$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ab381a4-b027-4d05-bb19-8f5b6532ff27.roa File: 9ab381a4-b027-4d05-bb19-8f5b6532ff27.roa (raw, json) Hash identifier: NYh+HwdXGfR4hwEgSXoWNaXSD6XIbv5cSGDbKe4bsq0= Subject key identifier: 8A:6A:C1:8A:42:0F:4C:A4:45:4F:3B:FE:4A:AF:27:C0:DE:AA:4A:88 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0569B61EBBC81968C6FF9307D5E6FB9C59EBC442 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ab381a4-b027-4d05-bb19-8f5b6532ff27.roa Signing time: Fri 31 Oct 2025 06:08:37 +0000 ROA not before: Fri 31 Oct 2025 06:08:37 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3800::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:69:b6:1e:bb:c8:19:68:c6:ff:93:07:d5:e6:fb:9c:59:eb:c4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:08:37 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=311638bc87446299aba8a98f7854e4ee56108580eaeab5c1a9654afc0b6b102b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:18:3d:a6:eb:0e:7b:bf:8b:78:fc:f8:ef: 85:ec:14:09:9a:90:37:f1:58:81:10:67:fc:6d:4b: 25:e6:87:2f:69:93:82:84:11:9a:b6:7c:b1:88:d0: 23:a2:69:2e:e2:dd:cb:03:12:d8:06:0b:86:63:09: b9:29:49:80:81:87:f3:3c:0d:fb:bf:25:1f:ec:01: 18:bd:92:51:ed:01:a9:41:2c:cd:ee:34:8c:8f:ad: a9:33:eb:b7:46:59:45:bd:f6:37:6a:12:2c:1b:bc: fa:66:0e:81:25:ed:f5:72:9c:a4:59:47:99:2a:ce: ca:5f:0d:3d:14:ea:5f:bd:d2:94:4e:fe:fe:8f:6c: 1e:ee:1c:05:7e:87:84:cc:2d:fd:90:14:06:cd:dd: 32:c7:d1:f6:77:b5:a0:9a:54:b3:8c:d3:c3:a4:22: 38:bc:89:df:b3:a4:84:ce:d2:88:8a:e2:ed:67:ae: ae:ac:c2:95:ea:51:2e:f2:37:7c:d9:bb:02:57:a7: c9:32:05:53:04:16:e7:f7:cf:76:0f:8e:14:aa:9d: e6:e6:29:5c:ac:f1:16:bc:ed:9a:6a:59:0d:3b:a6: b9:d5:ce:4e:1b:7f:43:3c:e9:2d:2f:4c:d8:3f:1d: 7f:99:a7:24:24:e5:a8:e0:db:1e:b0:0f:1a:d7:7f: 59:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6A:C1:8A:42:0F:4C:A4:45:4F:3B:FE:4A:AF:27:C0:DE:AA:4A:88 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ab381a4-b027-4d05-bb19-8f5b6532ff27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3800::/45 Signature Algorithm: sha256WithRSAEncryption 1f:e6:83:62:f2:e6:30:f0:1c:c5:3d:92:88:c9:51:bd:92:19: f7:79:1f:62:2e:0e:eb:b7:85:5d:7d:88:8f:06:2b:1b:6d:ca: b2:be:ab:ef:c3:a5:0c:fa:25:7d:93:6b:fe:71:ba:5a:32:e4: 91:77:b5:01:d9:ba:8b:16:c7:b3:0b:d3:55:d8:c4:a2:2f:6c: 94:a3:db:24:40:f0:22:69:bf:9a:00:c3:bd:ce:98:a2:83:e3: a5:e5:32:96:5b:6d:71:96:d4:37:b4:eb:93:dd:d8:2b:01:dd: d3:13:78:b7:b6:af:b1:d4:16:c5:03:79:e6:68:44:96:1c:16: dc:c6:ff:ea:19:4b:ff:07:1b:88:4e:26:3e:78:87:e5:db:c3: 84:46:ef:f5:90:f4:43:63:40:55:bc:d2:0f:40:2e:56:fa:7f: a5:b8:b9:b3:18:20:bc:d5:57:e9:9e:41:7a:eb:77:b4:7d:fb: f7:fc:8e:a8:5a:37:62:f7:2e:74:d1:cd:5e:9b:63:da:4c:65: 1c:74:65:91:88:55:b2:24:34:d5:e6:94:f0:69:a0:b3:20:de: 67:b3:a3:35:4a:3d:2d:b7:20:9e:af:ff:fe:ba:5d:39:2e:ac: 64:c7:b4:49:1c:7d:44:7a:2f:1c:f8:aa:95:d8:33:ef:3c:94: 41:c9:e3:52 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBWm2HrvIGWjG/5MH1eb7nFnrxEIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYwODM3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTE2MzhiYzg3NDQ2Mjk5YWJhOGE5OGY3ODU0ZTRlZTU2 MTA4NTgwZWFlYWI1YzFhOTY1NGFmYzBiNmIxMDJiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe4xg9pusOe7+LePz474XsFAmakDfxWIEQZ/xtSyXmhy9p k4KEEZq2fLGI0COiaS7i3csDEtgGC4ZjCbkpSYCBh/M8Dfu/JR/sARi9klHtAalB LM3uNIyPrakz67dGWUW99jdqEiwbvPpmDoEl7fVynKRZR5kqzspfDT0U6l+90pRO /v6PbB7uHAV+h4TMLf2QFAbN3TLH0fZ3taCaVLOM08OkIji8id+zpITO0oiK4u1n rq6swpXqUS7yN3zZuwJXp8kyBVMEFuf3z3YPjhSqnebmKVys8Ra87ZpqWQ07prnV zk4bf0M86S0vTNg/HX+ZpyQk5ajg2x6wDxrXf1mbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUimrBikIPTKRFTzv+Sq8nwN6qSogwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzlhYjM4MWE0LWIwMjctNGQwNS1iYjE5LThmNWI2NTMyZmYyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAOAAwDQYJKoZIhvcNAQELBQADggEBAB/mg2Ly5jDwHMU9kojJUb2S Gfd5H2IuDuu3hV19iI8GKxttyrK+q+/DpQz6JX2Ta/5xuloy5JF3tQHZuosWx7ML 01XYxKIvbJSj2yRA8CJpv5oAw73OmKKD46XlMpZbbXGW1De065Pd2CsB3dMTeLe2 r7HUFsUDeeZoRJYcFtzG/+oZS/8HG4hOJj54h+Xbw4RG7/WQ9ENjQFW80g9ALlb6 f6W4ubMYILzVV+meQXrrd7R9+/f8jqhaN2L3LnTRzV6bY9pMZRx0ZZGIVbIkNNXm lPBpoLMg3mezozVKPS23IJ6v//66XTkurGTHtEkcfUR6Lxz4qpXYM+88lEHJ41I= -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:55 2025 by rpki-client