$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4bca7207-c81a-4e01-8811-c220b472a056.roa File: 4bca7207-c81a-4e01-8811-c220b472a056.roa (raw, json) Hash identifier: sTnOY/twgEbMpc+EA3EvoJtSR3X5dydpx1U8mi1YISU= Subject key identifier: 51:BD:51:2C:BD:91:BD:BD:46:46:3D:47:22:68:0B:5C:01:E7:D4:3E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 52C3A5450A7D28591E72A6FFEDF4AE3D9A82A01B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4bca7207-c81a-4e01-8811-c220b472a056.roa Signing time: Thu 30 Oct 2025 21:27:08 +0000 ROA not before: Thu 30 Oct 2025 21:27:08 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:16e8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c3:a5:45:0a:7d:28:59:1e:72:a6:ff:ed:f4:ae:3d:9a:82:a0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:27:08 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=040e128acb8e98def97677935e1f6171979ecf39a7261bc1b4d137fd99dd5de1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:ab:98:7c:74:f9:a2:da:f7:c5:ef:41:8f: a9:9a:e0:f7:d8:96:c9:a2:11:9c:5e:d7:70:89:11: 65:08:c4:2d:97:16:f8:3b:1b:e0:83:b4:c4:02:de: de:a9:ed:38:bc:fc:dc:87:6b:98:2e:cf:0a:92:53: c0:69:2f:a6:bc:78:31:cf:9c:2d:59:01:f1:ea:f7: 68:92:89:71:b9:2a:67:99:1c:58:0e:e5:55:a2:0a: 0d:7e:c8:ae:15:eb:4e:b4:28:1a:31:ce:42:a6:3d: d0:69:73:47:c8:bd:d3:94:4f:e7:c8:50:41:80:f1: 6c:ed:43:73:07:79:fc:4d:c0:fa:70:a7:f1:2c:c4: 1c:ea:4e:4e:3a:0d:a4:bf:85:54:91:90:3c:7c:c0: 94:53:28:10:f7:35:a2:30:16:b3:af:2d:b2:a0:49: 6c:7b:5a:4b:b9:2a:b8:15:0c:de:08:50:2a:c9:81: 07:f6:39:d0:b7:f0:70:6f:94:35:90:84:3b:6b:f9: f0:e6:6f:44:c7:e1:38:4d:8a:2e:cf:c6:91:1f:65: bb:45:d4:c1:48:eb:ed:3d:cd:7e:e3:e7:00:af:70: 80:8d:35:90:7c:86:61:4c:62:a8:49:85:c7:1b:33: 04:d6:7b:47:80:e9:26:e8:ff:e2:bc:80:8a:a0:6a: 1c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BD:51:2C:BD:91:BD:BD:46:46:3D:47:22:68:0B:5C:01:E7:D4:3E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4bca7207-c81a-4e01-8811-c220b472a056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:16e8::/47 Signature Algorithm: sha256WithRSAEncryption 63:ce:97:37:b6:94:9a:9d:8e:9a:9b:38:7c:be:81:75:16:c4: 47:1c:f5:65:f9:11:84:c3:e1:c9:c2:4e:d4:73:7c:ac:4c:99: a0:b3:17:d3:00:25:80:56:6a:d1:31:ce:6b:d9:fa:bf:8d:d7: 6e:aa:e7:b4:32:2a:33:b9:c9:59:53:57:8b:8d:72:a3:2f:e5: 18:4f:e9:cb:28:a0:87:a4:f3:7f:1e:fd:3d:84:b4:26:93:3e: 35:48:27:df:c0:ad:a6:a4:00:91:c1:30:31:9b:96:1a:dd:ae: 3e:85:f8:9e:85:04:03:48:7c:e8:4d:80:d3:f8:cb:47:f5:ca: a2:ea:3f:37:00:93:23:09:73:f9:01:b0:3f:67:7b:85:6c:7d: 92:a1:16:9a:33:b5:1e:5f:d3:8a:c1:40:4b:8c:63:ee:82:a9: 16:d6:e1:86:d8:d7:68:7b:bb:e4:ed:cd:72:cf:c0:13:bc:83: ef:a5:87:59:d6:46:46:ac:65:35:f5:c6:24:61:2e:52:25:dc: a1:e2:5d:6c:33:15:0b:f2:98:e2:20:15:a3:f9:c8:76:13:da: 91:55:97:74:d3:ac:ee:28:8c:0a:d9:06:ef:15:c7:54:34:70: 02:d3:4a:ac:87:01:06:0d:8e:43:97:56:91:41:91:be:a4:49: 04:20:7e:aa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUsOlRQp9KFkecqb/7fSuPZqCoBswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyNzA4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDBlMTI4YWNiOGU5OGRlZjk3Njc3OTM1ZTFmNjE3MTk3 OWVjZjM5YTcyNjFiYzFiNGQxMzdmZDk5ZGQ1ZGUxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1Z6uYfHT5otr3xe9Bj6ma4PfYlsmiEZxe13CJEWUIxC2X Fvg7G+CDtMQC3t6p7Ti8/NyHa5guzwqSU8BpL6a8eDHPnC1ZAfHq92iSiXG5KmeZ HFgO5VWiCg1+yK4V6060KBoxzkKmPdBpc0fIvdOUT+fIUEGA8WztQ3MHefxNwPpw p/EsxBzqTk46DaS/hVSRkDx8wJRTKBD3NaIwFrOvLbKgSWx7Wku5KrgVDN4IUCrJ gQf2OdC38HBvlDWQhDtr+fDmb0TH4ThNii7PxpEfZbtF1MFI6+09zX7j5wCvcICN NZB8hmFMYqhJhccbMwTWe0eA6Sbo/+K8gIqgahyLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUb1RLL2Rvb1GRj1HImgLXAHn1D4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRiY2E3MjA3LWM4MWEtNGUwMS04ODExLWMyMjBiNDcyYTA1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFugwDQYJKoZIhvcNAQELBQADggEBAGPOlze2lJqdjpqbOHy+gXUW xEcc9WX5EYTD4cnCTtRzfKxMmaCzF9MAJYBWatExzmvZ+r+N126q57QyKjO5yVlT V4uNcqMv5RhP6csooIek838e/T2EtCaTPjVIJ9/AraakAJHBMDGblhrdrj6F+J6F BANIfOhNgNP4y0f1yqLqPzcAkyMJc/kBsD9ne4VsfZKhFpoztR5f04rBQEuMY+6C qRbW4YbY12h7u+TtzXLPwBO8g++lh1nWRkasZTX1xiRhLlIl3KHiXWwzFQvymOIg FaP5yHYT2pFVl3TTrO4ojArZBu8Vx1Q0cALTSqyHAQYNjkOXVpFBkb6kSQQgfqo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:40 2025 by rpki-client