$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9dc4b383-eef5-4b15-a7d4-c502c76622af.roa File: 9dc4b383-eef5-4b15-a7d4-c502c76622af.roa (raw, json) Hash identifier: fhKP+fBHy8O/nw1WjCen/WSlmZDiYmaPEYSCY+iXOh8= Subject key identifier: D3:7A:E9:0F:77:69:A6:92:43:D9:D7:FF:EC:74:E1:BC:B7:D9:65:08 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 23190436D9A40F4D1FC40600FA70B36279FBA740 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9dc4b383-eef5-4b15-a7d4-c502c76622af.roa Signing time: Thu 30 Oct 2025 21:23:51 +0000 ROA not before: Thu 30 Oct 2025 21:23:51 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1668::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:19:04:36:d9:a4:0f:4d:1f:c4:06:00:fa:70:b3:62:79:fb:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:23:51 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=90ccc9b6fbb6a9e973f010e491f8f1064bd7c376238b382a66e1e19104adecb7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d5:22:20:da:cd:cb:5f:42:f1:ce:73:4c:88: 58:f6:00:bf:17:4d:67:95:57:ff:f6:19:72:09:fc: 1b:cd:6a:ea:0c:b0:52:14:a6:5b:37:3c:bd:fe:d7: c0:b5:63:0b:7f:3d:61:fb:fe:95:c0:8f:79:94:1a: 43:88:f2:d4:81:5b:33:44:1c:b0:ba:fe:ba:89:76: 8f:1b:3a:81:f4:0a:cb:ce:24:39:8a:07:42:a9:d3: a1:41:f9:fe:c9:b4:2c:e4:64:f7:9d:95:34:80:62: 40:0a:30:90:f9:4b:4a:f2:44:4d:58:43:c8:63:10: 4e:5e:ba:81:d5:36:d5:22:99:1e:db:a9:4f:3a:5a: d8:c1:07:c8:cf:bc:5c:19:da:fd:c7:1b:52:af:fe: c6:d7:ea:01:7a:a4:64:bf:35:13:0c:90:56:de:d4: f7:86:59:cf:4b:d2:04:8a:0c:01:04:57:45:75:0f: 11:8c:e9:44:5b:28:a1:fc:bd:a5:0c:3d:eb:a9:a1: e0:9f:30:13:47:55:49:c2:7b:88:42:6a:d9:a5:a7: e9:82:41:ec:ef:29:3a:cb:3f:27:c6:6c:bf:e0:67: 5f:65:25:fd:37:16:56:b9:96:a6:7e:af:a8:fe:91: 9b:de:ce:a8:d6:c5:82:f7:bc:79:aa:99:43:53:01: 6f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7A:E9:0F:77:69:A6:92:43:D9:D7:FF:EC:74:E1:BC:B7:D9:65:08 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9dc4b383-eef5-4b15-a7d4-c502c76622af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1668::/47 Signature Algorithm: sha256WithRSAEncryption 7c:64:da:d1:91:48:e6:f7:98:a1:4f:7b:c0:08:dc:15:ec:d0: c0:e4:3a:fa:d5:0f:28:dc:a0:c0:9e:ec:80:21:06:c5:ba:f9: f5:0b:2b:bd:4f:33:19:b0:50:7f:c1:a0:39:63:52:63:c3:bd: 99:d1:c0:d3:bc:a8:a6:ed:6e:49:97:e9:59:44:16:ea:6b:bf: 33:5e:27:0e:c5:d7:41:db:64:b7:66:25:32:af:a2:77:ae:97: 66:c9:98:c2:9d:b4:af:11:74:ec:d6:d6:c1:ea:18:23:f3:66: 59:0e:b5:f4:e5:b0:72:74:19:55:23:35:b7:45:4a:fe:3f:e5: 48:70:c0:29:5c:92:df:68:24:c9:9c:0e:e3:33:80:72:cd:b4: 9d:a8:c4:c2:58:44:4e:0b:be:fb:34:ff:91:65:8a:73:58:31: 55:93:44:8f:c5:48:28:ca:ba:ad:32:6c:e8:a5:fe:4a:98:6c: 65:5a:eb:7e:2d:7b:c8:68:a7:ae:5a:fe:c3:b4:fc:c4:8c:58: d1:63:ba:0f:1c:19:71:ed:a1:28:8b:94:88:75:1f:2f:c7:dd: cb:2c:5d:17:c5:2b:d4:aa:b7:24:d9:10:de:4f:95:90:ea:ee: 51:8b:2c:1f:fa:7b:e7:2e:19:92:1e:79:1b:11:f2:f1:6c:cc: cc:d9:48:65 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIxkENtmkD00fxAYA+nCzYnn7p0AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyMzUxWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MGNjYzliNmZiYjZhOWU5NzNmMDEwZTQ5MWY4ZjEwNjRi ZDdjMzc2MjM4YjM4MmE2NmUxZTE5MTA0YWRlY2I3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD31SIg2s3LX0LxznNMiFj2AL8XTWeVV//2GXIJ/BvNauoM sFIUpls3PL3+18C1Ywt/PWH7/pXAj3mUGkOI8tSBWzNEHLC6/rqJdo8bOoH0CsvO JDmKB0Kp06FB+f7JtCzkZPedlTSAYkAKMJD5S0ryRE1YQ8hjEE5euoHVNtUimR7b qU86WtjBB8jPvFwZ2v3HG1Kv/sbX6gF6pGS/NRMMkFbe1PeGWc9L0gSKDAEEV0V1 DxGM6URbKKH8vaUMPeupoeCfMBNHVUnCe4hCatmlp+mCQezvKTrLPyfGbL/gZ19l Jf03Fla5lqZ+r6j+kZvezqjWxYL3vHmqmUNTAW/nAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU03rpD3dpppJD2df/7HThvLfZZQgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzlkYzRiMzgzLWVlZjUtNGIxNS1hN2Q0LWM1MDJjNzY2MjJhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFmgwDQYJKoZIhvcNAQELBQADggEBAHxk2tGRSOb3mKFPe8AI3BXs 0MDkOvrVDyjcoMCe7IAhBsW6+fULK71PMxmwUH/BoDljUmPDvZnRwNO8qKbtbkmX 6VlEFuprvzNeJw7F10HbZLdmJTKvoneul2bJmMKdtK8RdOzW1sHqGCPzZlkOtfTl sHJ0GVUjNbdFSv4/5UhwwClckt9oJMmcDuMzgHLNtJ2oxMJYRE4Lvvs0/5FlinNY MVWTRI/FSCjKuq0ybOil/kqYbGVa634te8hop65a/sO0/MSMWNFjug8cGXHtoSiL lIh1Hy/H3cssXRfFK9SqtyTZEN5PlZDq7lGLLB/6e+cuGZIeeRsR8vFszMzZSGU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:29 2025 by rpki-client