$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88600fed-12d1-4bec-a3cf-f9dfde15a22d.roa File: 88600fed-12d1-4bec-a3cf-f9dfde15a22d.roa (raw, json) Hash identifier: pSdJpgRUcBp0nV8EzsKP7ldesWOKEr8p2AWSGWnlv7U= Subject key identifier: 49:58:7C:CB:D9:7E:5E:3E:1C:8B:5A:32:AC:49:A6:17:8A:AB:D1:2F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 766648C6503E9C43DD78A297CA3C4F18F12A5658 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88600fed-12d1-4bec-a3cf-f9dfde15a22d.roa Signing time: Fri 31 Oct 2025 06:55:15 +0000 ROA not before: Fri 31 Oct 2025 06:55:15 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:33f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:66:48:c6:50:3e:9c:43:dd:78:a2:97:ca:3c:4f:18:f1:2a:56:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:55:15 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0687a50d0acc2805ca6332b07fac050e4a709381d1b1afe87d3b4e535b06a552, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:84:4f:24:34:07:33:78:a1:d4:71:5c:67: 07:36:9b:91:70:f5:67:e7:92:f8:00:52:5b:0d:88: 88:5e:3a:83:4e:48:f4:fd:4d:27:9e:84:d4:f6:3d: 3e:44:93:6f:6e:a4:5d:a5:8b:c9:cb:f8:7b:6f:4a: 74:0a:56:05:00:2b:c8:03:06:3e:ce:24:d0:e1:2f: 4f:73:19:f6:2b:00:7f:9a:62:7e:8d:7e:3d:af:72: ef:94:50:69:00:50:21:a5:93:1a:ee:37:42:ec:93: 90:c6:f0:00:f4:45:f1:b2:3b:85:f2:29:26:03:b0: 38:6d:3c:d5:3b:86:82:33:73:8b:e8:13:70:4c:c9: 4d:b4:a2:1d:91:10:ee:a5:cb:83:a0:02:ca:9c:e4: d7:9f:ab:bc:eb:72:2c:50:44:70:80:6c:30:00:48: da:b6:e7:d7:cb:05:bd:4a:9a:74:1e:80:42:4c:6d: 7c:0b:ae:3f:09:81:4a:f7:b6:0b:04:3f:9a:11:22: 13:22:8d:88:60:73:c8:c8:5f:48:63:f0:53:88:6e: b8:f3:07:ed:ac:c6:86:a9:2f:43:e1:e7:fa:c7:3a: fe:3a:e3:ea:ef:18:47:6d:0b:e5:1b:cc:56:fd:1a: 8d:2c:8d:38:c9:15:b2:b6:c3:e7:d7:42:cd:fa:9c: 87:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:58:7C:CB:D9:7E:5E:3E:1C:8B:5A:32:AC:49:A6:17:8A:AB:D1:2F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88600fed-12d1-4bec-a3cf-f9dfde15a22d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:33f0::/44 Signature Algorithm: sha256WithRSAEncryption a5:eb:85:0a:50:d4:38:c2:95:e4:1d:5e:82:6d:e8:0e:f9:20: 61:48:e1:c0:c3:e1:19:29:81:9e:49:bb:95:59:6c:ee:6e:b3: 61:9b:ad:6f:65:d7:ae:cb:93:ff:2e:fb:74:84:e0:ac:b5:b4: e9:12:35:f0:72:87:71:67:af:22:06:c7:69:90:6b:b9:9b:75: 92:65:b5:98:c5:29:7a:d3:ab:17:92:7d:a4:ba:e0:0d:2c:68: a8:d5:63:d3:d7:86:5d:89:9e:e8:3f:c8:eb:79:48:b1:f8:60: 75:e6:5f:19:0b:63:66:d8:99:0e:f1:70:e3:07:80:fa:fc:4d: cf:9e:dd:09:e4:46:fb:c9:ab:5a:89:6f:c0:cf:f2:9e:fa:b1: 2a:12:4f:92:56:2d:34:15:4d:82:e8:9e:72:e7:bf:ab:a4:e7: 9c:91:be:d1:9e:01:33:db:80:e2:e9:ea:69:0d:74:92:f6:c1: d1:17:8b:15:52:ff:1d:91:40:60:32:d5:5b:fe:69:40:0d:55: b6:ec:07:e1:2f:05:97:9e:a3:f8:23:80:b6:8e:6f:8a:ce:31: ed:65:a1:d4:1a:df:b9:c1:c0:dd:cd:85:02:31:9d:7c:24:d2: 11:35:4e:7a:cf:e4:4d:76:e2:c4:f3:97:ea:8e:af:5a:ed:a0: e5:86:45:e5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdmZIxlA+nEPdeKKXyjxPGPEqVlgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY1NTE1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjg3YTUwZDBhY2MyODA1Y2E2MzMyYjA3ZmFjMDUwZTRh NzA5MzgxZDFiMWFmZTg3ZDNiNGU1MzViMDZhNTUyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGAoRPJDQHM3ih1HFcZwc2m5Fw9WfnkvgAUlsNiIheOoNO SPT9TSeehNT2PT5Ek29upF2li8nL+HtvSnQKVgUAK8gDBj7OJNDhL09zGfYrAH+a Yn6Nfj2vcu+UUGkAUCGlkxruN0Lsk5DG8AD0RfGyO4XyKSYDsDhtPNU7hoIzc4vo E3BMyU20oh2REO6ly4OgAsqc5Nefq7zrcixQRHCAbDAASNq259fLBb1KmnQegEJM bXwLrj8JgUr3tgsEP5oRIhMijYhgc8jIX0hj8FOIbrjzB+2sxoapL0Ph5/rHOv46 4+rvGEdtC+UbzFb9Go0sjTjJFbK2w+fXQs36nIcrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSVh8y9l+Xj4ci1oyrEmmF4qr0S8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg4NjAwZmVkLTEyZDEtNGJlYy1hM2NmLWY5ZGZkZTE1YTIyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAM/AwDQYJKoZIhvcNAQELBQADggEBAKXrhQpQ1DjCleQdXoJt6A75 IGFI4cDD4RkpgZ5Ju5VZbO5us2GbrW9l167Lk/8u+3SE4Ky1tOkSNfByh3FnryIG x2mQa7mbdZJltZjFKXrTqxeSfaS64A0saKjVY9PXhl2Jnug/yOt5SLH4YHXmXxkL Y2bYmQ7xcOMHgPr8Tc+e3QnkRvvJq1qJb8DP8p76sSoST5JWLTQVTYLonnLnv6uk 55yRvtGeATPbgOLp6mkNdJL2wdEXixVS/x2RQGAy1Vv+aUANVbbsB+EvBZeeo/gj gLaOb4rOMe1lodQa37nBwN3NhQIxnXwk0hE1TnrP5E124sTzl+qOr1rtoOWGReU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:36 2025 by rpki-client