$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/281b5353-e151-4f4f-aa01-fd6385d42d74.roa File: 281b5353-e151-4f4f-aa01-fd6385d42d74.roa (raw, json) Hash identifier: VGL/yhKEXL/XGl0docyqa4byaXV6+Kgd6lg4yycQtm8= Subject key identifier: 56:05:C9:0F:A6:A1:26:E7:5C:59:71:E0:65:47:07:E1:DE:4C:10:A8 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4CEAD67DEE8B1DA8AE781EA35BEE808673394BEE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/281b5353-e151-4f4f-aa01-fd6385d42d74.roa Signing time: Fri 31 Oct 2025 07:44:34 +0000 ROA not before: Fri 31 Oct 2025 07:44:34 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2a00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ea:d6:7d:ee:8b:1d:a8:ae:78:1e:a3:5b:ee:80:86:73:39:4b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:44:34 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=2e05c9c41b33d12f636b03d5cc4f7299b3d804b6d338ad26aa63cd5b0fbeb6c1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:f6:71:b3:a1:ab:07:ef:05:7b:7b:dd:8e: e6:49:58:eb:51:7b:89:4c:a1:7f:71:fe:3a:b7:4b: bd:9b:22:e1:3f:c2:93:0b:85:dc:9f:3a:5b:6b:3c: 8e:90:1e:fa:95:89:a1:c8:95:22:ce:92:af:87:df: 25:44:d9:27:f9:ae:19:67:96:f9:b5:e0:be:45:df: 61:17:8d:58:0f:df:6d:3e:9c:58:68:ee:cd:4f:15: 20:17:f8:e2:26:88:3b:24:44:3e:5e:c8:06:07:ac: 4d:41:67:58:9f:3d:22:aa:af:42:28:87:7e:29:d8: c0:01:31:d2:5d:1b:d5:18:8c:a8:81:73:4b:b6:0d: f1:69:d3:18:d2:e2:27:98:27:f7:2b:89:2c:bf:d9: 10:13:3a:36:d0:62:be:aa:07:88:b8:42:e1:ff:33: a1:0c:17:14:02:be:65:6d:df:94:91:32:3d:40:00: 5b:9e:66:71:20:81:3c:17:b9:37:ca:ec:1a:77:2c: ba:54:da:db:df:76:39:58:e7:8d:60:e3:e5:d7:1e: 17:85:5b:7f:44:05:29:0f:82:01:f6:fc:bd:b7:a2: 95:0a:6c:12:e2:cf:58:5a:07:bd:0b:c0:10:09:3d: 04:84:e8:9e:53:3f:ba:d6:91:78:e4:9e:ce:88:4f: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:05:C9:0F:A6:A1:26:E7:5C:59:71:E0:65:47:07:E1:DE:4C:10:A8 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/281b5353-e151-4f4f-aa01-fd6385d42d74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2a00::/41 Signature Algorithm: sha256WithRSAEncryption 34:98:8b:d4:8d:f7:dc:a9:8d:28:2e:6f:38:a9:f7:7d:85:a4: 2f:c5:4d:a8:f4:c8:31:c6:d4:a7:ea:f4:1c:e7:eb:2c:0f:9b: 1c:1b:99:cd:b8:55:04:0c:97:0c:7f:89:41:5f:f0:29:29:85: d7:69:67:1d:47:a1:3c:b3:50:e4:bc:9e:6a:03:3f:8c:49:6e: da:b7:4f:1b:0e:d3:a8:fa:e5:26:a6:bf:aa:95:30:d3:44:08: 5e:c4:8e:ed:65:78:2d:78:64:41:7c:83:b1:59:cc:da:8d:5e: fb:9e:b8:fb:3d:74:bc:63:12:42:1b:62:ba:2f:a4:9d:82:37: df:49:e5:d0:a9:bd:f4:85:e0:c7:aa:5c:fa:65:a8:ed:d2:c1: 8a:bb:98:b3:a8:2c:bd:b0:78:ef:68:a4:5e:ab:34:63:66:52: dc:af:49:b9:ee:ad:a7:ef:fb:ac:9e:e0:36:55:90:10:ae:58: f4:1c:a1:c5:3f:0a:b3:42:64:38:bc:c4:50:eb:e1:41:ec:fc: 50:ec:9e:3f:cb:85:a4:3b:1f:77:74:f8:5c:e0:de:0d:c9:fb: f2:74:6c:23:6c:42:81:76:4b:87:dd:ef:ba:85:54:56:0c:ac: 38:3f:5d:14:a3:7e:2c:b6:a5:d7:e0:d2:6c:b9:66:b1:e3:5d: 64:93:2e:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTOrWfe6LHaiueB6jW+6AhnM5S+4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc0NDM0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTA1YzljNDFiMzNkMTJmNjM2YjAzZDVjYzRmNzI5OWIz ZDgwNGI2ZDMzOGFkMjZhYTYzY2Q1YjBmYmViNmMxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7SvZxs6GrB+8Fe3vdjuZJWOtRe4lMoX9x/jq3S72bIuE/ wpMLhdyfOltrPI6QHvqViaHIlSLOkq+H3yVE2Sf5rhlnlvm14L5F32EXjVgP320+ nFho7s1PFSAX+OImiDskRD5eyAYHrE1BZ1ifPSKqr0Ioh34p2MABMdJdG9UYjKiB c0u2DfFp0xjS4ieYJ/criSy/2RATOjbQYr6qB4i4QuH/M6EMFxQCvmVt35SRMj1A AFueZnEggTwXuTfK7Bp3LLpU2tvfdjlY541g4+XXHheFW39EBSkPggH2/L23opUK bBLiz1haB70LwBAJPQSE6J5TP7rWkXjkns6IT0PTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVgXJD6ahJudcWXHgZUcH4d5MEKgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzI4MWI1MzUzLWUxNTEtNGY0Zi1hYTAxLWZkNjM4NWQ0MmQ3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwcmAJAAKgAwDQYJKoZIhvcNAQELBQADggEBADSYi9SN99ypjSgubzip932F pC/FTaj0yDHG1Kfq9Bzn6ywPmxwbmc24VQQMlwx/iUFf8CkphddpZx1HoTyzUOS8 nmoDP4xJbtq3TxsO06j65Samv6qVMNNECF7Eju1leC14ZEF8g7FZzNqNXvueuPs9 dLxjEkIbYrovpJ2CN99J5dCpvfSF4MeqXPplqO3SwYq7mLOoLL2weO9opF6rNGNm UtyvSbnurafv+6ye4DZVkBCuWPQcocU/CrNCZDi8xFDr4UHs/FDsnj/LhaQ7H3d0 +Fzg3g3J+/J0bCNsQoF2S4fd77qFVFYMrDg/XRSjfiy2pdfg0my5ZrHjXWSTLn0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:38 2025 by rpki-client