$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77b7fce3-a960-4f5f-9520-98aca5070a8b.roa File: 77b7fce3-a960-4f5f-9520-98aca5070a8b.roa (raw, json) Hash identifier: e0tEsN81Q9WRjuMQy5TY8/Lxx4wc9oDYJBGacXN7rG8= Subject key identifier: 29:D5:20:F4:E3:B7:56:7B:8B:A0:78:09:8E:EC:3C:3D:34:54:33:AD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2D52C095043893B86610B037EBDC78A1E704E248 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77b7fce3-a960-4f5f-9520-98aca5070a8b.roa Signing time: Fri 31 Oct 2025 00:58:00 +0000 ROA not before: Fri 31 Oct 2025 00:58:00 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:38e4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:52:c0:95:04:38:93:b8:66:10:b0:37:eb:dc:78:a1:e7:04:e2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:58:00 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f84b5ea797daee58a8b3da4a911840f744e7d83d55779964e754ad44671c18ba, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:c7:94:0c:6b:4f:1f:e2:5e:66:9c:58:e9: 9b:ce:eb:5a:a5:2d:a2:c8:b4:0d:b9:53:d2:0e:ed: f5:05:62:71:6a:4f:42:26:06:56:ef:ba:0b:ee:35: 4a:cb:c3:67:63:e2:7f:2f:3f:99:d7:39:50:95:b1: 51:80:b9:07:6c:06:31:df:f1:be:06:48:0e:78:68: 84:e1:e2:c1:37:69:cb:52:f8:87:4f:8c:43:d6:9d: 13:06:7d:a2:b9:99:ce:67:19:93:38:54:6e:51:cb: b3:62:ec:de:5e:83:d6:50:20:7e:25:c0:d9:88:a6: 1a:60:35:e4:fd:d6:c1:92:dd:c6:74:ff:15:bf:c8: 3c:07:c5:60:e5:d9:6b:1e:a6:35:ce:f9:51:20:ef: ff:1d:1b:29:01:b9:a7:ab:3a:53:59:86:6e:d9:6e: f1:64:ce:70:6b:df:48:a7:52:1f:70:5e:56:53:7c: ac:ce:c8:84:98:cd:46:f9:a4:34:12:47:20:70:c4: 95:a1:fc:33:67:87:5c:a3:7a:e5:34:9e:11:b4:2d: 7e:de:1a:af:bb:fe:be:73:4f:9f:01:00:ef:d4:e9: 0a:42:6e:f6:3a:7d:d4:2d:d9:a1:19:75:56:eb:59: 32:17:ee:4b:e9:14:18:64:49:33:a0:0a:fd:92:59: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D5:20:F4:E3:B7:56:7B:8B:A0:78:09:8E:EC:3C:3D:34:54:33:AD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77b7fce3-a960-4f5f-9520-98aca5070a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:38e4::/47 Signature Algorithm: sha256WithRSAEncryption 14:36:f5:68:72:9a:63:89:be:75:95:79:d5:95:5a:1a:1c:fa: b1:a9:b2:b7:c5:81:00:ee:75:95:88:09:1c:a9:75:e7:a9:92: d8:ae:48:54:28:dc:72:43:5a:3b:a2:ce:5d:4b:d5:ef:4c:90: af:c4:55:5f:0e:fd:c9:04:a6:e7:52:7f:f0:c7:9c:e5:9f:2f: b3:2a:9c:20:3b:41:32:4e:45:00:ee:de:77:3a:54:70:b6:a0: 62:a7:c8:00:41:99:92:74:0f:34:2a:99:f1:70:7c:1e:0c:04: dc:13:06:db:b9:fd:91:16:7d:43:c6:61:4c:44:5b:68:b8:e1: fa:75:4c:da:60:6d:b4:6f:57:38:5d:de:35:78:8c:40:8e:f8: 31:e5:2c:1d:ae:44:94:e2:ea:94:b5:c0:39:5b:0d:8e:7c:98: 93:f4:76:6e:bc:23:60:79:f1:69:32:fd:5f:72:74:08:41:4f: 06:79:99:60:1c:b2:ae:f3:34:37:b5:24:d5:89:5b:3c:b7:25: bc:d3:4f:ee:81:45:24:1a:cc:91:e5:49:91:c0:2b:a0:f1:83: 46:74:85:a4:94:b0:e9:53:b8:ed:e7:13:cf:5c:c9:6e:9d:62: 77:08:e6:fe:c2:25:18:16:4e:4c:62:bf:cc:e9:08:4f:15:dd: 79:0a:ce:b3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULVLAlQQ4k7hmELA369x4oecE4kgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1ODAwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmODRiNWVhNzk3ZGFlZTU4YThiM2RhNGE5MTE4NDBmNzQ0 ZTdkODNkNTU3Nzk5NjRlNzU0YWQ0NDY3MWMxOGJhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaXseUDGtPH+JeZpxY6ZvO61qlLaLItA25U9IO7fUFYnFq T0ImBlbvugvuNUrLw2dj4n8vP5nXOVCVsVGAuQdsBjHf8b4GSA54aITh4sE3actS +IdPjEPWnRMGfaK5mc5nGZM4VG5Ry7Ni7N5eg9ZQIH4lwNmIphpgNeT91sGS3cZ0 /xW/yDwHxWDl2WsepjXO+VEg7/8dGykBuaerOlNZhm7ZbvFkznBr30inUh9wXlZT fKzOyISYzUb5pDQSRyBwxJWh/DNnh1yjeuU0nhG0LX7eGq+7/r5zT58BAO/U6QpC bvY6fdQt2aEZdVbrWTIX7kvpFBhkSTOgCv2SWVA/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKdUg9OO3VnuLoHgJjuw8PTRUM60wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzc3YjdmY2UzLWE5NjAtNGY1Zi05NTIwLTk4YWNhNTA3MGE4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOOQwDQYJKoZIhvcNAQELBQADggEBABQ29WhymmOJvnWVedWVWhoc +rGpsrfFgQDudZWICRypdeepktiuSFQo3HJDWjuizl1L1e9MkK/EVV8O/ckEpudS f/DHnOWfL7MqnCA7QTJORQDu3nc6VHC2oGKnyABBmZJ0DzQqmfFwfB4MBNwTBtu5 /ZEWfUPGYUxEW2i44fp1TNpgbbRvVzhd3jV4jECO+DHlLB2uRJTi6pS1wDlbDY58 mJP0dm68I2B58Wky/V9ydAhBTwZ5mWAcsq7zNDe1JNWJWzy3JbzTT+6BRSQazJHl SZHAK6Dxg0Z0haSUsOlTuO3nE89cyW6dYncI5v7CJRgWTkxiv8zpCE8V3XkKzrM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:17 2025 by rpki-client