$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/480251e1-658c-4ef1-a361-0bf5c26b8e65.roa File: 480251e1-658c-4ef1-a361-0bf5c26b8e65.roa (raw, json) Hash identifier: 1QDdqO5owJuJtCPvkfMEMjsZYuiCDqIOWNgg22K6P1M= Subject key identifier: AA:D1:40:CF:F3:E4:FB:69:E9:2F:37:29:15:C9:26:B8:82:21:49:D0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7DC6CEE96E1DE7EFB3F4B19D55EEFB5DE092CF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/480251e1-658c-4ef1-a361-0bf5c26b8e65.roa Signing time: Fri 31 Oct 2025 07:55:37 +0000 ROA not before: Fri 31 Oct 2025 07:55:37 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3800::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c6:ce:e9:6e:1d:e7:ef:b3:f4:b1:9d:55:ee:fb:5d:e0:92:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:55:37 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=4629527c2e8ea997480ccce9f48e627650a4dfb5967ee70f6c263b6d2d1a46e7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:ae:bf:4f:fc:22:20:2b:c6:d5:77:3c:cf: aa:22:08:02:21:1f:21:a1:b6:2a:8c:6f:ec:b3:c2: e0:fe:74:e9:f0:99:9b:87:fb:29:67:bc:24:f8:63: 8b:a1:49:5e:26:d6:f4:18:5a:a1:d0:0f:d4:0c:ca: 18:cc:76:56:17:33:9c:95:af:3d:97:12:65:02:df: bc:35:3a:dc:78:7c:c7:7b:83:24:c3:aa:a8:b8:e4: 1e:81:09:cf:2f:b8:4b:b1:5f:4a:39:56:4b:a8:5e: 31:46:46:cb:ef:f0:dd:6f:0c:73:6b:56:34:17:84: 1f:29:19:e3:ec:62:86:f7:fd:8a:b0:cb:e7:89:69: 3b:82:b5:18:18:b9:c8:81:69:de:c1:45:09:08:c4: f0:f6:0d:e4:c4:40:05:59:e3:db:bf:51:97:3a:5e: 84:3a:29:88:7f:2a:a5:a2:9d:27:d9:14:b0:ae:e7: 9f:16:37:6b:2f:db:10:ac:bf:38:52:b6:3b:60:df: de:e6:df:47:0f:ed:cd:4e:bd:34:98:04:d1:54:7f: ef:5b:d6:3a:85:ca:76:e4:41:26:c0:7b:bc:ce:39: fb:8c:d4:60:78:95:7b:cd:c7:7e:a9:f6:fc:5a:96: 65:69:52:fa:e1:20:cc:44:a7:cb:cd:93:b0:7e:0e: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D1:40:CF:F3:E4:FB:69:E9:2F:37:29:15:C9:26:B8:82:21:49:D0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/480251e1-658c-4ef1-a361-0bf5c26b8e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3800::/39 Signature Algorithm: sha256WithRSAEncryption 02:d0:5d:54:f6:d4:73:f2:e9:6f:7b:f0:65:fc:cf:fa:6c:f5: b6:66:4c:24:04:cb:88:e1:56:84:b4:84:6d:f8:e9:23:5f:ad: 88:72:61:b3:a6:c4:cc:0b:f0:fe:59:7f:be:9e:05:ee:20:ef: ae:4c:6b:6b:62:ca:a0:09:8d:25:ef:06:65:6d:0c:12:79:6c: 61:d0:22:51:ea:1d:97:6c:3a:c4:40:16:c4:ee:1c:65:e5:da: 9e:b6:73:84:e4:ff:33:ce:3e:66:10:68:84:02:8b:2f:6a:2b: 1a:25:d8:98:97:7e:13:33:f1:26:1c:42:64:d3:72:0d:1a:e9: 8c:dd:14:4d:05:50:6a:4f:59:f6:e9:fb:32:af:04:25:18:0d: c3:d4:c6:c6:de:2c:05:60:4d:30:3b:3d:b7:92:41:55:7a:92: 0a:1e:3c:28:9a:fe:45:94:2f:82:6b:e7:93:93:ef:2c:05:90: 9b:a6:d2:00:e5:59:6f:b6:ff:4c:6c:bc:40:9f:ee:3e:98:3f: 43:62:2a:33:cf:41:ff:f6:6c:f6:2d:7f:94:6c:c7:05:93:b3: be:43:cc:6c:53:17:67:21:24:a7:4f:84:03:3d:01:d7:a1:69: f6:7c:05:e6:dc:0c:da:b2:85:73:7e:01:ef:23:79:68:f3:f8: 88:7f:dd:f1 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITfcbO6W4d5++z9LGdVe77XeCSzzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMzEwNzU1MzdaFw0yNTEyMDUyMzU5NTla MHoxSTBHBgNVBAUTQDQ2Mjk1MjdjMmU4ZWE5OTc0ODBjY2NlOWY0OGU2Mjc2NTBh NGRmYjU5NjdlZTcwZjZjMjYzYjZkMmQxYTQ2ZTcxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANbSrr9P/CIgK8bVdzzPqiIIAiEfIaG2Koxv7LPC4P506fCZ m4f7KWe8JPhji6FJXibW9BhaodAP1AzKGMx2VhcznJWvPZcSZQLfvDU63Hh8x3uD JMOqqLjkHoEJzy+4S7FfSjlWS6heMUZGy+/w3W8Mc2tWNBeEHykZ4+xihvf9irDL 54lpO4K1GBi5yIFp3sFFCQjE8PYN5MRABVnj279RlzpehDopiH8qpaKdJ9kUsK7n nxY3ay/bEKy/OFK2O2Df3ubfRw/tzU69NJgE0VR/71vWOoXKduRBJsB7vM45+4zU YHiVe83Hfqn2/FqWZWlS+uEgzESny82TsH4OGq8CAwEAAaOCArMwggKvMB0GA1Ud DgQWBBSq0UDP8+T7aekvNykVySa4giFJ0DAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvNDgwMjUxZTEtNjU4Yy00ZWYxLWEzNjEtMGJmNWMyNmI4ZTY1LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGASYAkAA4MA0GCSqGSIb3DQEBCwUAA4IBAQAC0F1U9tRz8ulve/Bl/M/6bPW2 ZkwkBMuI4VaEtIRt+OkjX62IcmGzpsTMC/D+WX++ngXuIO+uTGtrYsqgCY0l7wZl bQwSeWxh0CJR6h2XbDrEQBbE7hxl5dqetnOE5P8zzj5mEGiEAosvaisaJdiYl34T M/EmHEJk03INGumM3RRNBVBqT1n26fsyrwQlGA3D1MbG3iwFYE0wOz23kkFVepIK Hjwomv5FlC+Ca+eTk+8sBZCbptIA5Vlvtv9MbLxAn+4+mD9DYiozz0H/9mz2LX+U bMcFk7O+Q8xsUxdnISSnT4QDPQHXoWn2fAXm3AzasoVzfgHvI3lo8/iIf93x -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:55 2025 by rpki-client