$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9da56e87-4fbe-48b5-b022-af5cea7a2082.roa File: 9da56e87-4fbe-48b5-b022-af5cea7a2082.roa (raw, json) Hash identifier: ob3sLeLM5ybSIuxuA1KXaKNGEY6SLGtiDDUb8XdryoU= Subject key identifier: 9D:B8:F2:34:8A:AD:39:32:E8:7B:5F:DA:4C:04:4E:FA:BB:D4:AC:B9 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 34E477A545D3754CF4CB60B95D3766168830EF86 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9da56e87-4fbe-48b5-b022-af5cea7a2082.roa Signing time: Thu 30 Oct 2025 22:13:58 +0000 ROA not before: Thu 30 Oct 2025 22:13:58 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1c1a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e4:77:a5:45:d3:75:4c:f4:cb:60:b9:5d:37:66:16:88:30:ef:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:13:58 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=6d6bb5863cdd842872a86ca53c12a9b3355887d1047adf33ab89a70a94727f66, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:74:1c:da:87:ff:b9:6b:1b:95:b2:30:16:26: 56:f4:5b:11:0c:6d:27:8a:4c:75:a6:62:2a:b3:29: 37:f4:e7:f5:4f:94:7c:6a:c4:40:1a:9c:0e:ae:d2: be:a8:e2:43:39:7e:be:06:c4:2f:55:4f:86:d4:07: 00:1f:f0:76:21:ac:58:28:51:ca:bd:f7:65:89:8e: 55:50:dc:38:35:66:98:4a:a6:a5:60:ad:e0:a4:8b: af:92:62:c9:a1:55:64:a2:69:5a:11:2b:2f:c1:33: 56:6b:de:b9:df:de:95:1b:49:7f:7a:bc:ce:30:64: 3d:49:b7:8f:d3:30:1f:ec:f6:36:78:5b:a6:72:1f: 75:8f:ef:4b:82:9d:4d:24:0b:0f:76:fc:03:d2:5e: 26:83:1a:27:7d:b6:73:80:9f:93:aa:b8:e3:d5:a0: 1b:72:fa:11:32:22:91:48:9b:cf:86:0d:7c:e6:61: d5:55:35:7f:d7:23:8d:2e:4b:59:80:9f:d0:24:1f: a8:97:a7:d6:d2:4c:51:89:2e:22:fc:92:0f:3f:08: cd:e5:c4:de:e3:bf:8d:72:1e:af:88:d7:05:c1:38: b0:ff:5c:93:0b:aa:54:3e:99:5d:21:20:6b:bb:24: cb:15:35:75:bf:b6:8e:f2:b0:bf:c5:d6:66:9b:7b: 5c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B8:F2:34:8A:AD:39:32:E8:7B:5F:DA:4C:04:4E:FA:BB:D4:AC:B9 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9da56e87-4fbe-48b5-b022-af5cea7a2082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1c1a::/47 Signature Algorithm: sha256WithRSAEncryption 79:0f:69:16:e1:4e:bf:35:74:97:e0:b4:dd:26:47:f7:b2:61: c4:76:fa:57:cd:91:72:24:1b:80:c1:0c:a8:81:4d:c5:b9:0b: 4e:7c:0a:19:b8:dd:c1:f4:17:d2:46:56:c4:8f:0b:54:96:a8: 51:38:09:65:94:10:dd:a8:1a:65:85:1c:7f:58:9f:dd:e1:0b: 1d:c9:ea:54:22:fb:18:2e:98:51:2a:a5:65:2a:00:3a:b2:8d: d0:22:af:ea:4a:7c:4d:f1:23:d5:b0:d8:1e:7d:4e:09:94:83: 30:e2:2f:95:34:51:35:fa:27:c5:2c:c3:04:74:06:ef:3f:ae: 95:fd:b6:36:e2:29:42:77:fc:ce:57:a1:8e:e4:67:50:e3:2b: 2a:fe:d0:33:07:e4:f9:fa:d0:0b:39:06:d2:db:c9:33:53:ba: 0b:a2:a5:41:f0:50:9e:a7:ce:5d:69:51:49:06:a8:e7:20:d4: a3:cd:2e:3b:4b:95:de:f7:c7:01:e7:b2:13:b2:48:06:8c:e1: 2c:2a:17:75:f7:20:58:f6:d2:78:9d:7c:a3:e1:a5:12:01:2d: eb:cf:7e:14:6f:70:7e:cd:b6:8f:81:83:32:4a:f1:57:99:e1: 22:6f:e2:4c:66:75:47:2a:47:52:30:67:56:7d:68:a0:a6:1f: bd:29:1a:78 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNOR3pUXTdUz0y2C5XTdmFogw74YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIxMzU4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDZiYjU4NjNjZGQ4NDI4NzJhODZjYTUzYzEyYTliMzM1 NTg4N2QxMDQ3YWRmMzNhYjg5YTcwYTk0NzI3ZjY2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDndBzah/+5axuVsjAWJlb0WxEMbSeKTHWmYiqzKTf05/VP lHxqxEAanA6u0r6o4kM5fr4GxC9VT4bUBwAf8HYhrFgoUcq992WJjlVQ3Dg1ZphK pqVgreCki6+SYsmhVWSiaVoRKy/BM1Zr3rnf3pUbSX96vM4wZD1Jt4/TMB/s9jZ4 W6ZyH3WP70uCnU0kCw92/APSXiaDGid9tnOAn5OquOPVoBty+hEyIpFIm8+GDXzm YdVVNX/XI40uS1mAn9AkH6iXp9bSTFGJLiL8kg8/CM3lxN7jv41yHq+I1wXBOLD/ XJMLqlQ+mV0hIGu7JMsVNXW/to7ysL/F1mabe1zbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnbjyNIqtOTLoe1/aTARO+rvUrLkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzlkYTU2ZTg3LTRmYmUtNDhiNS1iMDIyLWFmNWNlYTdhMjA4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAHBowDQYJKoZIhvcNAQELBQADggEBAHkPaRbhTr81dJfgtN0mR/ey YcR2+lfNkXIkG4DBDKiBTcW5C058Chm43cH0F9JGVsSPC1SWqFE4CWWUEN2oGmWF HH9Yn93hCx3J6lQi+xgumFEqpWUqADqyjdAir+pKfE3xI9Ww2B59TgmUgzDiL5U0 UTX6J8UswwR0Bu8/rpX9tjbiKUJ3/M5XoY7kZ1DjKyr+0DMH5Pn60As5BtLbyTNT uguipUHwUJ6nzl1pUUkGqOcg1KPNLjtLld73xwHnshOySAaM4SwqF3X3IFj20nid fKPhpRIBLevPfhRvcH7Nto+BgzJK8VeZ4SJv4kxmdUcqR1IwZ1Z9aKCmH70pGng= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:37 2025 by rpki-client