$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88fbad49-8801-4a04-bad5-7550c3a2f3aa.roa File: 88fbad49-8801-4a04-bad5-7550c3a2f3aa.roa (raw, json) Hash identifier: eFDT5tdkLxx+lPhkKV7QPKoqd93G6Tf2U3aHBPGsfc0= Subject key identifier: 1C:24:42:DD:37:E5:E5:69:3C:36:CC:46:41:AB:03:8F:44:35:90:7B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4CB7264309D35A714DA9525E7B9E6B04FF780996 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88fbad49-8801-4a04-bad5-7550c3a2f3aa.roa Signing time: Fri 31 Oct 2025 04:36:39 +0000 ROA not before: Fri 31 Oct 2025 04:36:39 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:39e8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b7:26:43:09:d3:5a:71:4d:a9:52:5e:7b:9e:6b:04:ff:78:09:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:36:39 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=b20c23ce899a292467b7ffe49326741e8ae1fe76c065ae566ba725a303850206, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:f2:1f:d9:34:cf:8e:6a:e8:4f:39:bd:54: a4:18:de:0a:4a:00:bb:13:e5:81:3d:a0:ab:a1:16: cd:43:49:ac:c2:42:66:7c:cf:03:6d:4c:9a:4b:5e: cf:17:d4:d3:d9:1a:74:b6:90:dc:f2:94:73:09:d4: 7a:d1:73:a8:c8:a1:19:3d:d4:aa:1e:78:ed:9d:e9: 32:b3:55:d9:46:14:22:57:b2:78:4f:01:32:48:1f: 6c:f2:07:c0:70:e4:7d:a1:5c:ff:5b:34:60:14:51: 32:44:bf:ea:0b:a4:09:5b:5e:23:7d:b2:43:b7:3c: 9b:06:85:5b:37:b3:3b:cf:59:64:4b:dd:7b:73:21: 22:1c:53:27:4d:8d:fb:c3:da:54:e9:91:6b:3c:cb: 77:6e:56:83:0d:20:33:27:ed:ed:16:2a:43:eb:a9: 7f:ae:76:d2:f1:94:63:dc:61:ec:d6:b6:09:e9:e2: 11:f6:c8:97:fe:8b:a0:5f:62:54:f8:f2:87:46:2b: 82:2c:db:fd:f7:68:e8:4c:05:83:cf:f7:6f:c5:32: ff:2c:d3:f7:2d:be:f3:0d:e2:b1:da:fb:86:00:61: 13:e8:a9:2d:ce:bc:12:2d:ae:c9:4c:b1:c5:5b:a5: bc:9e:46:03:ce:04:1c:70:f1:cd:b4:61:5c:48:d7: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:24:42:DD:37:E5:E5:69:3C:36:CC:46:41:AB:03:8F:44:35:90:7B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88fbad49-8801-4a04-bad5-7550c3a2f3aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:39e8::/46 Signature Algorithm: sha256WithRSAEncryption 3c:38:2b:a5:2d:05:a4:29:fb:3d:12:fc:f0:9e:38:a0:d6:aa: 7a:6a:79:2b:cd:6f:9b:1e:f6:c7:37:61:1f:5b:4d:76:2a:02: 88:5e:e4:cd:d6:ec:a1:b7:67:57:e1:95:b2:0e:45:6b:e9:a1: 03:7e:15:68:fb:01:16:1b:ca:be:4e:95:e5:87:e0:92:9b:b5: 1d:54:9b:39:bd:29:99:23:a6:1d:7c:d4:01:1a:a0:94:ba:bd: 05:d2:19:20:91:2d:a4:f1:2f:fc:e3:73:9f:05:b6:aa:df:66: 00:b1:8a:c4:5e:e1:d5:73:e0:0b:b0:28:92:e4:ca:94:f7:15: 14:e2:4f:bc:07:78:16:0f:ad:ff:95:4c:93:45:71:9a:73:44: a3:60:7e:57:34:b5:29:55:1c:2a:76:4c:84:86:a2:ee:6f:c7: 8a:de:7d:ac:4b:b3:07:03:f3:13:9a:e9:12:b8:d5:b4:cf:77: 1e:30:2b:7e:16:42:4b:60:6e:75:2e:64:ae:fe:23:16:51:c3: 6c:ad:bb:fd:0a:28:67:75:b7:a5:95:2b:4d:1b:08:e8:92:fe: 90:d6:fc:cc:80:c2:96:61:f4:82:d9:c3:2b:0b:52:9d:b9:9f: 21:89:49:b8:8d:37:9d:e9:59:e4:12:53:df:a8:5b:27:59:97: 06:43:02:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTLcmQwnTWnFNqVJee55rBP94CZYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQzNjM5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjBjMjNjZTg5OWEyOTI0NjdiN2ZmZTQ5MzI2NzQxZThh ZTFmZTc2YzA2NWFlNTY2YmE3MjVhMzAzODUwMjA2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMjPIf2TTPjmroTzm9VKQY3gpKALsT5YE9oKuhFs1DSazC QmZ8zwNtTJpLXs8X1NPZGnS2kNzylHMJ1HrRc6jIoRk91KoeeO2d6TKzVdlGFCJX snhPATJIH2zyB8Bw5H2hXP9bNGAUUTJEv+oLpAlbXiN9skO3PJsGhVs3szvPWWRL 3XtzISIcUydNjfvD2lTpkWs8y3duVoMNIDMn7e0WKkPrqX+udtLxlGPcYezWtgnp 4hH2yJf+i6BfYlT48odGK4Is2/33aOhMBYPP92/FMv8s0/ctvvMN4rHa+4YAYRPo qS3OvBItrslMscVbpbyeRgPOBBxw8c20YVxI19f5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHCRC3Tfl5Wk8NsxGQasDj0Q1kHswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg4ZmJhZDQ5LTg4MDEtNGEwNC1iYWQ1LTc1NTBjM2EyZjNhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAOegwDQYJKoZIhvcNAQELBQADggEBADw4K6UtBaQp+z0S/PCeOKDW qnpqeSvNb5se9sc3YR9bTXYqAohe5M3W7KG3Z1fhlbIORWvpoQN+FWj7ARYbyr5O leWH4JKbtR1Umzm9KZkjph181AEaoJS6vQXSGSCRLaTxL/zjc58FtqrfZgCxisRe 4dVz4AuwKJLkypT3FRTiT7wHeBYPrf+VTJNFcZpzRKNgflc0tSlVHCp2TISGou5v x4refaxLswcD8xOa6RK41bTPdx4wK34WQktgbnUuZK7+IxZRw2ytu/0KKGd1t6WV K00bCOiS/pDW/MyAwpZh9ILZwysLUp25nyGJSbiNN53pWeQSU9+oWydZlwZDAtE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:07 2025 by rpki-client