$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/804bdd22-80d5-4c18-92ea-2ce824e99c6e.roa File: 804bdd22-80d5-4c18-92ea-2ce824e99c6e.roa (raw, json) Hash identifier: o8TFxg9mG6zwFzNtIZ7o2fA8qyKBOaU6xS9nwWQva+I= Subject key identifier: 43:49:A3:2E:5E:33:89:C4:D0:3D:4D:CD:49:5D:2D:64:19:4E:DE:8F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 773025C973CA002F10CDB02B863EC77F5BB80B15 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/804bdd22-80d5-4c18-92ea-2ce824e99c6e.roa Signing time: Fri 31 Oct 2025 00:26:28 +0000 ROA not before: Fri 31 Oct 2025 00:26:28 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3562::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:30:25:c9:73:ca:00:2f:10:cd:b0:2b:86:3e:c7:7f:5b:b8:0b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:26:28 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a382f2afc93c1431fbc337fa95ad1da29b5767482d677afa33d8b59be6cdf4a7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:b2:59:b3:fa:34:a0:42:bb:2b:ec:57:07: 82:18:c3:6c:91:01:29:ff:92:cd:ed:61:a3:37:ba: f7:47:7b:e4:f6:68:35:c4:34:1b:4d:f2:26:41:f4: 8b:77:d3:e4:55:fb:42:cd:f7:db:b8:7b:c8:3b:2e: 28:85:b3:da:1a:43:20:40:b8:f4:f7:48:3b:13:17: 14:d7:7c:1d:29:f5:9b:ef:a9:5e:fd:2b:b8:93:bf: b5:27:98:f9:bb:a9:c5:50:cb:c1:9f:7b:6c:5c:c5: 05:15:20:7f:0d:71:ef:39:0a:b2:c2:c7:0b:5e:26: 43:46:9a:bb:ac:d5:2b:87:22:6c:91:4f:90:1a:65: 0e:e9:e2:99:2b:25:3c:b4:d6:f4:3f:12:d6:ff:21: 2f:29:4b:64:d9:f0:9a:e4:28:aa:4d:d8:d1:ed:56: 3b:7f:30:e8:dc:99:75:79:8b:a5:60:80:0d:59:fb: 04:36:16:bb:c2:b4:7a:f9:d0:a8:57:d1:91:81:3a: fe:6c:bd:f1:79:7f:a8:75:71:c3:f1:ff:16:9f:62: 02:68:fb:a5:d5:a1:22:a1:12:d7:de:d6:d9:7f:1f: 52:f9:42:8c:d8:67:91:cb:80:81:f4:c0:61:f1:6d: 92:23:db:8d:50:b0:ec:f7:1b:97:58:98:46:69:86: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:49:A3:2E:5E:33:89:C4:D0:3D:4D:CD:49:5D:2D:64:19:4E:DE:8F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/804bdd22-80d5-4c18-92ea-2ce824e99c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3562::/47 Signature Algorithm: sha256WithRSAEncryption 7a:f6:b0:d2:1a:ae:d8:22:c4:b2:a9:30:06:be:c6:d2:c3:e8: 26:ed:fb:02:b2:f3:1f:36:cc:63:60:20:bb:7f:e7:94:cc:88: 2d:8c:ec:8a:16:5b:75:20:cd:a5:40:bc:b7:cd:23:58:95:40: 13:28:18:dd:c9:7d:95:05:15:c4:31:dc:72:49:50:05:f0:46: 4c:6a:f3:4a:fc:4b:33:ec:2c:43:dd:bf:74:23:bb:50:0e:a9: f2:9a:c0:2c:9c:77:c4:ba:18:71:b2:7d:4b:24:c7:69:fa:ef: 8d:42:df:8c:2e:f9:50:e8:b0:6f:83:c0:c6:53:21:91:ab:ea: df:4d:b1:19:9b:1c:8d:46:c7:57:86:b1:7d:f5:9e:d5:8c:05: 70:ad:19:48:eb:c1:7a:00:f0:1f:13:6b:0d:95:76:c0:d4:2d: b5:04:4f:f2:d5:63:80:27:00:2b:39:ce:cc:f4:44:fb:1e:8d: 69:f9:e0:2e:ed:f5:df:2d:71:2e:e3:0c:1c:38:79:e0:0b:b0: 23:9d:89:dd:98:11:2e:b8:22:ed:ad:af:d6:db:29:7d:4c:f8: 13:92:5f:a4:c1:e5:cf:b9:3c:01:92:8a:7a:a6:ae:1b:77:6d: 49:ae:9f:f4:ad:37:47:7a:d6:b1:ca:77:2c:93:95:dc:f8:eb: 2d:e4:f4:c7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdzAlyXPKAC8QzbArhj7Hf1u4CxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyNjI4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzgyZjJhZmM5M2MxNDMxZmJjMzM3ZmE5NWFkMWRhMjli NTc2NzQ4MmQ2NzdhZmEzM2Q4YjU5YmU2Y2RmNGE3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXlrJZs/o0oEK7K+xXB4IYw2yRASn/ks3tYaM3uvdHe+T2 aDXENBtN8iZB9It30+RV+0LN99u4e8g7LiiFs9oaQyBAuPT3SDsTFxTXfB0p9Zvv qV79K7iTv7UnmPm7qcVQy8Gfe2xcxQUVIH8Nce85CrLCxwteJkNGmrus1SuHImyR T5AaZQ7p4pkrJTy01vQ/Etb/IS8pS2TZ8JrkKKpN2NHtVjt/MOjcmXV5i6VggA1Z +wQ2FrvCtHr50KhX0ZGBOv5svfF5f6h1ccPx/xafYgJo+6XVoSKhEtfe1tl/H1L5 QozYZ5HLgIH0wGHxbZIj241QsOz3G5dYmEZphtbNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQ0mjLl4zicTQPU3NSV0tZBlO3o8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzgwNGJkZDIyLTgwZDUtNGMxOC05MmVhLTJjZTgyNGU5OWM2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANWIwDQYJKoZIhvcNAQELBQADggEBAHr2sNIartgixLKpMAa+xtLD 6Cbt+wKy8x82zGNgILt/55TMiC2M7IoWW3UgzaVAvLfNI1iVQBMoGN3JfZUFFcQx 3HJJUAXwRkxq80r8SzPsLEPdv3Qju1AOqfKawCycd8S6GHGyfUskx2n6741C34wu +VDosG+DwMZTIZGr6t9NsRmbHI1Gx1eGsX31ntWMBXCtGUjrwXoA8B8Taw2VdsDU LbUET/LVY4AnACs5zsz0RPsejWn54C7t9d8tcS7jDBw4eeALsCOdid2YES64Iu2t r9bbKX1M+BOSX6TB5c+5PAGSinqmrht3bUmun/StN0d61rHKdyyTldz46y3k9Mc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:28:28 2025 by rpki-client