$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16fefb52-a712-44f1-b9d3-38877fe9907b.roa File: 16fefb52-a712-44f1-b9d3-38877fe9907b.roa (raw, json) Hash identifier: 8w4YWtIgNPzvRgxOFxHEvBL6EYrdlf1CcNBbUz0Ghmw= Subject key identifier: 43:42:D8:59:82:04:83:0B:00:26:A8:A2:D1:E1:A6:C7:E4:F7:07:88 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 40214A16902D748C526AF29504D901499C72404F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16fefb52-a712-44f1-b9d3-38877fe9907b.roa Signing time: Fri 31 Oct 2025 01:53:36 +0000 ROA not before: Fri 31 Oct 2025 01:53:36 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3e4a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:21:4a:16:90:2d:74:8c:52:6a:f2:95:04:d9:01:49:9c:72:40:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:53:36 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a1eeb46a7250ad06b239802695e405ce1a883ca0162f35a921e656b83126b1f9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:dd:f2:09:23:d3:dd:13:77:36:ce:84:b9: 89:4d:fe:98:15:42:6f:ca:db:26:95:e7:b4:1d:2a: 48:2b:42:7a:a9:13:55:91:a4:5b:0f:cf:d8:fa:b2: 7f:bf:e2:9f:5f:3a:e6:83:10:8f:05:27:39:19:93: 1e:7c:48:61:d1:51:80:35:c7:af:57:ff:11:de:85: 14:17:14:61:fa:ee:e7:43:86:94:72:d3:96:bd:22: 6f:57:3e:4e:fe:4f:e3:ce:b9:5f:37:25:0a:19:40: f2:c6:70:95:22:5c:e5:02:14:1b:15:10:51:e3:8c: a1:4c:d6:ed:ea:78:3c:59:bb:23:10:bc:87:1a:09: 3a:f3:e7:bc:b4:e6:87:08:b2:ae:b5:37:a5:41:db: cf:af:1e:13:ec:95:00:14:8e:77:e7:05:b6:4a:45: 58:c4:8e:fb:ba:8a:57:e6:d9:4a:25:10:1c:af:25: 4e:b4:b1:f4:9e:26:22:45:32:4d:e0:53:bb:98:58: 5b:89:b2:02:b8:ec:07:77:98:dc:f9:80:a6:cf:d8: 97:4c:8d:70:bf:c5:1a:6e:a0:4b:31:8e:c8:50:73: 65:f4:10:3d:cc:41:94:a5:03:a7:0b:40:9f:06:85: a3:cb:6e:ff:cb:11:6a:8f:ab:40:0d:ff:7f:fb:c9: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:42:D8:59:82:04:83:0B:00:26:A8:A2:D1:E1:A6:C7:E4:F7:07:88 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16fefb52-a712-44f1-b9d3-38877fe9907b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3e4a::/47 Signature Algorithm: sha256WithRSAEncryption 96:2b:27:aa:27:15:87:e6:34:e4:5b:2b:23:02:da:ca:b6:2e: 57:b1:3e:36:ab:bb:43:6f:c9:1a:e7:77:38:ca:38:de:28:c7: 8e:a0:b2:5f:b6:e2:1a:f1:e0:e2:42:4c:ae:9d:94:94:5a:51: 08:d4:20:db:77:0b:ae:97:89:0c:39:e7:05:29:3f:2a:94:7c: b5:c6:bf:b6:12:4f:6e:4c:73:be:98:1f:a4:0d:58:47:a5:d6: a0:c9:87:15:b4:bd:2d:b5:47:1c:da:47:df:59:f2:13:4b:90: 08:49:06:79:86:f3:5b:b6:30:f5:7c:8a:84:42:15:cf:51:30: d8:64:4e:4f:2b:1b:01:81:6f:8f:b4:03:d3:7f:b7:e9:82:ce: bc:d2:05:33:40:f7:42:06:bc:6a:46:f1:82:ba:24:f8:99:97: 14:3b:f8:4e:ea:df:02:26:c0:96:f2:8b:29:3e:3d:6d:e8:82: 89:5b:9a:09:ac:eb:12:e0:e5:b9:e2:03:72:6d:68:c3:f1:2a: e7:98:2a:ee:b4:6b:51:99:c9:c1:dd:b3:d6:99:61:c3:37:88: b3:26:f4:2e:4c:d4:e3:62:f0:40:9a:ec:2f:53:ba:49:fb:0d: 37:33:3b:cd:8f:a2:ca:32:bf:b6:b9:42:73:c8:b2:f5:e3:0c: 5a:a2:a4:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQCFKFpAtdIxSavKVBNkBSZxyQE8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDE1MzM2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWVlYjQ2YTcyNTBhZDA2YjIzOTgwMjY5NWU0MDVjZTFh ODgzY2EwMTYyZjM1YTkyMWU2NTZiODMxMjZiMWY5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5a93yCSPT3RN3Ns6EuYlN/pgVQm/K2yaV57QdKkgrQnqp E1WRpFsPz9j6sn+/4p9fOuaDEI8FJzkZkx58SGHRUYA1x69X/xHehRQXFGH67udD hpRy05a9Im9XPk7+T+POuV83JQoZQPLGcJUiXOUCFBsVEFHjjKFM1u3qeDxZuyMQ vIcaCTrz57y05ocIsq61N6VB28+vHhPslQAUjnfnBbZKRVjEjvu6ilfm2UolEByv JU60sfSeJiJFMk3gU7uYWFuJsgK47Ad3mNz5gKbP2JdMjXC/xRpuoEsxjshQc2X0 ED3MQZSlA6cLQJ8GhaPLbv/LEWqPq0AN/3/7ySnrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQ0LYWYIEgwsAJqii0eGmx+T3B4gwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzE2ZmVmYjUyLWE3MTItNDRmMS1iOWQzLTM4ODc3ZmU5OTA3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPkowDQYJKoZIhvcNAQELBQADggEBAJYrJ6onFYfmNORbKyMC2sq2 LlexPjaru0NvyRrndzjKON4ox46gsl+24hrx4OJCTK6dlJRaUQjUINt3C66XiQw5 5wUpPyqUfLXGv7YST25Mc76YH6QNWEel1qDJhxW0vS21RxzaR99Z8hNLkAhJBnmG 81u2MPV8ioRCFc9RMNhkTk8rGwGBb4+0A9N/t+mCzrzSBTNA90IGvGpG8YK6JPiZ lxQ7+E7q3wImwJbyiyk+PW3ogolbmgms6xLg5bniA3JtaMPxKueYKu60a1GZycHd s9aZYcM3iLMm9C5M1ONi8ECa7C9Tukn7DTczO82Posoyv7a5QnPIsvXjDFqipK4= -----END CERTIFICATE-----Generated at Wed Nov 5 18:11:52 2025 by rpki-client