9a:09:f6:79:d4:23:23: 35:c2:f0:97:e3:b6:21:81:60:be:a8:05:17:3e:f8: 33:98:37:12:09:2f:1e:2b:d9:76:b8:78:bc:3c:e9: c7:b4:df:85:0c:90:7f:1e:ba:50:bc:da:83:a3:69: 0c:a3:65:c6:c4:df:5c:72:7a:a3:4e:82:95:dd:b7: b3:f1:d8:84:e0:92:36:cc:58:8f:2a:2f:7e:8f:99: c6:7a:35:cb:f9:60:3c:d9:fd:68:78:ab:b1:e2:67: 78:0e:81:9a:75:b6:12:e7:5f:82:30:fa:99:f3:76: 55:e3:b6:0d:7e:1f:6e:1c:29:92:a7:08:61:9b:86: 33:58:2e:90:08:d3:e9:67:e5:c4:a8:a3:6c:4e:57: 95:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7F:E1:F5:65:F6:32:B4:48:89:14:37:B1:0F:57:B7:8D:1C:7E:18 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16e0a904-7eed-46d5-bc58-c19751fa628d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1300::/40 Signature Algorithm: sha256WithRSAEncryption 99:67:a3:13:94:b6:0d:f0:70:38:0c:02:af:fb:56:5d:c0:1e: 5c:d4:f3:75:14:0c:e1:bc:57:df:35:89:90:3a:50:d7:79:58: f4:4f:61:b8:2a:d8:2c:a0:ee:29:cf:97:dd:ff:91:06:d1:d0: 87:22:74:7b:c6:2d:7e:6a:43:32:a2:71:57:70:8e:a6:39:94: 54:8e:0a:b5:9d:70:e9:1a:d2:a1:af:54:00:32:da:ae:62:1c: 89:9a:54:c6:21:1f:ee:9d:27:a2:3c:5e:05:8f:12:ef:f1:d6: 8c:2b:3d:03:a2:c9:83:04:f4:40:69:c0:70:ef:90:61:14:d5: 2f:68:d9:c0:81:e1:68:e6:bf:da:fe:9c:2e:fa:bc:86:d9:20: 95:c0:6e:63:6d:59:0a:c9:25:9d:b4:09:28:be:d5:e3:40:8c: 94:e3:84:f3:f9:cd:0d:aa:21:3c:19:d1:13:d9:84:4c:bc:d9: 52:b9:f4:59:dc:2b:40:6e:20:88:05:73:92:c9:4d:55:54:9f: d2:92:c7:85:18:d4:4a:7d:1e:28:a9:fa:dd:a5:e5:af:9b:5f: 65:95:8f:2c:85:b8:92:c1:15:90:9a:95:84:7c:21:68:a4:b5: 77:c6:d2:64:81:3e:35:23:7d:3b:ba:b0:73:3a:ed:c2:79:38: 61:0d:81:1c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIzE9yQt6DoefXVhd0GgmjVfaKrswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc1MjExWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMWU4Njc4ZWU3ZTZjYTc2NTdlMjE0ZmJhYmM2OTBlNDE2 MGYxNjNkMDg3NzA0Y2I5YTU2NGNhZDYzNDhkNjY2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmPaNMY6UMeYqx2yKNKb+lH9AAO8D35gHLI0M2MD9K7AMM t3zhN06y70jfLVRfePEw9evszyRq/FXUv4aUwoqx1261j9CG2cOYCyd3v0vXRkNt 4NSLmv88uVZjZiPeSTTYToVMUDo98XE5Xlt10yaCmgn2edQjIzXC8JfjtiGBYL6o BRc++DOYNxIJLx4r2Xa4eLw86ce034UMkH8eulC82oOjaQyjZcbE31xyeqNOgpXd t7Px2ITgkjbMWI8qL36PmcZ6Ncv5YDzZ/Wh4q7HiZ3gOgZp1thLnX4Iw+pnzdlXj tg1+H24cKZKnCGGbhjNYLpAI0+ln5cSoo2xOV5UPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUK3/h9WX2MrRIiRQ3sQ9Xt40cfhgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzE2ZTBhOTA0LTdlZWQtNDZkNS1iYzU4LWMxOTc1MWZhNjI4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAJAAEzANBgkqhkiG9w0BAQsFAAOCAQEAmWejE5S2DfBwOAwCr/tWXcAe XNTzdRQM4bxX3zWJkDpQ13lY9E9huCrYLKDuKc+X3f+RBtHQhyJ0e8YtfmpDMqJx V3COpjmUVI4KtZ1w6RrSoa9UADLarmIciZpUxiEf7p0nojxeBY8S7/HWjCs9A6LJ gwT0QGnAcO+QYRTVL2jZwIHhaOa/2v6cLvq8htkglcBuY21ZCsklnbQJKL7V40CM lOOE8/nNDaohPBnRE9mETLzZUrn0WdwrQG4giAVzkslNVVSf0pLHhRjUSn0eKKn6 3aXlr5tfZZWPLIW4ksEVkJqVhHwhaKS1d8bSZIE+NSN9O7qwczrtwnk4YQ2BHA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:29 2025 by rpki-client