$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4107e764-530d-4c7c-b5e3-515c3680b030.roa File: 4107e764-530d-4c7c-b5e3-515c3680b030.roa (raw, json) Hash identifier: DbqTqaDQO8uNJMexsWVdQ1jxlORpsxaTXdK0NxeerN4= Subject key identifier: 96:C8:E3:76:62:04:B0:C9:D5:7C:DB:CC:55:49:E5:87:32:26:A2:C7 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 658D907C7C33E577F480E94860BF4E517F7E34CD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4107e764-530d-4c7c-b5e3-515c3680b030.roa Signing time: Fri 31 Oct 2025 06:53:33 +0000 ROA not before: Fri 31 Oct 2025 06:53:33 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2ef0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8d:90:7c:7c:33:e5:77:f4:80:e9:48:60:bf:4e:51:7f:7e:34:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:53:33 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=bd2c69f05cf4c8c10d860266fd1a30164ebc82257acc5c1358ecd5a046a57423, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:cc:01:33:67:6a:6f:2b:ad:ba:df:35:31: 75:b7:5c:42:26:a9:ee:f8:45:e4:21:88:c1:a7:dc: 26:fb:64:83:59:92:7b:39:5e:6e:02:8b:9d:68:15: f9:d1:e2:5b:0a:fa:21:94:23:ee:29:7b:58:21:42: 8b:39:e4:cd:a6:2d:71:d9:5f:3d:65:84:0b:b2:e4: b5:f5:e6:08:c6:16:ca:9a:a1:4e:e7:d2:6e:59:2d: 65:15:20:75:05:8f:37:35:19:05:cc:e0:e8:bd:28: 29:59:a6:36:47:ed:af:25:2b:ec:8d:7c:fe:62:66: 6c:ea:4b:08:9e:f2:f9:f9:c7:e6:9b:42:0f:8b:cd: ae:60:56:3d:1f:db:23:63:81:4c:72:09:1a:72:5c: cc:fa:29:80:03:84:6b:37:b5:c4:6a:03:97:7e:1d: c7:45:25:00:5f:bc:6d:d2:25:d9:be:15:a4:9c:f0: 61:1a:e9:16:39:ac:c5:48:ef:37:a1:6a:04:21:63: d3:5a:37:c3:08:ea:5b:63:3d:0f:30:ae:7e:bb:ad: 09:10:dc:fa:ec:ad:77:07:39:78:8f:a2:7a:0e:e5: 64:cd:0e:e0:e5:fb:5a:d2:cc:9e:29:51:da:b7:c0: 2e:3b:f7:6b:2d:45:2c:98:79:ed:62:f5:00:39:3f: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C8:E3:76:62:04:B0:C9:D5:7C:DB:CC:55:49:E5:87:32:26:A2:C7 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4107e764-530d-4c7c-b5e3-515c3680b030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2ef0::/44 Signature Algorithm: sha256WithRSAEncryption 57:b2:1e:f4:e6:d1:81:18:cd:c2:9d:c7:c1:d4:4c:74:f9:4d: cd:21:a4:0e:75:5c:70:b6:bd:de:a0:a0:12:df:01:79:8e:81: a1:ff:67:f3:39:f4:91:05:22:97:d4:1f:75:98:80:1d:3f:2e: ae:62:6d:47:7d:97:68:e0:55:89:dd:07:f6:c9:ab:ba:67:59: b4:f9:75:8e:09:8e:0d:35:fc:24:16:38:55:0c:94:f6:10:67: 1a:b4:09:13:91:d1:d8:9d:22:9e:bf:64:ca:8c:d5:66:2b:1a: 15:82:93:28:a1:c9:e3:ed:d2:91:d6:46:56:0b:57:38:31:1c: 16:da:f8:60:04:f8:95:2a:f0:9b:81:a4:26:ff:73:3c:71:a1: 09:e6:2f:f2:ab:a3:78:66:77:90:24:2b:d0:98:46:79:91:12: 9c:41:c4:15:cc:46:ab:3a:21:f4:62:49:9c:e6:d0:90:e9:f9: 66:19:7c:e8:0c:42:95:54:16:76:73:cf:12:fd:15:dc:36:bc: 21:ce:8a:ee:af:0d:c4:c0:35:14:51:9e:98:8f:69:93:68:0e: e1:cf:11:1c:d5:3d:6f:94:67:e3:f8:5e:ed:4c:e5:a0:69:03: e1:76:4e:6b:ac:27:94:8c:56:77:31:f0:de:00:e2:7c:68:1a: ca:da:b0:3d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZY2QfHwz5Xf0gOlIYL9OUX9+NM0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY1MzMzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDJjNjlmMDVjZjRjOGMxMGQ4NjAyNjZmZDFhMzAxNjRl YmM4MjI1N2FjYzVjMTM1OGVjZDVhMDQ2YTU3NDIzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE7swBM2dqbyutut81MXW3XEImqe74ReQhiMGn3Cb7ZINZ kns5Xm4Ci51oFfnR4lsK+iGUI+4pe1ghQos55M2mLXHZXz1lhAuy5LX15gjGFsqa oU7n0m5ZLWUVIHUFjzc1GQXM4Oi9KClZpjZH7a8lK+yNfP5iZmzqSwie8vn5x+ab Qg+Lza5gVj0f2yNjgUxyCRpyXMz6KYADhGs3tcRqA5d+HcdFJQBfvG3SJdm+FaSc 8GEa6RY5rMVI7zehagQhY9NaN8MI6ltjPQ8wrn67rQkQ3PrsrXcHOXiPonoO5WTN DuDl+1rSzJ4pUdq3wC4792stRSyYee1i9QA5P8uNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlsjjdmIEsMnVfNvMVUnlhzImoscwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQxMDdlNzY0LTUzMGQtNGM3Yy1iNWUzLTUxNWMzNjgwYjAzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAALvAwDQYJKoZIhvcNAQELBQADggEBAFeyHvTm0YEYzcKdx8HUTHT5 Tc0hpA51XHC2vd6goBLfAXmOgaH/Z/M59JEFIpfUH3WYgB0/Lq5ibUd9l2jgVYnd B/bJq7pnWbT5dY4Jjg01/CQWOFUMlPYQZxq0CROR0didIp6/ZMqM1WYrGhWCkyih yePt0pHWRlYLVzgxHBba+GAE+JUq8JuBpCb/czxxoQnmL/Kro3hmd5AkK9CYRnmR EpxBxBXMRqs6IfRiSZzm0JDp+WYZfOgMQpVUFnZzzxL9Fdw2vCHOiu6vDcTANRRR npiPaZNoDuHPERzVPW+UZ+P4Xu1M5aBpA+F2TmusJ5SMVncx8N4A4nxoGsrasD0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:53 2025 by rpki-client