$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1028938-6cc9-48c6-b31a-a8f9b3451439.roa File: a1028938-6cc9-48c6-b31a-a8f9b3451439.roa (raw, json) Hash identifier: VmMlcLUZrwCSMUYir2VkJrFYg0kK5reky8vAK1vMKD0= Subject key identifier: B4:CE:1D:28:87:A6:4E:50:C0:F5:E4:2D:6A:F2:1A:B2:C5:5C:E9:C8 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 58B7630C8E77A86674D344C93D02C855D0E4A1AA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1028938-6cc9-48c6-b31a-a8f9b3451439.roa Signing time: Fri 31 Oct 2025 07:24:02 +0000 ROA not before: Fri 31 Oct 2025 07:24:02 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d60::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b7:63:0c:8e:77:a8:66:74:d3:44:c9:3d:02:c8:55:d0:e4:a1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:24:02 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=2f6304c4d4d42f6c3f5ccf0d98ff1bcd38bc208d434af83ce0ee2417a1dddf04, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:b9:11:b9:7c:2d:67:73:19:8d:86:be:df: a6:7d:02:d5:2e:6b:dc:4c:ba:33:ad:e1:ca:da:a7: 71:6e:7a:17:37:1a:ae:52:2e:57:48:de:5e:eb:27: 0f:9e:4c:de:f9:34:d2:90:4c:4c:7e:d3:f5:56:bc: 21:20:00:bb:80:2a:18:c1:1f:a4:a0:2e:09:2b:3c: ae:d1:18:68:65:b0:7c:00:4b:c3:ab:67:59:58:c3: 98:d0:80:a6:4c:dd:05:90:ac:21:b4:1d:03:ad:b5: 0d:a1:ff:7b:15:95:ee:59:1d:ac:b3:65:c9:2d:5d: df:f6:1d:c9:55:1e:ea:da:1b:1f:94:32:96:57:51: 27:1a:a4:f7:d3:b8:fd:2e:de:43:fa:dd:fb:d2:7b: 90:d2:42:7c:2d:81:dd:a2:28:ac:6a:8d:f2:11:91: 90:5c:dd:68:e9:a3:9f:b9:17:67:7b:91:6c:1c:fb: 72:65:42:52:7a:fb:d0:76:bf:c1:20:1c:18:90:9d: 92:51:51:79:40:9d:f2:08:80:35:82:f3:17:ce:cf: aa:55:87:b3:1d:ec:7c:07:51:e3:88:3d:6c:2f:69: c7:3a:a6:7a:31:04:c0:51:2b:8b:1d:5c:14:e6:48: ad:3e:61:d2:3e:68:b6:7b:3c:38:8b:47:03:85:ad: 49:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CE:1D:28:87:A6:4E:50:C0:F5:E4:2D:6A:F2:1A:B2:C5:5C:E9:C8 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1028938-6cc9-48c6-b31a-a8f9b3451439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d60::/43 Signature Algorithm: sha256WithRSAEncryption 6c:f2:90:04:47:57:dd:49:69:02:31:7e:58:2d:e6:2b:f2:86: 2d:5f:15:41:ff:a0:78:bd:05:43:a7:45:9c:5d:57:43:dd:1b: d1:bc:b4:fe:53:a7:24:aa:88:40:91:84:cb:a6:10:3a:4d:75: e1:20:99:74:9b:f7:3a:03:80:43:7e:65:ec:0c:0f:7c:a7:64: 85:2e:01:ef:e6:26:7d:99:30:bc:b9:ca:fa:65:9f:c9:20:21: 2c:2d:21:0f:b0:c8:31:28:9c:b0:25:9c:a8:d5:63:54:6a:bf: 64:4c:2b:2f:e0:78:bd:5f:cb:c0:24:4b:91:a6:f0:6e:dc:fc: f2:12:58:3b:03:68:94:61:03:38:38:fb:61:7f:2f:ef:62:42: e4:e8:62:c2:89:3b:30:6b:36:43:1b:09:91:f5:84:9f:3f:f8: e5:c0:9b:41:c0:1f:2a:33:cd:16:c4:a9:39:8f:82:3d:47:1d: a6:0c:bf:df:f4:a9:6d:46:42:9c:b4:4b:2b:89:9a:9c:0a:f7: cf:a8:1b:7a:e4:f4:bf:30:be:6f:1c:a4:39:ec:63:47:6c:9f: 70:c2:9c:d5:d3:e1:21:ca:09:cd:42:18:41:b0:f2:eb:62:57: c2:95:1d:6a:98:92:70:86:fc:b4:7b:d6:ce:f4:88:24:2c:e7: e8:2f:0e:6a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWLdjDI53qGZ000TJPQLIVdDkoaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcyNDAyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjYzMDRjNGQ0ZDQyZjZjM2Y1Y2NmMGQ5OGZmMWJjZDM4 YmMyMDhkNDM0YWY4M2NlMGVlMjQxN2ExZGRkZjA0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJzrkRuXwtZ3MZjYa+36Z9AtUua9xMujOt4crap3Fuehc3 Gq5SLldI3l7rJw+eTN75NNKQTEx+0/VWvCEgALuAKhjBH6SgLgkrPK7RGGhlsHwA S8OrZ1lYw5jQgKZM3QWQrCG0HQOttQ2h/3sVle5ZHayzZcktXd/2HclVHuraGx+U MpZXUScapPfTuP0u3kP63fvSe5DSQnwtgd2iKKxqjfIRkZBc3Wjpo5+5F2d7kWwc +3JlQlJ6+9B2v8EgHBiQnZJRUXlAnfIIgDWC8xfOz6pVh7Md7HwHUeOIPWwvacc6 pnoxBMBRK4sdXBTmSK0+YdI+aLZ7PDiLRwOFrUnzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtM4dKIemTlDA9eQtavIassVc6cgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ExMDI4OTM4LTZjYzktNDhjNi1iMzFhLWE4ZjliMzQ1MTQzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAALWAwDQYJKoZIhvcNAQELBQADggEBAGzykARHV91JaQIxflgt5ivy hi1fFUH/oHi9BUOnRZxdV0PdG9G8tP5TpySqiECRhMumEDpNdeEgmXSb9zoDgEN+ ZewMD3ynZIUuAe/mJn2ZMLy5yvpln8kgISwtIQ+wyDEonLAlnKjVY1Rqv2RMKy/g eL1fy8AkS5Gm8G7c/PISWDsDaJRhAzg4+2F/L+9iQuToYsKJOzBrNkMbCZH1hJ8/ +OXAm0HAHyozzRbEqTmPgj1HHaYMv9/0qW1GQpy0SyuJmpwK98+oG3rk9L8wvm8c pDnsY0dsn3DCnNXT4SHKCc1CGEGw8utiV8KVHWqYknCG/LR71s70iCQs5+gvDmo= -----END CERTIFICATE-----Generated at Wed Nov 5 09:26:44 2025 by rpki-client