$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/289a5c0e-df97-4001-a59b-e099445da357.roa File: 289a5c0e-df97-4001-a59b-e099445da357.roa (raw, json) Hash identifier: IugfuA0muoQNvEjEIHAa67TC4oz+uZD/n70iu+uM120= Subject key identifier: C3:2C:D5:D1:19:EE:87:52:53:4B:6B:B2:85:AD:3E:A3:D2:0E:61:7A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6EC38F80BD10E5BCF2F3A60EE7F23F1E1F81BE14 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/289a5c0e-df97-4001-a59b-e099445da357.roa Signing time: Thu 30 Oct 2025 22:08:48 +0000 ROA not before: Thu 30 Oct 2025 22:08:48 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1b1e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c3:8f:80:bd:10:e5:bc:f2:f3:a6:0e:e7:f2:3f:1e:1f:81:be:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:08:48 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=ee092fb4b9a5eca4c63f42fc61f257579523fad3dd1d86991534327dec7cebe8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:6b:80:21:a2:91:75:b0:a6:fc:cd:10:67: c3:01:d3:f3:93:f4:96:cc:0f:e0:53:3a:4e:21:3a: 77:03:2e:c8:a8:cf:56:05:98:4f:b0:40:8f:79:61: ba:85:42:fd:03:d7:a4:8b:3d:a3:1d:15:d1:b7:3d: 14:66:24:b3:e9:3c:13:30:2a:d5:83:bc:45:f0:9e: f5:31:e0:f7:bf:dc:21:3b:99:b1:11:e2:7e:39:65: 2f:ec:72:66:bb:e1:9a:38:8c:18:cf:59:a0:fa:4f: 53:7b:c7:0b:87:67:b6:c5:31:4b:88:06:ab:5d:1c: a5:a9:a2:aa:21:c6:87:2c:12:b2:53:ac:b8:af:8d: a6:17:a1:79:70:af:19:0f:2b:f7:39:78:b2:89:84: 8c:c2:ea:59:ea:0a:bd:9b:91:97:ca:fe:31:72:d3: b6:f6:5a:e7:35:79:63:ff:4b:74:fe:03:93:64:5e: 7b:4c:a7:7a:87:22:e0:2c:dc:e3:bf:39:00:9f:c4: c1:85:6f:3e:f5:ec:ba:b7:eb:28:2f:ad:77:fd:59: 25:43:8e:82:52:78:fe:4e:5e:2d:86:52:9a:93:5f: e6:21:c7:36:c2:5b:1e:34:65:d5:fd:f3:dc:7e:c2: 2d:b9:a8:14:19:8f:d2:1d:fd:83:98:6f:2f:f8:0e: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2C:D5:D1:19:EE:87:52:53:4B:6B:B2:85:AD:3E:A3:D2:0E:61:7A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/289a5c0e-df97-4001-a59b-e099445da357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1b1e::/47 Signature Algorithm: sha256WithRSAEncryption a2:7d:10:e4:f3:a1:75:4f:ab:d9:38:07:09:39:67:bf:05:c3: e1:76:50:18:e9:3d:29:e2:9b:37:db:65:9d:14:20:da:1f:3c: 82:ff:24:e1:08:86:64:16:59:12:9a:64:7e:0a:04:5a:a7:08: 88:6b:e6:e9:41:4f:20:78:88:7f:a6:87:81:4f:36:03:f9:2f: e3:cb:ff:27:df:0f:98:4a:e5:70:38:43:5f:64:33:3a:18:7e: 2e:bd:b3:00:35:90:8e:5c:a9:ca:09:4e:df:9a:e7:0d:a3:16: 34:be:61:46:5f:8f:65:ca:3e:fe:12:56:7e:d2:f6:f1:d6:c2: 5a:9d:0c:70:37:76:3b:12:91:a7:c3:a4:15:e5:d8:63:ab:d3: 2b:33:15:1b:fd:24:bf:d4:17:0c:16:3a:60:35:ab:8b:97:9f: 6e:0d:af:80:f5:ae:18:80:eb:79:b9:cd:da:27:9b:5e:1b:0f: 23:cf:17:af:81:37:e1:ec:41:aa:28:ee:6c:5a:bb:d7:64:c0: 1a:63:58:91:b9:2c:92:0b:31:17:28:16:56:34:ba:d9:66:d8: 99:1b:d0:68:45:44:0e:32:29:db:4e:15:7b:49:a9:b2:55:e9: 55:2b:86:b4:79:f6:00:c5:a1:17:f6:27:06:15:e8:49:17:b0: 8b:8b:0b:b4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbsOPgL0Q5bzy86YO5/I/Hh+BvhQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIwODQ4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTA5MmZiNGI5YTVlY2E0YzYzZjQyZmM2MWYyNTc1Nzk1 MjNmYWQzZGQxZDg2OTkxNTM0MzI3ZGVjN2NlYmU4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG32uAIaKRdbCm/M0QZ8MB0/OT9JbMD+BTOk4hOncDLsio z1YFmE+wQI95YbqFQv0D16SLPaMdFdG3PRRmJLPpPBMwKtWDvEXwnvUx4Pe/3CE7 mbER4n45ZS/scma74Zo4jBjPWaD6T1N7xwuHZ7bFMUuIBqtdHKWpoqohxocsErJT rLivjaYXoXlwrxkPK/c5eLKJhIzC6lnqCr2bkZfK/jFy07b2Wuc1eWP/S3T+A5Nk XntMp3qHIuAs3OO/OQCfxMGFbz717Lq36ygvrXf9WSVDjoJSeP5OXi2GUpqTX+Yh xzbCWx40ZdX989x+wi25qBQZj9Id/YOYby/4DouRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwyzV0Rnuh1JTS2uyha0+o9IOYXowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzI4OWE1YzBlLWRmOTctNDAwMS1hNTliLWUwOTk0NDVkYTM1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGx4wDQYJKoZIhvcNAQELBQADggEBAKJ9EOTzoXVPq9k4Bwk5Z78F w+F2UBjpPSnimzfbZZ0UINofPIL/JOEIhmQWWRKaZH4KBFqnCIhr5ulBTyB4iH+m h4FPNgP5L+PL/yffD5hK5XA4Q19kMzoYfi69swA1kI5cqcoJTt+a5w2jFjS+YUZf j2XKPv4SVn7S9vHWwlqdDHA3djsSkafDpBXl2GOr0yszFRv9JL/UFwwWOmA1q4uX n24Nr4D1rhiA63m5zdonm14bDyPPF6+BN+HsQaoo7mxau9dkwBpjWJG5LJILMRco FlY0utlm2Jkb0GhFRA4yKdtOFXtJqbJV6VUrhrR59gDFoRf2JwYV6EkXsIuLC7Q= -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:17 2025 by rpki-client