$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/430b234d-b1a6-42f0-a875-b1440b539ec4.roa File: 430b234d-b1a6-42f0-a875-b1440b539ec4.roa (raw, json) Hash identifier: t0SmfXAr0mGt/X2G8jyfbhOewSYC7b9+HpT6wDqr4Vc= Subject key identifier: 93:80:5A:B6:AC:9B:FD:42:D0:8B:98:02:F6:D2:09:37:EE:66:53:8A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 54BFEADBB5FE544382CABBDCA7FD36D158421B25 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/430b234d-b1a6-42f0-a875-b1440b539ec4.roa Signing time: Fri 31 Oct 2025 01:06:57 +0000 ROA not before: Fri 31 Oct 2025 01:06:57 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:393e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:bf:ea:db:b5:fe:54:43:82:ca:bb:dc:a7:fd:36:d1:58:42:1b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:06:57 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=5e0a549a6bbaa6871edd9c472c7f7f89e37d53dd7167a095485e80c0eba02a37, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:fd:03:c1:f4:5a:52:0f:55:eb:4d:e3:36: cc:50:e4:e4:56:ba:ec:09:2f:6a:cd:8b:78:6e:37: 40:6c:e4:94:dd:24:f1:e4:fb:d4:ef:f7:f4:92:ae: 8e:d1:c3:8a:c9:14:ba:b0:0d:e4:98:e7:68:32:b4: 6f:78:6b:30:10:4d:c8:dd:b9:6f:fc:00:29:d5:56: a2:3a:e3:d2:40:b3:c2:08:5d:ea:b8:e4:33:ff:a8: 78:84:04:b4:d4:20:11:e5:51:26:c5:f5:6b:d1:3d: 8a:d6:b1:f1:3e:6f:30:fd:bb:06:84:fd:07:70:7c: 38:89:9b:1e:19:7a:d4:d4:98:d9:24:46:a8:ed:46: de:05:58:d5:d9:be:8e:aa:86:ed:7c:20:d7:2a:99: 3a:40:36:14:81:7c:2f:b4:67:01:31:b3:b6:6e:5f: a7:8f:24:0b:af:e0:a9:d9:42:67:a9:9d:41:5b:a6: 82:1c:c7:a3:8f:d8:2e:be:27:61:53:0b:fb:5c:6b: a2:7f:32:2f:73:54:83:fd:ea:78:cc:3f:d7:ed:a5: 3a:aa:ad:18:1c:dd:46:a6:e6:0b:24:bc:af:a4:3b: 02:0c:7b:05:c7:32:09:fb:55:ba:fe:39:24:24:0f: d2:a3:52:4e:b2:6a:7d:d8:0e:c8:80:67:23:18:c2: ba:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:80:5A:B6:AC:9B:FD:42:D0:8B:98:02:F6:D2:09:37:EE:66:53:8A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/430b234d-b1a6-42f0-a875-b1440b539ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:393e::/47 Signature Algorithm: sha256WithRSAEncryption 00:7d:83:2f:a1:66:24:5c:58:27:92:ac:98:f6:83:ed:8e:f2: 94:4f:fd:f5:9e:05:bf:1f:10:73:5f:8c:e9:85:27:78:5a:de: a0:fb:fb:87:c3:4c:64:76:2a:28:3c:cd:3b:e4:08:e5:60:98: ea:b8:23:7c:46:35:89:2b:96:b0:63:9b:24:37:67:5a:c8:1a: af:ae:41:53:c4:60:4e:7c:60:38:23:3e:62:a0:80:04:b2:6e: c2:8e:d6:31:25:e1:da:02:b8:b0:b0:34:1b:f8:12:f5:6c:e2: a7:15:1c:82:c8:61:6f:1d:77:c8:14:12:3f:0f:6b:37:4c:5a: 9c:89:c8:87:9a:54:68:ca:65:66:19:82:6f:37:0c:05:5b:dc: 53:18:d9:81:fc:ee:1e:5c:88:3b:86:44:3a:66:8e:ea:49:0d: 52:86:84:67:4c:6f:a2:3a:04:e9:c3:02:1b:24:78:70:d2:49: ae:c1:41:a5:b4:87:34:fa:91:83:1f:37:9e:de:13:de:15:e7: 5b:e4:bf:2a:95:7e:f3:69:ec:ec:62:e5:7a:93:41:3c:56:6c: c7:9b:09:8b:ce:15:57:ee:48:ac:28:fd:6e:51:16:bf:8d:dc: 22:56:5f:1c:71:34:e5:35:80:65:0b:92:11:fe:8b:80:5f:01: 18:c0:98:63 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVL/q27X+VEOCyrvcp/020VhCGyUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEwNjU3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTBhNTQ5YTZiYmFhNjg3MWVkZDljNDcyYzdmN2Y4OWUz N2Q1M2RkNzE2N2EwOTU0ODVlODBjMGViYTAyYTM3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBHP0DwfRaUg9V603jNsxQ5ORWuuwJL2rNi3huN0Bs5JTd JPHk+9Tv9/SSro7Rw4rJFLqwDeSY52gytG94azAQTcjduW/8ACnVVqI649JAs8II Xeq45DP/qHiEBLTUIBHlUSbF9WvRPYrWsfE+bzD9uwaE/QdwfDiJmx4ZetTUmNkk RqjtRt4FWNXZvo6qhu18INcqmTpANhSBfC+0ZwExs7ZuX6ePJAuv4KnZQmepnUFb poIcx6OP2C6+J2FTC/tca6J/Mi9zVIP96njMP9ftpTqqrRgc3Uam5gskvK+kOwIM ewXHMgn7Vbr+OSQkD9KjUk6yan3YDsiAZyMYwrq1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUk4Batqyb/ULQi5gC9tIJN+5mU4owHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQzMGIyMzRkLWIxYTYtNDJmMC1hODc1LWIxNDQwYjUzOWVjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOT4wDQYJKoZIhvcNAQELBQADggEBAAB9gy+hZiRcWCeSrJj2g+2O 8pRP/fWeBb8fEHNfjOmFJ3ha3qD7+4fDTGR2Kig8zTvkCOVgmOq4I3xGNYkrlrBj myQ3Z1rIGq+uQVPEYE58YDgjPmKggASybsKO1jEl4doCuLCwNBv4EvVs4qcVHILI YW8dd8gUEj8PazdMWpyJyIeaVGjKZWYZgm83DAVb3FMY2YH87h5ciDuGRDpmjupJ DVKGhGdMb6I6BOnDAhskeHDSSa7BQaW0hzT6kYMfN57eE94V51vkvyqVfvNp7Oxi 5XqTQTxWbMebCYvOFVfuSKwo/W5RFr+N3CJWXxxxNOU1gGULkhH+i4BfARjAmGM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:46 2025 by rpki-client