$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0374e26-dcec-45bf-b5aa-3941022104bf.roa File: a0374e26-dcec-45bf-b5aa-3941022104bf.roa (raw, json) Hash identifier: 87x3gvLN4ln3182+juJqcDjrAmZVpHlgm3ofmXay3h0= Subject key identifier: B2:BB:B4:1E:0C:89:7C:1F:B1:EA:35:4B:FB:CE:08:83:A3:B9:F9:5A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6C5989BDED8D762BE1BE647C6A9CACA67F22C683 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0374e26-dcec-45bf-b5aa-3941022104bf.roa Signing time: Thu 30 Oct 2025 20:37:05 +0000 ROA not before: Thu 30 Oct 2025 20:37:05 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:11de::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:59:89:bd:ed:8d:76:2b:e1:be:64:7c:6a:9c:ac:a6:7f:22:c6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:37:05 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=ac44aaf3b406f8091fb9155896f8399bab8cd180155b769c806cbda90d1eafe2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:6b:49:91:ab:07:ff:36:e2:1b:35:ba:e4: 81:48:83:89:fb:07:1c:e2:6a:34:e4:2f:9e:fe:67: 36:5a:ed:21:0a:0c:10:6f:c5:08:e5:df:26:55:d7: b2:ee:79:eb:c5:4d:aa:44:0b:35:c0:b0:d8:b7:04: 3f:43:29:0e:a0:08:80:1a:d6:4b:06:bb:ee:13:4c: 5c:c1:aa:38:02:ca:f1:2f:8c:14:36:27:57:88:be: ea:e4:68:e6:44:cf:54:44:19:ed:90:da:d6:5f:75: 78:4e:93:57:e8:9e:73:ce:f0:bc:82:8e:40:81:74: 8e:dc:d2:4b:90:78:9a:70:4a:43:45:9d:6b:a0:1f: 9f:3a:1e:23:48:fe:50:4e:fd:c9:e4:6f:96:93:75: 24:0a:59:a4:e2:57:e5:55:6d:ce:a5:d4:6f:9d:2e: 45:70:35:41:be:60:2e:75:d8:a5:11:a9:7e:b7:ce: ed:f0:3d:d8:a7:bb:5a:ba:42:07:6c:6d:8a:93:46: 39:b4:e5:10:21:e4:f3:dc:95:27:2d:7f:95:d1:c2: 42:0c:d8:97:7c:46:c3:95:f6:62:01:d3:6b:fc:16: 17:09:3b:3a:8c:4d:98:bf:80:34:a3:2d:74:c4:14: 45:28:85:fe:21:d4:83:4a:81:d5:6d:59:40:cc:1d: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BB:B4:1E:0C:89:7C:1F:B1:EA:35:4B:FB:CE:08:83:A3:B9:F9:5A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0374e26-dcec-45bf-b5aa-3941022104bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:11de::/47 Signature Algorithm: sha256WithRSAEncryption a3:04:5d:54:67:e4:39:44:a7:15:94:6f:89:31:23:a6:f2:e0: 3e:dc:c9:d8:43:ab:04:5e:87:cb:0d:34:f9:d0:f4:8e:00:57: 52:a2:f9:7a:3f:26:ff:d9:99:c2:de:6b:d0:ff:bf:b2:bd:8b: cc:28:59:95:f3:1a:98:3d:b9:6d:65:ce:9a:bd:8e:2b:86:b6: 6e:d8:3c:42:9c:a7:b3:d0:a0:ee:38:ee:48:b4:36:70:ad:51: 91:bf:5d:ca:89:2c:c1:39:81:ce:b8:e3:e1:5f:6a:61:c6:58: d0:93:e2:fd:51:c4:58:ff:7a:3e:26:ed:1a:18:24:ae:92:86: dc:cd:8d:24:14:22:60:40:ba:50:97:39:fe:3f:50:07:b8:f3: e5:b5:b4:e3:88:86:36:3a:c2:ae:e0:f8:2c:31:48:71:34:7e: e5:8d:46:ac:42:46:60:61:d0:fb:27:b1:24:ab:cb:92:5b:8a: b9:45:cf:a8:8a:31:88:88:b4:07:7f:da:6e:f4:ce:85:c7:0a: ac:f1:67:f0:5f:58:27:68:c6:99:10:10:e9:a6:aa:88:82:ec: 1a:a3:a8:d4:ce:32:13:35:2f:03:ca:b5:79:d4:83:67:c0:95: c2:e7:a5:45:5e:3f:a4:1f:71:e8:b4:d9:1b:14:d2:6f:51:e2: c3:9a:f9:c4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbFmJve2NdivhvmR8apyspn8ixoMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAzNzA1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzQ0YWFmM2I0MDZmODA5MWZiOTE1NTg5NmY4Mzk5YmFi OGNkMTgwMTU1Yjc2OWM4MDZjYmRhOTBkMWVhZmUyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR7WtJkasH/zbiGzW65IFIg4n7BxziajTkL57+ZzZa7SEK DBBvxQjl3yZV17LueevFTapECzXAsNi3BD9DKQ6gCIAa1ksGu+4TTFzBqjgCyvEv jBQ2J1eIvurkaOZEz1REGe2Q2tZfdXhOk1fonnPO8LyCjkCBdI7c0kuQeJpwSkNF nWugH586HiNI/lBO/cnkb5aTdSQKWaTiV+VVbc6l1G+dLkVwNUG+YC512KURqX63 zu3wPdinu1q6QgdsbYqTRjm05RAh5PPclSctf5XRwkIM2Jd8RsOV9mIB02v8FhcJ OzqMTZi/gDSjLXTEFEUohf4h1INKgdVtWUDMHcenAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsru0HgyJfB+x6jVL+84Ig6O5+VowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EwMzc0ZTI2LWRjZWMtNDViZi1iNWFhLTM5NDEwMjIxMDRiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAEd4wDQYJKoZIhvcNAQELBQADggEBAKMEXVRn5DlEpxWUb4kxI6by 4D7cydhDqwReh8sNNPnQ9I4AV1Ki+Xo/Jv/ZmcLea9D/v7K9i8woWZXzGpg9uW1l zpq9jiuGtm7YPEKcp7PQoO447ki0NnCtUZG/XcqJLME5gc644+FfamHGWNCT4v1R xFj/ej4m7RoYJK6ShtzNjSQUImBAulCXOf4/UAe48+W1tOOIhjY6wq7g+CwxSHE0 fuWNRqxCRmBh0PsnsSSry5JbirlFz6iKMYiItAd/2m70zoXHCqzxZ/BfWCdoxpkQ EOmmqoiC7BqjqNTOMhM1LwPKtXnUg2fAlcLnpUVeP6Qfcei02RsU0m9R4sOa+cQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:28:43 2025 by rpki-client