$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/84c18f77-e49a-45f3-8782-a46dddb7f712.roa File: 84c18f77-e49a-45f3-8782-a46dddb7f712.roa (raw, json) Hash identifier: ZoVYDS2ABJaDJC4luD9szHFkXZoDhdTTEn4QSelZ8bk= Subject key identifier: A2:A1:18:35:E9:24:94:B3:C0:EB:50:D3:A9:15:40:76:22:AE:90:E6 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0D989B9F188C00CF47018DC300A317E2B4B4FF07 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/84c18f77-e49a-45f3-8782-a46dddb7f712.roa Signing time: Fri 31 Oct 2025 04:06:55 +0000 ROA not before: Fri 31 Oct 2025 04:06:55 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3380::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:98:9b:9f:18:8c:00:cf:47:01:8d:c3:00:a3:17:e2:b4:b4:ff:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:06:55 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=fc4edbac66076d28a6d558a7ae0e0492a3e826f95ee3b70e87446d682daa18b5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:97:a5:c0:b0:91:24:04:b2:0f:82:57:73: ec:5e:9a:b8:e5:ac:c4:ce:30:2b:7a:b5:12:d6:9a: a4:18:69:d9:7a:0b:bc:ad:3b:a0:e8:67:17:a1:ac: 7f:10:b6:9e:0f:7e:fe:e0:bc:ba:e1:e9:83:ee:fb: 4e:c9:0a:03:ee:ff:1b:bb:8d:80:df:87:0e:5b:d0: b0:96:e9:47:8c:d8:7f:ae:d1:23:f5:ba:a7:cc:45: 69:23:26:4c:4d:3c:f9:a6:13:b7:7c:2d:a2:8a:a7: c0:46:13:97:8c:f9:f2:e7:bd:b0:75:ac:27:e5:b7: 67:96:06:98:20:c1:68:d3:87:64:60:1b:fd:1a:c0: aa:fd:bc:50:4d:3e:ab:f1:ba:dc:39:f3:f6:14:0c: 1a:1d:5b:d0:ad:6e:53:e1:6d:20:07:70:6f:f6:1e: bb:3d:ff:62:f8:15:8c:4f:ce:d3:f9:67:d8:89:18: a0:77:31:87:df:18:fa:cb:71:a7:ba:d3:0a:70:73: 51:76:7c:3c:ed:7f:62:0c:4d:4e:84:93:d0:47:00: 3e:ba:f1:b6:db:9c:04:60:e9:15:8f:27:76:90:93: 42:4e:d9:78:dd:f4:ec:e9:4f:32:a8:7a:22:12:47: 97:ab:19:33:47:d1:1d:f1:49:dc:7d:a2:f8:6e:53: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A1:18:35:E9:24:94:B3:C0:EB:50:D3:A9:15:40:76:22:AE:90:E6 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/84c18f77-e49a-45f3-8782-a46dddb7f712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3380::/46 Signature Algorithm: sha256WithRSAEncryption 5e:b5:10:a2:8d:20:03:bb:c0:db:50:04:7c:d5:b3:4f:bb:45: fe:02:d6:43:d7:5e:80:bc:91:cc:85:f7:a8:01:59:05:a1:72: e5:92:a8:8d:8c:7a:1e:65:bd:cc:a1:15:cd:9e:db:5d:62:d8: 1e:e9:2b:06:5a:1f:2a:11:2a:be:a6:23:4a:a7:84:a7:b0:44: 70:fc:eb:30:e2:d5:6d:90:ae:7e:9f:12:12:ba:f2:5d:e4:e0: 1a:44:58:d1:2e:78:e0:82:6e:88:9e:00:ce:fd:f2:af:71:07: e4:eb:43:51:e5:97:a8:e9:de:4a:ad:40:4a:72:27:9c:ee:d2: c3:7e:6c:4c:e0:19:cb:f4:4d:7e:20:10:71:9a:0f:0a:f3:e4: ee:f4:94:cc:19:43:c7:b9:e3:87:80:27:3f:f4:8f:d0:9b:97: 3d:74:1d:48:ef:c5:22:42:f1:75:4c:fd:46:27:6c:21:d1:18: fb:cf:91:a8:3f:df:18:95:e0:3b:17:97:5d:96:00:5a:6b:1e: e0:29:de:79:49:eb:85:09:87:e8:c6:6f:41:c1:49:81:44:c0: a6:9a:af:63:5d:31:a9:24:ca:14:ac:ca:2a:19:b2:b1:2a:78: 3b:7b:71:25:d3:6f:e3:31:5b:10:30:f9:34:b5:60:a4:f0:4d: 82:72:66:ec -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDZibnxiMAM9HAY3DAKMX4rS0/wcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQwNjU1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzRlZGJhYzY2MDc2ZDI4YTZkNTU4YTdhZTBlMDQ5MmEz ZTgyNmY5NWVlM2I3MGU4NzQ0NmQ2ODJkYWExOGI1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt+pelwLCRJASyD4JXc+xemrjlrMTOMCt6tRLWmqQYadl6 C7ytO6DoZxehrH8Qtp4Pfv7gvLrh6YPu+07JCgPu/xu7jYDfhw5b0LCW6UeM2H+u 0SP1uqfMRWkjJkxNPPmmE7d8LaKKp8BGE5eM+fLnvbB1rCflt2eWBpggwWjTh2Rg G/0awKr9vFBNPqvxutw58/YUDBodW9CtblPhbSAHcG/2Hrs9/2L4FYxPztP5Z9iJ GKB3MYffGPrLcae60wpwc1F2fDztf2IMTU6Ek9BHAD668bbbnARg6RWPJ3aQk0JO 2Xjd9OzpTzKoeiISR5erGTNH0R3xSdx9ovhuU4PLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoqEYNekklLPA61DTqRVAdiKukOYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg0YzE4Zjc3LWU0OWEtNDVmMy04NzgyLWE0NmRkZGI3ZjcxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAM4AwDQYJKoZIhvcNAQELBQADggEBAF61EKKNIAO7wNtQBHzVs0+7 Rf4C1kPXXoC8kcyF96gBWQWhcuWSqI2Meh5lvcyhFc2e211i2B7pKwZaHyoRKr6m I0qnhKewRHD86zDi1W2Qrn6fEhK68l3k4BpEWNEueOCCboieAM798q9xB+TrQ1Hl l6jp3kqtQEpyJ5zu0sN+bEzgGcv0TX4gEHGaDwrz5O70lMwZQ8e544eAJz/0j9Cb lz10HUjvxSJC8XVM/UYnbCHRGPvPkag/3xiV4DsXl12WAFprHuAp3nlJ64UJh+jG b0HBSYFEwKaar2NdMakkyhSsyioZsrEqeDt7cSXTb+MxWxAw+TS1YKTwTYJyZuw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:32 2025 by rpki-client