$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9cb1a176-dfda-4023-a853-c64a2fbb95fb.roa File: 9cb1a176-dfda-4023-a853-c64a2fbb95fb.roa (raw, json) Hash identifier: iNhO4MYaBgEFpC6mX+1qztBqH+5VJnYm717lbIR186M= Subject key identifier: 52:49:10:6E:0D:A0:30:6B:83:6B:62:C4:03:D4:04:26:1D:66:46:13 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 36A90AAE1845F58C90F5D80C2EB93CDC845F78A7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9cb1a176-dfda-4023-a853-c64a2fbb95fb.roa Signing time: Fri 31 Oct 2025 00:28:00 +0000 ROA not before: Fri 31 Oct 2025 00:28:00 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:35b8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a9:0a:ae:18:45:f5:8c:90:f5:d8:0c:2e:b9:3c:dc:84:5f:78:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:28:00 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=aa7de64b5682300e2fb7a01ea4b7a71d2b693d1d390ebf891577acee719fd001, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:f9:f1:d9:c8:b6:69:25:8f:59:34:d1:fb: 7c:66:06:3f:20:ad:07:0c:03:2f:86:d0:73:eb:86: 40:51:9a:94:8d:04:d9:08:1c:99:c5:35:9e:6c:7b: 0d:56:26:c1:23:a0:7b:88:84:6c:32:73:a8:0c:09: 01:6e:ad:25:03:0c:1a:ae:d8:8d:72:c0:f9:79:e1: f5:04:31:a6:49:30:f1:02:e3:10:0e:87:0d:d4:98: cd:3d:84:79:06:3f:cb:7c:5f:44:4c:a7:33:2e:14: 9c:b6:44:9d:f5:e9:80:e3:d2:67:d6:e0:d3:a5:6f: 61:bf:cb:80:fd:c8:38:be:5b:4e:86:34:46:c6:26: f3:7d:be:dd:45:c1:ff:13:b0:87:e4:e1:2e:76:3b: a2:ac:a5:63:82:30:45:bf:9f:2e:08:65:9e:55:4e: b4:8d:b8:b3:d7:68:73:d7:9a:b9:d8:12:35:3e:8a: ec:93:d1:df:04:d4:46:64:49:21:1c:39:e9:ec:c3: 5d:a8:6d:ff:64:97:d5:c9:99:8f:d9:d1:86:4d:71: d2:9b:85:d0:c5:3f:49:75:ac:30:a0:35:8d:7c:11: d0:d7:17:f3:a9:d6:bb:a9:11:f4:74:e1:63:19:d5: f5:f0:9d:c0:cb:87:ab:cb:0c:05:58:e9:10:69:fa: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:49:10:6E:0D:A0:30:6B:83:6B:62:C4:03:D4:04:26:1D:66:46:13 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9cb1a176-dfda-4023-a853-c64a2fbb95fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:35b8::/47 Signature Algorithm: sha256WithRSAEncryption 13:d4:93:7f:ac:ef:34:14:d7:3c:1b:2e:b1:81:5e:35:ea:20: e9:37:ac:a9:be:b2:ab:fc:32:92:e4:e2:32:1c:23:52:4d:79: a7:0f:79:ac:1a:fe:1b:d1:50:05:78:87:be:15:fd:e1:c2:dc: ee:c7:11:b4:11:be:73:7b:4c:ad:75:e5:13:9c:fd:b0:c7:a6: c0:93:de:e3:75:fa:66:b8:56:57:61:e3:49:8d:df:58:e5:50: c3:f2:42:1b:05:42:df:9b:34:2a:ab:8d:f6:b3:ac:5a:32:90: c7:17:71:4e:cd:d2:da:09:30:4f:e7:67:a5:15:6e:9d:f0:e2: 92:3f:e6:17:70:be:23:1a:2d:de:dc:df:4e:1d:4f:f6:f8:02: c1:88:46:21:6f:71:45:12:02:a7:18:9b:f3:01:db:f9:29:45: ce:03:7e:40:10:2f:77:50:af:3f:32:e8:58:1a:05:9e:c6:64: 7c:fc:88:dc:27:b9:a5:41:dc:8b:84:3e:83:bb:c3:62:13:e2: fd:db:3f:ed:9a:97:45:4c:0a:86:fd:78:aa:f3:db:ed:d2:b5: d8:8d:07:c6:4c:6f:34:30:2c:0e:72:c4:07:a1:fb:53:c4:d9: 12:00:a8:26:57:ed:81:56:ea:b5:b6:3e:7c:93:be:8a:85:61: d1:1a:62:34 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNqkKrhhF9YyQ9dgMLrk83IRfeKcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyODAwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTdkZTY0YjU2ODIzMDBlMmZiN2EwMWVhNGI3YTcxZDJi NjkzZDFkMzkwZWJmODkxNTc3YWNlZTcxOWZkMDAxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq8vnx2ci2aSWPWTTR+3xmBj8grQcMAy+G0HPrhkBRmpSN BNkIHJnFNZ5sew1WJsEjoHuIhGwyc6gMCQFurSUDDBqu2I1ywPl54fUEMaZJMPEC 4xAOhw3UmM09hHkGP8t8X0RMpzMuFJy2RJ316YDj0mfW4NOlb2G/y4D9yDi+W06G NEbGJvN9vt1Fwf8TsIfk4S52O6KspWOCMEW/ny4IZZ5VTrSNuLPXaHPXmrnYEjU+ iuyT0d8E1EZkSSEcOensw12obf9kl9XJmY/Z0YZNcdKbhdDFP0l1rDCgNY18EdDX F/Op1rupEfR04WMZ1fXwncDLh6vLDAVY6RBp+gT7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUkkQbg2gMGuDa2LEA9QEJh1mRhMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzljYjFhMTc2LWRmZGEtNDAyMy1hODUzLWM2NGEyZmJiOTVmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANbgwDQYJKoZIhvcNAQELBQADggEBABPUk3+s7zQU1zwbLrGBXjXq IOk3rKm+sqv8MpLk4jIcI1JNeacPeawa/hvRUAV4h74V/eHC3O7HEbQRvnN7TK11 5ROc/bDHpsCT3uN1+ma4Vldh40mN31jlUMPyQhsFQt+bNCqrjfazrFoykMcXcU7N 0toJME/nZ6UVbp3w4pI/5hdwviMaLd7c304dT/b4AsGIRiFvcUUSAqcYm/MB2/kp Rc4DfkAQL3dQrz8y6FgaBZ7GZHz8iNwnuaVB3IuEPoO7w2IT4v3bP+2al0VMCob9 eKrz2+3StdiNB8ZMbzQwLA5yxAeh+1PE2RIAqCZX7YFW6rW2PnyTvoqFYdEaYjQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:26 2025 by rpki-client