$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5113c660-52ae-44c1-8488-1352f7b5a941.roa File: 5113c660-52ae-44c1-8488-1352f7b5a941.roa (raw, json) Hash identifier: utzQkCeZi80goFYGWgs+NrG4SUaY7rQbh3QGy0QPc3U= Subject key identifier: 90:8D:B1:54:A8:36:19:F7:06:79:C5:E1:98:1F:66:59:F0:30:20:D0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4DFEF5DC05AF4DF04B48405751AA098108CABD62 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5113c660-52ae-44c1-8488-1352f7b5a941.roa Signing time: Thu 30 Oct 2025 23:13:57 +0000 ROA not before: Thu 30 Oct 2025 23:13:57 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c40::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fe:f5:dc:05:af:4d:f0:4b:48:40:57:51:aa:09:81:08:ca:bd:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:13:57 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=1ffa0f7716be3a43ab4f97ce15af13d40c78a40ee3a688fba6a00e879fd4db2f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:18:77:27:62:6e:60:b9:e3:cf:e2:25:ea:bf: 0f:9c:6f:66:0b:0e:30:16:e8:9f:4f:a6:4c:59:62: b3:c4:d5:cd:6f:a5:2a:5e:1c:d5:2d:21:4d:35:70: d9:45:53:51:f0:ff:ce:bf:d7:69:00:9d:e7:9f:d1: 0d:30:ca:36:af:b8:5d:18:30:3f:8c:39:0a:11:62: b0:90:d8:dc:cf:9f:b2:e0:13:42:03:94:8f:52:b1: 5a:38:94:91:f4:7b:66:4e:ba:47:8a:cc:25:2a:32: 30:5e:62:66:9e:81:2c:dc:51:8b:bb:55:4d:03:ac: 6b:c7:9b:03:5c:9f:b8:62:e3:f8:a1:8f:6a:d5:2a: 1f:3b:36:07:02:a4:df:e5:5d:b2:a6:8e:65:06:d0: fc:bd:fc:2e:87:b3:3d:d5:a8:fc:31:09:aa:2e:da: bc:7e:b8:7e:65:02:51:68:2e:bd:07:a3:b4:da:15: 89:b2:50:37:a6:ec:69:20:2e:87:0e:07:0e:a0:26: b2:62:05:4d:59:f4:c9:a4:ab:6d:e4:72:9d:e2:39: 58:f2:8e:a5:13:a1:c3:cf:db:2b:65:e8:1e:8b:87: 2a:8e:a2:d8:8d:e1:47:a6:c9:2e:2a:6d:2d:97:e2: eb:60:1e:f8:ea:b8:89:4c:c7:42:2e:7b:5e:bf:8c: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:B1:54:A8:36:19:F7:06:79:C5:E1:98:1F:66:59:F0:30:20:D0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5113c660-52ae-44c1-8488-1352f7b5a941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c40::/47 Signature Algorithm: sha256WithRSAEncryption 5f:1c:59:c4:23:fa:ef:de:97:c7:af:d2:75:7c:b0:10:81:3e: 61:ec:15:c4:20:e0:55:fa:0e:c3:af:48:32:2a:47:31:0a:b9: 67:ca:1e:c0:db:3b:77:43:73:6a:0a:c1:fa:56:b8:3b:8d:b2: 52:73:49:78:43:88:21:9b:db:8e:26:25:ad:2d:7d:1e:49:4a: 26:25:49:09:67:41:b5:30:c8:69:8b:9c:f7:e2:3c:7c:0c:7d: 7b:1f:17:55:5a:41:c1:90:61:f9:d7:e2:88:cc:db:58:4c:5d: cc:be:e6:4a:f8:04:90:7b:ca:e6:c5:76:42:fd:49:da:b2:4f: 56:ac:39:a1:13:c4:9e:0d:c3:84:f9:da:1e:86:49:1d:53:06: 34:d3:02:69:11:70:01:ef:b8:e2:2b:21:5b:8c:6a:16:c4:6c: 4b:f3:e7:5d:28:a1:af:97:7f:89:bc:dc:37:ef:94:53:01:71: fd:ca:f0:39:f2:91:ea:94:7f:f6:e1:ca:67:e8:7a:2f:03:4c: e7:7b:c0:f4:ff:de:4f:f7:03:d4:c8:69:c9:77:4a:b0:5c:b9: f2:5e:7d:85:32:bb:52:b6:7a:44:8a:0b:f1:da:95:51:b2:c4: 31:93:89:16:a6:f7:64:df:8b:f4:2c:df:78:36:61:0f:af:f5: 1e:ab:33:fd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTf713AWvTfBLSEBXUaoJgQjKvWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMxMzU3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZmZhMGY3NzE2YmUzYTQzYWI0Zjk3Y2UxNWFmMTNkNDBj NzhhNDBlZTNhNjg4ZmJhNmEwMGU4NzlmZDRkYjJmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSGHcnYm5guePP4iXqvw+cb2YLDjAW6J9PpkxZYrPE1c1v pSpeHNUtIU01cNlFU1Hw/86/12kAneef0Q0wyjavuF0YMD+MOQoRYrCQ2NzPn7Lg E0IDlI9SsVo4lJH0e2ZOukeKzCUqMjBeYmaegSzcUYu7VU0DrGvHmwNcn7hi4/ih j2rVKh87NgcCpN/lXbKmjmUG0Py9/C6Hsz3VqPwxCaou2rx+uH5lAlFoLr0Ho7Ta FYmyUDem7GkgLocOBw6gJrJiBU1Z9Mmkq23kcp3iOVjyjqUTocPP2ytl6B6LhyqO otiN4UemyS4qbS2X4utgHvjquIlMx0Iue16/jB75AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkI2xVKg2GfcGecXhmB9mWfAwINAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzUxMTNjNjYwLTUyYWUtNDRjMS04NDg4LTEzNTJmN2I1YTk0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALEAwDQYJKoZIhvcNAQELBQADggEBAF8cWcQj+u/el8ev0nV8sBCB PmHsFcQg4FX6DsOvSDIqRzEKuWfKHsDbO3dDc2oKwfpWuDuNslJzSXhDiCGb244m Ja0tfR5JSiYlSQlnQbUwyGmLnPfiPHwMfXsfF1VaQcGQYfnX4ojM21hMXcy+5kr4 BJB7yubFdkL9SdqyT1asOaETxJ4Nw4T52h6GSR1TBjTTAmkRcAHvuOIrIVuMahbE bEvz510ooa+Xf4m83DfvlFMBcf3K8DnykeqUf/bhymfoei8DTOd7wPT/3k/3A9TI acl3SrBcufJefYUyu1K2ekSKC/HalVGyxDGTiRam92Tfi/Qs33g2YQ+v9R6rM/0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:02 2025 by rpki-client