$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/447113ea-6da1-48f0-880e-664153325c6e.roa File: 447113ea-6da1-48f0-880e-664153325c6e.roa (raw, json) Hash identifier: XyFQG3EUFBsjXJTcnCbmPsNeXz2futtsjkGHb2keZVM= Subject key identifier: D6:5B:A3:C4:8E:8C:4A:94:4C:76:2C:06:3C:32:2F:23:90:D8:4F:A7 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 31A0E2C2A66C3B86DB6EB588E458846F9F8CA6AA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/447113ea-6da1-48f0-880e-664153325c6e.roa Signing time: Thu 30 Oct 2025 21:29:05 +0000 ROA not before: Thu 30 Oct 2025 21:29:05 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:177c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a0:e2:c2:a6:6c:3b:86:db:6e:b5:88:e4:58:84:6f:9f:8c:a6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:29:05 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=cedbcc0425d1b8a6a823e011cb5cb663536ba178b8bf199dd75010ce5e444f76, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a0:8a:c1:0e:94:fa:2c:12:2e:c6:48:76:cc: 76:0e:73:3b:17:e9:d7:fc:26:b9:c2:a6:ea:c2:f5: eb:d7:e9:e8:03:db:f8:16:7c:0b:76:c7:68:4f:90: 5d:87:50:50:a4:bf:a0:1c:e6:83:c8:e9:25:8b:05: 5b:d4:ba:8a:da:ac:0e:71:c9:ee:1c:75:cd:18:6b: 3a:a5:a2:db:6e:0b:25:45:50:d2:f3:54:67:97:b2: 4b:fc:6f:7b:d8:f4:2f:5b:4d:08:50:6d:91:23:3a: 44:77:80:58:6f:ee:a7:20:b3:1b:9f:bc:85:d1:03: e6:5c:ef:6d:00:fe:68:5c:f8:47:4a:72:e5:fa:21: 1d:2c:5a:48:6a:50:cc:df:4e:db:04:68:b9:d2:50: 4d:be:b9:03:21:40:86:e7:7b:7c:64:39:9b:d4:d0: eb:da:e0:f3:18:7c:dd:8e:28:3b:a3:f8:7e:da:dd: f5:d7:96:b5:b3:f2:cf:d9:2f:7c:7a:bc:bf:aa:b8: 23:22:38:73:cb:ec:49:9f:72:2c:dc:93:e6:aa:df: 6d:b5:58:85:bf:7b:76:22:31:be:b8:a5:d6:b2:d2: fe:df:d6:4e:49:fc:69:10:ae:16:50:67:aa:b6:0e: 32:9d:a8:e1:d1:8d:90:13:50:f1:7c:0d:ab:13:52: 1f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5B:A3:C4:8E:8C:4A:94:4C:76:2C:06:3C:32:2F:23:90:D8:4F:A7 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/447113ea-6da1-48f0-880e-664153325c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:177c::/47 Signature Algorithm: sha256WithRSAEncryption 09:ee:a4:30:af:40:d4:20:7e:97:0f:6f:dd:6f:a0:be:09:84: e0:d8:b9:a8:b8:04:8c:f1:6c:73:37:1d:20:67:87:02:a2:84: 7c:5d:6c:13:2e:4f:02:02:f9:a4:bd:cd:a6:41:10:ab:3a:3a: d4:07:7c:0a:3f:43:41:5e:42:49:a4:57:eb:48:9b:6f:2f:df: 3c:f7:6b:fd:fe:83:7e:20:91:bc:35:46:65:d0:f8:94:0d:b3: b0:7a:4c:1a:b4:f9:fa:30:dd:c2:5c:cf:1a:5d:5d:5e:1d:c9: 5f:c2:ed:5c:a6:ad:fe:94:c4:cb:b3:97:89:d9:d4:b2:ef:35: df:33:76:03:4d:e8:bd:5c:65:14:13:eb:77:57:1b:b1:e5:7b: 7b:38:cc:ff:86:36:bd:71:02:c9:5d:d0:51:bc:7c:2a:cc:b5: cb:1a:cf:02:67:15:44:b7:9a:38:f9:26:0c:03:1b:cb:08:42: a6:d3:51:c7:1c:a3:94:4c:ac:bd:8b:c1:ef:34:88:dc:f4:ba: 2e:cc:67:98:75:0d:e8:e1:2d:43:32:fe:3d:5d:7e:28:74:35: 5f:17:ed:64:f1:b3:4a:33:4d:97:bc:f2:b3:f2:5b:9b:2b:59: e4:28:d1:31:f3:9f:90:ff:ae:7f:6f:d5:89:11:78:6a:9f:4b: a1:9f:89:fc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMaDiwqZsO4bbbrWI5FiEb5+MpqowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyOTA1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWRiY2MwNDI1ZDFiOGE2YTgyM2UwMTFjYjVjYjY2MzUz NmJhMTc4YjhiZjE5OWRkNzUwMTBjZTVlNDQ0Zjc2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwoIrBDpT6LBIuxkh2zHYOczsX6df8JrnCpurC9evX6egD 2/gWfAt2x2hPkF2HUFCkv6Ac5oPI6SWLBVvUuorarA5xye4cdc0YazqlottuCyVF UNLzVGeXskv8b3vY9C9bTQhQbZEjOkR3gFhv7qcgsxufvIXRA+Zc720A/mhc+EdK cuX6IR0sWkhqUMzfTtsEaLnSUE2+uQMhQIbne3xkOZvU0Ova4PMYfN2OKDuj+H7a 3fXXlrWz8s/ZL3x6vL+quCMiOHPL7Emfcizck+aq3221WIW/e3YiMb64pday0v7f 1k5J/GkQrhZQZ6q2DjKdqOHRjZATUPF8DasTUh9dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1lujxI6MSpRMdiwGPDIvI5DYT6cwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ0NzExM2VhLTZkYTEtNDhmMC04ODBlLTY2NDE1MzMyNWM2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAF3wwDQYJKoZIhvcNAQELBQADggEBAAnupDCvQNQgfpcPb91voL4J hODYuai4BIzxbHM3HSBnhwKihHxdbBMuTwIC+aS9zaZBEKs6OtQHfAo/Q0FeQkmk V+tIm28v3zz3a/3+g34gkbw1RmXQ+JQNs7B6TBq0+fow3cJczxpdXV4dyV/C7Vym rf6UxMuzl4nZ1LLvNd8zdgNN6L1cZRQT63dXG7Hle3s4zP+GNr1xAsld0FG8fCrM tcsazwJnFUS3mjj5JgwDG8sIQqbTUccco5RMrL2Lwe80iNz0ui7MZ5h1DejhLUMy /j1dfih0NV8X7WTxs0ozTZe88rPyW5srWeQo0THzn5D/rn9v1YkReGqfS6Gfifw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:20 2025 by rpki-client