$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/576700a6-20d8-4386-a9db-7454638ed096.roa File: 576700a6-20d8-4386-a9db-7454638ed096.roa (raw, json) Hash identifier: 6p1emgrs79Gv3Kg47AdWHBmHsTm1+IThIQkcZKAYdDY= Subject key identifier: 67:61:FA:88:6A:11:CC:91:6F:34:2A:29:D4:DE:25:51:85:8B:75:76 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 72F3CA0B6E31530919CBC90FC21E3AE13D5BD7DA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/576700a6-20d8-4386-a9db-7454638ed096.roa Signing time: Fri 31 Oct 2025 07:52:06 +0000 ROA not before: Fri 31 Oct 2025 07:52:06 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f3:ca:0b:6e:31:53:09:19:cb:c9:0f:c2:1e:3a:e1:3d:5b:d7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:52:06 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=9ca8f3d987ab9c57ff0fceeb8656aabf9eb938aee6ad81df4d8ac7b49edf4461, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1a:9a:35:90:ba:0e:98:9a:f3:59:c8:f5:37: b3:6e:52:af:d1:51:95:9b:e8:d6:a5:7d:de:89:82: 6f:74:ad:09:5f:a7:85:74:08:13:32:53:44:a8:77: 52:69:25:bf:81:5a:d6:63:e4:85:54:f0:f0:c7:c6: 17:bd:e2:a4:f5:76:88:fa:05:d7:2d:d4:55:14:86: e2:ae:ad:d2:5a:ad:64:f3:84:f7:13:45:23:b9:6a: c9:a9:7a:6c:59:ac:71:46:f0:01:f9:33:39:e6:bb: b9:2d:d3:6e:87:1f:0c:a2:61:a0:bd:89:70:b6:e0: d4:33:82:6e:0f:39:93:c0:50:fe:7c:1a:40:97:e1: a3:d6:1c:50:90:d1:ce:0a:93:91:09:f9:f4:f5:dc: b3:dd:0a:24:b3:e9:ac:af:c5:47:26:d1:95:68:4a: 73:ee:82:2d:59:5a:82:eb:4b:d0:a1:58:cc:63:c5: 70:b5:51:9a:c5:05:d2:2c:4e:ac:ed:6b:45:f1:c1: de:c2:d1:09:1f:2c:d8:88:44:50:09:80:03:da:ae: 8d:4b:52:c6:b3:73:3c:59:e8:c8:2d:3c:9d:80:47: 36:97:27:58:d3:9c:20:3b:b7:b5:bd:6f:ca:7c:a3: 7a:20:fe:b3:be:47:4b:0b:75:45:28:dc:9d:ba:dd: 28:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:61:FA:88:6A:11:CC:91:6F:34:2A:29:D4:DE:25:51:85:8B:75:76 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/576700a6-20d8-4386-a9db-7454638ed096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3d00::/41 Signature Algorithm: sha256WithRSAEncryption 0f:79:ff:96:6f:22:28:64:b7:04:b0:59:d7:43:e8:54:80:ed: 72:f5:7f:42:ab:ec:cb:2a:10:39:36:24:91:eb:a6:be:84:20: ea:a2:0c:77:1a:36:15:af:1b:3c:bc:01:1f:cc:c5:aa:c8:e8: fc:57:ad:04:bf:c7:ab:bc:cb:c4:53:05:55:ce:b7:25:04:ec: 29:f5:77:cc:7d:e0:67:3a:3b:4e:2a:dd:bc:c5:2d:ec:bf:b6: e6:15:eb:d4:d7:7a:ba:33:cf:9b:f3:02:1f:ea:83:4e:7c:39: 71:5b:be:09:00:ee:52:75:d5:28:4f:ce:50:1d:11:65:ec:a1: ff:f6:38:1d:35:de:46:5f:23:0b:70:84:4d:83:5f:a8:65:d3: b8:66:74:2b:bb:26:d9:a1:ea:3c:9c:f8:b2:3d:fa:48:72:04: 30:02:53:78:a4:df:44:4d:36:d7:f2:81:3c:c5:8e:ba:f8:92: 65:4d:8d:8d:11:9c:b5:86:3c:29:aa:8a:e9:2c:bc:f1:ff:f0: 61:63:05:b4:67:3d:3e:1c:7b:6d:e7:2d:14:a6:bf:70:7d:7e: 9b:81:d2:19:bc:d4:95:d9:02:33:58:a9:49:06:b4:41:52:38: 42:3a:a5:f1:11:a7:c1:4d:52:4d:01:27:55:51:9a:5c:a8:ff: db:5a:0b:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcvPKC24xUwkZy8kPwh464T1b19owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc1MjA2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Y2E4ZjNkOTg3YWI5YzU3ZmYwZmNlZWI4NjU2YWFiZjll YjkzOGFlZTZhZDgxZGY0ZDhhYzdiNDllZGY0NDYxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQGpo1kLoOmJrzWcj1N7NuUq/RUZWb6Nalfd6Jgm90rQlf p4V0CBMyU0Sod1JpJb+BWtZj5IVU8PDHxhe94qT1doj6Bdct1FUUhuKurdJarWTz hPcTRSO5asmpemxZrHFG8AH5Mznmu7kt026HHwyiYaC9iXC24NQzgm4POZPAUP58 GkCX4aPWHFCQ0c4Kk5EJ+fT13LPdCiSz6ayvxUcm0ZVoSnPugi1ZWoLrS9ChWMxj xXC1UZrFBdIsTqzta0Xxwd7C0QkfLNiIRFAJgAParo1LUsazczxZ6MgtPJ2ARzaX J1jTnCA7t7W9b8p8o3og/rO+R0sLdUUo3J263ShzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZ2H6iGoRzJFvNCop1N4lUYWLdXYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzU3NjcwMGE2LTIwZDgtNDM4Ni1hOWRiLTc0NTQ2MzhlZDA5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwcmAJAAPQAwDQYJKoZIhvcNAQELBQADggEBAA95/5ZvIihktwSwWddD6FSA 7XL1f0Kr7MsqEDk2JJHrpr6EIOqiDHcaNhWvGzy8AR/MxarI6PxXrQS/x6u8y8RT BVXOtyUE7Cn1d8x94Gc6O04q3bzFLey/tuYV69TXerozz5vzAh/qg058OXFbvgkA 7lJ11ShPzlAdEWXsof/2OB013kZfIwtwhE2DX6hl07hmdCu7Jtmh6jyc+LI9+khy BDACU3ik30RNNtfygTzFjrr4kmVNjY0RnLWGPCmqiuksvPH/8GFjBbRnPT4ce23n LRSmv3B9fpuB0hm81JXZAjNYqUkGtEFSOEI6pfERp8FNUk0BJ1VRmlyo/9taCws= -----END CERTIFICATE-----Generated at Wed Nov 5 15:59:58 2025 by rpki-client