$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/804099ec-580d-42a7-873a-0d5c2c3e65d6.roa File: 804099ec-580d-42a7-873a-0d5c2c3e65d6.roa (raw, json) Hash identifier: ECmTE7FHiw5kc0/bfkKNZg0cvQp5V19oL2aoSCSSvbk= Subject key identifier: 21:D2:54:C8:70:42:D7:F4:B4:C5:F1:7A:1B:18:80:A3:27:6A:25:4D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1DC71A98B22351A21D864AAB3AE1647CE4BD129E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/804099ec-580d-42a7-873a-0d5c2c3e65d6.roa Signing time: Fri 31 Oct 2025 00:54:57 +0000 ROA not before: Fri 31 Oct 2025 00:54:57 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3840::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c7:1a:98:b2:23:51:a2:1d:86:4a:ab:3a:e1:64:7c:e4:bd:12:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:54:57 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f72167fe33c0f53d98cda20da1b9cae8df9367a652914306b9f16023fe59b836, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:08:db:6e:05:47:13:5d:f3:10:45:27:73:cf: 96:ee:73:db:88:6b:70:6d:13:5e:55:d7:cf:d8:c5: 0e:91:0f:d6:c6:a8:94:cd:4d:c7:1c:be:ed:04:65: 25:fa:fa:e3:83:f7:b0:b1:3c:a9:32:c8:2b:94:f4: f6:9a:65:0b:fe:08:00:2a:94:8a:1e:86:4a:25:8e: a2:9f:52:71:2e:e4:04:92:07:dc:41:94:b8:61:53: 58:31:a1:6f:b3:3e:db:ff:ce:24:52:fe:cd:dc:12: 60:f3:0e:0d:f3:35:65:46:01:18:4a:d3:c9:c2:89: a8:3c:bc:fb:03:82:68:3a:67:e8:da:0b:c8:62:01: 43:aa:cf:06:6b:cd:1e:c0:63:49:66:84:26:68:ed: cf:14:4d:b8:7a:29:5d:58:91:ba:e8:7d:af:e1:47: c6:69:24:6c:80:c3:b9:08:c6:d7:24:e3:a4:50:db: 8f:3f:d7:42:1f:06:b6:c2:95:31:4d:0a:c4:41:01: eb:91:bb:68:7a:8e:32:e0:66:b2:0b:f6:12:b4:68: 00:b4:2c:a3:f5:e0:a0:b8:52:a9:bd:2d:46:29:0b: cf:ab:4a:cf:56:d6:4e:34:45:92:dc:ef:c4:b2:7e: fb:0f:c4:e9:6e:b1:a6:4c:70:dd:7a:92:21:d4:92: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D2:54:C8:70:42:D7:F4:B4:C5:F1:7A:1B:18:80:A3:27:6A:25:4D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/804099ec-580d-42a7-873a-0d5c2c3e65d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3840::/47 Signature Algorithm: sha256WithRSAEncryption 03:ea:15:7b:48:6a:d8:32:95:3d:4a:32:ab:b5:0e:a4:7c:93: 6b:74:43:44:8f:f9:c8:88:af:ac:15:6d:9f:47:27:be:c7:b8: a2:6b:f6:d5:7a:f1:ac:b1:72:a2:c1:e2:a7:8c:41:13:39:f1: b3:05:20:48:e0:09:c8:92:a1:ad:9d:24:cb:87:a3:44:14:d2: a3:10:32:3d:05:ca:22:cc:55:40:d7:30:b1:f4:7f:b1:84:fa: 4b:b8:9f:b9:d8:f6:a3:1c:07:5e:a5:0a:50:e0:1a:08:f2:c7: ea:39:a8:40:cb:1f:8c:92:1c:9b:c2:9f:9f:d9:6b:39:e1:5b: 55:16:c9:f5:2e:12:0e:59:f4:37:8b:4b:1d:c3:16:a9:25:e5: 0f:e5:82:df:db:25:d4:e8:15:9a:ed:a3:6b:5d:0f:e8:b4:13: a6:fe:a7:6a:f6:e0:e6:a2:c0:d7:9b:4c:6e:5e:7d:5e:83:25: 49:b3:5a:45:34:da:50:03:a5:8c:5d:5d:ed:c1:58:6d:f5:8a: dc:ab:25:9d:56:a3:6a:c1:9b:cc:d9:6c:eb:5e:dc:31:19:f7: 47:b7:a1:9d:0d:fc:77:0c:b1:d0:10:4f:85:7c:02:c5:e8:16: a6:56:d7:00:30:82:51:63:19:8c:c3:56:ee:3f:0d:08:47:ec: 7e:d9:f4:45 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHccamLIjUaIdhkqrOuFkfOS9Ep4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1NDU3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzIxNjdmZTMzYzBmNTNkOThjZGEyMGRhMWI5Y2FlOGRm OTM2N2E2NTI5MTQzMDZiOWYxNjAyM2ZlNTliODM2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHCNtuBUcTXfMQRSdzz5buc9uIa3BtE15V18/YxQ6RD9bG qJTNTcccvu0EZSX6+uOD97CxPKkyyCuU9PaaZQv+CAAqlIoehkoljqKfUnEu5ASS B9xBlLhhU1gxoW+zPtv/ziRS/s3cEmDzDg3zNWVGARhK08nCiag8vPsDgmg6Z+ja C8hiAUOqzwZrzR7AY0lmhCZo7c8UTbh6KV1Ykbrofa/hR8ZpJGyAw7kIxtck46RQ 248/10IfBrbClTFNCsRBAeuRu2h6jjLgZrIL9hK0aAC0LKP14KC4Uqm9LUYpC8+r Ss9W1k40RZLc78SyfvsPxOlusaZMcN16kiHUkhI7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIdJUyHBC1/S0xfF6GxiAoydqJU0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzgwNDA5OWVjLTU4MGQtNDJhNy04NzNhLTBkNWMyYzNlNjVkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOEAwDQYJKoZIhvcNAQELBQADggEBAAPqFXtIatgylT1KMqu1DqR8 k2t0Q0SP+ciIr6wVbZ9HJ77HuKJr9tV68ayxcqLB4qeMQRM58bMFIEjgCciSoa2d JMuHo0QU0qMQMj0FyiLMVUDXMLH0f7GE+ku4n7nY9qMcB16lClDgGgjyx+o5qEDL H4ySHJvCn5/ZaznhW1UWyfUuEg5Z9DeLSx3DFqkl5Q/lgt/bJdToFZrto2tdD+i0 E6b+p2r24OaiwNebTG5efV6DJUmzWkU02lADpYxdXe3BWG31ityrJZ1Wo2rBm8zZ bOte3DEZ90e3oZ0N/HcMsdAQT4V8AsXoFqZW1wAwglFjGYzDVu4/DQhH7H7Z9EU= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:24 2025 by rpki-client