$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21aaf670-3716-4ce7-a9bb-04003939f0ab.roa File: 21aaf670-3716-4ce7-a9bb-04003939f0ab.roa (raw, json) Hash identifier: 2ADpJtAv7MReDqoqDNrI9gqGawPBs+COzlBVm+iEkKo= Subject key identifier: 85:7B:5D:CD:47:B2:6C:25:6E:27:10:9B:22:6D:00:04:A8:9E:34:AD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0EDD5C552D69CB8AB692ADE6546DC211FE943299 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21aaf670-3716-4ce7-a9bb-04003939f0ab.roa Signing time: Fri 31 Oct 2025 05:58:43 +0000 ROA not before: Fri 31 Oct 2025 05:58:43 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:34d0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:dd:5c:55:2d:69:cb:8a:b6:92:ad:e6:54:6d:c2:11:fe:94:32:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:58:43 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=6f5c971f6d7ba60618df0ddc412cefb0b089c549b280f2c7a0539d76ddabfca1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2b:75:27:50:55:56:e8:79:f7:11:ab:b9:4d: 3a:d9:da:e1:9f:79:ef:72:14:c2:30:87:ae:e0:4f: ed:c2:6d:74:55:f6:25:ff:94:72:86:05:7f:f9:6b: 52:24:56:ca:c5:f8:f7:98:f5:eb:54:de:21:11:8d: a9:c4:37:2a:19:2c:7e:f3:51:2b:48:89:04:15:e0: b9:71:a0:4d:75:4c:e0:b7:d7:5b:0a:cb:37:af:1a: f1:12:f2:1e:0e:dd:3b:9f:b4:8c:2a:6d:cc:fb:05: 3e:e9:04:f8:e2:0f:56:e4:76:73:87:7e:f5:23:67: 1b:4c:1c:65:10:5c:20:5b:ff:d9:4d:13:7f:84:b4: 4f:14:8c:4a:41:eb:90:52:68:a2:75:9d:6e:f4:45: a4:fd:79:08:dd:04:95:ec:44:14:dc:70:a4:18:13: 64:48:4c:a9:56:e4:3f:0a:f1:7b:7f:9c:5f:22:90: 01:50:26:51:01:72:aa:b6:53:b2:9f:db:40:9a:bb: b9:70:6e:8d:71:04:f0:cc:f8:6b:26:2c:4a:32:3a: b8:6b:97:a2:71:26:7b:f3:69:46:73:72:a1:aa:3d: dc:64:d3:8f:b9:40:87:86:d7:4f:53:ba:fa:52:47: 65:2a:73:34:a7:2c:8c:29:76:54:39:4c:ef:59:8b: ca:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7B:5D:CD:47:B2:6C:25:6E:27:10:9B:22:6D:00:04:A8:9E:34:AD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21aaf670-3716-4ce7-a9bb-04003939f0ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:34d0::/45 Signature Algorithm: sha256WithRSAEncryption 62:3d:ac:d6:0f:ed:40:ad:cf:07:fb:b7:66:87:74:28:63:70: a2:47:75:6c:b0:df:8a:3b:34:86:7a:d7:e2:22:0e:67:3e:ef: 99:b5:c1:30:fd:7e:64:83:56:68:09:2e:40:63:4c:c1:bd:41: 68:da:35:04:7e:da:28:de:db:b4:6d:48:42:54:0f:ae:50:0a: c0:31:d4:d8:ce:48:c9:ef:80:02:93:71:27:70:56:52:af:56: ad:50:a8:6f:9a:29:84:74:bb:20:fe:dc:2c:00:a5:4d:c7:18: f9:04:0f:3f:69:99:7e:28:d9:1c:18:27:fd:7a:74:df:5f:dd: 13:c9:02:6e:0b:5c:c6:41:a6:6c:d2:26:3f:0f:6b:ac:04:67: e8:84:1d:c7:72:03:3b:bb:2d:93:e7:76:5f:08:31:20:4e:eb: e6:26:fb:6c:a1:57:62:56:94:63:24:b4:8d:7a:96:4e:17:98: ed:27:62:e4:03:b7:8a:b9:b7:65:19:59:3e:29:36:3f:95:b4: 52:74:e5:75:7e:53:5b:26:b5:0b:2c:d7:97:e4:48:d7:72:e6: 0f:7b:f9:85:02:6c:ce:31:6c:0c:32:29:bf:5b:e4:de:23:ec: cf:e6:7e:e9:59:8e:a4:06:d6:cb:ff:61:7a:06:56:dc:02:3b: 27:1c:2b:a0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDt1cVS1py4q2kq3mVG3CEf6UMpkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1ODQzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjVjOTcxZjZkN2JhNjA2MThkZjBkZGM0MTJjZWZiMGIw ODljNTQ5YjI4MGYyYzdhMDUzOWQ3NmRkYWJmY2ExMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhK3UnUFVW6Hn3Eau5TTrZ2uGfee9yFMIwh67gT+3CbXRV 9iX/lHKGBX/5a1IkVsrF+PeY9etU3iERjanENyoZLH7zUStIiQQV4LlxoE11TOC3 11sKyzevGvES8h4O3TuftIwqbcz7BT7pBPjiD1bkdnOHfvUjZxtMHGUQXCBb/9lN E3+EtE8UjEpB65BSaKJ1nW70RaT9eQjdBJXsRBTccKQYE2RITKlW5D8K8Xt/nF8i kAFQJlEBcqq2U7Kf20Cau7lwbo1xBPDM+GsmLEoyOrhrl6JxJnvzaUZzcqGqPdxk 04+5QIeG109TuvpSR2UqczSnLIwpdlQ5TO9Zi8qVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhXtdzUeybCVuJxCbIm0ABKieNK0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIxYWFmNjcwLTM3MTYtNGNlNy1hOWJiLTA0MDAzOTM5ZjBhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAANNAwDQYJKoZIhvcNAQELBQADggEBAGI9rNYP7UCtzwf7t2aHdChj cKJHdWyw34o7NIZ61+IiDmc+75m1wTD9fmSDVmgJLkBjTMG9QWjaNQR+2ije27Rt SEJUD65QCsAx1NjOSMnvgAKTcSdwVlKvVq1QqG+aKYR0uyD+3CwApU3HGPkEDz9p mX4o2RwYJ/16dN9f3RPJAm4LXMZBpmzSJj8Pa6wEZ+iEHcdyAzu7LZPndl8IMSBO 6+Ym+2yhV2JWlGMktI16lk4XmO0nYuQDt4q5t2UZWT4pNj+VtFJ05XV+U1smtQss 15fkSNdy5g97+YUCbM4xbAwyKb9b5N4j7M/mfulZjqQG1sv/YXoGVtwCOyccK6A= -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:54 2025 by rpki-client