$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a871643-61d3-4dff-92ab-441245fbbb30.roa File: 4a871643-61d3-4dff-92ab-441245fbbb30.roa (raw, json) Hash identifier: Q6qPUEukQJ1Mniz2TEaRe5/ubQLc+ZC3rZ5qXsULsw8= Subject key identifier: CE:9D:DB:43:7E:B5:F4:2B:9A:BB:F6:50:F9:49:A7:CC:23:AE:63:48 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0AF342A0410F6F183B4E059F0C3AD369D09EFB75 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a871643-61d3-4dff-92ab-441245fbbb30.roa Signing time: Fri 31 Oct 2025 02:43:09 +0000 ROA not before: Fri 31 Oct 2025 02:43:09 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:17b4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f3:42:a0:41:0f:6f:18:3b:4e:05:9f:0c:3a:d3:69:d0:9e:fb:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:43:09 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=8024490da6886749a5af3ba7fe009495b1446ebb68b253818a58031b449ed3a7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:d4:e8:3d:57:30:58:f5:b2:ae:8c:18:08: f2:bb:50:b0:83:12:6e:d3:9a:a6:40:2c:67:29:e2: 13:17:32:de:84:67:a6:11:37:95:7a:bf:f0:b3:9e: 90:c8:f7:f5:5e:e2:bf:c4:9f:64:c9:a5:7a:87:92: f2:e7:71:bd:1e:5f:8c:60:50:8e:44:b1:97:aa:d4: 60:5d:10:a9:88:32:0b:4d:83:9a:13:b1:59:29:68: 8f:1b:02:0f:33:bd:cd:c1:c5:4a:8e:51:b3:5e:05: 08:59:b5:14:63:f0:10:5e:07:d1:2e:62:39:ca:85: e3:17:fb:2f:2f:a0:30:9b:1b:ec:7e:d4:a9:53:8f: 85:3a:c6:b3:02:56:06:b3:f0:aa:9c:b2:12:59:fa: 6f:9d:84:a1:4f:7f:6f:84:11:c4:10:e7:bf:2b:d2: 4e:65:87:18:3e:45:0a:d6:d3:a0:2e:b0:0c:f3:0f: 1c:85:57:f5:63:46:84:8a:55:5b:fa:a1:e5:d5:f6: 4a:13:13:53:d0:7a:1a:1b:9d:e0:f8:71:cb:90:4a: 2d:50:63:2c:c4:c4:d5:fc:e1:2d:f1:59:6c:bc:fc: a8:44:bc:e9:a0:3d:97:a0:a0:4f:2d:ab:b9:9c:52: 5b:b5:58:71:a6:e2:2d:85:4b:93:5c:bf:10:ee:03: 2f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9D:DB:43:7E:B5:F4:2B:9A:BB:F6:50:F9:49:A7:CC:23:AE:63:48 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a871643-61d3-4dff-92ab-441245fbbb30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:17b4::/46 Signature Algorithm: sha256WithRSAEncryption bc:fc:3a:c0:5f:2c:c9:cd:2e:07:8d:9a:63:df:d9:8c:a1:d8: 84:cd:3d:d7:0c:92:c1:e8:11:28:15:b8:bf:c6:55:a5:d3:0b: c1:0b:84:43:79:b1:95:12:4d:85:05:6f:97:8c:0a:8e:2b:36: 7d:53:e7:93:7d:4f:30:bd:85:18:20:33:c6:1c:e4:76:a1:f2: 95:ff:ef:d3:bc:5f:9e:c7:8c:42:fe:ff:65:9b:63:15:e0:c2: fa:ea:a8:e5:c9:6f:af:66:b7:d9:70:3a:01:27:c5:32:98:ae: 5c:f0:58:35:bb:78:35:e7:c5:e7:e2:72:74:7b:ba:91:62:84: 9a:5d:c8:51:81:5b:7c:3a:6d:8d:e6:d8:8e:16:23:b6:43:31: 79:03:06:eb:d4:10:65:8c:16:29:9a:e6:72:4d:d9:d8:5a:f5: 1f:e8:49:29:8e:b1:04:4c:96:ce:ee:1c:11:ab:b6:fb:ce:ef: 01:de:cf:13:93:16:eb:2f:5f:2b:92:f0:a5:2a:22:7d:13:d3: 81:51:72:91:21:ec:eb:a6:17:34:1d:0a:0b:b7:7d:eb:ab:7e: 4e:18:a5:ae:7b:ac:e9:47:20:53:22:b2:74:e8:9e:b5:e4:b3: aa:5d:60:19:df:10:bb:d2:32:d7:ec:87:85:28:d9:f4:c3:a6: 52:f3:24:21 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCvNCoEEPbxg7TgWfDDrTadCe+3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI0MzA5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDI0NDkwZGE2ODg2NzQ5YTVhZjNiYTdmZTAwOTQ5NWIx NDQ2ZWJiNjhiMjUzODE4YTU4MDMxYjQ0OWVkM2E3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCly9ToPVcwWPWyrowYCPK7ULCDEm7TmqZALGcp4hMXMt6E Z6YRN5V6v/CznpDI9/Ve4r/En2TJpXqHkvLncb0eX4xgUI5EsZeq1GBdEKmIMgtN g5oTsVkpaI8bAg8zvc3BxUqOUbNeBQhZtRRj8BBeB9EuYjnKheMX+y8voDCbG+x+ 1KlTj4U6xrMCVgaz8KqcshJZ+m+dhKFPf2+EEcQQ578r0k5lhxg+RQrW06AusAzz DxyFV/VjRoSKVVv6oeXV9koTE1PQehobneD4ccuQSi1QYyzExNX84S3xWWy8/KhE vOmgPZegoE8tq7mcUlu1WHGm4i2FS5NcvxDuAy8pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzp3bQ3619Cuau/ZQ+UmnzCOuY0gwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRhODcxNjQzLTYxZDMtNGRmZi05MmFiLTQ0MTI0NWZiYmIzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAF7QwDQYJKoZIhvcNAQELBQADggEBALz8OsBfLMnNLgeNmmPf2Yyh 2ITNPdcMksHoESgVuL/GVaXTC8ELhEN5sZUSTYUFb5eMCo4rNn1T55N9TzC9hRgg M8Yc5Hah8pX/79O8X57HjEL+/2WbYxXgwvrqqOXJb69mt9lwOgEnxTKYrlzwWDW7 eDXnxeficnR7upFihJpdyFGBW3w6bY3m2I4WI7ZDMXkDBuvUEGWMFima5nJN2dha 9R/oSSmOsQRMls7uHBGrtvvO7wHezxOTFusvXyuS8KUqIn0T04FRcpEh7OumFzQd Cgu3feurfk4Ypa57rOlHIFMisnTonrXks6pdYBnfELvSMtfsh4Uo2fTDplLzJCE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:28 2025 by rpki-client