$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21cdd97f-e7ba-415e-8996-884bc56382b2.roa File: 21cdd97f-e7ba-415e-8996-884bc56382b2.roa (raw, json) Hash identifier: Fdf/rzhDj8+dD8TM7lqS36vfsZR8CaEBTHtxmvxVNug= Subject key identifier: A5:06:C6:CD:0B:BF:21:1D:9F:85:35:23:34:BC:61:11:60:55:89:AC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4CF9792136406217C215A7F2F09FD6369EF66BA0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21cdd97f-e7ba-415e-8996-884bc56382b2.roa Signing time: Thu 30 Oct 2025 21:10:19 +0000 ROA not before: Thu 30 Oct 2025 21:10:19 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:153e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f9:79:21:36:40:62:17:c2:15:a7:f2:f0:9f:d6:36:9e:f6:6b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:10:19 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=83484e5baa0b983e61c8a48334407ac94a1cc10e4ba4c3e3af0f7f06464a8bf8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:3f:37:68:15:25:2a:88:18:45:06:09:f0: 97:21:18:6d:57:4b:32:1d:59:5e:0e:79:54:95:c0: 19:1e:47:8b:a8:a5:12:01:73:df:ab:70:e9:28:c8: 69:15:54:9e:89:70:05:9a:b0:da:59:56:35:2a:82: 40:59:9a:11:e1:e4:d8:0a:75:17:d9:36:e8:1f:e8: c0:59:06:1d:2e:64:c2:f5:6d:c9:f8:bb:40:50:4c: 64:54:85:7b:83:72:0a:7c:81:49:4b:2e:da:e8:ee: 05:a6:1e:d0:d6:06:15:eb:ee:05:e2:1d:0c:61:0c: 27:cc:ed:89:96:22:36:9a:76:fb:04:4c:8c:7d:ff: a6:5a:34:ab:db:5a:1b:14:82:2b:4e:76:67:a4:8a: de:07:c3:82:e9:af:5d:af:a8:2d:51:31:af:94:d3: 18:ba:42:c1:1f:3b:94:ce:7e:c5:24:51:2f:88:07: 7a:5b:50:d0:7e:f2:06:eb:e8:d5:d9:0c:2b:fc:cf: 61:d2:7c:e6:ba:85:cc:cd:9b:5d:d9:f3:80:b0:b1: 4b:e1:e6:84:3c:40:18:80:1c:97:af:03:64:2a:a2: e9:fa:8c:3f:fd:2a:3a:bf:ef:e1:08:79:44:35:6c: 3f:38:34:57:ed:6e:bd:63:1a:48:e9:5b:4c:41:37: 77:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:06:C6:CD:0B:BF:21:1D:9F:85:35:23:34:BC:61:11:60:55:89:AC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21cdd97f-e7ba-415e-8996-884bc56382b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:153e::/47 Signature Algorithm: sha256WithRSAEncryption 89:7f:ec:c0:65:68:34:5b:54:3d:0e:92:93:8c:35:30:87:09: 7a:a7:0f:27:0d:a8:f0:c5:a7:bf:75:99:ed:95:d9:48:62:20: b7:ca:b1:65:29:62:fb:6a:ba:96:20:a3:c9:85:4d:0f:da:1b: 49:48:e9:a1:d9:75:ec:bd:2c:ee:61:ac:e7:6a:f1:21:32:11: 07:12:65:8c:44:6f:1d:97:3c:5a:56:18:2b:3e:55:33:2c:21: 77:0b:79:1e:d5:98:e1:37:2e:8f:6e:f3:69:85:81:77:72:3a: 34:56:9a:c1:77:30:8b:7c:6d:45:e9:25:ff:d9:18:34:69:ad: 46:0f:87:0b:50:0d:b9:14:57:c5:d6:d8:0c:d5:16:f9:d4:38: 50:03:a3:7b:06:ee:03:af:a1:15:e6:85:fa:1d:10:d5:f6:2d: 85:7c:0a:d5:22:da:8c:e0:1e:2d:ee:17:98:3d:19:f9:0a:36: a3:82:cf:74:5f:5a:de:f3:fa:de:88:0d:92:c0:91:94:29:35: 8c:ca:63:48:f6:40:5d:65:af:8d:34:0d:e8:b4:d2:14:77:8c: ad:ed:2d:8c:64:b5:e8:d2:a7:a1:09:e6:14:a3:40:11:a3:a1: fe:bb:1c:37:85:0e:b0:5f:00:08:42:77:08:9a:c8:0c:3e:4f: 86:f6:45:66 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTPl5ITZAYhfCFafy8J/WNp72a6AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjExMDE5WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzQ4NGU1YmFhMGI5ODNlNjFjOGE0ODMzNDQwN2FjOTRh MWNjMTBlNGJhNGMzZTNhZjBmN2YwNjQ2NGE4YmY4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKQT83aBUlKogYRQYJ8JchGG1XSzIdWV4OeVSVwBkeR4uo pRIBc9+rcOkoyGkVVJ6JcAWasNpZVjUqgkBZmhHh5NgKdRfZNugf6MBZBh0uZML1 bcn4u0BQTGRUhXuDcgp8gUlLLtro7gWmHtDWBhXr7gXiHQxhDCfM7YmWIjaadvsE TIx9/6ZaNKvbWhsUgitOdmekit4Hw4Lpr12vqC1RMa+U0xi6QsEfO5TOfsUkUS+I B3pbUNB+8gbr6NXZDCv8z2HSfOa6hczNm13Z84CwsUvh5oQ8QBiAHJevA2Qqoun6 jD/9Kjq/7+EIeUQ1bD84NFftbr1jGkjpW0xBN3fjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpQbGzQu/IR2fhTUjNLxhEWBViawwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIxY2RkOTdmLWU3YmEtNDE1ZS04OTk2LTg4NGJjNTYzODJiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFT4wDQYJKoZIhvcNAQELBQADggEBAIl/7MBlaDRbVD0OkpOMNTCH CXqnDycNqPDFp791me2V2UhiILfKsWUpYvtqupYgo8mFTQ/aG0lI6aHZdey9LO5h rOdq8SEyEQcSZYxEbx2XPFpWGCs+VTMsIXcLeR7VmOE3Lo9u82mFgXdyOjRWmsF3 MIt8bUXpJf/ZGDRprUYPhwtQDbkUV8XW2AzVFvnUOFADo3sG7gOvoRXmhfodENX2 LYV8CtUi2ozgHi3uF5g9GfkKNqOCz3RfWt7z+t6IDZLAkZQpNYzKY0j2QF1lr400 Dei00hR3jK3tLYxktejSp6EJ5hSjQBGjof67HDeFDrBfAAhCdwiayAw+T4b2RWY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:26:47 2025 by rpki-client