$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/961454af-01fa-4ee8-9d41-31cb74a9fe9e.roa File: 961454af-01fa-4ee8-9d41-31cb74a9fe9e.roa (raw, json) Hash identifier: oExcMbSCakj3NGVadN80988cb/7ZYe+OidGd9BlhQsw= Subject key identifier: C5:C7:EF:D9:84:4D:E9:C5:08:ED:37:62:03:65:AD:E0:5A:2A:FB:68 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 72149A39BD0D05CB704827C8D590C2C8049F3047 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/961454af-01fa-4ee8-9d41-31cb74a9fe9e.roa Signing time: Thu 30 Oct 2025 23:37:08 +0000 ROA not before: Thu 30 Oct 2025 23:37:08 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2e18::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:14:9a:39:bd:0d:05:cb:70:48:27:c8:d5:90:c2:c8:04:9f:30:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:37:08 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=726ad8c8870d724c0675c00e30541f3b85593c6105a15528567695b7be7f2531, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:33:9b:a5:21:1a:05:40:98:a9:d9:7d:27: 3f:14:db:ef:90:2c:25:b0:12:c7:b4:9f:0b:1a:d1: 95:11:fa:11:33:95:ab:1d:dd:01:2a:a6:97:5b:8d: 8d:b5:17:c3:d8:b8:f8:ce:af:96:d7:7b:4a:1a:ca: 18:ba:71:3d:ea:63:07:96:22:a5:9a:1a:21:52:db: 19:3d:cb:6c:02:36:c6:6f:e3:3e:8f:07:4d:e6:0c: 79:b3:d3:68:da:e9:d7:89:03:80:c7:53:a4:70:86: b6:41:a7:c5:1d:af:11:38:92:38:b1:90:80:ff:53: be:60:5a:b1:aa:65:4f:c7:85:d2:f6:cd:95:f5:dc: 92:5f:eb:be:3f:2f:7f:40:03:06:21:56:d2:55:16: ac:b4:6a:a2:ca:23:70:8e:da:c8:9c:43:e6:b3:d4: 6f:88:17:3d:e6:db:f2:f5:6b:de:c0:0f:63:63:c1: aa:c4:76:fb:7f:62:54:bf:f5:b0:b0:3b:8b:2d:c2: 05:e2:4a:c5:1c:58:72:a8:3f:8f:2b:fd:0a:dd:fb: 0b:44:a4:3e:9b:3d:24:41:6b:aa:29:18:47:07:3a: 54:06:82:6d:d7:65:97:9b:36:29:fa:74:65:44:4e: 9d:67:5c:d4:9d:15:6d:eb:54:0c:dc:d2:ba:78:1f: 40:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C7:EF:D9:84:4D:E9:C5:08:ED:37:62:03:65:AD:E0:5A:2A:FB:68 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/961454af-01fa-4ee8-9d41-31cb74a9fe9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2e18::/47 Signature Algorithm: sha256WithRSAEncryption 8d:9c:7d:c3:38:17:2d:9d:20:9e:4e:57:88:55:17:45:33:9c: 73:fc:ee:02:b1:4d:c9:f6:a2:e8:9a:e4:bb:c3:aa:0a:78:30: b2:7f:fe:1f:80:6b:a9:f5:0b:73:08:6f:2f:b9:00:de:db:58: a8:c7:64:e2:97:05:84:34:37:fb:1c:8c:26:b9:25:ec:94:59: e2:28:80:45:fa:84:fb:a8:24:ef:f6:fc:69:cf:a3:e0:0f:e1: ad:94:d8:44:2a:e1:82:e2:f0:7a:5d:4f:c5:91:f8:96:7b:b1: 06:2a:bd:df:a9:d0:e9:24:1f:a1:ec:17:75:58:4a:80:53:4f: a9:12:2b:8d:32:57:5b:35:0b:cd:dd:bc:0c:85:b8:e9:d3:ad: 81:fe:10:33:db:ab:7b:e5:b4:2f:84:dd:a0:14:23:aa:81:12: ec:a8:6a:8b:be:f3:d5:66:eb:5b:e0:37:89:64:7a:78:70:79: e6:3b:c4:f2:dc:e2:ab:5f:7d:8e:4c:3f:39:9e:3e:35:9f:9d: 62:9e:6c:a1:2d:f1:44:87:6f:e8:c4:60:52:df:df:a1:1a:b1: 94:8c:c8:87:18:ca:f0:21:71:32:5d:3a:d4:8a:e4:5d:36:90: e8:05:11:eb:2a:74:66:1c:22:e5:36:45:1d:99:a7:55:3b:6d: 5e:0f:66:27 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUchSaOb0NBctwSCfI1ZDCyASfMEcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMzNzA4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjZhZDhjODg3MGQ3MjRjMDY3NWMwMGUzMDU0MWYzYjg1 NTkzYzYxMDVhMTU1Mjg1Njc2OTViN2JlN2YyNTMxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCa9TObpSEaBUCYqdl9Jz8U2++QLCWwEse0nwsa0ZUR+hEz lasd3QEqppdbjY21F8PYuPjOr5bXe0oayhi6cT3qYweWIqWaGiFS2xk9y2wCNsZv 4z6PB03mDHmz02ja6deJA4DHU6RwhrZBp8UdrxE4kjixkID/U75gWrGqZU/HhdL2 zZX13JJf674/L39AAwYhVtJVFqy0aqLKI3CO2sicQ+az1G+IFz3m2/L1a97AD2Nj warEdvt/YlS/9bCwO4stwgXiSsUcWHKoP48r/Qrd+wtEpD6bPSRBa6opGEcHOlQG gm3XZZebNin6dGVETp1nXNSdFW3rVAzc0rp4H0DnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxcfv2YRN6cUI7TdiA2Wt4Foq+2gwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk2MTQ1NGFmLTAxZmEtNGVlOC05ZDQxLTMxY2I3NGE5ZmU5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALhgwDQYJKoZIhvcNAQELBQADggEBAI2cfcM4Fy2dIJ5OV4hVF0Uz nHP87gKxTcn2ouia5LvDqgp4MLJ//h+Aa6n1C3MIby+5AN7bWKjHZOKXBYQ0N/sc jCa5JeyUWeIogEX6hPuoJO/2/GnPo+AP4a2U2EQq4YLi8HpdT8WR+JZ7sQYqvd+p 0OkkH6HsF3VYSoBTT6kSK40yV1s1C83dvAyFuOnTrYH+EDPbq3vltC+E3aAUI6qB Euyoaou+89Vm61vgN4lkenhweeY7xPLc4qtffY5MPzmePjWfnWKebKEt8USHb+jE YFLf36EasZSMyIcYyvAhcTJdOtSK5F02kOgFEesqdGYcIuU2RR2Zp1U7bV4PZic= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:15 2025 by rpki-client