$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9996796e-d1b5-4bb3-9540-46962a1639b8.roa File: 9996796e-d1b5-4bb3-9540-46962a1639b8.roa (raw, json) Hash identifier: ++9rlhdV36CCUk04sA4Q7sj/mK7m7NHw/MzHMrsVS74= Subject key identifier: F2:A6:F2:D1:05:B6:4B:B6:AC:F9:22:1B:FC:44:A1:80:88:C2:57:24 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 52BBF509E55B68DAB552162DF11D1DAC0B45CCF6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9996796e-d1b5-4bb3-9540-46962a1639b8.roa Signing time: Fri 31 Oct 2025 06:38:55 +0000 ROA not before: Fri 31 Oct 2025 06:38:55 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1bc0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bb:f5:09:e5:5b:68:da:b5:52:16:2d:f1:1d:1d:ac:0b:45:cc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:38:55 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=bc118639810161cad99a6d5871058eb33a8f8ff41d91d7a69ae6f36d23ea4a84, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:da:ac:8b:e7:04:08:40:da:97:d1:cc:3a:9e: 2d:00:7e:d1:d5:58:c6:be:9e:5b:67:17:63:25:0f: 7a:dc:dd:f8:58:58:92:ae:20:b4:a1:5d:38:e0:25: 92:fe:57:19:c9:4f:90:31:81:03:35:68:2f:e1:f3: dc:95:ee:6e:0b:e8:73:87:63:0e:1a:7b:da:b9:80: 6c:d5:97:fe:52:c4:6c:a0:52:d1:e5:6f:f7:26:87: 98:46:7c:dd:c4:48:57:fe:bf:ec:d1:f2:eb:91:bf: c8:71:5d:83:a2:3c:c0:ae:ab:f0:e3:8b:09:7f:e7: c7:58:f9:2b:80:90:36:8f:2f:a5:5d:24:2a:9e:93: ff:c6:70:c5:86:c5:a3:63:d3:f2:ca:86:8b:9a:71: 6e:36:3b:0f:76:5c:a3:69:48:7c:95:41:d0:9d:ef: da:cc:d1:c5:49:ae:90:68:c2:4c:5f:50:27:b6:30: 25:e6:06:56:27:7f:3b:50:89:e4:6d:73:55:68:ed: 23:cc:56:c1:0f:26:60:2d:cb:3a:d8:72:08:3f:ec: 0e:e5:69:6f:33:b8:31:2b:64:5b:8a:41:34:97:c7: 1e:0b:60:fa:f7:17:01:2d:c0:50:50:d3:b4:6b:8d: 70:fd:46:ac:ee:5d:86:fd:94:31:dc:b7:e6:7c:78: b1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A6:F2:D1:05:B6:4B:B6:AC:F9:22:1B:FC:44:A1:80:88:C2:57:24 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9996796e-d1b5-4bb3-9540-46962a1639b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1bc0::/44 Signature Algorithm: sha256WithRSAEncryption 35:4a:61:b7:49:42:08:72:bc:7e:e9:25:b2:5c:ce:1c:35:e5: 3e:9c:dc:78:dc:fe:29:07:ed:bc:d9:37:d8:d0:ea:59:d7:29: e1:76:3d:4e:48:6e:e7:e7:e9:79:cf:90:8b:4f:d2:0a:d1:10: 0e:c8:b9:9a:3d:c4:68:05:a3:4a:02:d6:eb:54:e9:2f:2c:02: e7:c5:bc:95:e1:13:8e:39:05:a3:f2:55:a7:ce:ce:0e:94:b0: 6d:56:44:70:1a:f9:8f:65:60:4f:3e:d5:63:bc:53:0a:bb:ef: 11:37:3b:12:db:e6:51:66:e3:8b:f8:e4:c7:37:c2:15:85:70: 17:f2:1a:51:6f:da:d6:72:a4:c9:51:3e:e8:5b:02:f2:fe:4c: 58:6e:a7:81:82:aa:55:13:10:14:6b:49:d1:6e:45:2f:fe:20: bb:f9:02:7e:09:e8:53:19:ed:5e:81:3f:cb:b4:78:72:22:7a: 2b:ca:3c:0f:a4:a0:97:88:36:82:a9:c3:be:e5:67:bb:d6:0a: 11:70:13:7a:ac:58:10:06:48:81:dc:b9:8c:e8:93:ec:02:06: 9d:99:35:87:6b:3e:d9:26:ce:9b:cf:1f:ca:90:94:2e:f6:ae: 21:82:84:b8:37:0a:b8:7d:42:87:49:ac:f7:ec:32:8e:db:3a: 7d:60:bc:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUrv1CeVbaNq1UhYt8R0drAtFzPYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYzODU1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzExODYzOTgxMDE2MWNhZDk5YTZkNTg3MTA1OGViMzNh OGY4ZmY0MWQ5MWQ3YTY5YWU2ZjM2ZDIzZWE0YTg0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCS2qyL5wQIQNqX0cw6ni0AftHVWMa+nltnF2MlD3rc3fhY WJKuILShXTjgJZL+VxnJT5AxgQM1aC/h89yV7m4L6HOHYw4ae9q5gGzVl/5SxGyg UtHlb/cmh5hGfN3ESFf+v+zR8uuRv8hxXYOiPMCuq/Djiwl/58dY+SuAkDaPL6Vd JCqek//GcMWGxaNj0/LKhouacW42Ow92XKNpSHyVQdCd79rM0cVJrpBowkxfUCe2 MCXmBlYnfztQieRtc1Vo7SPMVsEPJmAtyzrYcgg/7A7laW8zuDErZFuKQTSXxx4L YPr3FwEtwFBQ07RrjXD9RqzuXYb9lDHct+Z8eLFbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8qby0QW2S7as+SIb/EShgIjCVyQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk5OTY3OTZlLWQxYjUtNGJiMy05NTQwLTQ2OTYyYTE2MzliOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAG8AwDQYJKoZIhvcNAQELBQADggEBADVKYbdJQghyvH7pJbJczhw1 5T6c3Hjc/ikH7bzZN9jQ6lnXKeF2PU5Ibufn6XnPkItP0grREA7IuZo9xGgFo0oC 1utU6S8sAufFvJXhE445BaPyVafOzg6UsG1WRHAa+Y9lYE8+1WO8Uwq77xE3OxLb 5lFm44v45Mc3whWFcBfyGlFv2tZypMlRPuhbAvL+TFhup4GCqlUTEBRrSdFuRS/+ ILv5An4J6FMZ7V6BP8u0eHIieivKPA+koJeINoKpw77lZ7vWChFwE3qsWBAGSIHc uYzok+wCBp2ZNYdrPtkmzpvPH8qQlC72riGChLg3Crh9QodJrPfsMo7bOn1gvHk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:59:50 2025 by rpki-client