$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/962bd0c6-48b3-446b-b05c-e043f940a7c6.roa File: 962bd0c6-48b3-446b-b05c-e043f940a7c6.roa (raw, json) Hash identifier: bSPxrYDQchaFm0e0E4PEPcXoJiWlKQeMKhHJ2yXRvXk= Subject key identifier: 0A:25:21:66:D4:8A:E6:7B:AA:4A:77:6A:73:D0:C2:98:BB:5F:3C:53 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0B9C0E9DAE61918898963BEF74488C90DACC58C2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/962bd0c6-48b3-446b-b05c-e043f940a7c6.roa Signing time: Fri 31 Oct 2025 07:23:55 +0000 ROA not before: Fri 31 Oct 2025 07:23:55 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2b80::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9c:0e:9d:ae:61:91:88:98:96:3b:ef:74:48:8c:90:da:cc:58:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:23:55 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c0d716f1c2e3bd7ac1505a42f4970cd4e387aedb190308af0abf888675eb0b87, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:64:2d:22:82:c7:c2:04:80:e7:46:65:85: f0:6d:5f:a4:8d:ad:45:bb:3f:bd:a2:0e:04:ad:5a: 5f:f1:ea:c4:ea:76:9b:18:1e:0f:1e:9e:de:99:e5: 5f:28:4c:20:de:40:7f:4b:9a:a2:9d:89:50:75:1a: 18:bb:19:b7:33:9d:bc:0a:56:72:23:0c:45:fc:f6: 0e:66:74:b7:a2:47:94:e7:9b:59:04:c0:fa:75:75: 12:49:7d:17:10:33:e5:d2:3c:17:f5:b5:0a:83:31: df:4f:0b:b4:3f:f9:b6:a6:e6:c5:5a:d8:32:ae:68: 8e:09:27:03:76:9c:c5:9e:a6:24:92:7b:73:d4:6b: b5:95:a2:5a:40:79:3b:b9:48:96:68:61:ba:7c:3f: d2:b3:1f:8d:05:95:b4:43:25:6d:65:90:ec:ac:7d: ba:47:ed:9f:b7:a8:d2:c6:95:8d:11:13:aa:a8:ac: c6:de:e4:9d:c2:1e:ca:64:f7:03:8b:c9:b5:1a:1f: ae:0b:fa:93:3f:8b:5c:9b:26:e7:c5:96:eb:49:eb: 97:35:04:73:8e:15:c5:d6:2b:fd:70:75:b3:cb:fc: 7d:e7:32:55:c2:1f:9a:ee:cc:51:9d:0d:0a:d7:a4: f1:ee:f4:73:3d:2e:e4:88:5d:e2:01:27:6e:d4:37: 98:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:25:21:66:D4:8A:E6:7B:AA:4A:77:6A:73:D0:C2:98:BB:5F:3C:53 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/962bd0c6-48b3-446b-b05c-e043f940a7c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2b80::/43 Signature Algorithm: sha256WithRSAEncryption 51:76:41:07:43:f1:f3:f1:b2:7c:48:38:3b:bd:29:b2:58:d2: 44:d2:08:68:7e:3c:a8:3b:7b:14:b7:8a:db:d6:76:88:00:44: 75:fe:4a:ad:0d:70:88:cb:fc:36:71:15:d1:76:a8:48:44:1f: c2:19:52:67:fe:ad:0b:8b:0c:f2:77:fa:c7:49:08:56:ab:15: f3:9c:1d:5c:36:ad:8c:b2:4c:c1:3f:a2:e3:b5:2c:de:6a:de: c6:b0:c1:f8:b5:68:e7:b4:1b:c3:80:9a:1f:18:83:9e:8d:06: a3:d8:f0:f0:a4:c6:55:99:49:42:e9:5e:39:0e:5a:01:9e:42: 9f:85:65:c6:67:eb:3e:08:44:94:23:43:80:ad:9f:50:97:8e: e4:15:dc:4c:fd:a0:67:69:2e:a4:7a:43:58:e6:c8:b8:b6:ec: 37:85:5d:98:e1:9c:fb:fb:d3:6a:4c:3e:a6:36:b2:1d:99:d9: 07:89:e7:02:14:2b:41:42:af:c8:7c:f5:5b:ff:d1:15:bf:79: 2b:72:43:7b:08:cd:4e:0f:d2:76:b0:43:36:f1:f7:24:7e:10: ab:4f:5f:bf:79:bd:b1:1a:85:a2:16:04:52:9e:47:19:09:59: d7:d2:9a:77:b7:be:6c:1d:93:20:9d:69:7b:10:a6:a3:28:a8: 81:be:fb:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC5wOna5hkYiYljvvdEiMkNrMWMIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcyMzU1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMGQ3MTZmMWMyZTNiZDdhYzE1MDVhNDJmNDk3MGNkNGUz ODdhZWRiMTkwMzA4YWYwYWJmODg4Njc1ZWIwYjg3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6PWQtIoLHwgSA50ZlhfBtX6SNrUW7P72iDgStWl/x6sTq dpsYHg8ent6Z5V8oTCDeQH9LmqKdiVB1Ghi7GbcznbwKVnIjDEX89g5mdLeiR5Tn m1kEwPp1dRJJfRcQM+XSPBf1tQqDMd9PC7Q/+bam5sVa2DKuaI4JJwN2nMWepiSS e3PUa7WVolpAeTu5SJZoYbp8P9KzH40FlbRDJW1lkOysfbpH7Z+3qNLGlY0RE6qo rMbe5J3CHspk9wOLybUaH64L+pM/i1ybJufFlutJ65c1BHOOFcXWK/1wdbPL/H3n MlXCH5ruzFGdDQrXpPHu9HM9LuSIXeIBJ27UN5iTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCiUhZtSK5nuqSndqc9DCmLtfPFMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk2MmJkMGM2LTQ4YjMtNDQ2Yi1iMDVjLWUwNDNmOTQwYTdjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAK4AwDQYJKoZIhvcNAQELBQADggEBAFF2QQdD8fPxsnxIODu9KbJY 0kTSCGh+PKg7exS3itvWdogARHX+Sq0NcIjL/DZxFdF2qEhEH8IZUmf+rQuLDPJ3 +sdJCFarFfOcHVw2rYyyTME/ouO1LN5q3sawwfi1aOe0G8OAmh8Yg56NBqPY8PCk xlWZSULpXjkOWgGeQp+FZcZn6z4IRJQjQ4Ctn1CXjuQV3Ez9oGdpLqR6Q1jmyLi2 7DeFXZjhnPv702pMPqY2sh2Z2QeJ5wIUK0FCr8h89Vv/0RW/eStyQ3sIzU4P0naw Qzbx9yR+EKtPX795vbEahaIWBFKeRxkJWdfSmne3vmwdkyCdaXsQpqMoqIG++/Q= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:39 2025 by rpki-client