$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45f21e00-3ef7-4bd8-8a74-6265709d897b.roa File: 45f21e00-3ef7-4bd8-8a74-6265709d897b.roa (raw, json) Hash identifier: 5p7wVnbL+9BtiZd1YtT2U43n2ywFllzQi1SJXedawtw= Subject key identifier: 7C:65:D9:FC:08:BB:EC:AD:66:A2:47:68:3C:68:21:98:5A:8D:DF:75 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 37707B3B463E8891CA3039A288E89630D82F1D00 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45f21e00-3ef7-4bd8-8a74-6265709d897b.roa Signing time: Thu 30 Oct 2025 22:08:48 +0000 ROA not before: Thu 30 Oct 2025 22:08:48 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1b20::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:70:7b:3b:46:3e:88:91:ca:30:39:a2:88:e8:96:30:d8:2f:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:08:48 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=1e7ba202ae99db460833d04f4408ad30f492023d07cf1b0d0aeffa804e5b12ba, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:57:cb:f9:a6:2c:85:35:79:cb:d4:a9:4b: e5:60:f2:34:96:93:14:14:b5:81:35:d2:8b:13:b2: 13:d6:14:d4:4f:9a:59:b5:bd:00:4b:ef:d4:85:0c: 4e:1f:a3:dd:12:92:72:94:2c:dc:35:9b:2c:2b:64: 2c:3e:cb:94:4f:46:9f:32:36:8f:d8:e0:01:7e:59: c1:56:70:86:15:2e:e8:97:fe:85:76:9c:18:95:2c: d8:20:5d:eb:5c:87:db:5c:c6:c9:c9:50:a6:77:f3: 08:8f:0e:75:8c:a5:41:32:04:0e:2a:c2:20:0b:79: c1:bb:7c:0d:77:dd:77:cd:c5:b2:52:bd:2c:b3:47: 98:b6:a2:9a:0c:dd:d9:3f:22:1b:07:9b:3c:a1:94: 30:48:6c:36:ee:59:99:34:91:5d:39:e5:d1:33:73: d6:cf:ea:00:1e:64:2d:8e:5b:2e:a3:c2:67:7e:fd: 0d:57:8e:4d:c3:31:a3:0d:29:3d:e6:6b:41:7a:59: 58:62:eb:a1:ea:d1:2b:8c:2f:65:42:3b:51:65:da: 96:c5:0b:36:d3:14:53:1d:68:79:bf:a4:2b:3a:f0: b1:0f:97:bf:5b:0a:d2:0a:eb:82:b3:e5:a6:0e:9e: ee:4a:ed:d5:a1:e2:73:6b:09:b8:92:04:64:c1:1f: 79:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:65:D9:FC:08:BB:EC:AD:66:A2:47:68:3C:68:21:98:5A:8D:DF:75 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45f21e00-3ef7-4bd8-8a74-6265709d897b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1b20::/47 Signature Algorithm: sha256WithRSAEncryption 8b:04:d0:a8:45:1f:7e:6d:d2:e6:cd:7a:4e:08:f4:48:04:8c: 4e:d1:05:5c:6f:5c:a7:8a:4d:a6:c4:33:b6:7b:ee:c0:0c:75: b0:37:fe:05:01:54:d5:25:da:7d:49:34:67:55:74:76:96:49: f6:a1:41:80:bb:5d:23:6b:7a:3d:e8:49:75:38:53:f7:be:83: 54:43:93:a0:6c:c8:5a:59:c3:48:bf:5e:66:e3:ca:28:cb:1d: ea:01:69:08:6f:4a:49:41:6b:bd:d6:08:00:69:0f:05:4f:4e: e6:71:c0:00:cc:1f:e8:f9:82:68:4f:5b:c3:4e:3b:7d:a7:52: 31:57:88:11:39:2d:cb:ff:84:fd:1e:bc:4b:28:9a:8f:6a:25: 27:52:c0:9d:87:0e:ca:a8:5b:68:de:9c:c8:bd:3f:bf:66:2b: 72:67:ae:b9:8f:58:12:3f:3b:fc:58:f2:fa:f8:f3:70:a3:e5: dc:99:5b:68:66:86:df:64:98:6a:7e:45:6a:fc:6c:fb:39:3a: 95:b0:02:9c:eb:44:5b:dc:d1:1a:78:74:42:30:a4:c5:b0:c7: 66:83:fa:e2:2d:98:14:95:89:d5:f8:2b:3c:db:91:ae:79:2c: a8:51:ae:41:3a:b2:85:89:90:74:7e:dd:f9:03:c5:18:b1:f3: fc:28:3b:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN3B7O0Y+iJHKMDmiiOiWMNgvHQAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIwODQ4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTdiYTIwMmFlOTlkYjQ2MDgzM2QwNGY0NDA4YWQzMGY0 OTIwMjNkMDdjZjFiMGQwYWVmZmE4MDRlNWIxMmJhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3slfL+aYshTV5y9SpS+Vg8jSWkxQUtYE10osTshPWFNRP mlm1vQBL79SFDE4fo90SknKULNw1mywrZCw+y5RPRp8yNo/Y4AF+WcFWcIYVLuiX /oV2nBiVLNggXetch9tcxsnJUKZ38wiPDnWMpUEyBA4qwiALecG7fA133XfNxbJS vSyzR5i2opoM3dk/IhsHmzyhlDBIbDbuWZk0kV055dEzc9bP6gAeZC2OWy6jwmd+ /Q1Xjk3DMaMNKT3ma0F6WVhi66Hq0SuML2VCO1Fl2pbFCzbTFFMdaHm/pCs68LEP l79bCtIK64Kz5aYOnu5K7dWh4nNrCbiSBGTBH3mPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfGXZ/Ai77K1mokdoPGghmFqN33UwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ1ZjIxZTAwLTNlZjctNGJkOC04YTc0LTYyNjU3MDlkODk3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGyAwDQYJKoZIhvcNAQELBQADggEBAIsE0KhFH35t0ubNek4I9EgE jE7RBVxvXKeKTabEM7Z77sAMdbA3/gUBVNUl2n1JNGdVdHaWSfahQYC7XSNrej3o SXU4U/e+g1RDk6BsyFpZw0i/XmbjyijLHeoBaQhvSklBa73WCABpDwVPTuZxwADM H+j5gmhPW8NOO32nUjFXiBE5Lcv/hP0evEsomo9qJSdSwJ2HDsqoW2jenMi9P79m K3JnrrmPWBI/O/xY8vr483Cj5dyZW2hmht9kmGp+RWr8bPs5OpWwApzrRFvc0Rp4 dEIwpMWwx2aD+uItmBSVidX4Kzzbka55LKhRrkE6soWJkHR+3fkDxRix8/woOxM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:12 2025 by rpki-client