$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0a35278-c4c0-481f-bbd5-128b74e1e2a7.roa File: a0a35278-c4c0-481f-bbd5-128b74e1e2a7.roa (raw, json) Hash identifier: qaEGoaqrTX/xDQhzzNtwofLbX5zlDGFyIjQd1169+wo= Subject key identifier: 22:92:DC:DE:2F:57:D6:06:14:DF:F0:B2:E6:1D:0C:78:FD:2C:B3:DE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 40730F6FFEC6B1F4468215258281995CC1119FEB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0a35278-c4c0-481f-bbd5-128b74e1e2a7.roa Signing time: Fri 31 Oct 2025 06:40:23 +0000 ROA not before: Fri 31 Oct 2025 06:40:23 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1ce0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:73:0f:6f:fe:c6:b1:f4:46:82:15:25:82:81:99:5c:c1:11:9f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:40:23 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=b40ef94326c8ec04701afcc9fa096b11f58a603d79f863088b9a666c6550552c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:bc:7b:b9:7b:0a:19:d7:ea:03:45:b9:e3: b0:dd:4f:8c:96:13:1f:79:7c:1b:32:d9:03:3b:a2: 32:4b:7f:06:81:6d:9e:d7:55:b4:dc:86:17:dd:ad: 64:76:ae:d0:20:a7:6b:3a:ab:83:9a:77:b0:30:f1: 91:19:22:c7:67:13:7f:89:3a:a7:d9:77:f0:c3:17: 14:0a:83:d6:bd:02:68:04:e2:6b:27:11:9a:74:bf: c3:62:2e:0f:25:e0:c9:9e:ec:07:09:b7:65:28:b3: 95:63:95:90:86:77:dc:87:86:76:7b:5a:90:eb:a9: 66:9e:d1:00:52:45:ba:5a:07:eb:18:3e:c6:b2:d4: 94:0b:a8:54:fc:74:cc:eb:9e:e0:64:ae:03:7d:47: 4f:e8:64:48:d0:42:f1:7e:33:ee:5d:51:51:1a:ba: eb:b4:79:61:cc:f4:91:30:66:64:39:57:ec:c4:fb: 3e:6a:c4:e8:01:88:e2:f3:65:ac:ed:1b:e4:28:a7: fb:6e:ae:03:dd:41:ab:5e:ce:22:db:79:a2:de:d3: 1e:70:0c:06:d1:f1:60:2c:d8:59:a5:66:db:6b:e5: be:86:d2:dc:f1:a2:a4:56:eb:c1:a5:d9:ed:08:33: 80:89:50:d7:de:39:e8:02:e9:4c:86:14:5f:97:60: a8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:92:DC:DE:2F:57:D6:06:14:DF:F0:B2:E6:1D:0C:78:FD:2C:B3:DE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0a35278-c4c0-481f-bbd5-128b74e1e2a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1ce0::/44 Signature Algorithm: sha256WithRSAEncryption 54:31:36:88:2e:f7:2b:a1:5f:96:48:0c:f9:1c:a5:e8:9f:f2: 5c:98:b3:06:67:01:b0:be:03:c0:66:19:88:18:bb:3a:d1:19: 81:56:63:f5:de:2d:60:a3:37:3e:81:1e:97:15:ea:38:56:0b: 20:fd:41:f0:52:50:24:bf:ea:f4:5b:69:42:26:2f:d0:15:b5: 24:35:1c:5f:fb:02:7b:ad:44:10:71:e3:40:3d:6c:38:bb:04: 89:ec:4f:e5:79:6a:c9:da:6b:bc:e3:bc:fe:77:7a:00:36:36: f7:ae:3a:2a:ba:c2:fc:c7:92:2f:65:51:44:0c:46:62:be:42: 7b:c0:43:a3:fa:0d:2c:89:e4:92:ce:66:43:4d:4e:00:7c:ea: 55:1e:79:b3:bf:0b:c0:80:51:32:1c:76:af:71:bd:9f:7f:cc: 37:29:b1:c2:db:e7:ba:4b:d7:94:72:7d:4b:aa:1c:f3:cd:a2: 1c:d1:db:ec:0c:63:15:fa:19:2c:81:8c:8a:e0:83:43:64:a7: 94:bb:54:9c:a3:2d:ca:86:e7:cf:8c:f6:1a:ad:49:e7:fb:13: b0:f3:2e:c9:09:6b:ab:12:8e:92:4b:e5:f8:39:cf:4c:3c:4f: 28:ed:65:b2:1b:58:4a:2e:05:da:15:94:ab:34:9b:c1:86:81: bd:d7:d2:41 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQHMPb/7GsfRGghUlgoGZXMERn+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY0MDIzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDBlZjk0MzI2YzhlYzA0NzAxYWZjYzlmYTA5NmIxMWY1 OGE2MDNkNzlmODYzMDg4YjlhNjY2YzY1NTA1NTJjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGqbx7uXsKGdfqA0W547DdT4yWEx95fBsy2QM7ojJLfwaB bZ7XVbTchhfdrWR2rtAgp2s6q4Oad7Aw8ZEZIsdnE3+JOqfZd/DDFxQKg9a9AmgE 4msnEZp0v8NiLg8l4Mme7AcJt2Uos5VjlZCGd9yHhnZ7WpDrqWae0QBSRbpaB+sY Psay1JQLqFT8dMzrnuBkrgN9R0/oZEjQQvF+M+5dUVEauuu0eWHM9JEwZmQ5V+zE +z5qxOgBiOLzZaztG+Qop/turgPdQateziLbeaLe0x5wDAbR8WAs2FmlZttr5b6G 0tzxoqRW68Gl2e0IM4CJUNfeOegC6UyGFF+XYKhLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIpLc3i9X1gYU3/Cy5h0MeP0ss94wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EwYTM1Mjc4LWM0YzAtNDgxZi1iYmQ1LTEyOGI3NGUxZTJhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAHOAwDQYJKoZIhvcNAQELBQADggEBAFQxNogu9yuhX5ZIDPkcpeif 8lyYswZnAbC+A8BmGYgYuzrRGYFWY/XeLWCjNz6BHpcV6jhWCyD9QfBSUCS/6vRb aUImL9AVtSQ1HF/7AnutRBBx40A9bDi7BInsT+V5asnaa7zjvP53egA2NveuOiq6 wvzHki9lUUQMRmK+QnvAQ6P6DSyJ5JLOZkNNTgB86lUeebO/C8CAUTIcdq9xvZ9/ zDcpscLb57pL15RyfUuqHPPNohzR2+wMYxX6GSyBjIrgg0Nkp5S7VJyjLcqG58+M 9hqtSef7E7DzLskJa6sSjpJL5fg5z0w8TyjtZbIbWEouBdoVlKs0m8GGgb3X0kE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:50 2025 by rpki-client