$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20b78106-7687-4ace-8470-55fa3998b142.roa File: 20b78106-7687-4ace-8470-55fa3998b142.roa (raw, json) Hash identifier: oITlEesdg/vXqnILH5iPH4/IcmuxyFjftzRPNj7rBJc= Subject key identifier: 72:DC:51:A9:A8:69:62:23:D8:61:E4:D5:19:C2:04:BB:B7:46:EE:1D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 61988AB1DE20E32E9CE25475CC1EFBF321872764 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20b78106-7687-4ace-8470-55fa3998b142.roa Signing time: Fri 31 Oct 2025 05:40:29 +0000 ROA not before: Fri 31 Oct 2025 05:40:29 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2a30::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:98:8a:b1:de:20:e3:2e:9c:e2:54:75:cc:1e:fb:f3:21:87:27:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:40:29 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=45b3f4262b3e2712dadb7db5c6276fe7b7bcda3c80ebb92463af86022f975768, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:20:88:12:93:c8:cf:bc:b8:42:34:56:dd: 05:8f:e9:cd:2f:68:7b:6c:b5:ff:75:ab:5c:22:11: e3:ce:21:b3:e5:e0:e3:50:ad:42:e0:0c:95:6d:90: a5:e7:77:63:6d:8f:b1:54:45:a9:42:91:69:a1:b8: 01:d5:1f:ef:0f:1d:f0:f2:45:fa:bb:6c:18:05:63: 92:58:d1:06:57:9a:db:86:7d:cf:70:0c:a3:38:28: 0e:e9:10:bd:52:d2:1b:30:5c:d3:6a:55:4b:4c:a0: dd:6a:bf:e9:78:44:7e:26:2e:26:99:a4:ff:41:6b: a5:e6:fe:3a:47:8a:c2:e7:f9:45:4c:c7:8a:17:b9: 80:e7:5a:a3:aa:1b:ee:3c:9b:56:aa:50:0f:13:78: bc:89:b5:87:53:23:c1:92:6d:9d:67:3d:ea:03:08: 45:ac:6f:35:53:ec:5d:10:b7:0b:95:b9:e9:03:11: c0:46:15:c5:b8:f0:00:9e:47:b2:37:c8:db:57:a3: 1f:cf:8f:f7:27:b7:99:f8:0e:74:5a:45:d2:3e:04: 84:a2:03:ff:fd:19:87:77:fb:ab:69:f5:36:db:de: c8:3f:22:5e:78:b8:57:1b:dd:a1:af:25:d6:be:c9: 4c:7a:48:ca:a7:34:01:8f:0a:dd:ac:75:d4:b6:3e: 2b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DC:51:A9:A8:69:62:23:D8:61:E4:D5:19:C2:04:BB:B7:46:EE:1D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20b78106-7687-4ace-8470-55fa3998b142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2a30::/45 Signature Algorithm: sha256WithRSAEncryption 3a:33:57:2a:a4:48:09:fa:35:f2:91:ea:36:1a:7b:7c:90:d7: 3a:72:a4:ec:05:c5:2c:38:0e:52:ee:9f:88:32:b8:ef:6a:af: fe:95:53:97:84:59:87:3d:9a:0b:70:48:cd:31:f7:f1:8b:ee: 1d:49:99:1e:32:e3:b9:3e:bd:0a:03:32:43:9e:d3:9e:79:9b: 2b:ed:95:d7:af:87:7e:19:96:55:6f:01:61:75:08:b1:ad:ee: 69:97:37:fe:1a:69:af:ce:4e:33:99:47:9d:81:a7:23:3b:49: a5:2b:fb:73:57:c6:d7:94:46:7b:69:35:2b:13:ab:54:8d:ab: c4:fe:91:cc:fe:c7:28:8d:55:56:85:88:f5:3e:90:23:6f:3e: 88:27:aa:0f:34:da:18:a6:61:01:d6:36:8a:96:b7:40:ba:76: 6d:0c:e5:8c:26:10:3a:23:c7:74:39:d9:2e:d2:95:e2:25:98: 53:ca:8e:6b:e7:2c:4a:3d:65:a1:c6:82:ea:94:a7:68:90:4a: 23:18:26:3f:34:1a:8d:ac:28:17:27:c0:b9:38:16:a5:2d:46: 41:b3:0a:6f:81:68:82:94:8f:65:d5:d2:b4:2b:50:95:b3:d8: 6b:88:11:e6:a1:41:34:dc:5d:25:e9:51:b2:fa:b8:aa:62:fc: 16:d9:95:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYZiKsd4g4y6c4lR1zB778yGHJ2QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU0MDI5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NWIzZjQyNjJiM2UyNzEyZGFkYjdkYjVjNjI3NmZlN2I3 YmNkYTNjODBlYmI5MjQ2M2FmODYwMjJmOTc1NzY4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWXiCIEpPIz7y4QjRW3QWP6c0vaHtstf91q1wiEePOIbPl 4ONQrULgDJVtkKXnd2Ntj7FURalCkWmhuAHVH+8PHfDyRfq7bBgFY5JY0QZXmtuG fc9wDKM4KA7pEL1S0hswXNNqVUtMoN1qv+l4RH4mLiaZpP9Ba6Xm/jpHisLn+UVM x4oXuYDnWqOqG+48m1aqUA8TeLyJtYdTI8GSbZ1nPeoDCEWsbzVT7F0QtwuVuekD EcBGFcW48ACeR7I3yNtXox/Pj/cnt5n4DnRaRdI+BISiA//9GYd3+6tp9Tbb3sg/ Il54uFcb3aGvJda+yUx6SMqnNAGPCt2sddS2PiuRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUctxRqahpYiPYYeTVGcIEu7dG7h0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIwYjc4MTA2LTc2ODctNGFjZS04NDcwLTU1ZmEzOTk4YjE0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAKjAwDQYJKoZIhvcNAQELBQADggEBADozVyqkSAn6NfKR6jYae3yQ 1zpypOwFxSw4DlLun4gyuO9qr/6VU5eEWYc9mgtwSM0x9/GL7h1JmR4y47k+vQoD MkOe0555myvtldevh34ZllVvAWF1CLGt7mmXN/4aaa/OTjOZR52BpyM7SaUr+3NX xteURntpNSsTq1SNq8T+kcz+xyiNVVaFiPU+kCNvPognqg802himYQHWNoqWt0C6 dm0M5YwmEDojx3Q52S7SleIlmFPKjmvnLEo9ZaHGguqUp2iQSiMYJj80Go2sKBcn wLk4FqUtRkGzCm+BaIKUj2XV0rQrUJWz2GuIEeahQTTcXSXpUbL6uKpi/BbZlds= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:59 2025 by rpki-client