$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21ad0bca-3c60-4c77-9ee6-dba0827dbb3e.roa File: 21ad0bca-3c60-4c77-9ee6-dba0827dbb3e.roa (raw, json) Hash identifier: mkjyBMgJYp06RKhlCA6ga+3ByusFDxFMfLZH/ImCc+o= Subject key identifier: D8:74:62:E1:F9:84:B2:C8:54:DB:1A:0C:98:75:A9:DE:88:05:6A:A4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 49D06EF81521D2C1B9E46EBE1E10BE8665AEE7A3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21ad0bca-3c60-4c77-9ee6-dba0827dbb3e.roa Signing time: Fri 31 Oct 2025 05:43:56 +0000 ROA not before: Fri 31 Oct 2025 05:43:56 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2cb8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d0:6e:f8:15:21:d2:c1:b9:e4:6e:be:1e:10:be:86:65:ae:e7:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:43:56 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=b9d1cf294c177f9a776bfab670aca3861de0e1cfb0e5d9c4c8ccd37557b5d263, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:0a:47:f0:24:a4:4d:b5:aa:62:e9:3d:43: 72:0b:83:e8:0e:ff:b7:b8:20:d5:b5:05:3d:d8:17: 06:72:c5:05:96:71:98:18:8f:b0:c4:c5:53:90:12: bb:3f:ac:15:a0:39:a8:10:f8:48:8f:7c:17:c1:78: ed:78:49:72:42:da:eb:13:e5:54:10:e6:e3:72:ee: 55:e3:b7:a8:ee:ae:08:2b:50:59:ea:e3:9f:6b:e7: ea:1e:65:78:8f:bc:96:1c:a1:a2:c3:d0:de:fd:7d: 80:b6:65:48:47:b2:cc:13:61:30:b1:c4:58:aa:c3: 41:75:92:4b:e5:11:53:30:ec:53:0f:e5:d8:0c:ad: 6a:2a:60:7a:61:d3:22:42:20:10:53:e2:4c:47:f2: ac:b0:7e:87:bb:52:33:d3:66:af:8f:15:27:46:4e: d2:01:1f:24:95:54:47:15:da:1e:5c:f4:91:6b:ec: 92:8c:a7:26:40:36:b0:82:88:b1:e6:a9:71:d4:bc: be:44:12:dd:44:77:6a:b1:e0:5a:1a:8b:16:3b:9e: 75:f9:f6:87:1b:ff:52:32:e0:59:24:08:4c:14:d5: 67:b7:c4:0e:a4:11:02:b6:0a:ba:86:81:8f:56:81: 1d:67:d0:54:58:f3:87:83:81:2b:a6:da:80:e0:21: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:74:62:E1:F9:84:B2:C8:54:DB:1A:0C:98:75:A9:DE:88:05:6A:A4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21ad0bca-3c60-4c77-9ee6-dba0827dbb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2cb8::/45 Signature Algorithm: sha256WithRSAEncryption 94:11:e6:08:07:01:f2:ff:a9:7a:35:d5:1d:29:79:12:b5:80: 59:3d:54:a6:ca:49:8a:bf:c7:8b:d3:59:80:94:c2:97:f7:65: af:12:4f:2a:e0:92:7b:c1:af:28:6a:d0:64:65:d0:d6:b8:e8: 4b:92:c4:37:c9:7f:44:57:aa:7d:c2:62:59:41:f5:96:d9:08: a6:f5:a4:eb:5e:dd:e4:dd:4d:56:97:db:0b:37:66:ed:d0:e8: 12:ad:97:19:37:d9:4e:de:3d:79:e2:a0:21:69:89:31:53:09: 14:6f:b4:ba:a5:d3:d5:61:31:96:63:54:72:d1:22:cf:57:f0: 52:da:2f:ba:4a:f2:04:a0:03:83:fb:c2:48:16:cd:a0:0b:f6: 76:4d:f6:59:f7:51:c6:89:f1:ef:01:4b:66:61:78:f0:46:57: ea:28:54:f6:d6:b7:e1:9f:36:ef:d4:7d:e4:66:21:52:ee:0d: 72:0a:70:fb:05:d3:a8:e3:e5:fa:80:f7:57:70:f7:8f:3f:94: e0:79:62:4e:53:6f:c5:6a:a2:94:ae:3c:37:2a:a9:f3:b5:28: 9d:4d:07:e0:d9:30:e4:1b:92:fb:e8:27:e1:f2:46:a9:4f:5b: 4b:8d:55:a8:c5:0a:6f:66:bd:ae:0a:bf:54:53:a4:3a:68:b9: 67:7b:de:57 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSdBu+BUh0sG55G6+HhC+hmWu56MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU0MzU2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWQxY2YyOTRjMTc3ZjlhNzc2YmZhYjY3MGFjYTM4NjFk ZTBlMWNmYjBlNWQ5YzRjOGNjZDM3NTU3YjVkMjYzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW2ApH8CSkTbWqYuk9Q3ILg+gO/7e4INW1BT3YFwZyxQWW cZgYj7DExVOQErs/rBWgOagQ+EiPfBfBeO14SXJC2usT5VQQ5uNy7lXjt6jurggr UFnq459r5+oeZXiPvJYcoaLD0N79fYC2ZUhHsswTYTCxxFiqw0F1kkvlEVMw7FMP 5dgMrWoqYHph0yJCIBBT4kxH8qywfoe7UjPTZq+PFSdGTtIBHySVVEcV2h5c9JFr 7JKMpyZANrCCiLHmqXHUvL5EEt1Ed2qx4FoaixY7nnX59ocb/1Iy4FkkCEwU1We3 xA6kEQK2CrqGgY9WgR1n0FRY84eDgSum2oDgIeKzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2HRi4fmEsshU2xoMmHWp3ogFaqQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIxYWQwYmNhLTNjNjAtNGM3Ny05ZWU2LWRiYTA4MjdkYmIzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALLgwDQYJKoZIhvcNAQELBQADggEBAJQR5ggHAfL/qXo11R0peRK1 gFk9VKbKSYq/x4vTWYCUwpf3Za8STyrgknvBryhq0GRl0Na46EuSxDfJf0RXqn3C YllB9ZbZCKb1pOte3eTdTVaX2ws3Zu3Q6BKtlxk32U7ePXnioCFpiTFTCRRvtLql 09VhMZZjVHLRIs9X8FLaL7pK8gSgA4P7wkgWzaAL9nZN9ln3UcaJ8e8BS2ZhePBG V+ooVPbWt+GfNu/UfeRmIVLuDXIKcPsF06jj5fqA91dw948/lOB5Yk5Tb8VqopSu PDcqqfO1KJ1NB+DZMOQbkvvoJ+HyRqlPW0uNVajFCm9mva4Kv1RTpDpouWd73lc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:34 2025 by rpki-client