$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/929e5ddf-6856-4f6b-a0fb-d585707d1332.roa File: 929e5ddf-6856-4f6b-a0fb-d585707d1332.roa (raw, json) Hash identifier: S66UEYB6xjcjsCqu37ms69FPCNvjSIJ/W3xOiIkwRko= Subject key identifier: 99:1F:6C:AA:F2:16:B6:5C:14:8C:33:74:DC:40:A5:58:61:5F:BF:C4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 373C5A348A7C33F4861EFF6E19F602516F627788 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/929e5ddf-6856-4f6b-a0fb-d585707d1332.roa Signing time: Fri 31 Oct 2025 07:42:43 +0000 ROA not before: Fri 31 Oct 2025 07:42:43 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3ec0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3c:5a:34:8a:7c:33:f4:86:1e:ff:6e:19:f6:02:51:6f:62:77:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:42:43 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=34f4a9ebb6c7aa73042168752a0329f4cc7bf58f211f8ea574d22b29e62eae70, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:9c:73:ce:45:e4:90:7e:2f:79:ce:dc:fa: d2:89:71:1c:58:d0:28:51:4d:7c:1c:2a:e8:63:3c: 5b:3b:34:6a:82:96:e3:91:d6:80:0b:12:1f:f3:79: 81:bf:17:2e:e5:c3:38:20:88:75:74:1d:bf:8f:25: 2a:9c:ea:dd:3a:a6:af:b4:19:fe:86:e0:73:07:fc: 7f:44:96:c3:3c:fe:06:28:3f:69:de:50:21:56:ac: 7a:04:93:1d:1f:96:76:ea:63:ae:38:62:79:db:e7: f6:64:ee:b4:29:b4:a4:e1:35:97:e3:8e:0c:32:1b: ea:7d:16:d5:28:3d:08:6e:e2:d9:df:4f:8c:f5:0b: f6:cd:3d:81:3b:9b:1b:21:e5:c0:5c:bb:af:d3:07: 5c:79:dd:b6:de:f1:f9:3e:9e:02:66:9b:81:8b:0f: 16:89:59:4c:77:2f:17:14:e4:dd:3f:29:7b:70:41: d1:18:93:14:be:37:e0:e3:53:43:58:0f:8c:e6:e1: 01:75:c4:c0:3c:a9:2a:dc:02:96:c0:99:fb:4e:c5: ab:e3:95:eb:14:e1:57:2e:d6:a7:0c:a5:2e:0b:7d: 3b:f5:15:12:32:d6:58:6a:8a:96:2e:7e:e4:21:95: 99:78:56:5d:c2:82:a3:a0:b6:1f:5c:19:d0:b1:d2: 52:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1F:6C:AA:F2:16:B6:5C:14:8C:33:74:DC:40:A5:58:61:5F:BF:C4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/929e5ddf-6856-4f6b-a0fb-d585707d1332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3ec0::/42 Signature Algorithm: sha256WithRSAEncryption 30:1f:00:c2:ea:80:2c:ac:50:8c:1d:1f:47:07:9a:86:81:9b: 34:d8:fc:12:31:d9:30:9a:f4:fc:c6:50:25:29:74:f3:f8:ab: a4:b7:03:27:b9:d4:fd:5b:75:38:13:be:5c:74:c8:ca:ab:72: f9:9f:9a:5a:4b:ba:55:3d:7c:a2:cf:3b:1e:36:02:12:dc:4c: 7d:b0:84:c9:f2:7f:23:1e:d6:29:fd:aa:2c:84:ff:2c:10:b9: 73:43:64:c9:8c:d2:e8:b7:5f:e2:a0:ff:01:d6:0a:2c:7e:5c: b9:75:6a:ea:fc:b4:c6:fc:4b:3e:03:a4:3f:22:2d:24:78:0a: 42:ec:ba:9d:35:b6:7b:0d:cd:64:3f:03:0d:4f:69:17:77:ce: c2:09:aa:2d:e3:ee:5a:39:47:7e:d9:39:c5:9a:f4:15:a6:d9: bd:ca:ec:5d:7b:ba:43:46:50:39:d9:b7:50:9c:68:7c:58:0f: e5:29:61:f3:5d:16:78:e0:ac:4a:41:7e:6e:83:33:12:8c:85: e2:ac:cf:bc:dd:4c:0d:51:f7:e6:40:b2:70:cb:77:84:9d:21: 08:71:21:56:cc:31:dc:82:dd:76:af:12:12:e3:5e:09:7e:89: 5a:6e:96:b3:58:c6:46:0e:66:be:69:83:d4:e4:cb:ac:b6:e0: e5:83:30:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNzxaNIp8M/SGHv9uGfYCUW9id4gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc0MjQzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGY0YTllYmI2YzdhYTczMDQyMTY4NzUyYTAzMjlmNGNj N2JmNThmMjExZjhlYTU3NGQyMmIyOWU2MmVhZTcwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMn5xzzkXkkH4vec7c+tKJcRxY0ChRTXwcKuhjPFs7NGqC luOR1oALEh/zeYG/Fy7lwzggiHV0Hb+PJSqc6t06pq+0Gf6G4HMH/H9ElsM8/gYo P2neUCFWrHoEkx0flnbqY644Ynnb5/Zk7rQptKThNZfjjgwyG+p9FtUoPQhu4tnf T4z1C/bNPYE7mxsh5cBcu6/TB1x53bbe8fk+ngJmm4GLDxaJWUx3LxcU5N0/KXtw QdEYkxS+N+DjU0NYD4zm4QF1xMA8qSrcApbAmftOxavjlesU4Vcu1qcMpS4LfTv1 FRIy1lhqipYufuQhlZl4Vl3CgqOgth9cGdCx0lLdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmR9sqvIWtlwUjDN03EClWGFfv8QwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzkyOWU1ZGRmLTY4NTYtNGY2Yi1hMGZiLWQ1ODU3MDdkMTMzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAJAAPsAwDQYJKoZIhvcNAQELBQADggEBADAfAMLqgCysUIwdH0cHmoaB mzTY/BIx2TCa9PzGUCUpdPP4q6S3Aye51P1bdTgTvlx0yMqrcvmfmlpLulU9fKLP Ox42AhLcTH2whMnyfyMe1in9qiyE/ywQuXNDZMmM0ui3X+Kg/wHWCix+XLl1aur8 tMb8Sz4DpD8iLSR4CkLsup01tnsNzWQ/Aw1PaRd3zsIJqi3j7lo5R37ZOcWa9BWm 2b3K7F17ukNGUDnZt1CcaHxYD+UpYfNdFnjgrEpBfm6DMxKMheKsz7zdTA1R9+ZA snDLd4SdIQhxIVbMMdyC3XavEhLjXgl+iVpulrNYxkYOZr5pg9Tky6y24OWDMGQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:18 2025 by rpki-client