$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b3e5ee3-4c77-46be-af98-b020327482e7.roa File: 1b3e5ee3-4c77-46be-af98-b020327482e7.roa (raw, json) Hash identifier: UWoN2PmzzcUuxLSphWtyqzgbGsbdc0vxsolnnoh5OXc= Subject key identifier: F3:E5:26:02:34:21:8C:78:1C:E4:52:CF:B7:F6:E0:8F:3E:18:1A:4C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1C272AEA61CE13C8018087878397DE2ADF0C1F00 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b3e5ee3-4c77-46be-af98-b020327482e7.roa Signing time: Fri 31 Oct 2025 06:27:25 +0000 ROA not before: Fri 31 Oct 2025 06:27:25 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1450::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:27:2a:ea:61:ce:13:c8:01:80:87:87:83:97:de:2a:df:0c:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:27:25 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=4b0204c58118cdd2dff9443c49506664dbb661facf6790a642b65effae2f56b1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:45:45:19:4b:58:41:e5:fd:40:09:81:d0: 77:06:f0:62:e2:9a:1e:a1:ce:c2:fb:dc:33:a4:4a: 09:a8:f9:31:32:a0:63:6f:2e:24:e4:57:c5:01:3b: 9d:6f:75:80:75:d4:12:7b:57:07:38:95:cf:d4:1f: 58:cf:12:3b:99:3c:28:07:5a:fb:d9:74:c1:b3:6d: fe:26:fc:c4:8e:6c:c4:68:17:21:3d:df:e2:57:73: 6d:18:0b:79:2a:f9:bb:4f:cd:40:69:67:98:07:55: f2:e1:ee:65:40:8d:8a:1a:84:bc:58:24:3c:92:43: f2:6f:06:82:4b:10:f3:06:8c:51:17:d4:de:21:5d: 2b:70:f4:a5:aa:3a:cf:da:47:03:c1:99:c5:f6:70: 6a:4b:fe:f1:8b:2e:05:d9:4e:4a:aa:dd:af:91:8c: b6:cb:05:eb:33:df:fd:61:0f:c9:e2:08:26:ac:bb: e1:f8:18:7d:d6:39:1c:97:28:b5:06:44:ef:6f:72: 13:a3:bd:41:e6:2b:8e:24:cd:16:99:ab:df:82:79: 4f:fa:c0:41:55:cf:a2:bf:b2:b4:53:96:a5:eb:78: 10:ab:6d:e5:14:39:13:47:37:4c:90:e7:ff:bd:af: 79:c1:fc:dd:3f:fa:5f:0f:54:68:1a:3a:b0:e4:13: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E5:26:02:34:21:8C:78:1C:E4:52:CF:B7:F6:E0:8F:3E:18:1A:4C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1b3e5ee3-4c77-46be-af98-b020327482e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1450::/44 Signature Algorithm: sha256WithRSAEncryption 58:bc:e2:d9:57:c9:af:12:0a:2d:00:96:a1:ee:94:94:45:49: 3b:e3:e2:36:b2:c1:70:cf:a4:ba:0c:25:50:f6:74:5f:df:4d: cc:96:bf:f3:47:16:2a:0b:cc:dc:de:5b:e6:5c:13:7b:de:5d: f8:ab:69:80:53:bb:bb:25:52:94:07:49:41:d9:90:b9:c1:27: 70:84:07:0b:50:f6:c0:64:08:a4:e7:7c:ba:b0:8f:47:b9:2b: 41:71:2d:18:5f:7c:e4:5a:f2:30:2b:3e:a5:9d:0d:d8:a4:a6: 41:50:82:06:d8:91:fe:65:b0:cd:ad:ee:5d:1e:8d:18:a3:3f: 67:b9:19:e6:12:5a:4a:7d:a8:a8:16:87:ce:11:b2:b8:0c:e1: bd:85:4d:71:76:12:82:86:69:8c:db:e4:bc:92:7e:ed:9f:3b: be:b9:bb:a5:b9:55:35:5b:ea:0d:8b:b1:69:25:18:fc:8c:08: ec:9b:c4:bc:0b:33:a6:2d:18:dd:78:8d:91:8f:77:9b:88:8b: 8d:f6:49:f5:b4:04:76:ba:83:c7:aa:4c:64:d9:1b:09:95:ac: a6:b8:c8:6e:60:90:e8:80:95:23:d5:18:25:17:1e:c6:12:03: 2c:3e:2c:ca:04:cb:9f:ea:f4:58:9b:ec:0e:24:4a:96:9f:ce: 7b:8d:9c:9a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHCcq6mHOE8gBgIeHg5feKt8MHwAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyNzI1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjAyMDRjNTgxMThjZGQyZGZmOTQ0M2M0OTUwNjY2NGRi YjY2MWZhY2Y2NzkwYTY0MmI2NWVmZmFlMmY1NmIxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAx0VFGUtYQeX9QAmB0HcG8GLimh6hzsL73DOkSgmo+TEy oGNvLiTkV8UBO51vdYB11BJ7Vwc4lc/UH1jPEjuZPCgHWvvZdMGzbf4m/MSObMRo FyE93+JXc20YC3kq+btPzUBpZ5gHVfLh7mVAjYoahLxYJDySQ/JvBoJLEPMGjFEX 1N4hXStw9KWqOs/aRwPBmcX2cGpL/vGLLgXZTkqq3a+RjLbLBesz3/1hD8niCCas u+H4GH3WORyXKLUGRO9vchOjvUHmK44kzRaZq9+CeU/6wEFVz6K/srRTlqXreBCr beUUORNHN0yQ5/+9r3nB/N0/+l8PVGgaOrDkE5BfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8+UmAjQhjHgc5FLPt/bgjz4YGkwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzFiM2U1ZWUzLTRjNzctNDZiZS1hZjk4LWIwMjAzMjc0ODJlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAFFAwDQYJKoZIhvcNAQELBQADggEBAFi84tlXya8SCi0AlqHulJRF STvj4jaywXDPpLoMJVD2dF/fTcyWv/NHFioLzNzeW+ZcE3veXfiraYBTu7slUpQH SUHZkLnBJ3CEBwtQ9sBkCKTnfLqwj0e5K0FxLRhffORa8jArPqWdDdikpkFQggbY kf5lsM2t7l0ejRijP2e5GeYSWkp9qKgWh84RsrgM4b2FTXF2EoKGaYzb5LySfu2f O765u6W5VTVb6g2LsWklGPyMCOybxLwLM6YtGN14jZGPd5uIi432SfW0BHa6g8eq TGTZGwmVrKa4yG5gkOiAlSPVGCUXHsYSAyw+LMoEy5/q9Fib7A4kSpafznuNnJo= -----END CERTIFICATE-----Generated at Wed Nov 5 13:57:06 2025 by rpki-client