$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90a3f782-9f37-412b-a5ce-cf3f8fd77f1f.roa File: 90a3f782-9f37-412b-a5ce-cf3f8fd77f1f.roa (raw, json) Hash identifier: v1h7s561/E/pj+6+hKOCukDS9g4jOcS/xh+gNze2yww= Subject key identifier: D1:65:7C:8F:EE:C2:AA:84:66:35:0C:8E:6C:4B:0F:37:B7:9D:54:94 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 716908F134DA6735AA126EC3F4FD2BC86A6D7D2F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90a3f782-9f37-412b-a5ce-cf3f8fd77f1f.roa Signing time: Fri 31 Oct 2025 07:06:54 +0000 ROA not before: Fri 31 Oct 2025 07:06:54 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3bc0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:69:08:f1:34:da:67:35:aa:12:6e:c3:f4:fd:2b:c8:6a:6d:7d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:06:54 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=98cace4a1ddc3f7c49199ac20881506feebf98f607809bda6ee98603f2ce0ad8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ba:46:b4:45:ed:66:47:ec:8d:dd:27:6a:dd: 86:ce:99:50:ae:ce:08:93:4e:ec:26:3d:5e:66:b2: f1:90:bb:97:6d:4e:ee:64:d7:e5:4a:bf:15:e1:2e: 98:af:c3:58:64:92:61:25:66:e9:a0:e2:a7:e9:d3: 7f:f6:a5:56:84:01:b7:3b:8c:f6:df:b3:27:56:5c: f8:b7:a8:b7:69:13:cf:9b:b8:e2:c3:c4:0c:5e:1a: 1a:31:be:ed:be:7a:d7:ea:24:a3:7e:76:cd:69:5c: 27:f5:80:c3:fe:00:9a:31:44:d1:63:57:9c:c5:3d: 0c:7d:49:62:8a:13:ad:b4:2e:f1:ba:ff:68:15:20: 7b:b5:96:0a:32:2f:49:ab:b8:ff:12:a5:4d:51:af: 49:71:cd:95:15:05:f7:f7:60:3a:80:ca:ea:b3:68: 6f:db:2a:e9:d8:c8:16:1f:52:6a:dc:a8:c6:e7:60: 95:6b:ea:76:48:5e:a2:85:3f:93:b8:50:27:a6:a9: 50:76:b8:c2:ac:14:4d:37:43:55:3a:ed:b7:ba:73: dd:93:7c:ff:61:02:25:e7:b2:97:2b:31:eb:d1:92: c4:76:71:d6:78:6f:ad:38:11:54:cf:cc:04:ce:b5: 9f:3d:b6:30:2e:a0:bd:91:d5:6a:f3:f2:8e:0c:5b: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:65:7C:8F:EE:C2:AA:84:66:35:0C:8E:6C:4B:0F:37:B7:9D:54:94 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90a3f782-9f37-412b-a5ce-cf3f8fd77f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3bc0::/44 Signature Algorithm: sha256WithRSAEncryption 2a:ba:ba:dd:b3:94:7e:3b:e9:9f:ef:3e:43:02:ed:46:f8:1c: 9a:48:9c:2c:46:aa:19:79:92:a2:26:00:9f:c2:85:1a:73:92: 74:83:7a:4a:6c:66:2a:9b:60:e6:7a:4b:0d:b9:90:6e:8c:0a: e8:1d:9d:25:57:10:49:14:6a:3c:0e:25:f0:99:bd:c9:40:77: d4:57:60:df:6b:51:fe:ec:e8:d9:89:1f:66:b8:5c:8f:0c:6a: 83:57:02:24:01:a6:9c:fb:67:2d:f1:7f:62:b6:e5:52:68:10: fe:3f:a1:57:72:8e:c4:26:58:c9:d4:28:b3:f4:10:96:ab:b0: 70:9f:23:04:26:5d:13:f5:eb:f0:f2:48:e1:dc:54:4e:3b:f7: 36:cb:55:17:ce:6e:68:fb:fe:77:85:7a:fc:6e:b5:09:d4:d7: b7:3a:57:ba:7e:3c:61:4e:6b:54:9e:61:64:42:b9:34:58:53: 46:e6:ec:6a:3e:88:99:b5:d2:04:3d:b6:ea:45:b9:a0:d3:78: 47:25:00:50:54:d8:f3:25:dd:6d:fd:ba:40:7a:be:0f:58:65: e3:17:b6:32:bf:ff:9e:b0:8f:7f:70:8e:6c:8f:d5:48:1b:91: 69:ac:30:42:50:46:ed:8e:de:71:24:24:a8:07:37:e2:71:50: 12:d9:9c:f7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcWkI8TTaZzWqEm7D9P0ryGptfS8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcwNjU0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OGNhY2U0YTFkZGMzZjdjNDkxOTlhYzIwODgxNTA2ZmVl YmY5OGY2MDc4MDliZGE2ZWU5ODYwM2YyY2UwYWQ4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVuka0Re1mR+yN3Sdq3YbOmVCuzgiTTuwmPV5msvGQu5dt Tu5k1+VKvxXhLpivw1hkkmElZumg4qfp03/2pVaEAbc7jPbfsydWXPi3qLdpE8+b uOLDxAxeGhoxvu2+etfqJKN+ds1pXCf1gMP+AJoxRNFjV5zFPQx9SWKKE620LvG6 /2gVIHu1lgoyL0mruP8SpU1Rr0lxzZUVBff3YDqAyuqzaG/bKunYyBYfUmrcqMbn YJVr6nZIXqKFP5O4UCemqVB2uMKsFE03Q1U67be6c92TfP9hAiXnspcrMevRksR2 cdZ4b604EVTPzATOtZ89tjAuoL2R1Wrz8o4MW/T9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0WV8j+7CqoRmNQyObEsPN7edVJQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzkwYTNmNzgyLTlmMzctNDEyYi1hNWNlLWNmM2Y4ZmQ3N2YxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAO8AwDQYJKoZIhvcNAQELBQADggEBACq6ut2zlH476Z/vPkMC7Ub4 HJpInCxGqhl5kqImAJ/ChRpzknSDekpsZiqbYOZ6Sw25kG6MCugdnSVXEEkUajwO JfCZvclAd9RXYN9rUf7s6NmJH2a4XI8MaoNXAiQBppz7Zy3xf2K25VJoEP4/oVdy jsQmWMnUKLP0EJarsHCfIwQmXRP16/DySOHcVE479zbLVRfObmj7/neFevxutQnU 17c6V7p+PGFOa1SeYWRCuTRYU0bm7Go+iJm10gQ9tupFuaDTeEclAFBU2PMl3W39 ukB6vg9YZeMXtjK//56wj39wjmyP1UgbkWmsMEJQRu2O3nEkJKgHN+JxUBLZnPc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:28:01 2025 by rpki-client