$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ff6da2e-7a8e-46ac-9a4e-8298e1363485.roa File: 9ff6da2e-7a8e-46ac-9a4e-8298e1363485.roa (raw, json) Hash identifier: fLm1RgflJuV42MZpX7wQPhE3qGfmi9WHlwwZ7aB9jCc= Subject key identifier: C9:72:10:3A:98:12:61:0F:33:01:B0:3B:33:61:B7:42:A7:C2:D3:58 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 70197143B6F635AAD722227200ADEC0B6B0AC556 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ff6da2e-7a8e-46ac-9a4e-8298e1363485.roa Signing time: Fri 31 Oct 2025 02:40:18 +0000 ROA not before: Fri 31 Oct 2025 02:40:18 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1698::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:19:71:43:b6:f6:35:aa:d7:22:22:72:00:ad:ec:0b:6b:0a:c5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:40:18 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=bdded19b3803af18b060012f036b3d0f31798f6b15eff9c4b4046c9a1640ffb4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:60:ce:40:fe:f4:27:96:2e:82:a0:9d:48:b2: 7c:bd:22:9f:60:f1:f8:df:e3:f2:74:ea:4e:1a:c2: 91:e6:e1:ad:88:5e:50:85:db:9e:11:d9:79:c2:9a: 52:6b:5b:8a:b0:89:2e:34:54:97:ea:3d:5a:ce:2c: 5b:e1:4d:50:27:0d:e4:2b:2f:09:d5:97:8a:ec:e3: d0:4f:82:c5:09:08:58:3f:0b:cd:33:53:ac:ac:34: 3c:96:78:6d:1c:1f:89:4d:6e:96:40:40:8e:a0:dd: ce:e4:5c:f8:7f:b3:32:a7:10:b8:aa:78:c3:d3:8c: 86:83:8f:7f:15:51:54:46:fe:ce:ae:18:6c:29:63: da:61:27:26:60:9b:8b:34:d8:cf:5e:46:22:c2:9b: b5:1f:e8:4a:c5:85:bc:44:4e:4d:c9:10:f3:07:5b: 5d:60:b9:0d:ff:d3:2a:7f:b3:18:ea:42:d4:ae:ff: ad:d3:fd:1f:f0:c4:e5:37:7f:11:67:30:83:17:94: df:70:c5:ff:61:a2:00:54:db:64:9a:af:af:47:d1: 98:61:23:51:64:98:3a:39:c8:51:f7:99:2e:ce:63: 4c:e9:c5:cd:05:d5:59:3f:78:1e:aa:2e:43:25:98: ed:af:69:3c:2c:d2:25:61:84:38:40:48:d1:90:fa: 77:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:72:10:3A:98:12:61:0F:33:01:B0:3B:33:61:B7:42:A7:C2:D3:58 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ff6da2e-7a8e-46ac-9a4e-8298e1363485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1698::/46 Signature Algorithm: sha256WithRSAEncryption 62:0e:fc:65:11:7b:03:9b:21:68:0a:88:7c:f8:d2:a6:84:33: 3a:75:18:cd:07:eb:89:62:96:23:3f:ea:23:a6:28:4b:da:8f: d8:8a:33:64:10:56:6c:98:8f:e2:01:41:9f:08:e8:da:02:73: 32:ee:2c:bd:bb:6f:e1:60:bb:24:42:9f:a3:59:22:f7:c3:91: cf:67:42:cc:e4:35:23:87:aa:15:27:a3:69:4d:8f:c8:3d:b3: ed:f4:0d:27:56:56:92:d8:51:30:9b:7f:43:0d:58:43:ad:87: d6:3b:e8:cc:fb:8b:33:8b:ef:f7:88:26:53:f6:e8:f4:53:4e: ed:90:78:3f:d4:67:27:8f:7b:a6:76:ea:a9:79:56:8e:e0:c2: e6:33:c7:24:0d:51:e1:41:ca:70:a8:72:af:f1:1c:2e:0d:b3: 08:74:97:d7:b4:b7:95:b2:b7:44:0b:fb:b9:09:68:18:70:57: 0b:92:a1:f3:d8:fc:8f:ad:3e:52:f7:7a:89:ba:3c:02:7a:8d: 6e:09:6e:4c:34:6e:d0:61:43:37:80:e4:37:1b:7b:17:61:2f: 56:1a:05:78:a5:59:4b:50:7b:58:0b:4e:ec:28:54:4e:c6:f6: 92:9f:6a:1d:ef:54:a6:2f:04:48:93:da:6d:39:d8:1c:92:fc: 6d:5d:35:a6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcBlxQ7b2NarXIiJyAK3sC2sKxVYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI0MDE4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZGRlZDE5YjM4MDNhZjE4YjA2MDAxMmYwMzZiM2QwZjMx Nzk4ZjZiMTVlZmY5YzRiNDA0NmM5YTE2NDBmZmI0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaYM5A/vQnli6CoJ1Isny9Ip9g8fjf4/J06k4awpHm4a2I XlCF254R2XnCmlJrW4qwiS40VJfqPVrOLFvhTVAnDeQrLwnVl4rs49BPgsUJCFg/ C80zU6ysNDyWeG0cH4lNbpZAQI6g3c7kXPh/szKnELiqeMPTjIaDj38VUVRG/s6u GGwpY9phJyZgm4s02M9eRiLCm7Uf6ErFhbxETk3JEPMHW11guQ3/0yp/sxjqQtSu /63T/R/wxOU3fxFnMIMXlN9wxf9hogBU22Sar69H0ZhhI1FkmDo5yFH3mS7OY0zp xc0F1Vk/eB6qLkMlmO2vaTws0iVhhDhASNGQ+ndrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyXIQOpgSYQ8zAbA7M2G3QqfC01gwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzlmZjZkYTJlLTdhOGUtNDZhYy05YTRlLTgyOThlMTM2MzQ4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAFpgwDQYJKoZIhvcNAQELBQADggEBAGIO/GURewObIWgKiHz40qaE Mzp1GM0H64liliM/6iOmKEvaj9iKM2QQVmyYj+IBQZ8I6NoCczLuLL27b+FguyRC n6NZIvfDkc9nQszkNSOHqhUno2lNj8g9s+30DSdWVpLYUTCbf0MNWEOth9Y76Mz7 izOL7/eIJlP26PRTTu2QeD/UZyePe6Z26ql5Vo7gwuYzxyQNUeFBynCocq/xHC4N swh0l9e0t5Wyt0QL+7kJaBhwVwuSofPY/I+tPlL3eom6PAJ6jW4Jbkw0btBhQzeA 5DcbexdhL1YaBXilWUtQe1gLTuwoVE7G9pKfah3vVKYvBEiT2m052ByS/G1dNaY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:14 2025 by rpki-client