$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d84a1f5-a913-478f-8181-703ec1bb52c6.roa File: 7d84a1f5-a913-478f-8181-703ec1bb52c6.roa (raw, json) Hash identifier: snAJtIedGiv57hYFDjQVZxmrmSfDo4Xe840Afy9ItmU= Subject key identifier: 43:C3:42:D6:16:6C:42:91:D7:C2:0C:06:EC:9B:4E:8C:04:0B:78:F2 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 69354E99BE1EBFE42E295393126472B63AA490D7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d84a1f5-a913-478f-8181-703ec1bb52c6.roa Signing time: Fri 31 Oct 2025 05:52:08 +0000 ROA not before: Fri 31 Oct 2025 05:52:08 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2e68::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:35:4e:99:be:1e:bf:e4:2e:29:53:93:12:64:72:b6:3a:a4:90:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:52:08 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=65042b165d4508df5839b8437277053555503caa84ef36fdb6d464ecb4707bb4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:d1:be:0d:d5:d9:b2:9f:e1:90:6b:15:96: 46:a5:a7:bf:32:cc:a8:5c:0b:15:3f:b5:37:09:e7: 4f:a4:9d:76:59:16:83:56:45:b8:a4:7d:fe:d3:30: 23:5d:9a:03:e3:18:4f:95:b1:f2:0d:7a:bd:30:7a: 76:4a:c3:f2:c8:e0:fe:44:1c:6f:d9:de:f8:c0:d3: 9e:a1:c2:49:d8:8d:5d:09:3f:7c:5f:f7:78:05:f2: d6:2b:81:53:28:0e:c9:e5:2a:0f:a2:70:d7:f1:91: bc:9b:a1:9c:f3:6a:74:e2:8c:29:8a:71:47:b9:af: 7e:e8:72:33:3e:e8:2e:6d:55:23:63:55:cd:2b:b6: 04:91:e9:89:59:34:26:95:86:94:e6:ab:84:06:ca: 14:03:ad:7b:65:05:5b:4a:04:75:72:82:5c:38:23: 1f:4c:0d:56:9f:57:50:4a:a6:90:0e:f7:98:d7:32: c8:4e:15:5c:76:27:e1:d5:6b:a1:11:38:00:e2:04: ab:4d:ef:0c:d0:27:c7:39:7c:70:75:1e:bb:5e:d1: 23:89:85:83:a4:a1:51:ee:9d:57:d2:ee:fd:08:72: 12:03:df:a9:f0:f6:89:17:c5:36:d6:c6:f5:05:12: 85:cd:9a:a0:6f:fd:b5:9b:8b:4b:54:7f:c4:0b:52: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C3:42:D6:16:6C:42:91:D7:C2:0C:06:EC:9B:4E:8C:04:0B:78:F2 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d84a1f5-a913-478f-8181-703ec1bb52c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2e68::/45 Signature Algorithm: sha256WithRSAEncryption 47:15:07:27:2c:eb:45:66:ac:e1:fd:b6:0a:50:1b:79:2e:35: 7d:59:25:86:55:51:0a:03:d8:1d:88:b7:fc:ad:3a:d5:33:55: ba:d3:dd:e5:bf:57:e2:3b:ce:8d:f9:05:8e:ff:75:04:ac:8b: 77:fc:9c:72:95:7a:cb:2e:4f:fc:66:85:0a:84:6f:fc:82:77: 2c:29:68:79:3e:13:b0:45:13:74:e3:0b:00:98:9a:f4:6a:69: 66:c4:59:ea:06:fc:d4:95:8a:81:a2:0d:5a:c8:24:4d:dc:d4: 39:7e:ae:1b:64:4e:1a:ec:48:31:16:15:60:48:0b:50:49:46: 91:6e:8f:93:c1:35:91:a5:50:a1:c4:9c:5f:7f:9b:71:84:c5: c5:93:03:e5:9b:9f:2f:c2:7d:5c:3f:c7:8d:b4:c2:70:c8:af: e3:2c:b6:9c:be:67:17:69:cf:61:ba:f8:69:7d:8a:24:54:1c: 2c:72:2a:d4:01:a7:84:b1:7f:17:c4:c4:95:a4:c6:e0:8a:68: 1e:a3:30:01:84:d9:46:42:1f:17:87:8c:aa:14:f2:68:92:88: b7:aa:02:26:32:1a:c3:b2:4e:27:2e:1c:1d:f5:2c:0f:37:00: df:6b:cf:eb:ba:c3:d4:18:9a:7b:4a:62:c6:54:28:98:f9:01: 8b:93:f0:ed -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaTVOmb4ev+QuKVOTEmRytjqkkNcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1MjA4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTA0MmIxNjVkNDUwOGRmNTgzOWI4NDM3Mjc3MDUzNTU1 NTAzY2FhODRlZjM2ZmRiNmQ0NjRlY2I0NzA3YmI0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxldG+DdXZsp/hkGsVlkalp78yzKhcCxU/tTcJ50+knXZZ FoNWRbikff7TMCNdmgPjGE+VsfINer0wenZKw/LI4P5EHG/Z3vjA056hwknYjV0J P3xf93gF8tYrgVMoDsnlKg+icNfxkbyboZzzanTijCmKcUe5r37ocjM+6C5tVSNj Vc0rtgSR6YlZNCaVhpTmq4QGyhQDrXtlBVtKBHVyglw4Ix9MDVafV1BKppAO95jX MshOFVx2J+HVa6EROADiBKtN7wzQJ8c5fHB1Hrte0SOJhYOkoVHunVfS7v0IchID 36nw9okXxTbWxvUFEoXNmqBv/bWbi0tUf8QLUvxDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQ8NC1hZsQpHXwgwG7JtOjAQLePIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzdkODRhMWY1LWE5MTMtNDc4Zi04MTgxLTcwM2VjMWJiNTJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALmgwDQYJKoZIhvcNAQELBQADggEBAEcVBycs60VmrOH9tgpQG3ku NX1ZJYZVUQoD2B2It/ytOtUzVbrT3eW/V+I7zo35BY7/dQSsi3f8nHKVessuT/xm hQqEb/yCdywpaHk+E7BFE3TjCwCYmvRqaWbEWeoG/NSVioGiDVrIJE3c1Dl+rhtk ThrsSDEWFWBIC1BJRpFuj5PBNZGlUKHEnF9/m3GExcWTA+Wbny/CfVw/x420wnDI r+Mstpy+Zxdpz2G6+Gl9iiRUHCxyKtQBp4SxfxfExJWkxuCKaB6jMAGE2UZCHxeH jKoU8miSiLeqAiYyGsOyTicuHB31LA83AN9rz+u6w9QYmntKYsZUKJj5AYuT8O0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:59 2025 by rpki-client