$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f697415-342c-44b7-9e0b-7aab836f8f67.roa File: 9f697415-342c-44b7-9e0b-7aab836f8f67.roa (raw, json) Hash identifier: W0WX1phdRP9FLVcTUYrL7pW0CCy75+x5zPIBqSTuoV4= Subject key identifier: 37:F5:54:2C:8C:0E:89:7F:95:12:6D:13:AB:92:67:D4:3D:F8:97:EF Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 159079E2E31471F4B211134871DB2585F47821AE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f697415-342c-44b7-9e0b-7aab836f8f67.roa Signing time: Thu 30 Oct 2025 22:40:27 +0000 ROA not before: Thu 30 Oct 2025 22:40:27 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1f76::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:90:79:e2:e3:14:71:f4:b2:11:13:48:71:db:25:85:f4:78:21:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:40:27 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=59a5ada657d956d5891fb6d3955a3c7b1f615919db2a3d37d27fcaa7914a55ee, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ef:b1:a5:e8:ad:70:03:8a:0b:8f:c0:b6:d8: 01:40:11:04:e8:43:29:16:0f:e6:68:8d:18:ae:bd: 4b:dc:56:c1:5e:01:48:67:d8:f8:06:7a:d9:21:ac: b2:48:ad:92:0f:71:09:56:6f:01:77:df:50:06:72: 5b:08:d4:cd:9f:a3:4a:cc:02:d9:58:0d:34:5c:c3: 28:ab:01:76:a1:62:55:1f:a8:6e:6e:83:7c:fc:e1: ab:55:90:8c:4e:81:22:27:a6:8e:bd:84:cf:94:76: 3e:5f:34:dd:cf:65:16:d8:e9:ff:a5:0a:d5:da:46: 69:cf:0a:d7:83:3a:b4:f9:e1:07:bd:85:f9:28:9d: ac:e1:a4:1a:a1:a3:c1:68:f4:cc:71:cb:cf:19:b8: 4e:a3:78:04:ad:8d:c8:e5:7e:f3:c1:e2:e0:dc:e5: 7e:0a:05:5e:33:cb:09:9c:e4:42:6d:02:bd:c5:65: 12:72:56:7d:33:bf:98:08:25:cf:4a:b7:9f:0e:b3: 04:77:35:83:e8:10:98:0f:e1:c2:3a:73:2a:03:a6: 7b:de:14:d7:80:0c:98:ec:d4:ab:92:40:3f:d7:5b: f9:99:2a:61:0a:15:fb:56:c5:24:b5:c9:49:8f:4c: 9b:f0:ac:ea:d1:5c:8b:63:c5:3c:3d:35:09:6b:3e: cf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F5:54:2C:8C:0E:89:7F:95:12:6D:13:AB:92:67:D4:3D:F8:97:EF X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f697415-342c-44b7-9e0b-7aab836f8f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1f76::/47 Signature Algorithm: sha256WithRSAEncryption bf:0d:b3:0e:40:05:1c:b5:a0:99:dc:0a:54:7b:95:c0:f1:eb: df:1c:b2:32:cf:9d:3c:db:ad:6b:2e:67:7c:50:a4:8e:79:bf: 71:f4:2d:cf:78:c4:da:f2:04:72:46:a0:98:0e:94:4f:8d:b5: 5a:9e:21:1e:9b:f5:89:34:41:f3:97:70:75:8f:b7:ff:c2:a2: bf:63:38:29:ab:68:99:23:c8:1a:9a:a3:8a:15:e9:2c:38:cd: 74:7f:9c:43:d1:46:99:e5:a8:ca:a9:c2:d7:c9:e3:2d:b1:7d: f3:6e:26:2f:45:08:54:14:ba:b2:13:04:75:8c:6b:ba:a2:7b: d6:19:46:41:88:64:4f:f6:19:62:1f:b0:43:3c:08:68:60:b3: ee:2a:03:61:73:59:af:55:83:c7:49:d7:6d:a5:51:98:3d:89: 27:fa:e8:7d:cc:3f:30:6f:49:71:be:9a:94:eb:f3:e2:2e:eb: af:ac:e5:10:de:ee:50:bb:61:aa:5d:1d:b4:91:56:e1:e4:0a: 8a:cf:13:76:0b:b1:47:e5:86:dc:30:1a:fb:e1:9a:75:23:13: f9:6e:f9:a6:8f:1b:cb:ce:27:9e:53:0e:c7:9d:6c:7d:bf:63: 61:10:55:92:79:f7:2e:83:6d:28:95:9d:a1:83:d2:0c:e0:90: 0f:a7:17:e9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFZB54uMUcfSyERNIcdslhfR4Ia4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI0MDI3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OWE1YWRhNjU3ZDk1NmQ1ODkxZmI2ZDM5NTVhM2M3YjFm NjE1OTE5ZGIyYTNkMzdkMjdmY2FhNzkxNGE1NWVlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW77Gl6K1wA4oLj8C22AFAEQToQykWD+ZojRiuvUvcVsFe AUhn2PgGetkhrLJIrZIPcQlWbwF331AGclsI1M2fo0rMAtlYDTRcwyirAXahYlUf qG5ug3z84atVkIxOgSInpo69hM+Udj5fNN3PZRbY6f+lCtXaRmnPCteDOrT54Qe9 hfkonazhpBqho8Fo9Mxxy88ZuE6jeAStjcjlfvPB4uDc5X4KBV4zywmc5EJtAr3F ZRJyVn0zv5gIJc9Kt58OswR3NYPoEJgP4cI6cyoDpnveFNeADJjs1KuSQD/XW/mZ KmEKFftWxSS1yUmPTJvwrOrRXItjxTw9NQlrPs/ZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUN/VULIwOiX+VEm0Tq5Jn1D34l+8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzlmNjk3NDE1LTM0MmMtNDRiNy05ZTBiLTdhYWI4MzZmOGY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAH3YwDQYJKoZIhvcNAQELBQADggEBAL8Nsw5ABRy1oJncClR7lcDx 698csjLPnTzbrWsuZ3xQpI55v3H0Lc94xNryBHJGoJgOlE+NtVqeIR6b9Yk0QfOX cHWPt//Cor9jOCmraJkjyBqao4oV6Sw4zXR/nEPRRpnlqMqpwtfJ4y2xffNuJi9F CFQUurITBHWMa7qie9YZRkGIZE/2GWIfsEM8CGhgs+4qA2FzWa9Vg8dJ122lUZg9 iSf66H3MPzBvSXG+mpTr8+Iu66+s5RDe7lC7YapdHbSRVuHkCorPE3YLsUflhtww GvvhmnUjE/lu+aaPG8vOJ55TDsedbH2/Y2EQVZJ59y6DbSiVnaGD0gzgkA+nF+k= -----END CERTIFICATE-----Generated at Wed Nov 5 07:37:49 2025 by rpki-client