$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20387503-d4a0-42cd-a551-eef8ea0ac41d.roa File: 20387503-d4a0-42cd-a551-eef8ea0ac41d.roa (raw, json) Hash identifier: VLw6GAV0WEZLjKOCAN+HvABHlS4sAtP791bVt6RTj6U= Subject key identifier: 84:28:03:98:46:DF:E0:FE:AE:AA:BD:06:DA:F5:4F:03:96:58:BC:F6 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 297DBA8B8EBD8A00E99E50560614BC8BCF8FB8BB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20387503-d4a0-42cd-a551-eef8ea0ac41d.roa Signing time: Fri 31 Oct 2025 00:26:31 +0000 ROA not before: Fri 31 Oct 2025 00:26:31 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3570::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7d:ba:8b:8e:bd:8a:00:e9:9e:50:56:06:14:bc:8b:cf:8f:b8:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:26:31 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=13003f453ce5dda03436546e5cd2c0622adc03ecb5a1a1b848bf372683f31c26, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:93:01:16:50:bd:b3:1e:0a:a2:5b:10:69: 1e:15:92:cc:54:90:85:ce:f9:23:3a:74:21:f1:cc: b4:04:4a:df:fb:41:80:8e:2f:51:25:cc:3e:b8:aa: 98:07:8d:ad:5b:0b:d7:49:06:7f:59:80:9b:c5:83: ba:bb:3b:79:bc:78:8e:2b:a7:8e:51:ef:83:2d:c4: 41:49:78:5c:6c:e3:97:1c:79:54:c2:7a:52:2d:cd: 09:e5:68:9f:e6:3d:3f:41:82:e8:ff:da:53:cd:0d: f0:65:ef:5e:66:54:13:75:de:2f:40:72:0a:71:6a: fd:15:c5:4e:47:8d:b8:b1:db:73:f3:02:51:27:b9: 06:ed:af:71:07:4e:1f:ad:39:87:3f:eb:f0:b6:ae: 2f:8f:a3:ed:b9:d6:a4:88:4a:d8:ba:77:49:5d:4d: f0:dd:d2:1b:b5:03:3b:18:3d:96:fb:a1:f2:a6:46: 6e:73:f8:45:b5:9a:1d:af:e7:6b:23:6b:6e:06:d3: 45:02:69:c3:ed:1e:97:f2:a8:ab:e6:92:12:45:19: 98:09:8d:31:ea:01:fc:3d:d1:f7:08:ca:e5:a8:57: 8c:3d:22:01:85:7b:05:df:ca:f6:5e:42:c4:cb:31: 51:53:53:84:ad:a9:a3:8a:63:09:7e:11:5b:71:c6: 77:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:28:03:98:46:DF:E0:FE:AE:AA:BD:06:DA:F5:4F:03:96:58:BC:F6 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20387503-d4a0-42cd-a551-eef8ea0ac41d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3570::/47 Signature Algorithm: sha256WithRSAEncryption 0e:2e:03:bf:7d:9a:31:f1:49:67:6f:5d:b5:57:68:04:9e:28: fe:ca:0d:38:6c:f5:11:71:32:bb:7f:e1:0f:6a:2d:58:3e:8f: 99:a6:c0:2e:ff:d5:6e:9d:c7:b5:13:27:d9:07:2a:a5:b0:2c: 2b:07:97:1d:6a:93:4c:8f:17:ae:1a:93:32:58:52:17:2d:44: 8f:c0:cf:4d:d6:94:86:16:33:73:ea:8c:fe:06:e5:6f:48:20: c8:e7:8f:0a:95:76:bf:58:25:40:8f:83:d5:b3:79:03:42:ad: e1:b8:08:ff:db:a4:58:6a:a9:5f:3a:4c:a3:77:05:5a:c8:23: 56:89:e3:9a:9d:a1:1b:59:ec:e9:fb:48:89:96:7a:63:9e:99: 4d:54:f6:f4:6c:f0:6c:42:5c:e6:72:93:48:e0:0a:a7:bc:30: 7c:d0:59:97:a5:d4:cb:de:37:01:74:6f:be:27:20:db:1d:2a: bb:bf:52:ce:78:0b:0e:7f:8a:17:15:aa:08:35:af:3b:ab:2c: 41:6b:9d:61:99:94:b6:e9:7d:63:25:b0:a2:2f:88:4e:ba:b7: 38:2f:58:a1:9a:53:11:6f:f4:2c:24:bb:f2:f4:9f:a1:c3:d3: 10:c1:e6:b1:76:de:b4:c9:f4:76:8d:53:78:da:46:77:d4:a2: 40:39:6c:c5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKX26i469igDpnlBWBhS8i8+PuLswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyNjMxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzAwM2Y0NTNjZTVkZGEwMzQzNjU0NmU1Y2QyYzA2MjJh ZGMwM2VjYjVhMWExYjg0OGJmMzcyNjgzZjMxYzI2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ+5MBFlC9sx4KolsQaR4VksxUkIXO+SM6dCHxzLQESt/7 QYCOL1ElzD64qpgHja1bC9dJBn9ZgJvFg7q7O3m8eI4rp45R74MtxEFJeFxs45cc eVTCelItzQnlaJ/mPT9Bguj/2lPNDfBl715mVBN13i9Acgpxav0VxU5Hjbix23Pz AlEnuQbtr3EHTh+tOYc/6/C2ri+Po+251qSISti6d0ldTfDd0hu1AzsYPZb7ofKm Rm5z+EW1mh2v52sja24G00UCacPtHpfyqKvmkhJFGZgJjTHqAfw90fcIyuWoV4w9 IgGFewXfyvZeQsTLMVFTU4StqaOKYwl+EVtxxncpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhCgDmEbf4P6uqr0G2vVPA5ZYvPYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIwMzg3NTAzLWQ0YTAtNDJjZC1hNTUxLWVlZjhlYTBhYzQxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANXAwDQYJKoZIhvcNAQELBQADggEBAA4uA799mjHxSWdvXbVXaASe KP7KDThs9RFxMrt/4Q9qLVg+j5mmwC7/1W6dx7UTJ9kHKqWwLCsHlx1qk0yPF64a kzJYUhctRI/Az03WlIYWM3PqjP4G5W9IIMjnjwqVdr9YJUCPg9WzeQNCreG4CP/b pFhqqV86TKN3BVrII1aJ45qdoRtZ7On7SImWemOemU1U9vRs8GxCXOZyk0jgCqe8 MHzQWZel1MveNwF0b74nINsdKru/Us54Cw5/ihcVqgg1rzurLEFrnWGZlLbpfWMl sKIviE66tzgvWKGaUxFv9Cwku/L0n6HD0xDB5rF23rTJ9HaNU3jaRnfUokA5bMU= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:25 2025 by rpki-client