$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b909b89-8f3a-47df-a5f2-d15b3e95f986.roa File: 9b909b89-8f3a-47df-a5f2-d15b3e95f986.roa (raw, json) Hash identifier: tUZHTRxgAHVgLFemybh0WB2nVJJFFz5AkY5GU36oLuc= Subject key identifier: 1D:31:C8:A3:E1:15:0F:72:41:A2:0A:BC:72:3E:5C:44:77:A5:B6:88 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 52525E82E9BF2B3127E4AEBF3707772699FAF885 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b909b89-8f3a-47df-a5f2-d15b3e95f986.roa Signing time: Fri 31 Oct 2025 05:53:34 +0000 ROA not before: Fri 31 Oct 2025 05:53:34 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2ef0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:52:5e:82:e9:bf:2b:31:27:e4:ae:bf:37:07:77:26:99:fa:f8:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:53:34 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0cbb155ba8cd5a60ed1e1fd76fd6ccdf80dc16c74dafb13deab026d4e3897277, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:a5:39:a2:9c:30:35:d2:3f:70:91:79:64: 63:75:37:ae:77:f6:de:07:6c:88:5e:97:d8:bc:90: 0b:27:e5:b3:43:22:8f:48:89:12:ad:fe:ec:f3:b4: 74:ba:5e:43:24:97:ce:12:7d:89:e1:42:3a:41:26: e8:3e:f9:66:d7:a7:f5:dd:1e:b7:86:07:b3:aa:1a: 53:68:00:30:08:30:a1:cc:8d:18:32:10:37:d7:a3: 55:02:ce:94:e5:fa:e1:ad:13:93:9c:59:ab:5c:8c: 9d:be:da:3b:3f:ff:d0:f2:8e:84:ab:20:bb:58:26: b8:cd:1b:32:2e:f3:18:7f:a2:20:78:dd:7e:fc:8b: 73:af:2e:8c:64:7e:a0:2a:0a:57:fd:a2:6e:7f:86: ba:4d:04:69:52:81:91:f0:dc:f5:4e:29:0a:45:b1: 1e:71:f8:9a:11:2b:bb:1a:cf:6c:f8:6d:87:74:96: d6:b7:e7:b0:30:ba:30:a7:c9:40:ac:f1:40:4e:05: 98:58:ca:ce:0d:6b:f0:06:23:a4:f1:01:b3:e1:09: dc:19:c0:ac:7e:26:26:1a:db:08:7f:28:4d:ea:4a: ab:be:f5:ff:ff:14:0b:c3:18:56:87:f0:3f:c4:28: 7b:1e:c5:5a:58:45:82:46:8c:b3:fb:5f:8a:e0:eb: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:31:C8:A3:E1:15:0F:72:41:A2:0A:BC:72:3E:5C:44:77:A5:B6:88 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b909b89-8f3a-47df-a5f2-d15b3e95f986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2ef0::/45 Signature Algorithm: sha256WithRSAEncryption 43:f4:63:f3:df:72:b3:cf:7f:cd:2c:67:cd:40:28:88:84:d7: ec:24:45:33:2b:9d:8a:c1:88:d4:4b:19:eb:92:0f:9e:45:81: da:01:6e:44:48:0a:f4:59:97:1c:05:63:84:be:f8:4e:ee:56: 2e:82:aa:0c:1b:45:2d:e9:e3:39:c2:4d:38:29:91:93:21:7a: 4a:7b:4e:ed:59:e1:21:60:30:2e:b7:ff:f4:47:c4:24:02:c6: 3e:1f:41:a6:46:c2:5c:56:1b:07:5f:59:1f:3c:4f:95:63:0b: f4:95:95:0c:a9:a1:4d:af:26:bf:51:8d:84:aa:3b:7e:48:a5: 8f:2b:4d:54:1b:0a:76:76:6e:c3:61:31:47:c2:a0:e8:14:fb: 02:c3:92:36:65:3a:92:ec:72:82:c5:4c:8a:a5:b3:61:99:1b: 59:9c:78:8d:45:6e:2f:fe:08:90:12:e2:a6:14:63:d7:9f:99: fb:e5:42:65:74:b3:2c:13:89:b1:c5:56:2c:e5:56:83:57:36: ee:2e:71:0a:a8:52:b2:57:16:3b:98:13:0d:63:79:53:88:a4: aa:1a:e9:b5:c3:3b:55:57:f5:fb:0b:54:34:3f:de:3f:73:19: 36:55:51:3f:ef:44:38:1c:df:bd:66:5f:16:5f:c2:f5:a7:a6: 17:f2:f8:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUlJegum/KzEn5K6/Nwd3Jpn6+IUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1MzM0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2JiMTU1YmE4Y2Q1YTYwZWQxZTFmZDc2ZmQ2Y2NkZjgw ZGMxNmM3NGRhZmIxM2RlYWIwMjZkNGUzODk3Mjc3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpfaU5opwwNdI/cJF5ZGN1N6539t4HbIhel9i8kAsn5bND Io9IiRKt/uzztHS6XkMkl84SfYnhQjpBJug++WbXp/XdHreGB7OqGlNoADAIMKHM jRgyEDfXo1UCzpTl+uGtE5OcWatcjJ2+2js//9DyjoSrILtYJrjNGzIu8xh/oiB4 3X78i3OvLoxkfqAqClf9om5/hrpNBGlSgZHw3PVOKQpFsR5x+JoRK7saz2z4bYd0 lta357AwujCnyUCs8UBOBZhYys4Na/AGI6TxAbPhCdwZwKx+JiYa2wh/KE3qSqu+ 9f//FAvDGFaH8D/EKHsexVpYRYJGjLP7X4rg67hVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHTHIo+EVD3JBogq8cj5cRHeltogwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzliOTA5Yjg5LThmM2EtNDdkZi1hNWYyLWQxNWIzZTk1Zjk4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALvAwDQYJKoZIhvcNAQELBQADggEBAEP0Y/PfcrPPf80sZ81AKIiE 1+wkRTMrnYrBiNRLGeuSD55FgdoBbkRICvRZlxwFY4S++E7uVi6CqgwbRS3p4znC TTgpkZMhekp7Tu1Z4SFgMC63//RHxCQCxj4fQaZGwlxWGwdfWR88T5VjC/SVlQyp oU2vJr9RjYSqO35IpY8rTVQbCnZ2bsNhMUfCoOgU+wLDkjZlOpLscoLFTIqls2GZ G1mceI1Fbi/+CJAS4qYUY9efmfvlQmV0sywTibHFVizlVoNXNu4ucQqoUrJXFjuY Ew1jeVOIpKoa6bXDO1VX9fsLVDQ/3j9zGTZVUT/vRDgc371mXxZfwvWnphfy+FA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:19 2025 by rpki-client