$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b0ceff3-245a-4a36-a7d3-7d2acb024db0.roa File: 4b0ceff3-245a-4a36-a7d3-7d2acb024db0.roa (raw, json) Hash identifier: cJGiEa2hl/VOdyeCZpTSU3bFWfnOJ0faUN5ar4SvGAQ= Subject key identifier: C4:57:4C:00:EC:2A:D2:96:11:AA:87:04:D1:6B:88:61:AF:72:18:1F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4D71F79DBD6BA6F51A0E18E3DA00FCDDE5D7624A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b0ceff3-245a-4a36-a7d3-7d2acb024db0.roa Signing time: Fri 31 Oct 2025 06:43:49 +0000 ROA not before: Fri 31 Oct 2025 06:43:49 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2990::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:71:f7:9d:bd:6b:a6:f5:1a:0e:18:e3:da:00:fc:dd:e5:d7:62:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:43:49 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c0e921ff37187bd1cdc0211b33e17c05de23c9a20952be30c80079ad0e0da68b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:0c:f4:70:52:61:6c:aa:09:22:9c:64:03: e1:c8:ae:65:30:07:52:75:29:6a:23:7e:54:d4:fb: ca:8e:b6:3e:f3:52:30:c8:ea:de:8d:c1:bb:3b:1c: 8b:73:10:d6:f7:bd:e1:2b:47:d1:c6:d3:25:90:86: d5:a8:eb:74:1a:55:dc:3e:76:8d:7e:48:f6:ba:f1: f9:c2:ef:e0:0a:07:59:0f:32:e7:5a:a0:a3:20:6f: 0b:db:ad:09:fe:5d:d9:38:10:c7:ea:0e:3f:ec:8c: 2a:f7:c6:08:5b:cf:de:55:61:da:12:2f:60:ee:c8: 7b:07:f6:40:80:0a:d4:5e:b0:e1:41:0d:ad:ed:9e: ba:83:7c:95:dd:2e:00:e7:1c:ed:21:96:0d:a1:ea: 13:94:ba:d4:61:d4:9b:19:a6:56:49:4e:78:40:08: b0:b6:ce:82:01:5f:ec:f5:71:a2:e1:3c:6c:15:af: 02:72:a8:d1:17:29:06:81:80:e2:df:f1:e1:91:ea: 44:f5:87:f0:3a:fa:7f:6b:c6:f5:07:97:34:58:7b: 1f:b7:ac:24:15:a5:43:a5:76:0d:40:af:70:c6:05: ad:71:e6:72:78:5e:4b:ef:66:fa:10:8a:fc:b2:a5: d4:db:ea:5d:68:8c:80:f1:cd:9e:b5:bd:4c:95:89: 5b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:57:4C:00:EC:2A:D2:96:11:AA:87:04:D1:6B:88:61:AF:72:18:1F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b0ceff3-245a-4a36-a7d3-7d2acb024db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2990::/44 Signature Algorithm: sha256WithRSAEncryption 21:c6:8e:95:fc:25:9d:18:b6:92:02:04:05:f1:ce:d0:af:f2: 49:3c:2b:aa:d4:5e:1d:d9:af:e7:13:72:2f:24:b4:e4:ec:b8: b8:c6:02:39:3e:21:86:58:41:e5:ba:c2:07:a3:cb:d3:e9:77: db:34:79:9a:da:bc:1f:fb:37:12:11:2f:d8:b8:a0:a2:25:e7: 3c:f6:31:80:85:c4:28:49:38:1d:9b:21:1a:57:b4:85:0f:ff: 84:18:e2:64:5f:1f:06:d4:51:61:d4:e2:65:22:c6:cd:80:21: 61:07:6c:2f:11:98:75:72:58:6f:17:22:76:b5:5a:8c:65:39: 0a:37:a0:50:d7:e0:c3:a7:0f:0b:e9:bd:90:ec:35:9f:7f:09: 8e:16:aa:54:5c:f1:fb:6c:09:c1:59:92:28:bc:32:71:75:e2: c4:9b:59:bb:27:c0:c0:dc:0c:67:83:5c:72:86:3b:83:48:41: 18:a2:09:0f:1d:c6:db:22:a1:fd:4c:7c:91:b7:7d:2a:27:f0: c6:b8:93:7a:ea:27:00:2e:ce:be:10:10:73:e4:ec:78:60:65: f3:b0:5b:5f:0f:fb:63:d6:93:cb:02:27:33:78:fc:d2:94:9d: 6d:ca:5d:e1:f2:52:33:ac:9f:33:c0:a8:92:60:ef:4c:a4:15: 31:45:0e:8e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTXH3nb1rpvUaDhjj2gD83eXXYkowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY0MzQ5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMGU5MjFmZjM3MTg3YmQxY2RjMDIxMWIzM2UxN2MwNWRl MjNjOWEyMDk1MmJlMzBjODAwNzlhZDBlMGRhNjhiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGCwz0cFJhbKoJIpxkA+HIrmUwB1J1KWojflTU+8qOtj7z UjDI6t6Nwbs7HItzENb3veErR9HG0yWQhtWo63QaVdw+do1+SPa68fnC7+AKB1kP MudaoKMgbwvbrQn+Xdk4EMfqDj/sjCr3xghbz95VYdoSL2DuyHsH9kCACtResOFB Da3tnrqDfJXdLgDnHO0hlg2h6hOUutRh1JsZplZJTnhACLC2zoIBX+z1caLhPGwV rwJyqNEXKQaBgOLf8eGR6kT1h/A6+n9rxvUHlzRYex+3rCQVpUOldg1Ar3DGBa1x 5nJ4XkvvZvoQivyypdTb6l1ojIDxzZ61vUyViVtbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxFdMAOwq0pYRqocE0WuIYa9yGB8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRiMGNlZmYzLTI0NWEtNGEzNi1hN2QzLTdkMmFjYjAyNGRiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAKZAwDQYJKoZIhvcNAQELBQADggEBACHGjpX8JZ0YtpICBAXxztCv 8kk8K6rUXh3Zr+cTci8ktOTsuLjGAjk+IYZYQeW6wgejy9Ppd9s0eZravB/7NxIR L9i4oKIl5zz2MYCFxChJOB2bIRpXtIUP/4QY4mRfHwbUUWHU4mUixs2AIWEHbC8R mHVyWG8XIna1WoxlOQo3oFDX4MOnDwvpvZDsNZ9/CY4WqlRc8ftsCcFZkii8MnF1 4sSbWbsnwMDcDGeDXHKGO4NIQRiiCQ8dxtsiof1MfJG3fSon8Ma4k3rqJwAuzr4Q EHPk7HhgZfOwW18P+2PWk8sCJzN4/NKUnW3KXeHyUjOsnzPAqJJg70ykFTFFDo4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:31 2025 by rpki-client