$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0f1c05b-df0f-457c-9d13-e57add5861b9.roa File: a0f1c05b-df0f-457c-9d13-e57add5861b9.roa (raw, json) Hash identifier: mkxQgfOK3RkLf1GNZuJN1ghkUGgSXEuQ48dQW0YUfAw= Subject key identifier: 22:73:81:0D:60:33:DA:3E:3E:B7:D7:87:53:21:FD:D2:3C:6B:CE:C3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4054731554ACF7D23BF0819818B939B5448ED27D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0f1c05b-df0f-457c-9d13-e57add5861b9.roa Signing time: Fri 31 Oct 2025 00:53:24 +0000 ROA not before: Fri 31 Oct 2025 00:53:24 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:37fe::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:54:73:15:54:ac:f7:d2:3b:f0:81:98:18:b9:39:b5:44:8e:d2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:53:24 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=00c61fbb9d5b902d48ec5eb54ed55fb777d41626cdbabe48b80916197eba6170, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:18:70:17:6e:87:4d:66:4f:ed:4d:0a:50: 66:40:6d:12:75:7a:29:13:cf:78:8f:6e:88:f4:c3: de:20:47:21:6e:42:8b:00:02:c6:67:0b:e7:ec:be: 5f:b0:2d:fa:95:a4:8f:99:e8:58:d0:66:a9:24:94: 7f:af:f7:9a:1e:f7:bf:5f:a6:23:52:32:27:28:38: 05:17:cd:d1:87:60:1a:11:5d:fa:67:c4:50:2d:22: 8e:55:3f:61:ab:f1:46:b7:9a:dc:7f:aa:f6:3b:1b: 14:c9:33:10:02:85:c8:4c:cd:bf:ce:87:62:22:dc: 0c:79:c5:68:89:1d:1d:82:a4:31:44:9f:6e:1a:75: 8d:21:a0:fc:27:5a:ff:57:93:da:ad:31:bb:e5:17: 77:8d:75:4a:66:f5:9e:5e:59:7d:2d:c4:d1:21:9a: 3c:db:13:5d:1a:2d:4d:a4:80:85:4f:1a:8e:d8:7c: f1:c8:f5:f6:3f:3f:00:41:b0:2c:95:cb:a1:0e:1c: fa:df:a4:ea:6f:b1:67:52:72:2c:64:d5:90:99:c8: ff:12:d3:81:50:e9:6e:43:da:ff:4e:bc:22:ec:ee: 68:39:d7:8f:16:e5:2a:fe:07:5f:54:e6:78:b1:70: 7e:02:c2:47:16:10:3f:9c:e2:85:75:cb:94:8f:2c: da:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:73:81:0D:60:33:DA:3E:3E:B7:D7:87:53:21:FD:D2:3C:6B:CE:C3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a0f1c05b-df0f-457c-9d13-e57add5861b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:37fe::/47 Signature Algorithm: sha256WithRSAEncryption bf:8b:11:2a:31:6e:45:a9:63:86:87:18:b0:7d:77:83:68:9f: a6:e6:39:b3:90:e5:33:ef:c4:11:85:0e:fe:16:68:82:bb:4f: 76:4d:8d:a0:3b:f1:be:db:2a:53:38:dd:1d:7d:11:0f:ab:83: 47:ce:56:ba:b4:3b:d8:0e:d9:b5:e5:30:0f:71:67:be:cd:2a: dd:14:38:b4:57:0a:80:a7:13:40:22:42:9c:69:d7:4e:46:55: 5d:81:5d:b7:48:d4:b2:91:d6:c4:03:c1:91:64:81:03:82:be: 4e:34:87:cd:0d:d6:77:32:07:a4:24:8c:5e:9d:2f:2d:ce:56: 77:ca:49:86:92:bd:9f:84:61:5a:0d:d1:c8:8c:2f:06:ec:30: b5:cc:9e:94:2b:10:ee:25:4b:3b:23:60:50:29:8c:b9:76:ce: d4:cc:0c:9a:b8:c1:4d:cc:dd:b8:29:71:bf:d2:ba:96:d6:fe: dd:21:ec:80:45:c6:8b:3d:e6:e8:fa:5f:f0:07:63:4c:aa:19: bc:e7:6d:20:0c:de:00:f9:c1:a6:9a:b7:4e:49:d1:ce:f6:80: d7:fe:95:cc:87:89:38:55:ab:71:7e:0b:5e:72:34:1f:22:55: ce:ec:2c:39:20:9c:73:0e:3d:30:e9:72:93:de:dd:7a:87:c0: e5:64:92:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQFRzFVSs99I78IGYGLk5tUSO0n0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1MzI0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMGM2MWZiYjlkNWI5MDJkNDhlYzVlYjU0ZWQ1NWZiNzc3 ZDQxNjI2Y2RiYWJlNDhiODA5MTYxOTdlYmE2MTcwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLJBhwF26HTWZP7U0KUGZAbRJ1eikTz3iPboj0w94gRyFu QosAAsZnC+fsvl+wLfqVpI+Z6FjQZqkklH+v95oe979fpiNSMicoOAUXzdGHYBoR XfpnxFAtIo5VP2Gr8Ua3mtx/qvY7GxTJMxAChchMzb/Oh2Ii3Ax5xWiJHR2CpDFE n24adY0hoPwnWv9Xk9qtMbvlF3eNdUpm9Z5eWX0txNEhmjzbE10aLU2kgIVPGo7Y fPHI9fY/PwBBsCyVy6EOHPrfpOpvsWdScixk1ZCZyP8S04FQ6W5D2v9OvCLs7mg5 148W5Sr+B19U5nixcH4CwkcWED+c4oV1y5SPLNpLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUInOBDWAz2j4+t9eHUyH90jxrzsMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EwZjFjMDViLWRmMGYtNDU3Yy05ZDEzLWU1N2FkZDU4NjFiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAN/4wDQYJKoZIhvcNAQELBQADggEBAL+LESoxbkWpY4aHGLB9d4No n6bmObOQ5TPvxBGFDv4WaIK7T3ZNjaA78b7bKlM43R19EQ+rg0fOVrq0O9gO2bXl MA9xZ77NKt0UOLRXCoCnE0AiQpxp105GVV2BXbdI1LKR1sQDwZFkgQOCvk40h80N 1ncyB6QkjF6dLy3OVnfKSYaSvZ+EYVoN0ciMLwbsMLXMnpQrEO4lSzsjYFApjLl2 ztTMDJq4wU3M3bgpcb/SupbW/t0h7IBFxos95uj6X/AHY0yqGbznbSAM3gD5waaa t05J0c72gNf+lcyHiThVq3F+C15yNB8iVc7sLDkgnHMOPTDpcpPe3XqHwOVkklA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:54 2025 by rpki-client