$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1da84d35-ef7a-4060-82c8-a0530658f6d3.roa File: 1da84d35-ef7a-4060-82c8-a0530658f6d3.roa (raw, json) Hash identifier: KiVPWpTt0b6gnwrAGleunMnW3RTVOxukAfQKygYoIu4= Subject key identifier: BF:F2:55:A5:BD:7B:2B:81:71:11:6D:64:A0:EF:BD:8A:C3:18:4E:EA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 051F73777535FF2118A3545A23F1ED3CE64C82BD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1da84d35-ef7a-4060-82c8-a0530658f6d3.roa Signing time: Fri 31 Oct 2025 01:51:57 +0000 ROA not before: Fri 31 Oct 2025 01:51:57 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3df4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1f:73:77:75:35:ff:21:18:a3:54:5a:23:f1:ed:3c:e6:4c:82:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:51:57 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=1a21eadb309ed70a4d79785d009969572ad71b9c5506fec0cf0727878033e02e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a0:cb:c5:63:b0:99:78:50:ea:5e:4d:c2:24: d5:5b:83:16:08:7d:dc:99:6c:04:63:90:fb:76:38: 08:fa:4a:7b:56:6a:bd:62:80:50:4f:c6:f5:07:11: f8:a6:15:64:49:47:58:91:51:3d:50:81:b4:ee:a8: 5f:ee:bc:5d:15:15:78:78:a3:cb:b2:b6:1b:f0:b1: 65:0d:2c:4e:88:89:4b:3c:17:77:60:02:c6:e3:72: 4a:00:e8:cf:3e:00:58:66:97:0f:9f:25:8d:5a:81: 8a:5c:01:a3:e1:fe:2b:cb:eb:34:1b:6d:13:e1:fa: 8c:cc:43:2f:e7:1b:6e:37:63:43:77:2c:d6:fe:86: 23:a1:39:b2:9d:00:7f:e7:65:fe:6e:c4:1d:2e:b7: 1f:71:38:c1:c2:71:b4:b6:4d:af:55:81:b9:22:d9: 59:c0:4f:eb:4c:44:15:a2:a0:b4:04:2f:70:c7:87: 04:3f:d6:5f:d9:d2:70:66:32:2e:57:2f:10:d4:0b: e5:5d:8e:a0:a4:43:91:1b:fe:83:51:a9:c6:cf:91: b2:f5:05:ec:70:1d:8f:9a:f7:d5:a9:d5:4d:0d:e4: 66:c3:e0:cf:6f:b8:2a:7d:ea:43:ae:01:89:76:cf: 3f:c6:db:d0:8c:5d:15:87:10:e3:22:bd:62:f4:07: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F2:55:A5:BD:7B:2B:81:71:11:6D:64:A0:EF:BD:8A:C3:18:4E:EA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1da84d35-ef7a-4060-82c8-a0530658f6d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3df4::/47 Signature Algorithm: sha256WithRSAEncryption 5b:3f:1f:99:8e:ab:75:fc:7b:02:96:07:8a:f3:ba:aa:39:b1: bb:a2:a7:77:f6:54:c1:9e:d8:bb:d4:07:35:cf:cd:f0:24:a7: df:cc:e7:77:78:14:0c:01:53:82:16:4e:db:07:dc:c7:1c:35: b5:4e:f4:ea:96:b1:4a:92:0b:7d:f9:fe:a4:20:12:01:fa:0c: 85:67:52:61:36:13:a5:9c:c5:93:9c:67:04:72:38:75:34:c1: 2c:e5:d5:3b:1d:06:78:0f:c8:4e:1b:29:31:5b:9b:7c:e9:60: ae:82:2d:89:6b:ff:90:b8:3c:a9:2b:bf:ab:7e:e7:a3:00:f2: 07:4b:6c:1f:05:f1:ce:a5:3f:41:0e:11:e8:3b:01:7e:0c:3f: 49:d4:dc:7e:db:31:e0:08:76:7d:01:ec:01:d4:79:a0:08:76: 90:f5:ef:84:04:01:b1:ca:da:08:82:d8:f4:89:7e:7a:80:26: 4e:74:aa:25:9f:19:bb:70:d6:9d:a7:4d:4e:43:1a:39:11:62: 19:81:fb:c2:8b:73:36:ee:7b:1e:2b:25:ce:fd:cb:d5:5b:30: 64:6b:b0:5f:b8:f4:6a:31:5f:09:81:3f:16:69:ef:8a:e4:d9: 88:f9:da:c1:3c:c8:27:df:9c:a9:44:49:f8:0f:eb:4d:4c:f7: 81:dd:40:1c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBR9zd3U1/yEYo1RaI/HtPOZMgr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDE1MTU3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTIxZWFkYjMwOWVkNzBhNGQ3OTc4NWQwMDk5Njk1NzJh ZDcxYjljNTUwNmZlYzBjZjA3Mjc4NzgwMzNlMDJlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDyoMvFY7CZeFDqXk3CJNVbgxYIfdyZbARjkPt2OAj6SntW ar1igFBPxvUHEfimFWRJR1iRUT1QgbTuqF/uvF0VFXh4o8uythvwsWUNLE6IiUs8 F3dgAsbjckoA6M8+AFhmlw+fJY1agYpcAaPh/ivL6zQbbRPh+ozMQy/nG243Y0N3 LNb+hiOhObKdAH/nZf5uxB0utx9xOMHCcbS2Ta9Vgbki2VnAT+tMRBWioLQEL3DH hwQ/1l/Z0nBmMi5XLxDUC+VdjqCkQ5Eb/oNRqcbPkbL1BexwHY+a99Wp1U0N5GbD 4M9vuCp96kOuAYl2zz/G29CMXRWHEOMivWL0B/ZzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUv/JVpb17K4FxEW1koO+9isMYTuowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzFkYTg0ZDM1LWVmN2EtNDA2MC04MmM4LWEwNTMwNjU4ZjZkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPfQwDQYJKoZIhvcNAQELBQADggEBAFs/H5mOq3X8ewKWB4rzuqo5 sbuip3f2VMGe2LvUBzXPzfAkp9/M53d4FAwBU4IWTtsH3MccNbVO9OqWsUqSC335 /qQgEgH6DIVnUmE2E6WcxZOcZwRyOHU0wSzl1TsdBngPyE4bKTFbm3zpYK6CLYlr /5C4PKkrv6t+56MA8gdLbB8F8c6lP0EOEeg7AX4MP0nU3H7bMeAIdn0B7AHUeaAI dpD174QEAbHK2giC2PSJfnqAJk50qiWfGbtw1p2nTU5DGjkRYhmB+8KLczbuex4r Jc79y9VbMGRrsF+49GoxXwmBPxZp74rk2Yj52sE8yCffnKlESfgP601M94HdQBw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:46 2025 by rpki-client