$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41c18c5b-0bf0-444e-aea5-625448f86115.roa File: 41c18c5b-0bf0-444e-aea5-625448f86115.roa (raw, json) Hash identifier: yi9rbTEA3ZsgFdb5nj8MYs+YbBsxBzI/47mn63qcZXs= Subject key identifier: 87:27:3D:BF:51:80:35:52:5A:E9:CD:DD:20:BE:D8:11:C1:22:48:A0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 207EF54B9AC6BA1700FDAC5313691BDAA813A695 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41c18c5b-0bf0-444e-aea5-625448f86115.roa Signing time: Thu 30 Oct 2025 20:40:09 +0000 ROA not before: Thu 30 Oct 2025 20:40:09 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:12a8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7e:f5:4b:9a:c6:ba:17:00:fd:ac:53:13:69:1b:da:a8:13:a6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:40:09 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=c92491b51269602fc1578cb15a6ea4fd0d7e1e86be6efff413cadba36bf022b4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:99:97:0a:e6:81:03:06:e1:2f:bb:16:31:03: 37:a7:be:73:44:c1:1b:8f:4f:c4:8f:60:ad:75:d5: 54:a7:d6:3f:1a:49:1f:2e:f5:6f:35:b9:cc:d4:ed: 8e:49:ee:ed:4c:71:3c:3c:0d:37:49:de:7a:0b:22: 37:13:e4:d3:bc:76:2f:74:35:73:12:66:c0:df:10: 1e:88:db:13:37:4c:af:c4:f8:5b:b6:2e:86:76:3e: 20:7d:48:09:12:f5:d8:45:57:07:e3:0f:39:30:03: ed:8f:07:aa:35:af:9d:d7:9c:94:ef:b0:ff:d1:62: 6b:d9:d1:b1:b5:35:d9:10:e4:27:7c:de:b9:aa:40: fa:8f:8e:af:b2:d8:06:cc:e0:1c:27:55:00:ad:34: b1:53:8e:84:bd:09:74:13:31:27:04:54:7f:37:3b: 8d:56:ea:e5:68:ff:5f:09:b0:8d:7b:cb:b8:a0:83: 17:96:f7:66:bf:f7:15:4b:33:f8:7c:2e:d4:06:de: 8c:c4:1a:f1:d2:d7:07:98:e0:f0:f2:7f:07:b2:29: e2:5a:86:b5:7e:6f:60:bb:ce:62:d9:80:d3:cb:08: 2b:88:e4:52:34:8d:5e:5c:42:52:a6:fd:09:3c:7c: 26:fd:57:43:6d:46:a1:b7:e4:1a:8d:a6:24:76:13: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:27:3D:BF:51:80:35:52:5A:E9:CD:DD:20:BE:D8:11:C1:22:48:A0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41c18c5b-0bf0-444e-aea5-625448f86115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:12a8::/47 Signature Algorithm: sha256WithRSAEncryption 51:21:79:63:b1:f8:2f:f6:ab:a7:bf:5b:b8:07:3c:32:0b:fc: f4:19:d1:12:ef:4f:10:5b:eb:cb:77:00:f6:78:b9:1f:e7:4d: 64:c8:95:5a:0c:f0:8d:c2:18:82:9c:dd:c3:6a:25:79:3d:68: b4:69:ea:95:17:7a:1e:ba:ed:3d:7b:60:d9:c1:0a:c3:7a:f1: 9e:51:89:b6:e2:22:37:5d:71:22:a1:a1:f3:d0:08:c2:72:d7: ce:16:a0:e4:2d:0a:34:2a:f0:8b:70:5f:63:8a:28:7f:50:1d: 0d:12:ac:be:31:eb:18:b6:d3:3e:21:96:fd:9f:52:1f:a8:4b: ee:b1:d7:b7:b2:b2:da:e5:10:5c:14:20:e4:d1:70:49:81:e4: ec:3b:35:32:0e:a5:2f:ce:3d:e2:e2:41:1f:2b:a2:8b:8d:7e: 34:33:02:a3:94:67:08:04:34:4e:6e:60:f1:2b:80:f4:e1:f1: 61:ad:de:24:f9:90:9e:f0:c6:f3:46:46:b5:51:e4:31:dc:95: 32:72:85:b9:d6:f1:67:0a:ec:e7:bc:61:f9:80:ee:13:f5:a3: 70:af:dd:51:2e:d6:52:6f:11:16:ec:eb:08:59:f2:80:6b:b1: f8:bc:9f:55:5c:eb:b7:3e:d6:b9:52:e2:4d:03:db:c3:65:02: 44:a3:21:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIH71S5rGuhcA/axTE2kb2qgTppUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjA0MDA5WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTI0OTFiNTEyNjk2MDJmYzE1NzhjYjE1YTZlYTRmZDBk N2UxZTg2YmU2ZWZmZjQxM2NhZGJhMzZiZjAyMmI0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD6mZcK5oEDBuEvuxYxAzenvnNEwRuPT8SPYK111VSn1j8a SR8u9W81uczU7Y5J7u1McTw8DTdJ3noLIjcT5NO8di90NXMSZsDfEB6I2xM3TK/E +Fu2LoZ2PiB9SAkS9dhFVwfjDzkwA+2PB6o1r53XnJTvsP/RYmvZ0bG1NdkQ5Cd8 3rmqQPqPjq+y2AbM4BwnVQCtNLFTjoS9CXQTMScEVH83O41W6uVo/18JsI17y7ig gxeW92a/9xVLM/h8LtQG3ozEGvHS1weY4PDyfweyKeJahrV+b2C7zmLZgNPLCCuI 5FI0jV5cQlKm/Qk8fCb9V0NtRqG35BqNpiR2E1oNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhyc9v1GANVJa6c3dIL7YEcEiSKAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQxYzE4YzViLTBiZjAtNDQ0ZS1hZWE1LTYyNTQ0OGY4NjExNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAEqgwDQYJKoZIhvcNAQELBQADggEBAFEheWOx+C/2q6e/W7gHPDIL /PQZ0RLvTxBb68t3APZ4uR/nTWTIlVoM8I3CGIKc3cNqJXk9aLRp6pUXeh667T17 YNnBCsN68Z5RibbiIjddcSKhofPQCMJy184WoOQtCjQq8ItwX2OKKH9QHQ0SrL4x 6xi20z4hlv2fUh+oS+6x17eystrlEFwUIOTRcEmB5Ow7NTIOpS/OPeLiQR8roouN fjQzAqOUZwgENE5uYPErgPTh8WGt3iT5kJ7wxvNGRrVR5DHclTJyhbnW8WcK7Oe8 YfmA7hP1o3Cv3VEu1lJvERbs6whZ8oBrsfi8n1Vc67c+1rlS4k0D28NlAkSjISg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:59 2025 by rpki-client